last executing test programs: 11m11.188599931s ago: executing program 32 (id=9): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 10m45.787896905s ago: executing program 33 (id=97): syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x3}]}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 10m41.507048119s ago: executing program 34 (id=108): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_io_uring_setup(0x643d, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x1, 0x40}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x3, 0x0, 0xcf}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000009, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) shutdown(r0, 0x0) sendmmsg$sock(r0, &(0x7f0000008340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004000) 10m36.946261117s ago: executing program 35 (id=117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff, 0x0}) sched_setparam(r2, &(0x7f00000000c0)=0x7f) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102392, 0x18ff8) r4 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000000)={'hsr0\x00'}) syz_open_dev$I2C(0x0, 0x1, 0x402) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r5, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) 10m32.638251563s ago: executing program 36 (id=127): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x111000, 0x0) recvmsg$unix(r0, &(0x7f0000000480)={&(0x7f00000000c0), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000140)}, {&(0x7f0000000180)=""/194, 0xc2}, {&(0x7f0000000380)=""/238, 0xee}], 0x3, &(0x7f00000004c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x2002) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/exec\x00') readv(r1, &(0x7f0000000840)=[{&(0x7f0000000280)=""/192, 0xc0}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x541b, 0x0) futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000b00)="86cf8445f4ba1d9f20174688f169e58c", 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1802000002000000000000000a0000808500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m47.350881378s ago: executing program 37 (id=229): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x300, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r5, &(0x7f0000000540)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0xfffe, 0x2, 0x0, 0x3, {0xa, 0x4e22, 0x20064a, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8}}}, 0x80, 0x0}, 0x10040800) ioctl$sock_SIOCINQ(r5, 0x541b, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x660bbb32c8e0e6fb, 0x0) bind$802154_dgram(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000040004800800020001000000080001"], 0x184}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2100, 0x20) fchown(r7, 0x0, 0xee01) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000200)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000240)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000180)={r8, 0xa0, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x1}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e24, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x1, @mcast2, 0x3}]}, &(0x7f00000001c0)=0x10) 9m16.381993721s ago: executing program 38 (id=316): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x10142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x1fffffbf}, {0x0, 0x100000000000000}]}, 0x68) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) connect$inet(0xffffffffffffffff, 0x0, 0x0) read$qrtrtun(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RGETLOCK(r4, &(0x7f00000000c0)=ANY=[], 0x200002e6) fcntl$setpipe(r4, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd61954a5b004c2f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060002bf3f030b7d27010086dd056a000086dd080088be000000031c4885100100000000007b40080022eb0000000223022309020000000000000500eeb41b0800655800000000"], 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) 9m12.723057511s ago: executing program 39 (id=330): openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x917) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) socket$inet_tcp(0x2, 0x1, 0x0) capget(&(0x7f0000000180), 0x0) r4 = request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000002c0)={0xffffffffffffffff, 0x1, 0x5, 0x1, 0x5}) keyctl$clear(0x7, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r6, 0x80506409, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x6dd, 0x10, 0x200, 0x10, 0x3, 0x20, 0xffffffff, 0x20, 0x7, 0x0, 0x0, 0x0}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 7m42.467965666s ago: executing program 40 (id=555): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x48, 0x30, 0x57}, {0x28, 0x1, 0xf7, 0xfffff010}, {0x6, 0x26, 0x0, 0x5}]}, 0x10) sendto$unix(r0, &(0x7f00000001c0)='QW', 0x2, 0x4000000, 0x0, 0x0) (fail_nth: 3) 7m18.046735391s ago: executing program 41 (id=619): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f00009b6000/0x1000)=nil, 0x1000, 0x100000a, 0x110, 0xffffffffffffffff, 0x2c2ec000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_init() syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1ff, 0x2000) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xff}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000680)={@in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x0, 0x0, 0x1f, 0x0, "b15805f3cfb1c04fe8e2ac9655a28f76ac0e6e83a18f61b0267d43ed433638432fb0c215f60674acb257937086e7c5dc4f593e1a74e093d5feb8a80aee53432c02e4c406436856febb2f76da8bb54244"}, 0xd8) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @sliced={0x7, [0xffff, 0x7, 0xe55, 0xa0, 0xb9, 0x2, 0x5, 0xff, 0xfd76, 0xd, 0x50ff, 0x8, 0x25, 0x3, 0x0, 0x9015, 0x9, 0x10, 0x7fff, 0x5, 0x1ff, 0x6, 0x4, 0xffff, 0x7fff, 0x88, 0x7fff, 0x92, 0x5, 0x18, 0x3ff, 0x6, 0x320, 0x4, 0x0, 0x1, 0x7, 0x0, 0xd, 0x7, 0x3, 0x9, 0x7, 0x4, 0xe, 0x82, 0x7, 0x9], 0x8001}}) socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000001240), 0x7ff, 0x100) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000001280)={0x3, 0x1, @stop_pts=0x8}) 7m15.093617771s ago: executing program 42 (id=630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f00000000c0), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x48, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164}, &(0x7f0000000540)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000880)=""/254, 0xfe}], 0x1}) io_uring_enter(r2, 0xf23, 0x0, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000030000000400010005", @ANYRES64, @ANYRES64=r0], 0x48) close(0x3) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r7, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r9 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r10, 0x0) bind$netrom(r8, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000200000005"], 0x50) 6m54.223642018s ago: executing program 43 (id=690): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000360001000000000000fc0a000000"], 0x14}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x1a, 0x0, 0x1, 0x100}, 0x28) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x7f, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0xfff, 0xb3, 0x39da], 0x30000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000700)={0x18, 0x18, 0x800, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0x37, 0x0, 0x0, @pid}]}, 0x18}, {0x0}, {0x0}], 0x4, 0x0, 0x0, 0x4000001}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m16.452946174s ago: executing program 44 (id=948): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1a) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x63, 0x0, 0x10, 0x180, 0x5, 0x4, 0xf1, 0x50, 0xfffffffffffffffe, 0x8, 0x9, 0xb, 0x0, 0x6, 0x9, 0x7ff], 0x70000, 0x43103}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000500)={0x2, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x8, @tick, {0xf}, {0x10}, @connect={{0x5, 0x7}, {0xf5, 0xb}}}], 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x383c8c6, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1000736da295fff7fffffffef10000000000000000800000"], 0x28}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) syz_usb_control_io$rtl8150(r7, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r6}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) flock(0xffffffffffffffff, 0x6) openat$mice(0xffffffffffffff9c, &(0x7f0000000940), 0x402) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r6, 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000200)={0x0, 0xfd1c, 0x4, 0x400, 0xed, 0x1}, 0x14) sendto$inet6(r5, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) umount2(0x0, 0xd) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e22, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x9}}, 0x4, 0x3, 0x10001, 0x94, 0x2c, 0xf, 0x1}, &(0x7f00000004c0)=0x9c) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x2, 0x3c00000000000000, 0x9, 0x9, 0x9, 0x403, 0x0, 0x7], 0x25000, 0x202}) 5m12.667568839s ago: executing program 45 (id=959): socket$inet6(0xa, 0x2, 0x3a) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x1ab}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00001e4000/0x1000)=nil, 0x1000, 0xb635773f06ebbee2, 0x810, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x404e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001a80)="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", 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) 5m9.11421168s ago: executing program 46 (id=968): syz_open_dev$vim2m(0x0, 0x47b, 0x2) mknod$loop(0x0, 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x80000, 0x25dfdbfd, {0x2, 0x8, 0x52, 0xfe, r1}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_FLAGS={0x8, 0x8, 0x42a}]}, 0x28}}, 0x4040854) mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file2\x00', &(0x7f00000003c0)='securityfs\x00', 0x40000, &(0x7f0000000400)='*}(@@-\xc7#\x00') r2 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc0b45545, &(0x7f0000000040)=0x1000) 5m3.475168452s ago: executing program 47 (id=978): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() syz_usb_connect$uac1(0x2, 0x9d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109028b0003010070000904000000010100000a24010800004302"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(r0, &(0x7f0000000080)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x53}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x69, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f108b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e97030000000000000000000000000081e1df1a0000008dc5fb510162", 0xd8}], 0x1}, 0x0) 5m1.062249404s ago: executing program 48 (id=984): futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r10, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x34}}, 0x0) io_submit(r8, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r6, 0x0, 0x0, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x453, r6, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3}]) 4m57.838478237s ago: executing program 49 (id=991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x19, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[], 0x0, 0x6}, 0x94) clock_nanosleep(0x2, 0x1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000100)={&(0x7f0000000000)=[{0x5, 0x1000, 0x0, 0x0}], 0x1}) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x2, 0xffd, @mcast1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61142000000000001d430000000000007a0a00fe0000001f6114180000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 4m43.004117017s ago: executing program 50 (id=1019): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x128, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x114, 0x1, [@m_vlan={0x110, 0x1c, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe79}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x48b}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x2d9, 0xffffffffffffffff, 0x10001, 0x8}, 0x2}}]}, {0xb0, 0x6, "71a6730a484972499900aff3bc2c2b8650da1da8c1bd61c2be75346fa3e5ed11ff98a3f7aa798342d009274f92945a390b4c03e4e66f30bb1d87423b8d2cdb59b43331c331dfb0d51e760c1921c62801a859841ac4e2cb8d2053fef8610780a749561f15cb27c0ee7ad78342e10227671b4080ebe95c0039569b6853d316b1c1e1c816a705d061c4f1a86a88e076788371e3733622f1c31f8f6361ecc32c577d0973733f647ca5db41834d59"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x804}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001940)=@newtaction={0x7b4, 0x30, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{0x7a0, 0x1, [@m_bpf={0x168, 0x1, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x9, 0x0, 0x6, 0x9}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x0, 0x5, 0x5, 0x80}}]}, {0xda, 0x6, "7d4feaf47b602bd5c403f39de49ea9380229b82ec969a56cc4748536200c6b3e0c802d39d49ae336523be4957f91acdd1c987e3cf3cea7cdb697cc1737d78dac12ef448b64d4f90c90d53c5e29b36e9f06457e98f4968aac68211a4f8af49617365d38f4d369be218d8170e2ba2f43e461b437d21fd2e24b403ac378423c7d679ebcec61f8b0a2d8ae968b3bea784acc8562fa7ca09f1800ec32c8eafee70c6a90f6fffec88296c8da10c320b5c7954c3b851a369a5995d98f08e3eb4f7b6fea344ddaa8489fc90442ce57390662fa10541f4e1f5272"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_sample={0xc8, 0x16, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x9}]}, {0x92, 0x6, "b5ddcac7a198330dce06284f22037bab8c6051cb0dd4d43041e9957f46b8afa8423e12fb30f3c03f231d3653153f2afa4bff036ee19c4d8b879e1622d371493dc016c8d624a31068311105b6bbb4b2c4c64f212d50d4fc99da6d23346a59ce99bbc00f3562de9d95d45138e378452e6c97751e648d46243611cb93684d4e41eace5913bf23ca8e1913c237226390"}, {0xc, 0x7, {0xc40f2018841d1971}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0xf4, 0x15, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x8, 0x10000000, 0x9, 0x7ff}, @dev={0xac, 0x14, 0x14, 0x35}, @empty, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x4, 0x0, 0x7, 0x3}, @rand_addr=0x64010101, @rand_addr=0x64010102, 0xffffffff, 0x1}}]}, {0x7a, 0x6, "2e5e4230279869bc108a80be51ce70bffcf851c133323c76f3abe9a6040615afafeebedd6bf290b8c69a154981cffa7a8f7377dafbd38f5bf36cb419812a54e3e4c194deada98a44c63244def04e49a321155f3d8575322e0cccb39fcb783c75a6c16ad5e4803d1fa2fd0d480d6e580d9d5b78bc3b8a"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0x138, 0xe, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}]}, {0xeb, 0x6, "6d822aa11e5d43cb05ff1bb0854d9177a7ec30859ecd77fd840f32bb90a5b07f6082704a831061559fc7bfb015383ce0f335813b968fd9d1e44a0649fdef477d7678b5f2d050db2822f3babdf715a9c747689b169384839efa5668b2fde96cac40699ab7dd5ab9ef53de49aa2c0f4bdf7610fd03178bdff6750a2f65d2b269696acb445bc69a6f458b6b657ac04723201c3ae58b8be72df43d9e61a8f824eb8f2aadacf926627fcf658e646b76925e9cfe9b3d0853afdd1cd0dc7df2315a742f9c33a16a6f77f9a6227b928d77f62a1177fc9afdff5c97764f857c73304c7b1e1b40eecbd59ccc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x158, 0x8, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1ff, 0x9, 0x1, 0x7c6c6c5e, 0xfffffffb}, 0x7b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x6, 0x10000000, 0x8, 0xfffffff7}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x604, 0x7, 0x0, 0x4}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0xd38, 0x3, 0x80, 0x6}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x3, 0x2, 0x7}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x4, 0x0, 0x9}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x1ae, 0x0, 0x3, 0x6}, 0x56}}]}, {0x66, 0x6, "1aa23fc0fed59354e73147cad1b3d8ac5d2464b536399c6f2b0c39e9b491eb9a5f29652b4533e0d4e92417a930f56ac8ea8e397b68574f4a0c67d780e3acd5ca4e0a3720a79e5697baabbd6909a560494c8ffa0f5c7485aab7b4f406c8dfaecfc744"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x1e8, 0x1a, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff, 0xb, 0x2, 0x1}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffe, 0x2, 0x3, 0x6, 0x7}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xf94f, 0xec7bd2d7b99047f1, 0x5, 0x6}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x80, 0x2, 0x800, 0x7}, 0x27}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x20000000, 0xfffffffa, 0x7}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xc4, 0x0, 0x1, 0x8}, 0x22}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x4, 0x4, 0x6, 0x2}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x8, 0x4, 0xc}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x0, 0x0, 0xfffff0a8, 0xd0e}, 0xa}}]}, {0xbf, 0x6, "92e7d2edcd92519cda347de840312252364d88b5994346dfb2161172e907ca092e1e71c898081d82d395974589d7d26089ea415c634729cf793a1d3ab74209f394afec8642c4d93e4175999972ffed54cdbfe94010a144241ca44fd35da21915acdb75371dc3e639cd1f10f183e97b7570420d2f0dd2dfac3b6c5653ab510b01cc1c2a276d47007296989044cb6254732b08b5f525dea8ddd20c96303f78f9d26d37a8a7f74baad607750ec3a8de6f263c134de3f1c0394292e431"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x7b4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000100009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000ea000000010400000300000000000000", @ANYRES32=0x1, @ANYBLOB="0d0000000000000000000000000000000000000033a1da7a85dd7f79381da21232473a503722c0b2545e5ead69209a83", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0500000002000000040000000400"/28], 0x50) gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) setreuid(0xee00, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@getchain={0x44, 0x66, 0x10, 0x70bd2a, 0x6, {0x0, 0x0, 0x0, 0x0, {0x6, 0x3}, {0xffff, 0xe}, {0xc, 0x9}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0xff}, {0x8, 0xb, 0xfffffffd}]}, 0x44}}, 0x0) 4m40.036052376s ago: executing program 51 (id=1027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$tipc(0x1e, 0x2, 0x0) r8 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4048aecb, &(0x7f0000000280)={0x6, 0x0, [{0x1, 0x4, 0x6, 0x8000, 0x27, 0x7, 0x9}, {0xb, 0x8, 0x3, 0x3ff, 0x7ffffdff, 0x8003, 0xffff}, {0x80000019, 0xe5f, 0x0, 0x7, 0xdf3, 0x6, 0x80000001}, {0x80000000, 0x2bb, 0x0, 0xd, 0xa, 0x7fd, 0x400}, {0x80000019, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x80000001, 0x8000002, 0x3, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0x800bd, 0x1, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r13, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x4) 4m38.068808809s ago: executing program 52 (id=1034): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x19, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000100)={&(0x7f0000000000)=[{0x5, 0x1000, 0x0, 0x0}], 0x1}) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x2, 0xffd, @mcast1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 4m23.642878062s ago: executing program 53 (id=1065): r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001c00)={0x2c, &(0x7f0000001a00)=ANY=[@ANYBLOB="200e05000000624c529637"], 0x0, 0x0, 0x0, 0x0}) 4m11.590132904s ago: executing program 54 (id=1087): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x48, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28) r1 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164}, &(0x7f0000000540)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xffffffffffffffff, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000880)=""/254, 0xfe}], 0x2}) io_uring_enter(r1, 0xf23, 0x0, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 3m44.852984587s ago: executing program 9 (id=1169): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x74}}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000000)={0x80080001, 0x0, 0x300a, 0x0, 0x8, 0x5, 0x3, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x484a00, 0x0) r5 = getpid() ptrace$setopts(0x4206, r5, 0x101, 0x10001d) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0xa, 0x88441) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) getitimer(0x2, &(0x7f0000000040)) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) 3m43.584785041s ago: executing program 9 (id=1172): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x54}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001a00)}, 0x80000000}], 0x1, 0x100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r9, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x2e}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c8d1}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r6, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x49}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x84044) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r11, 0x1) bind$inet6(r11, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffe, @empty, 0x3}, 0x1c) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) sendmmsg$inet6(r11, &(0x7f0000000240)=[{{&(0x7f0000000100)={0xa, 0x4e00, 0x80000008, @empty, 0xfffffffe}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)}}], 0x3, 0x240c089d) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000000c0)={[{0x7, 0x8, 0x7f, 0xb, 0x4e, 0xa, 0x4, 0x0, 0x40, 0x6, 0x6, 0x2f, 0x9}, {0x7ff, 0x8, 0x8f, 0x84, 0x4, 0x1, 0x1, 0x7f, 0x6, 0x9, 0x5, 0x7, 0x2}, {0x8723, 0xfff, 0x7f, 0x5, 0xa, 0x6, 0x9, 0x2, 0xf7, 0x80, 0x81, 0x9, 0x5}], 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m42.677869102s ago: executing program 9 (id=1174): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) r1 = epoll_create(0xf032126) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x10}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x1, 0x0, 0x0, "00729a7d820001003d6000"}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1e) 3m42.273556929s ago: executing program 9 (id=1175): openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2004064, &(0x7f0000000000)=ANY=[]) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001f6c0)=""/102400, 0x19000) ioprio_set$pid(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsopen(0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000500)={0x8, 0x0, [{0x0, 0x1, 0x0, 0x0, @irqchip={0x3}}, {0x9, 0x5, 0x1, 0x0, @sint={0x8, 0x5}}, {0x80000001, 0x3, 0x1, 0x0, @irqchip={0x7, 0x1}}, {0x6, 0x1, 0x0, 0x0, @irqchip={0x20002, 0x2}}, {0x5d400000, 0x3, 0x1, 0x0, @adapter={0xd, 0x5d889c2, 0x3, 0x3, 0x2}}, {0x80000000, 0x2, 0x1, 0x0, @adapter={0x6, 0x6, 0x4, 0x5dd, 0x2}}, {0x1, 0x1, 0x1, 0x0, @msi={0x2, 0x7fff, 0x9, 0x1}}, {0x8, 0x6, 0x0, 0x0, @irqchip={0x4, 0x6}}]}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x424}, 0x1, 0x0, 0x0, 0x408c0}, 0x40001) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) syz_pidfd_open(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 3m38.358244156s ago: executing program 3 (id=1182): mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r0 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000dfa000/0x3000)=nil) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0), 0x40002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000002c80)=ANY=[@ANYBLOB="000bb03cfc00", @ANYRES64=0x0, @ANYBLOB="0100000000000000fdffffffffffffff02000000010000005d7d000000000000"], 0x30) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = fcntl$getown(r2, 0x9) ptrace$PTRACE_SETSIGMASK(0x420b, r3, 0x8, &(0x7f0000000000)={[0x6]}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xa, 0x3, 0xff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x8, "ff000000000000000000000000000200"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0xff) fsmount(0xffffffffffffffff, 0x1, 0x12) syz_open_dev$I2C(0x0, 0x3, 0x309802) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 3m37.821835288s ago: executing program 9 (id=1184): r0 = io_uring_setup(0x666, &(0x7f00000002c0)={0x0, 0x284f, 0x40, 0xfffffffe, 0x235}) setresuid(0xee00, 0xee00, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x25, 0x0, r1) 3m37.117744475s ago: executing program 3 (id=1187): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000a40)={0x0, 0x0, 0x40800, 0x0, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f00000000c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x200008, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x63, 0x0, 0x10, 0x180, 0x1, 0x4, 0xf1, 0x50, 0xfffffffffffffffe, 0x8, 0x1, 0xb, 0x0, 0x6, 0x9, 0x7ff], 0x70000, 0xc3143}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x2, 0x3c00000000000000, 0x9, 0x9, 0x9, 0x403, 0x0, 0x7], 0x25000, 0x202}) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4d0}]}) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x108806, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) write$binfmt_script(r9, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, 0x0, &(0x7f0000000200)) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f00000005c0)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000480)=0x100}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeeee000, 0x8, 0x8, 0xb, 0xe0, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0xfd, 0x5, 0x7, 0x5, 0x2, 0x2, 0x89}, {0x80a0000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x83, 0xa4, 0x5, 0x5}, {0x1, 0x200000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x8f, 0xe}, {0xeeee0000, 0x1000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0x6, 0x7}, {0x1000, 0xc000, 0x9, 0xa0, 0x91, 0x8, 0x1, 0x5, 0x82, 0xe, 0x81, 0x7}, {0xe000, 0xeeee0000, 0xb, 0x5, 0x7, 0x15, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0x4, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0x10, 0xb0, 0xd}, {0xffffffff, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x0, 0x1, 0x1500, 0x3000, [0x9, 0x204, 0x5b, 0x8]}) read$midi(r4, &(0x7f00000000c0), 0x0) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="10002cbd70000500000000000000000000fff2000000371823d301d3505ca783324f579e77290f4081a23dd7bb869b4c9e2fba48a7422246317e25711e5c87811bded62f52"], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x8004) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m37.004579168s ago: executing program 9 (id=1188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0x541b, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000006c0)=[@text64={0x40, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x48f, 0x0, 0x100000000}]}) 3m36.044693055s ago: executing program 55 (id=1188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0x541b, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000006c0)=[@text64={0x40, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x48f, 0x0, 0x100000000}]}) 3m35.81327518s ago: executing program 3 (id=1192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x12, r6, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x1}}) io_uring_enter(r3, 0x3516, 0xf400, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2, 0x3, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r7) 3m34.962083777s ago: executing program 3 (id=1195): openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2004064, &(0x7f0000000000)=ANY=[]) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001f6c0)=""/102400, 0x19000) ioprio_set$pid(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsopen(0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000500)={0x8, 0x0, [{0x0, 0x1, 0x0, 0x0, @irqchip={0x3}}, {0x9, 0x5, 0x1, 0x0, @sint={0x8, 0x5}}, {0x80000001, 0x3, 0x1, 0x0, @irqchip={0x7, 0x1}}, {0x6, 0x1, 0x0, 0x0, @irqchip={0x20002, 0x2}}, {0x5d400000, 0x3, 0x1, 0x0, @adapter={0xd, 0x5d889c2, 0x3, 0x3, 0x2}}, {0x80000000, 0x2, 0x1, 0x0, @adapter={0x6, 0x6, 0x4, 0x5dd, 0x2}}, {0x1, 0x1, 0x1, 0x0, @msi={0x2, 0x7fff, 0x9, 0x1}}, {0x8, 0x6, 0x0, 0x0, @irqchip={0x4, 0x6}}]}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x424}, 0x1, 0x0, 0x0, 0x408c0}, 0x40001) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) syz_pidfd_open(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 3m31.492330225s ago: executing program 3 (id=1201): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0xe85e}, {0x2, 0x2}]}, 0x14, 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='\x00', 0x200000, &(0x7f0000000100)={@align=0x80000000, {0x800, 0xf000, 0x1, 0xd1e8}}, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x10001}) renameat2(r1, &(0x7f0000000200)='./file0\x00', r1, &(0x7f0000000240)='./file0\x00', 0x1) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f00000002c0)={{@align=0x4, {0x5b9, 0x9, 0x0, 0x1}}, {{[0x6, 0xfffffff9, 0x3f, 0x5]}, 0x0, 0x1, 0x1, 0x0, &(0x7f0000000280)}}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000300)={0xa, 0x3, 0x5, 0x401, 0x0, "99d19cbda6325bcd1f99c04ef288a38782a696"}) sendto$unix(r1, &(0x7f0000000340)="4c4b8911cf4ea5db0e76dd005bc6858eebb284595b314e934160770f0392131af562427566a410361a60b48b998c877d02b99cd998ab4bb2dc74df8b6e052cf676f5b42814563a87f8bdb2d94b1a8e9053344b0aa73784078892dc25619c45d7ae28a3172e1c55cb23a60b203cdbb9c2c9c48f11a464f1b596420f1f8c951e6977b6885730d2627780192ce1e73cd77a1b484f55ff5e2828f14f89120ab288292a4929c0ea7641adb482463735ab4ab9ea09d2eab53d", 0xb6, 0xc010, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000480)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f00000004c0)) sendmsg$NFT_BATCH(r1, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x18, 0x7, 0x1, 0x0, "367d13b41b061dd95f83bddcedffc58ba17e6d04"}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x43}]}, @NFT_MSG_DELOBJ={0x8c, 0x14, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x49, 0x8, "5a8def0db2949c477c4c24a1014494731c93b0bb0f841aa4648d0fe0f6fbbcf70c8f800b38ffea0ecb3bcec17c74ec074292569bf0259b8d5f5b18a78a78501a6d40a9d6a7"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xd}}}, 0xfc}, 0x1, 0x0, 0x0, 0x84}, 0x40000) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0), 0x802, 0x0) r4 = accept4(r1, &(0x7f0000000700)=@l2tp6, &(0x7f0000000780)=0x80, 0x306dc7117660d403) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001400)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2240008}, 0xc, &(0x7f00000013c0)={&(0x7f0000000800)={0xbb8, 0x0, 0x5, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [{{0x254, 0x1, {{0x0, 0xd5c}, 0x1, 0xc, 0x2, 0x8000, 0x3, 'syz1\x00', "0eb65f0d124868e3e23088dcc333a49457ae697ed62522b49551bec4419b7a82", "c62b5aa4e44b9ceb3f1b5a3081a0e27e38467fb0476022861d0df2f3a506e16e", [{0x1, 0x3, {0x0, 0x28}}, {0x2d8, 0x7fff, {0x3, 0x5}}, {0x6, 0x8, {0x3, 0x1}}, {0x2, 0xc, {0x2, 0x2}}, {0xe, 0x9, {0x3, 0x200}}, {0x5, 0x10}, {0x8, 0xfff8, {0x1, 0xad}}, {0xb3, 0x400, {0x0, 0x80}}, {0x3, 0x8, {0x1, 0xffff}}, {0x65e2, 0xba5, {0x3, 0x1b7e}}, {0x9d6e, 0x0, {0x1, 0x2}}, {0x1, 0x7, {0x1, 0x6c}}, {0x1, 0x7f, {0x2, 0x1}}, {0x5453, 0x9, {0x0, 0x6}}, {0x9, 0x8, {0x0, 0x8}}, {0x3, 0x1a9c, {0x0, 0x3}}, {0x5, 0xa, {0x2, 0xf}}, {0xf3a5, 0x7fff, {0x1, 0x3}}, {0x5, 0x7, {0x0, 0xfffffffd}}, {0x3, 0x200, {0x2, 0x1}}, {0xb2e2, 0x2, {0x0, 0x2}}, {0xe, 0x6, {0x3, 0x20e1e3d8}}, {0xfc01, 0x1, {0x2, 0x2}}, {0x4, 0x8, {0x0, 0x6000}}, {0x6, 0xc5, {0x0, 0x7ff}}, {0xa, 0x3ff, {0x0, 0x800}}, {0x200, 0xca, {0x2, 0x6}}, {0x5, 0x6, {0x1, 0x6}}, {0x5, 0xd1, {0x2, 0x8}}, {0x6, 0x0, {0x0, 0xfffffffb}}, {0x5, 0x70, {0x0, 0xffff}}, {0x0, 0x1000}, {0x7, 0xfff7, {0x1, 0x9}}, {0x6, 0x3ff, {0x3, 0x8}}, {0x0, 0x9, {0x0, 0x2}}, {0xff, 0x5, {0x1, 0x6}}, {0x7, 0x75, {0x0, 0x9e}}, {0x8, 0xe, {0x3, 0x6}}, {0x6, 0x1, {0x0, 0x8}}, {0x0, 0x4, {0x3, 0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0x4, 0x6a, 0x3, 0x7, 0x16, 'syz1\x00', "d544fd3e719ba205738e33653eb113a52391af95369451a62a1ccfc4937a8108", "1a3e46fac7cc2603b970b614326e91458c5c6f60366c567f5e98f1ce33e0e11b", [{0x3aea, 0x4, {0x0, 0x7f}}, {0x4, 0x200, {0x1, 0x6}}, {0x6, 0x4, {0x3, 0x3}}, {0x0, 0x7, {0x3, 0x3}}, {0x83, 0x2, {0x2, 0x9}}, {0x2fb2, 0x4, {0x6a1fa8598ad87a4b, 0x8}}, {0x9, 0xd, {0x3, 0x1}}, {0x8001, 0xe, {0x1, 0xfffffffc}}, {0x5, 0xe, {0x2, 0x2}}, {0x6f32, 0x1000, {0x3, 0x69}}, {0x2, 0x7b, {0x2, 0x2}}, {0x2, 0x0, {0x0, 0x1000}}, {0x2, 0x2, {0x3, 0x2}}, {0x8, 0x8, {0x3}}, {0x6, 0xb4d8, {0x3, 0x8}}, {0x0, 0x2, {0x3, 0x6}}, {0xb, 0x1, {0x0, 0x8}}, {0x4, 0x1, {0x1, 0x1}}, {0x13, 0x1, {0x3, 0x8}}, {0x7, 0xfe0a, {0x3, 0x5}}, {0xa83, 0x5, {0x1, 0x2}}, {0x8, 0x8, {0x3, 0x6}}, {0x0, 0x0, {0x0, 0x3}}, {0x4, 0xfff, {0x1, 0x4}}, {0x6, 0x3, {0x0, 0x1ff}}, {0xfe06, 0x3, {0x2, 0x2}}, {0xd, 0x9, {0x2, 0xffff}}, {0xfffa, 0x2f0, {0x3, 0x5}}, {0xb, 0x4, {0x0, 0x4}}, {0x3ff, 0x3, {0x0, 0x9}}, {0xf5, 0x453d, {0x3, 0x3}}, {0x81, 0x7, {0x2, 0x6}}, {0x100, 0x400, {0x2, 0x9}}, {0xe, 0x1, {0x2}}, {0x4, 0xea, {0x2, 0x7}}, {0x2, 0xcef8, {0x3, 0x7}}, {0xfff7, 0x8, {0x2, 0x10000000}}, {0x7, 0x3, {0x3, 0x8}}, {0x6, 0xc87f, {0x2, 0x6}}, {0x40, 0x6, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0xb, 0xd, 0x7, 0x3, 0x1d, 'syz1\x00', "18b429bae836dec717b8720cbde0c22488ddb3df2f7a0f621a867b01502b0005", "ecb7e2be51765a1a99ccb58107239b7a4cc8c0e2f801cb1ec8f66fd46c1dab59", [{0x7f, 0x4, {0x0, 0xc}}, {0x2e6c, 0xa4, {0x3, 0xfffffffb}}, {0x4, 0x1, {0x3}}, {0x7, 0xffff, {0x0, 0x9}}, {0x3, 0xb8, {0x2, 0xb}}, {0x7, 0xfffa, {0x1, 0x900}}, {0x10, 0x3, {0x1, 0xfffffffc}}, {0x4, 0xfff, {0x3, 0x9}}, {0xa87, 0x8, {0x1, 0x45}}, {0x0, 0x380, {0x0, 0x4}}, {0x6, 0x3, {0x2, 0x6}}, {0xfb8, 0x1, {0x1, 0x3}}, {0x1, 0x0, {0x3, 0x7f}}, {0x4, 0x2, {0x0, 0x4}}, {0x7, 0x7, {0x1, 0x6}}, {0xe, 0x3, {0x3, 0x9}}, {0x623, 0xfff3, {0x0, 0x100}}, {0x7, 0x8, {0x0, 0x8}}, {0x9, 0x703, {0x3}}, {0x200, 0x6, {0x2, 0x2}}, {0xd, 0x9, {0x0, 0x94}}, {0x6, 0xe79, {0x0, 0x81b5}}, {0x7, 0xe, {0x2, 0x5}}, {0x8, 0x8, {0x2, 0x4}}, {0xfff7, 0x54, {0x3, 0x2}}, {0x4, 0xfc01, {0x0, 0x8}}, {0x5, 0x9, {0x0, 0x7}}, {0x2, 0x3, {0x1, 0x7}}, {0x8, 0x80, {0x2, 0x21fe}}, {0xfc58, 0x1, {0x2, 0x4}}, {0x9, 0x1, {0x2, 0x3}}, {0x7f, 0x7, {0x0, 0xb}}, {0x5, 0x9, {0x0, 0x8}}, {0x8000, 0x9d91, {0x0, 0x3}}, {0x0, 0x9, {0x1, 0x8}}, {0x5, 0x8, {0x2, 0x78a}}, {0x58a, 0x1000, {0x0, 0x4}}, {0x9a, 0x9, {0x1, 0x10001}}, {0x8, 0x2, {0x1, 0x6}}, {0x1000, 0x9, {0x1}}]}}}, {{0x254, 0x1, {{0x5219eda6367f30c3, 0x5}, 0xf4, 0x15, 0x5, 0x101, 0x27, 'syz0\x00', "822108d5bd0ecab5f6bc12692cd449e6ed19077a8139f8b781c8c247097e1d23", "d170a22533347d699c8fedcd9485eb1aeef950bd2e9427361b061bef609f5e28", [{0x1000, 0x133a, {0x3}}, {0x8, 0xfa5b, {0x2, 0x3}}, {0x400, 0xd4b9, {0x3, 0x6}}, {0x1, 0x3d, {0x1, 0xfff}}, {0x4, 0x5, {0x0, 0x401}}, {0x2, 0x7, {0x0, 0x1}}, {0x7, 0x8, {0x2}}, {0xc, 0x4, {0x3, 0x58e3fd82}}, {0x4, 0x4, {0x2, 0x3}}, {0x5, 0x1, {0x3, 0xfffffff9}}, {0x0, 0x7, {0x1, 0x2}}, {0x14a, 0x40, {0x1}}, {0xa0, 0xfffd, {0x1, 0xfffffffb}}, {0x68, 0x6, {0x2, 0x3}}, {0x0, 0x1, {0x0, 0x4}}, {0x8, 0x41, {0x2, 0x4}}, {0x800, 0x1, {0x1, 0x9}}, {0x0, 0x3, {0x3, 0xda1}}, {0x2, 0x24f2, {0x1, 0x4}}, {0x9, 0x0, {0x1, 0x7}}, {0xfffd, 0x5, {0x3, 0x6}}, {0x1, 0x6, {0x0, 0x6}}, {0x1cdd, 0x4, {0x1, 0x5}}, {0x2, 0xffff, {0x2, 0x9}}, {0x800, 0x0, {0x2, 0x4}}, {0x0, 0x7, {0x1}}, {0x4, 0x1ff, {0x3, 0x1}}, {0x3, 0x1, {0x3, 0x2}}, {0x5, 0x6, {0x2, 0x90f}}, {0x10, 0x4, {0x3, 0x7}}, {0x5, 0x6, {0x2, 0x8}}, {0x9, 0x9, {0x2, 0x6}}, {0x2, 0x8, {0x0, 0x4}}, {0x5, 0x2, {0x0, 0x6}}, {0x9, 0x8001, {0x3, 0x7f}}, {0xfffe, 0xb, {0x3, 0x3}}, {0x6, 0xf316, {0x2, 0x5}}, {0xce, 0xe56}, {0x5, 0x5, {0x0, 0x4}}, {0x0, 0x83, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x3ff}, 0x5, 0xe, 0x0, 0x9, 0x27, 'syz1\x00', "8caab97da81258f20ba23d0efbc85a71efbeffd5ed50a5de0e54d86b911b30b7", "2d01dec7df4cff58850066856f27d9ba6b561ad558f44cb2d3bc07b4a89816ee", [{0x3ff, 0xc943, {0x1, 0x80000001}}, {0x4, 0x80, {0x2, 0x7}}, {0x6, 0x6, {0x1, 0x3ff}}, {0x1, 0xdb1, {0x0, 0xb8}}, {0xad, 0xa, {0x3, 0xf0ea}}, {0x40, 0x7, {0x0, 0x80000000}}, {0x0, 0x6, {0x0, 0x5}}, {0xfffa, 0x4, {0x0, 0x4}}, {0x7b, 0x4, {0x1, 0x7}}, {0x0, 0xfe, {0x1}}, {0xe7d, 0x3, {0x2, 0x1003}}, {0x4, 0x800, {0x0, 0xfffffffd}}, {0x7, 0x8, {0x2, 0x5}}, {0x5, 0x30e4, {0x0, 0x4}}, {0xa0, 0xa53, {0x1, 0x1}}, {0x9, 0x7, {0x0, 0x5}}, {0x4, 0x4, {0x2, 0x9}}, {0x17c, 0x101, {0x0, 0x7}}, {0x0, 0x0, {0x2, 0x10}}, {0x1, 0xfe94, {0x1, 0xff}}, {0x2, 0x6, {0x2, 0x40}}, {0x5b17, 0x8, {0x0, 0xfffffff8}}, {0x5, 0x200, {0x3, 0x3}}, {0x4, 0x7, {0x2, 0x40}}, {0x9406, 0x4, {0x3, 0x365}}, {0xa, 0x3, {0x0, 0x4}}, {0x9, 0x9, {0x3, 0x2ae}}, {0x8, 0x4, {0x0, 0xc3e}}, {0x0, 0x3ff, {0x1, 0x17}}, {0xede, 0xf7}, {0x1, 0xfe95, {0x0, 0x8}}, {0x9c9, 0x955c, {0x1, 0x1}}, {0x5, 0x6, {0x3, 0x4}}, {0x5, 0xf, {0x2, 0x8}}, {0x3ff, 0x7, {0x0, 0x4}}, {0x7, 0x5, {0x3, 0x6}}, {0x5, 0x7fff, {0x3, 0xa02}}, {0x3, 0xa8, {0x0, 0x5}}, {0xfffe, 0xdb70, {0x1, 0xd94}}, {0x1327, 0x6, {0x0, 0xb8a8}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4010}, 0x4000011) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000001440)=0x5) socket$inet6_udp(0xa, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000001480)="788bb34c05f44376f262fbcee7cad32a55c9ac03403ed5b7f781494163dfde7bdf5055d5970e41eafe4f71b0a32c2a39cc6f0c0b1815079085a3616719fd29a6764b090e5c6de373d72d28f803108319ea59", 0x52}, {&(0x7f0000001500)="9eaa47be987f166fbf3faf07e7e6396433a7b3b4c41b4ad290f17ab0310596acd122dd4b64e29018a71d8a785fbe3a2892c8b5838f3ca15f111a6bb22508daeada9ed142b612aacc9223e97070ea6bd99e8a215cdecd7817d10594d86891b3f54a70c398c6e8707e064d89bb3f5d3212b89413871979ca64a1d9011a6ee305e7fd6141d867748f0bc2ab8aa8481443", 0x8f}, {&(0x7f00000015c0)}, {&(0x7f0000001600)="228457a5e5f721ed2a31f6e7578b64120a8f694b83404381f462d9e6ffff96ff7c68d12cef4b6909e2e25a5c2925cdf7752840e529100adcdf5175bc818fb01c4fe61e1f9c76dd995d31a94e0f64aafad6d53c01a21f092b8882e0a10df13632de1ad7098df740a369513b5cbeecc96597a66c9b7b96e19ecb683bcf7043a32fafbd64a1f326e18973f5f32df68de3c98ba9c4e00cc84ce903ff8c682a130f0d872eb996b59fd1297e08606f0a66dfb2a6b06c2d52d1728bbb6af837620c96be5caaadc5367e9d58de365f5baec355b5765beb2350802c931fb47f733326da845c592bfa7755d38d3a535af5c9bc606cb0b894a530b8d1c0086c12b24609d5", 0xff}, {&(0x7f0000001700)="b32a16a536078982ef1b548e951692a0507ac000288aa424822bda2f374218ba99477f1fb2cc1ccbf45708a0ee022c22372225a3afa2e94d56f9c7fe4bef605816db8cc441bd86d48c1c8fb376456d535efa7596ffe927c14ae97929d5d281fcc86f8f6601b6ea52923c455c2a97992790b15c0683f4f06f467fd2b04ec4337e703fc6d15f8da20ca6108767c5ed71129c431cd377375f0a033518f5dc547a2ed5ef19d83758f41c1494f8", 0xab}, {&(0x7f00000017c0)="75a02ce33c2bebdb38da7644e3e19307aaaac0ef473d2a4b8e4a09a27f21a516d4cc6aed743d668492436a070e6387710049ebdc9e01b1312acc85a2507e8bbc1574004984f0b491c763e523aa4d4c9c0e10caae11e3ddda9af247b08488c0e7fb193dd7148715207363217a3cb06d638f", 0x71}, {&(0x7f0000001840)="0f9968b93e996ef2ee72f620b396c1e7d13b5e0fff2f83896b90b968cd91c410243f1293a8d14bb83b9f66c07f6c1ac265340d5501557c4b4861b299c9c4f944f196842a1b1ea9a275dd3cdf62ea484cb0d2e7f519c4", 0x56}, {&(0x7f00000018c0)="dc5ca6ff6a5480fcc61065d64bcb70a5a0a8c3ec74649a4fd1ad3fde17c827a0388314d48f3239b9f96cd56808591399c2efb22ab630770f2304c0db", 0x3c}, {&(0x7f0000001900)="852ee2948c4caabadb7dcf552d73363431ac462bad16463c8628dbf6b4c91a79e622", 0x22}, {&(0x7f0000001940)="396d5d1356c7da7986706194f12c131ac529f8a4ebeab530b634b0b5608b13ebcf0bb5e95619339928d3f0898afff24c7a3d1c80846e9844932aa9bd1a471d92a8df7456b1dff457d2bfd03d9266e4be7acdc2d63b2d886dbe0da119c8f65379df91383ca4c8996359244d46cbfc6a216136f5c8f6001a00ba8492c210f0b36b339631679b3c97d8f170d0d9de774439193fba451921294e9e4983d2ac1f5599fc32c86b639f03c00d1b41322bdf89c9378d7924ac69fab32d44936ff090081c034ff05e908e34136b3458da177df168328aa7", 0xd3}], 0xa, 0xe2dd, 0xffffff00) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000001b00)={r1, r1}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000001b40)=""/4096, &(0x7f0000002b40)=0x1000) utime(&(0x7f0000002b80)='./file0\x00', &(0x7f0000002bc0)={0x6, 0x4}) unlink(&(0x7f0000002c00)='./file0\x00') syz_80211_inject_frame(&(0x7f0000002c40)=@broadcast, &(0x7f0000002c80)=@ctrl_frame=@cts={{}, {0x8}}, 0xa) socket$key(0xf, 0x3, 0x2) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002d00), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x38, r5, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x38}}, 0x8004014) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000002e00), 0x189602, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000002e40)={0x9, 0x8, 0x81, 0xda, 0x14, "3e55e4ffb1405566b0794ef75bf83fd792c506"}) futex(&(0x7f0000002e80)=0x2, 0x8c, 0x1, &(0x7f0000002ec0), &(0x7f0000002f00)=0x2, 0x0) 3m31.141886695s ago: executing program 6 (id=1203): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = inotify_init() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x1f, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x14000) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4200004b) close(r0) 3m30.920952893s ago: executing program 6 (id=1204): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a3000000000140000"], 0x118}}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) cachestat(r3, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x80000}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f00000000c0)=@l={0x92, 0x3, 0xb0, 0xd, 0x7, 0xff, 0x473d}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000000), 0x4) 3m30.080601574s ago: executing program 3 (id=1206): syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private=0xa010101, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009c}]}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x9007}, 0x4) sendfile(r2, r2, 0x0, 0x2000fb) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) 3m29.508670391s ago: executing program 56 (id=1206): syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private=0xa010101, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009c}]}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x9007}, 0x4) sendfile(r2, r2, 0x0, 0x2000fb) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) 3m29.478406554s ago: executing program 6 (id=1208): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000080000000018110000d2b444c4786b3c86792368b25fdae84b9647c05a5f8d98f6bcf68bbdf1a4974e0f775d75032d85993e7ff962f9cceda88564398ec68057a8b0dba05d8808959772a9cd91b9add25d27780b00000000000000cd987862c72e8ac1b417aa594c2c4806f7110d63384cf15131b244d5cd8f5aa8e1e1cddf0de77e4549a14454d7bc0d74021346191ecb47ea40f58a4d71248720129801bd4aca37baa3a03517", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r4, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000000cc0)={0x2, 0x0, {&(0x7f0000000bc0)=""/233, 0xe9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000a00)=""/264, 0x108, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000000680)={0x2, 0x0, {&(0x7f0000000580)=""/210, 0xd2, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) alarm(0x11) sched_setattr(r3, &(0x7f0000000080)={0x38, 0x3, 0x10000000, 0x4, 0xab, 0xffe, 0x2, 0xa4, 0x4, 0x8000}, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000100)={0x211, 0xe73, 0x8}) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000040)={0x8, 0x41, 0x8}) close(0xffffffffffffffff) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000000c0)={0x40, 0x2, 0xff, 0x9, 0x100, 0xd}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x11) 3m29.168164396s ago: executing program 6 (id=1210): openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2004064, &(0x7f0000000000)=ANY=[]) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001f6c0)=""/102400, 0x19000) ioprio_set$pid(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsopen(0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000500)={0x8, 0x0, [{0x0, 0x1, 0x0, 0x0, @irqchip={0x3}}, {0x9, 0x5, 0x1, 0x0, @sint={0x8, 0x5}}, {0x80000001, 0x3, 0x1, 0x0, @irqchip={0x7, 0x1}}, {0x6, 0x1, 0x0, 0x0, @irqchip={0x20002, 0x2}}, {0x5d400000, 0x3, 0x1, 0x0, @adapter={0xd, 0x5d889c2, 0x3, 0x3, 0x2}}, {0x80000000, 0x2, 0x1, 0x0, @adapter={0x6, 0x6, 0x4, 0x5dd, 0x2}}, {0x1, 0x1, 0x1, 0x0, @msi={0x2, 0x7fff, 0x9, 0x1}}, {0x8, 0x6, 0x0, 0x0, @irqchip={0x4, 0x6}}]}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x424}, 0x1, 0x0, 0x0, 0x408c0}, 0x40001) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) syz_pidfd_open(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 3m27.660686427s ago: executing program 6 (id=1216): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup(r0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000100)={0x7, {{0x2, 0x4e20, @multicast2}}}, 0x88) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB="00080000000000001000000200f7ffffff"]) 3m26.961462288s ago: executing program 6 (id=1220): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000180)={0x0, &(0x7f0000000280)}) socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0xfffffffe, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x10000000, 0xaa, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r2, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x167) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone(0x118280, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000480)="5435677dd457950cc7ba9bf0e6ddb37a22e81ac93c635266cb45a367d885d3f5737f4a9feef53df8828b67ccbc48d66c726ba44a05453da92ecc6180277464b26c264b758ee8d6be57bb3c84acc7b0bb9e2fd819ea53a043d0e98c1375a09a0ea9f045bc847d07a9f03f52abee3436f03bdc4939c7b0f3efac5d58ff58ef2c5d0e6628a420de9c2a2002580c0f1693c462d82ddca7ca4d69fbf74e7b098aeb756d4c30ae8db2194a3f7dbd0f703e68913eace4bde34f2185164ada74aaac175daeee1f1f5821abe3c5d8d7071b5b00d8cc") ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x8, &(0x7f0000000580)) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001900010028bd700000003dc02d"], 0x1c}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a6970"], 0x60}}, 0x0) connect$unix(r6, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x8010) recvmmsg(r6, &(0x7f00000002c0), 0x0, 0x60, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xa0}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x108, &(0x7f00000005c0)=0xfffffffc, 0x0, 0x4) 3m26.280665806s ago: executing program 57 (id=1220): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000180)={0x0, &(0x7f0000000280)}) socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0xfffffffe, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x10000000, 0xaa, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r2, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x167) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone(0x118280, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000480)="5435677dd457950cc7ba9bf0e6ddb37a22e81ac93c635266cb45a367d885d3f5737f4a9feef53df8828b67ccbc48d66c726ba44a05453da92ecc6180277464b26c264b758ee8d6be57bb3c84acc7b0bb9e2fd819ea53a043d0e98c1375a09a0ea9f045bc847d07a9f03f52abee3436f03bdc4939c7b0f3efac5d58ff58ef2c5d0e6628a420de9c2a2002580c0f1693c462d82ddca7ca4d69fbf74e7b098aeb756d4c30ae8db2194a3f7dbd0f703e68913eace4bde34f2185164ada74aaac175daeee1f1f5821abe3c5d8d7071b5b00d8cc") ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x8, &(0x7f0000000580)) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001900010028bd700000003dc02d"], 0x1c}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a6970"], 0x60}}, 0x0) connect$unix(r6, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x8010) recvmmsg(r6, &(0x7f00000002c0), 0x0, 0x60, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xa0}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x108, &(0x7f00000005c0)=0xfffffffc, 0x0, 0x4) 2m47.989879946s ago: executing program 4 (id=1314): r0 = fsopen(&(0x7f0000000280)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000001c00), 0x12) 2m46.60058292s ago: executing program 4 (id=1318): fsopen(&(0x7f0000000040)='hpfs\x00', 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0xf5, &(0x7f00000004c0)={&(0x7f0000000380)={0x2c, 0x2, 0x3, 0xc4dee3c1c0a44695, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x14}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xe50dc9b30ee66d12}}]}, 0x2c}}, 0x8000) 2m46.485758492s ago: executing program 4 (id=1319): syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a00000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) lsm_get_self_attr(0x68, &(0x7f0000001940)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000480)=0x1020, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x200080) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) gettid() 2m45.430825255s ago: executing program 4 (id=1321): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close_range(r0, 0xffffffffffffffff, 0x0) 2m44.640817821s ago: executing program 4 (id=1324): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000007000000080000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000068218d88b45de768b67679629dcf6f0000000000a6adfcfe6a2475d9b5e46fcccbc300000000"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80894) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x800, 0x0, 0x3, 0x1}, 0x20) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x4801, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x43}, 0x40, r5}) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8936, &(0x7f0000000000)) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r3, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) listen(r3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x11, 0x148, 0xd8, 0x0, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0xc, 0x2f, 0x10, 'snmp_trap\x00', 'syz0\x00', {0x4}}}}, {{@ip={@multicast2, @remote, 0x0, 0xff, 'vlan0\x00', 'macvlan1\x00', {}, {}, 0x5e, 0x0, 0x56}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x80) accept4(r3, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0) 2m42.689953418s ago: executing program 4 (id=1330): sync() syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x9, 0x8ccda8e2b1e7a7b1) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000100)=0x9) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) sendto$inet(r0, &(0x7f0000000140)="62ac643a939a70606f2c67dd8393485e474d2a138673685b19db7564c280d6d4ff22d08c5e6261d913fb9c52023c745bc44654376d3ddc506b4a5c5ee1bb169f0ba2a100ca26eebf9c5ff4d274", 0x4d, 0x24048040, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x3}}) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2a) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f0000000240)={0x0, 0x11f000, 0x8}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@x86={0x3, 0x5, 0x81, 0x0, 0x7, 0xa, 0x7, 0x2, 0x1, 0x1, 0x6, 0x6, 0x0, 0x1af2, 0x22, 0x8, 0x10, 0x1d, 0x6b, '\x00', 0x5, 0x8}) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='//', 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) 2m27.413610745s ago: executing program 58 (id=1330): sync() syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x9, 0x8ccda8e2b1e7a7b1) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000100)=0x9) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) sendto$inet(r0, &(0x7f0000000140)="62ac643a939a70606f2c67dd8393485e474d2a138673685b19db7564c280d6d4ff22d08c5e6261d913fb9c52023c745bc44654376d3ddc506b4a5c5ee1bb169f0ba2a100ca26eebf9c5ff4d274", 0x4d, 0x24048040, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x3}}) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2a) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f0000000240)={0x0, 0x11f000, 0x8}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@x86={0x3, 0x5, 0x81, 0x0, 0x7, 0xa, 0x7, 0x2, 0x1, 0x1, 0x6, 0x6, 0x0, 0x1af2, 0x22, 0x8, 0x10, 0x1d, 0x6b, '\x00', 0x5, 0x8}) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='//', 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) 1m49.554302236s ago: executing program 2 (id=1471): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000100), 0x0, 0xc0012140, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrusage(0x0, &(0x7f0000000340)) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) getpriority(0x0, r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r3, 0x0, 0x0}, 0x20) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') ptrace$getenv(0x4201, r0, 0x5, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1m48.385023067s ago: executing program 2 (id=1474): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket(0x2, 0x800, 0x3ffc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) shutdown(0xffffffffffffffff, 0x1f) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x133d, 0x0, 0x8, 0x0, 0x0) 1m40.370506336s ago: executing program 2 (id=1492): socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x6, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4004550c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@bridge_setlink={0x15, 0x13, 0x1, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x10, 0x12120}, [@IFLA_AF_SPEC={0x4}, @IFLA_VF_PORTS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x811}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f4", 0x52, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000010c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001600)={0x5, 0x10, 0xfffffffb}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x25, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0xffe2) openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) 1m38.038588849s ago: executing program 2 (id=1498): openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2004064, &(0x7f0000000000)=ANY=[]) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001f6c0)=""/102400, 0x19000) ioprio_set$pid(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsopen(0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000500)={0x7, 0x0, [{0x0, 0x1, 0x0, 0x0, @irqchip={0x3}}, {0x9, 0x5, 0x1, 0x0, @sint={0x8, 0x5}}, {0x80000001, 0x3, 0x1, 0x0, @irqchip={0x7, 0x1}}, {0x6, 0x1, 0x0, 0x0, @irqchip={0x20002, 0x2}}, {0x5d400000, 0x3, 0x1, 0x0, @adapter={0xd, 0x5d889c2, 0x3, 0x3, 0x2}}, {0x80000000, 0x2, 0x1, 0x0, @adapter={0x6, 0x6, 0x4, 0x5dd, 0x2}}, {0x8, 0x6, 0x0, 0x0, @irqchip={0x4, 0x6}}]}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x424}, 0x1, 0x0, 0x0, 0x408c0}, 0x40001) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) syz_pidfd_open(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 1m37.362685435s ago: executing program 2 (id=1500): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000001600)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/13, 0xd}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/140, 0x8c}, {&(0x7f0000000540)}], 0x4}, 0x7}, {{&(0x7f00000005c0)=@hci, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000640)=""/104, 0x68}, {&(0x7f00000006c0)=""/30, 0x1e}, {&(0x7f0000000740)=""/45, 0x2d}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f0000000900)=""/192, 0xc0}, {&(0x7f00000009c0)=""/92, 0x5c}, {&(0x7f0000000a40)=""/10, 0xa}], 0x7, &(0x7f0000000b00)=""/176, 0xb0}, 0xc67}, {{&(0x7f0000000bc0)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000001700)=""/216, 0xd8}, {&(0x7f0000000d40)=""/96, 0x60}, {&(0x7f0000000dc0)=""/242, 0xf2}], 0x3, &(0x7f0000000f00)=""/216, 0xd8}, 0xc81}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001000)=""/137, 0x89}, {&(0x7f00000010c0)=""/187, 0xbb}, {&(0x7f0000001180)=""/130, 0x82}, {&(0x7f0000001240)=""/255, 0xff}, {&(0x7f0000001340)=""/49, 0x31}, {&(0x7f0000001380)=""/96, 0x60}, {&(0x7f0000001400)=""/208, 0xd0}], 0x7, &(0x7f0000001580)=""/97, 0x61}, 0x9}], 0x4, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r6, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) 1m36.538093132s ago: executing program 2 (id=1502): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket(0x2, 0x800, 0x3ffc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) shutdown(0xffffffffffffffff, 0x1f) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x133d, 0x0, 0x8, 0x0, 0x0) 1m35.203336599s ago: executing program 59 (id=1502): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket(0x2, 0x800, 0x3ffc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) shutdown(0xffffffffffffffff, 0x1f) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x133d, 0x0, 0x8, 0x0, 0x0) 46.925840952s ago: executing program 1 (id=1649): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd38\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) dup(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r6, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x4, 0xf, 0xbb, "4aa2940d2d313d8d264b584544b7862882233de393f56bb194a7449c71fc860dd452af2bb614ebe0bf6a373e9e4709b84800ec2b6f8ab865c3aac026c30601", 0x8}, 0x60) socket$phonet_pipe(0x23, 0x5, 0x2) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socket$inet6(0xa, 0x3, 0x88) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r9, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 45.122795391s ago: executing program 1 (id=1651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6tnl0\x00', 0x7131}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x133d, 0x0, 0x8, 0x0, 0x0) 43.718638977s ago: executing program 1 (id=1656): r0 = socket$inet6(0xa, 0x6, 0x6) io_uring_setup(0x2c4b, &(0x7f0000000200)={0x0, 0x0, 0x1000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1bbe, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x6, 0x20002f8}) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r3 = socket$packet(0x11, 0x3, 0x300) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file2\x00'}, 0x6e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x98}}, 0x4048010) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="f800000002090103000000000000000005000004b000020006000340000100000c00028008000100880000001400018008000100e0000001c107d25ad9f1709c140001807a307f44b6df2a361b8c4d34a208000100e0000002080002007f0000011400038008000100ac1e000108000200ffffffff2c00018014000300fc000000000000000000000000000000000000010c00028005000100210000000c000280050001000100000006000340000100000800020009000100000001080003400000000108001640000000000900010073797a3100"/232], 0xf8}, 0x1, 0x0, 0x0, 0x851}, 0x44011) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000200)={0x28, 0x1, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000040)}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 40.941428636s ago: executing program 1 (id=1660): openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2004064, &(0x7f0000000000)=ANY=[]) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001f6c0)=""/102400, 0x19000) ioprio_set$pid(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsopen(0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000500)={0x7, 0x0, [{0x0, 0x1, 0x0, 0x0, @irqchip={0x3}}, {0x9, 0x5, 0x1, 0x0, @sint={0x8, 0x5}}, {0x80000001, 0x3, 0x1, 0x0, @irqchip={0x7, 0x1}}, {0x5d400000, 0x3, 0x1, 0x0, @adapter={0xd, 0x5d889c2, 0x3, 0x3, 0x2}}, {0x80000000, 0x2, 0x1, 0x0, @adapter={0x6, 0x6, 0x4, 0x5dd, 0x2}}, {0x1, 0x1, 0x1, 0x0, @msi={0x2, 0x7fff, 0x9, 0x1}}, {0x8, 0x6, 0x0, 0x0, @irqchip={0x4, 0x6}}]}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x424}, 0x1, 0x0, 0x0, 0x408c0}, 0x40001) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) syz_pidfd_open(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 38.750632607s ago: executing program 1 (id=1663): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sysfs$2(0x2, 0x817fff, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002100)={r2, r1, 0x2c, 0x0, @void}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x229) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000002140)=ANY=[@ANYBLOB="267c8af670b4234c098f4c78b5fae9f42957040000d395d58903a7acbc6559ccf79e408fec512f94de43062ca076d84266d176dfdf2c92f4efa2470b7f276defe6b71036523bc23dada5109074fe2856d2f525a7b6a0806721c729ac3c63f3cbe26431d2ce1f5088b82b55111ae39ecd244df7bed9f7f4e8cafb02cd79861e91cb9b76c6e76050f666993dfd8f14fa6f1d74654a098d8156f45fe4a7bf492175caa17c39ed6a091102992a25a90d76d5e69a258f7434f97f5fa0ace4b428c508233812d50b21bc8edb3952294116a9bab452bf3f1077c684b9", @ANYRES16=r7, @ANYBLOB="000128bd7000fedbdf2503000000060006000400000008000500ac1414bb14000c00000000"], 0x38}, 0x1, 0x0, 0x0, 0x6d}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "ec094e471cc80f218dbc1c56a936a7e3971a8c35c47e580400", '\x00', "fffffffffffffffd"}, 0x38) sendmmsg$inet(r0, &(0x7f0000005d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000080) 37.264312363s ago: executing program 1 (id=1668): socket$kcm(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 36.185360085s ago: executing program 60 (id=1668): socket$kcm(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 27.021435452s ago: executing program 0 (id=1693): syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000"], 0x0) setxattr$incfs_size(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000"], 0x0) (async) setxattr$incfs_size(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) (async) 24.719201278s ago: executing program 0 (id=1700): syz_io_uring_setup(0x5df1, &(0x7f0000000200)={0x0, 0x701b, 0x8, 0x0, 0x2e0}, &(0x7f0000000040), &(0x7f0000000080)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x40000001, @remote, 0x7}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r2, 0x89f5, &(0x7f0000000000)) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f000004b680)=""/102400, 0x19000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) add_key(&(0x7f0000000200)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 20.968057646s ago: executing program 0 (id=1705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x6510, 0xc, 0xa, 0x202, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1434, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @dynset={{0xb}, @void}}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xfcf027c892e5fa9c}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x49c1}]}, {0x13d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x1344, 0xb, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", ""]}}}, {0x58, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x60}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x80}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7f}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x9}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x123c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x122c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_MASK={0x138, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3f, 0x1, "22cdfa748631d92e5bda7d36756f9fef54ffe7f387c3f26f49611e784a4cb2fbdf3ab71af102b895cc90ec33b1d490ba3a11d9bb0bb5550f6e8e9e"}, @NFTA_DATA_VALUE={0xd0, 0x1, "18f3200e7ec34ae14812cdc14a15b518afdeeaf1f75442d7e243cb3052e7ca26d57ee28fab14d52c6ea2627c204a74c94bde6d9c7833b2f554567c9f2533635ce59629e8de1e24470b9a0b12ad741126b4eb4af67790196a8cf4f8f5d8ee1ae37b4051709ce53a7b3a0f91c006fdb5cd1fdaaa0a70b880b32c2e41c5b25383be1f20f6bf1d1b118df241b8122b09e4659cfa5ca1877e66eea1976f50c89b009d5cd34c5a0515e2b97fa8053b9a3cc756fc0afa3f3e94aa564b75f3c4cfcd4273a9df87d1d86764617b64d233"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_BITWISE_DATA={0x10b8, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "a648093515644e210d13185eb90eb844c357abc9d89d5137bc6ab9e8cfad0b7d9451a8da0471e04e436c842a9a810555d7028a76ebcaac105ff1e3f6e5118a6d947fd775d55086e4d630deed1ad2437ff19d89d7f90c503e5c438c132c9e95b2b386dacf17a8f1447c11ccce60dedd15082e8c288592e2a4fd80dde0d89f213fa18fbd69909a87acf43b18d541d521d90e4d983631642c4e7ca29d29ae1975a698656deade6a37b379a204ba1618d496648551bc49104239e2a8b351258038eb38d91f3c2d2a23a754faf79a93e5c41a833c6738f0ec3d763dcf622b38793148bc194141d93bd442d77795ceaf455e35dd3cf58d12fa6892c94681e7b9d3ef93e13e81bafe8dd4fcba6c10acd7735ae1df87901b03d6af63d625c2f648ab050d869a3aef9408ef3802e24037ca5f591f52c1bf4a3c81922bc20cb7639736fa3808cd57e1f28af0df74bbd67920cdefa992db8b7181e8fefbf6fde5ca37104ad4995b2a7ed0eee53e593fbecc649d3a7bed2ec1e960d8aeeff94930a7796b4f9596bc5bba6a4b443628bc9ffdd798bd3c512e82fe21a3c6909159d71331e25da03ffdee2fa6822dc74e19fe7176081f8a8952e415ef1905737ad09f0eb456576841bbd1c6af0de0107b555293d8f759a0509a55840e614bb99263282547a5658dcee11c3a664c737d4d39b86c12c33a1ca590f0ca18a1fd8d6d77636bfd4e3f60ce09b52678ebd15cafa680162e29d76f230f924ad35fa6ac255a8c6f3f17c83a6e994106eada2329c71a6ab4649df7d5eda8fc2b7724e387931976949347a7c884f3a007df3d909e9bcf0a809cd508ca2c2408c92ca2cb90d72d713b553f6295f19b11a0d6cf0a0b0e0e5b9ed8f0540d2c4525021b2126a1a912278e79701bcfcc9508c55b4126f15b7e74ca297ec0279821324785165ba4270bb2850f610651bc28a4584fa8879dc16f46f1e575624e3ec9d4e73cf6c1890adb2c2b0f0bbad2116321fbbee15e8184479e00ed926c6097cde3565992b2de9058362a32fa36fb2f0d03e61e960d40f5aa3869fb687e74da66174e9f929bef1feb6366868769d381137ace355054763071317984d1e5a3e51fc6ff37bb25b30563f7a69666151049434bc075f707faa71cf4205503314b76d5d231f2275161f82945a32e96e5b4ef2fead5674c66baff28e825daf17c85057980b20247d05ae51cb7c4538b69e909addf0657009e85fce7d948afb020411d81b715768633e030d105a349ddfddba86734b90b0b5a2984e94af2eed38f6e908ce04546ed6de9fe13e10b0124b7c9f4ef0224d276f5d05ffe85d353ff0a982d479a25404da37d9aa6397e022f4afbaa6848a5d622351ac9c9a791c94987a701d24d82d46cd058cbb5ef176b3d28021cf3884da19ec9da9a30560dc2f037872ab10c2589e5279f9accbe6a4c5908be71c996bed0cc59ea081e5cd96ea512f22565296ae83ac4cf46cf80e6d0db3a265eb6e6760d17cba00957f6d09df00765aa9fc75a21c1b09a5dcf423cc5bb91ff2c9310397e66a59f9bb196576668b28b45dffa037765dad4326394e57419514b8ebba0f89ed3a47f006532e5ed2bfb8df99bf8b365fdadc3e08957185f78eb8edb5e88a1f09ab0fafa9b866a4041b3eb84a492abddef93ed42fa7edd3a959c14613094bf82d78c08b909937de10aeee3eefcb92fc69d06ccfdd139db13b594fb343fe870f54a59b28cf545116e573d7740cf6b63c7fdc4de2df0582101e518533c0a97a9c4fb5e2bd63f8019962c64c0234f3b0e64fd42f0e64db5656ec941f3b0ce0a5cce1082e90fe1bea3e0aea8468846b0d2b4925564c5354a6be5297823564761e74b46bc4816e5d06e783c3cd2f4420d3f08bff65bf93f8129cad4eb3673ae85e5f12e02a64596393ea4442f6c6644e1afcb1955c48afe171ddfd03b349fc0ae2f53ccdb0a4664dc18b75abc366a54bad7b4c486a9e3f80bc94b023b45d0455b6eaa6df755e0d5a9ad1c91c36164ad8f7bc941fba824403fb40126f6a31b6e7afaf744a992162a2058cfb61ba18de1e396075231712570cde7094bf4f891cd021030652303b4d619e98b33f6b17dec545ef7282b8a8492988fef6c32e5de7489776f212648c877e347f49153a8e01c4fdd9631e45c3eb74b823d4df558b026730d8459cda1ef6b21086478616f3b4af44aaa718e1c90485fc0d32aa953afd0ec87f5eaac1e2e6cc613b56cd179f5a4c936531b9f87fe06fd3baba03e58c67d90aeddd19a908b4f4c4419015c16e87fd40ecb18ce9c7203008597ad03a135fd03b27c25035ee3e7d886c3f1c3619ac82a976a179b22dac74aadf4f2811bed51cac8ef7f648f00d9c9a8ba5368e5e497a07d305b07542522116f68ad91f0f574e70ee16ee0975aba97a51db3b23b821571f15fd219dcf5aa1095712002a95c2dda8269abd232d75755bb1205d8ed948a81680dde28048c0bef796176c2d110058d44f9a72226250afcd9d0a258b78a711f6766020f684247551ddd90a5b4d974dbd2b523399d66d2352c8c2c31e45569563aab8b26ca72284634bdf97496ae23bbea9503241b11d55ace1810a2e9221b33b384b9c8d90f878dc8f8cec00d848c4d8d31b24775c77f1f93680f6162a7018cf4ab20c280de41b4bb0d5bf50ce5f2dba21e4d02dd7e31a6e1343ff48be8e6d0b744d18ac9932d53bdb03b141aa8fbaf75de2660b208aa35c3e930c4765efa91d388e5db5dcf8203947da689db94697d91ac32014cea5f61b6b3981af735d724b22737326b9671d8767658e851fb3145c5bd3bdc6040d2c3c7ef2e576cfe17058e46ef54b52be221a1bd4d4aa933f0f92bd5043409d935b80b0a25d8267fa0815685f550466665bffe00c6467325046b17ab10952692639f24d4f8323396bc0ae224e6955e0d33b93e778024c2b25879879fcf8edaa18c12d167b4abf1830282b213c18da8adaa644a3a4bf6805eac92a3d5aa019151f3ce82594b77a02ad36ae4bf150e862c12015ce05d6811891b0f104e79c2b2ebff4919346fca3057da3d8513ad699226def27a0bde92a45bd46dc5a2f1f0b9355a40092a81b509be713103917dae5fb805e6e16327898bf4eea96fa5227666ad1bc71c96d9bc725a687748aa7acf744febe5f864b6394ff43889a0d82b9516526ef89b6839b9821925c9afdd585db7288a7fb7b9704a44bec9dff40eab7f558ff48bdcf426332e40d36d2987dd59592beba421b99b16cd9a66ae62c4668caa01fd0adcb2b201c98897f5cae9c5ec8bd0a3f81145d6a18e61713f738ef7196cb663eecb43506eb94d33c08665c8d31ae6900674472a86bbf710477b5935e7b3b2aa8435ed920280f17e13f8a6e41344d8a711ab13ff00501406a51f07f8b27558613e8d891142bd7adf56bb9c744435da32330612a806785413c4d38838c87b6880ac0a8badc8b5bf8f88f27e6bca0040c32339d7ea8f39960bff62b5d9f275ded8984ef0c48a318d80e3558f68a254a862d7d5788be5a165360a9695ac574ea5f6cc193859412236c4f0ce7263f42943a52ca8d67c53627dc99ba7d63d0b65615d4d69e87ee7a83f4f9c67dae9094fd8928808827e01c797be64195c892943b88ca158b9d4934ca4bf19d69af7d1221cda7481359a04fdface5db205c6252c5e946ae73f9c43a0a566008563e2ad444ed805ac198ef9a1a9465f968a99d1ac509f9c10992050055c7867cd70aa7c4d1872a984fc330528845c96bf083b0aa6a778cbe5a34532970d1ee9ca069c57c0a811a0b60eadd4f415f366f68a2a4fe5c1ed039bbbbe9a897bd6c5d79416e07626cdcbe655812e266152325d9d80fc1cf40f467d854e8aba0c01efbe78c45f1f87df3479ac59d5134d9c9131ce511a8e54f17b0b4442bc3d7ba3bc1e44ff3e7d2c9771d8f7cbfd9df7a38a93bf631c2a8483ae562a8c8611d4afcd2c25849dc36b483fb1907109db96e8be428a5150b66a9faf1ee13ff15c300f060e942cfd792f9d85060ff32388852e5ff201300d23911475dcbaef1c1e22c37d3a0b637d4db7de4c245889e10169855b0e30e3383d38dab4f9d24dbc3974176fe673e3f3fd98f5c156acb0edeb6c0adb2c33fc547e4b224e5b37fefc8ec07a277f84f5c7db49a08911bc45d394084c9277c11f080e2497dde4067d672127d679ccbe5d453676c7614bc5417a919ac3511f0d7bc99321aa02b878580220a4754bd841b0c5d5c305ba597c869f9fc0b121f7b72b39b880c66dbd8aee1650f3a3582da51286f5c088f88eb34bbb1050407644560d7ba6fed8a1fc86bf81bd2c7f9609fe8a645deea7bd8641b9c51d1dd312820518fa7b9b039630761ba2965b793e4eaa2da5f818417427aac7e056923aa69cbbeb7aa370fcb7be5f51155a4d76fcd256f65951c9bdbd4c590e519ae7bd6b547816c9dfab044734a34031215106ed35f83a3210d0c1e23778d31554f7d931cb6f9d27ac8a3a4d7a2a40fc92aa86e07624041f7059c0a484f53bfbf65c1d2c2d46aa21256fb488c9adffe679fa08d2f55a6f6357e62943f772ff1e1167866c0466900a95d613d8fb6b1647d60a0190c2c98ac9e105cb2effeb7e80867d3a3454144c576c4d8feb5e9eaf1dadbeaa7c27930febe2ca217c7c6b5fe22c435a99e257f5f848e2c423b34c4ed537e716180b5b3684a173cabef77eb5e5e30f5fdc3389fba6586c342442d5cc73d21e0c928a476537815ad07d43894c2eef33edaa0d9fc4bbfae9944db96a66045cf94e58ea9cfa69a63ae1d4ae895cee0cfed709bb357221ddd47814e7d8df20254ab5ea91d915da3427ebb6d8a6ac1bc80a1048778748f09daf7fdfc47669304564fee8c5f76d17574a0f405d6d4ec882c00a79e2a63227b085ce9d5e7312591ebada573890c4f8d803bcd8e0538f014fff561703d892ac9c319b2216442f399328d76de0e8598da28b976984ab5901b4e0e62dc3bf1e091504542665fde80c4000a4bab849db27a00dd7a0a7a4724326fa50213d469c1d1079a70583f9d3800a02bd2658409d2c6f0f4410e9f4c6e06ffa3936258624caa54b7682374f80d58a585b371ee44ed0695e278da0c8756b348440034ab5811db848c88e08319f9c22938c1a502026ba7c82e22201042577559d7093aff717a1687edcde5b6e0b1a1a8b94e0074599d00f8592fe56a09efd3df95c38f0a9d3907638be1b2cf348437742485ef2a42c4109de24a7898c56bfc2800a9ba3b17210875401cda0ae83a815f8bddccfd9ff83f16e421bf66dc4ac41db262ecf4f5aa3a4dd4bf07b2185b05355ec8b0f3d0ba37c5d14d29bea5a83316c5aa2dd7e100517ddd81294c4a8ecab3bc15c51c7de8e62d5a8d81ba1f9df695d2dd200636b01975495a14da78aeb3e2fcc457cadaaf30439bd9f778317e4e7916fc28ce84a330282e73f7cff3c9ceb708afbffb05005cf707a766eb6cf0752c58caf4c6a3bbb1ef849862c50e62229de00679759a163e7d9c544fa6714ccdf7c2d6e7246186e9d41a6956f4fd95d5f6bb57beee67bb915323dd35c1054ee2a7967c86a02ecf23d44a9d4d42214701c4a8be77f56e055eb47b501a47822387764ed55fdb760272b9d2cde11f090b3b911d8f5379e1a184b6928b057fc9c8fa6ed02791142fadd58698329f3d68deaf6f6c6b708e42a8fcb8f942397283c4dba639e6313582da852fc3cd948041a9fe830541f9a4b95684f271d3680e38d2aadb6b4a30284ef8f133072074b2dfa179943b56662c45b4405542d76f4dda8daeb"}, @NFTA_DATA_VALUE={0x5d, 0x1, "4625a05cd4e4a6bdaa0dbefe50abe676edbe9aec6cebd500f07dd19e4dbb1eb966092497e07356c31008f67f45f92892dcc8f698f02a9e930c1c79003eae3377b1dd8fde483dcde71ecf9da385ae0f72877de1518f8a363049"}, @NFTA_DATA_VALUE={0x16, 0x1, "b021058cb57523dde5de4685b186acb9d355"}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x10001}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x52c, 0x3, 0x0, 0x1, [{0x2d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x5b, 0x6, 0x1, 0x0, "3bb1fcb3816d352c6e36c880a8642a2a315e97e698b48ad23be9bf7ceb58277ceb9b2e55cc55b2cfaf3e60306ef942740a6521cd8fc7d21bbae194a18b531880927f02232bf3e437a4d235fdf0e874f14e99ebfe9a836c"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fff}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @last={{0x9}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x60}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_KEY={0xa4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x2c, 0x1, "c04caeb847e07c84cf70239c2b4504a92f7e5fd48bc3408f756682b8de8b459f4c1c476f13fc8900"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_KEY_END={0x188, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xa0, 0x1, "2e8f893126337219a7f041eb4fab369e0c66df92657f2100f61610f06fdf2e65ac06ec5ff2e1a8a61f8a0ee06a491f827b5197c7e209b0f1df00edb521565c868926f74b6346d7af82d9ce14be3bbe934e7de5e797bacde3ba4510d194e038ed1fdca4a89381d552d56dbccecf6920afd137ad6e5d2fa24fd9824249b4594ad113cdde236171d956df8013bd3a768abc3e885749205e44734871597c"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xb5, 0x1, "30f061e2d9f4645e347be7261698182d58bbb87790e3a952e9ad04cb80c3086b05503cbf4d86d8c5083e1b42878f3e2e5126781727f08a5dc70373b097bc7703a0663ce38e1b4945e86c60f5d3a0dce2e3af1a7123f7a4c09350adf59b7fcd22ca2600cb72f0a31eca4023dcdc1aa5778b51dc161ef296ee1a436b2075113d6ef538c8c0cef3936cfbbe9f1c8ee28d741267b2f56afce0f99965d14e87a01ff1dff3404dec0f49761613de4b300d8e6005"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x1e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb0, 0x6, 0x1, 0x0, "90ca73fe930113673072953b4dec2ad14f08f15429d402e24e5e0f7f1a873f68914889afc3d522a0d4a1e0a6acda0c460cd12c5e6fae3da4f6edeefb412f2908c58ff86031c323f108bd982bd614db32a697d8572f538beb31085e133235e19481f49fdb3fcc989b8d89ba87ffda43ee239a4b3a072f399783adedb2c1eb3f289965e9dac15fd59fc3704dbe4b112caca38ce8bd5e677e8b95c023eac43c7f2b54700b9063599c674d2bcf2f"}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fib={{0x8}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x78, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xb}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x58}, @NFTA_SET_ELEM_KEY={0x8c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x1b, 0x6, 0x1, 0x0, "e2203aee62173f4ca341e432e44054ce7e4882a1c83b4c"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @range={{0xa}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1000000000000000}, @NFTA_SET_ELEM_DATA={0x34, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1e9c, 0x3, 0x0, 0x1, [{0x1324, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x12f8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc6, 0x1, "4b2e43a946d0a103e473add42f2ba62cd7540b7f6edf810d5d23fc3c321cdae757a842303d68f8849c927a07dbb74091902982553862242c70e346255e4b905ccb9f47dcee134a6c2d53a5951565deda1e13e99404031117cc514641795d89f48e391bdd793ba573a8acf0b2b06dd0af1b9d82ae021126e54702cdaff06f4b4120680d1e1cda54881e208f3decbd4d3fcde12fa335091d38fca807fbd655a8af459398d97f8887193246a3b63181077e12e355598fb3474fc5e91f96101aa844e9f1"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xb5, 0x1, "0ef4860230b11990a6d27335ceb6b2e79011d9dff1285427a9da62a4e39978421626f6df48023dc0e3288af7ca55fa0bac99892b2a75c706066056ac41a82841201adb266a8efbaf0f1e4b914f325b4bbc2416441c24f0928643a7ee73a684eb479f87f360f36cf3ba922e9baaa7cda81e9a9cefb0b4f6115722bf0c73d2b04d7f6281cc1558ffed394bdebcc87fe6c7b451b4f88044fa8b182b8173e953e3025cf79140d57c61e670d19ac2c19740dc40"}, @NFTA_DATA_VALUE={0x14, 0x1, "7bbe428a5739333060cc6e7d579f5ac1"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x200}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x17, 0x1, "936fb517d6a026dde5c85009b1c132c834607e"}]}]}, {0x2b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xa8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa4, 0x1, "5e9b803ff0af7dc627fe615b4b31a36a6685a0f970e3e843be4be6006ff45553bf0adb54e89734e290989787c773779c70f68a37fff2abb23a31a084d66bcb0ac6e8ac3ee4b78bceb546f3e53294cf30cadc217e1ada51f8911753ae2b7a955612da812baed879d016f1735487c07063311435f1d9ede24ad21387a1e9a6e5e2f2125debeb969fdbedb6d7770741a40f332b95d50ccbe524dc1d093473f31757"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x24, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x1cc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xa7, 0x1, "646ec47427ef92c70ca4591ffd7ef386cae78034ac3c51616ba448d92cdb75aa6d595d5541889c85fc90050fda68066703aa2ff76a1c7352508094351ce3b52c9ab2460b3466edc7d29cd448230375547ce69c91c41e2a9c91a207149ccdc1cef8fd7a78be7db6b17084e46ee005717769dc8921309d03d17c9732f56e5858e3d97a341c8cdc3cbe633a7348d2bf6e5b0efa5f8b4aeb9b79d16795e898265a0a288b32"}, @NFTA_DATA_VALUE={0x20, 0x1, "011d3c87f57543b003635b62c15c2fb3af2e6708da2b6ab0a640b9c3"}, @NFTA_DATA_VALUE={0xfb, 0x1, "1d58ebce9739790fd04eb3e5b8acad96c2db71cb890f7f33b04bb1c2f48a601eb52d6d74687ea05bfdeeb07c3697075557ec99d15346053b5a9189f83ac6f8e8f7809b120e453927e53bbd4469618ee04afb85c131c02707ae761f29913e744306617f2bee7346e92dac227ab9c57bcb9f3d9013f7f8943685bac837acae9fa740b6fe0d1a81b704535d793aeb6ad0b6956ccac92ff08f790b46dcf4cac36e88cf65a57f8301c032daf62fc79d3b2fdd7df5c34e96e74614297fcc1d43c22c15f81d6cb9b42f0b1e9f83127c352e4622b7071ea66fcb024fb24a55c6ef61699c787831bee2d29c03ce637c52bcd70eadcf76b896f9191b"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x128, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0xae, 0x6, 0x1, 0x0, "3f6b56685a9f4c8d42484eeb3dde0687237cd78839dcc9db0d30079ce3e4c6b5178537a27189462b2b43f0404690c3efb3146051941770c42648983e606f0b47b4aadb4fecdd5e15736393b4c42d413eb8e6fc2b5240163d7f46f21f6dc3566131dcd29854667516520570d94ed2038f45ba7c722355679314d175f15791697e38463900b7df4c14c14c192dc340bb7c8dd4e83000d6a33cff0b261cea324660a9557533a78ad162024d"}]}, {0x27c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x81, 0x6, 0x1, 0x0, "77233f59517ea30678fc6dbf8d32d70dab43c2765f673702b5eab4cb5ffd84a419b580e8ff4c30c2175195b00b700d22f09b416dcaca69cc133faf36f8a235debf92099f3254b2fa8bfe0d0eba374d5515d5590ec825865ad0046a24ace0bfe6fbfb4a7bf3c4858245335d73bd4d2bcf3e17236c96284163dbcdbe35b3"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x70, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x4c, 0x1, "f9f323e7779bf7487d9ecd0d6a971730e9ed1a0b6bc974cc3f5c441e8999fb1084ac63b3ce73daf1c53fb5c61939e3ddc5bd017711270af013b769f31e387150237e1746ebcdbbcc"}]}, @NFTA_SET_ELEM_DATA={0xe4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x80, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x54, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x44}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb1}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1a}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0xa0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0x4c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x480, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x264, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "30ecea"}, @NFTA_DATA_VALUE={0x98, 0x1, "60ff9a33080ad55ef25dd662d971def38bd3613f2d5c58b0b40d6d7ec6b4c3f1f7b263c3e78804f9eb2f9da66ef1f29546f99c4994ceb8ed2e5f629902c4d7b4f603970b5401ca6c541564ca552db0a326e0f113095bf986774ffbaf80a643c5818d553e53d18ead9d94b8fec53db54cc481500a4105f8594ac157d1ebc93ef52ce4ca8d925ed9015626ffb7fb809b621791a9f7"}, @NFTA_DATA_VALUE={0x78, 0x1, "7e510fadddc65350b89eeaf200a56abf609c8316a0dffbe803f14a318c1fbc957b98f2d04c6618e8df7b5eb428a693ada2d43ca03c458fd732d049c531a2a52d31fc93ee1644e88b9158337853088aa767054adc339b58216cbc2751fbc2242365a0ee5e62e5d9e45cbf17e36cfcaf63056d3b47"}, @NFTA_DATA_VALUE={0x98, 0x1, "abea09b93b9a5d77d2d9dfcd4147f3534321521620124d8df42a7e50e186c618b9b5c901e21af8edfd887c8190ea22cfc99f4a825587e7ce0a7e32fec7d47f0b91eb1d9d959e81d03834439e1419f8a4c10bfde10243f2a1610fe4cba44e7d3f8364991a18d61c65c30935fcea3495735bc82791ae773dea53f591e3e5ff18d2c430ba029cb81713e8ec4095788b44a7cc6e2d41"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x4e, 0x1, "783ace5c8488c53ed8b5b25992f52e7582e99a8786e00d3b761ab8a0729ab36c613d56f1d79b7b7708079dcd08f3879f6cc8d146be2670df808444175eac814f223759e4f76fd9b89772"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_SET_ELEM_EXPRESSIONS={0x68, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x24, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_SET_ELEM_DATA={0x154, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x32, 0x1, "d30e6531db43ca3de01efa15e4e9fe4844726ec299d2326a7c8653a439b4892f0d49bd43feb9429268c641b6a84d"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc8, 0x1, "fc4999c7b0174786cf204af905a3bcdf5fabdfb994fc1e3860897e52c22aeb60b659d1f9029b3641e5ad505c059f52f6b4731f2085ab59e3d33522e4691665c99c485430dcc33bfdb6e2d475e263451fcb1b91883f9f42a37913d2372f67185647c98c960bddd8df1bbee128725d66899c58f12c32ac99d1bba18337a4806e0e615900a7f7e8837c2aac5cd12a90844cb265e3cadcca0bff282769541a6e97dd3b9eaf1bc3da9c8ffb6b16030a4d9afaa05e8d1101eaf257b32a21b373a02891cab771b4"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2cbc, 0x3, 0x0, 0x1, [{0x364, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xdc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x82, 0x1, "adc7451385e83d39de3479b5eee1574703c866dda9e78b0e9a988db2f6b1db28a984d5df360f5a6ec4105d487f14158e55c5059a9e04c38b6a41d6116dbfe6fc18c5d1068ebb431dc4c7df873ea5e1d17426d365ef9f04a302279eadf413d3ca53a91ad9940f7a16b19667aa3cd24fad394f31a2e9143ac2691492479655"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x12c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", ""]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x80, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x70, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x57bd}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xb}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_DATA={0x14c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x52, 0x1, "5a24e5249f37389d4d8ec087dfa1a7af08a018558125c1c71176063f6178d8412a541345320d066640a05c0c3d72f9e4759d60639544489a32328717ee29fbccbefc6f102f887b30e0b9ce1dee61"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xa1, 0x1, "ee07a373260f088951d47246ba40765e6371cb1400a8efa182417503f090497c6a5311d50c20dd7e88758c182fa16475ea000356361af9206b719916ec02c433f9053df022b2a57158bcb66076335c52df3c094944f3d14b28bb4fbd517976adfb8b9637335530901005d91ac4f4a7a540dbc755f1b376a870ad3f6b2358e86b95765c6240b0fa04c282cdf5b6e7fdcb6e2d7ae22cfb1ce645ce0ba805"}]}]}, {0x314, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80}, @NFTA_SET_ELEM_KEY={0x2ec, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x70, 0x1, "d654e7bdaac19bfe49aef9c985579bf1a325c49df26b041233d5f2d98540f30d7b317d39adaf7865e88cba32df64838cf911d83fb3c8d1aa60d80f4f2542a8ef267ba36f1e2c70025076e01db5fed83c5e58095fc7d9baa07009241ee53d4daf5f1f791e7713cc8fae2cdfb5"}, @NFTA_DATA_VALUE={0xaa, 0x1, "2b6cdc63f1929f48f7863765aeb2a18eca07616c0e3feadc92c0d781d26126ed849ac23589ad2fd8e8d70d29c1c2035524fb7abb3c2fdf5a42b9449780e03431aec107107112341d08331b3327a536f99aad102d9e6f9e8d3ab11f4215415bcd85a0967b74c7ba0f50e2a67af65898176618fd301889a389eed3bd8b2b0b46d9da37f0dd8d6f4f9ca378578fec2502c0b909b140029dd4f01fd1b0db4afb93e55d700e7f33e2"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xde, 0x1, "e3d17984d333fcf208228152295587832878f1ea7fd11970d485e3b44f092f7dece753a2d485f60920d82e0c1cd3dd89a35cb5f731631badc110f25188cecae43904f5d1d95d2f05fcb48e22096adf904032b3a7f89589293773367b0936c0b333a8656d71a5ee1df9f381f428b1cfb4fcb3709905e6e57cc2bf0f7d00d8738d44520143e05b7ae97c62f56257162b7a057db01a529d93df19d32e396d3c308dd9392e0f3fc6ccbe1eb50a0040d25381ebe9b07141cf609c4e0d7f857cd362eed28a70446f05dbb4c41d9cbedd778141f4fa9869fd173796643f"}, @NFTA_DATA_VERDICT={0x4}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}]}, {0x22d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY={0x54, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x39, 0x1, "c54757a5c49ce88c95c1a6fb3be7897ad6ee8e5c07415a0d9881d1439930b13bd7c6ddd3d7d99692af9a81498d42e1d545229efe71"}, @NFTA_DATA_VALUE={0x8, 0x1, "14c1469b"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0x28, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x2224, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x56, 0x1, "e6b8c247e3c5931f07b9a55c03884185071a328c01015e7118abf68e47f1f520ea215e74f3f608ae0ae94ba4912eeefc56b1654a068602f279b5c98468a86c0524dce7d25181ba9a44a690bdd01ff1fe7045"}, @NFTA_DATA_VALUE={0x82, 0x1, "b1299dd64d33cc2b3b4b69a44b084692b6a4ca7a4eae48d6f85cab0f51a29499206d5308de64d796ebc55caf20f639785f653ef29251535a2df500f7f6ff96cc67d3088f82245daec0ada98981de0c600d4e09eb81652ac2ad37ee09546c11229bbba8e04da75cbc4be2b9cafe35749684a9ca18a81f498860b6803f8eb7"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1d, 0x1, "455360b4f8067078c453eb8242388aeef973b9c95c86df84aa"}, @NFTA_DATA_VALUE={0x99, 0x1, "d7dfc03001b87b9643865e760564ae3b533c6a6a0b8576f1591e2d7083ec183a678355bec2212f798a115168ea19c3eae53f03defbb4bc0211b3ed922345311988a0915b8fe749d0699caed847cc3950fa6b9d3d90c4a671bd8e01df28f566c7a89fc0a0988d44f2601a7a4ba656797fed5a0b8cd35ba69583641171079d54af96eac95f065fc0bbedcaf6131d38e07372e10ae8a4"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x1ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xac, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "489e2b34141410c8235356e10907f45fbc08085de4d7c5254641d31f03322aa58c7b773140129954e637ee030e97134d5451fc22715283c66abe97b957333a8d2c9b94b65dcf9b17d8f5017c01e15597286d459a156d8e49c707db615ab6aa1fb29406d4a0992a8df6b1ff2c3afff7de1314bd5c23506aa4337c13f1bdb173ac0e5a8e699293d3d39156fff67108710e93364c335c2ca589f168e395f767c73997"}]}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @quota={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xc4, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x58}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}}}, {0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4f}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x6d}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x3d, 0x6, 0x1, 0x0, "9ae8c3c6de373dc3edc2ff98c43bcd7cecda9ec9780b2d365b425d90eba1af66ceb063e5833842180685620a8ed96bdfe7746752050c69e4d2"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}, {0x16c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x32, 0x6, 0x1, 0x0, "d5e760a25fc92aa06940fe4893b3a8295fe7a36c5ebb91441303b381588a1cc376e12464a98a78df0d4a43613474"}, @NFTA_SET_ELEM_EXPRESSIONS={0x118, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x4c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0xf}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xd6}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x44, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x10}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7fff}, @NFTA_HASH_TYPE={0x8}]}}}]}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}]}]}, @NFT_MSG_NEWSET={0x108, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1b}, @NFTA_SET_USERDATA={0xbf, 0xd, 0x1, 0x0, "ceea5397192e034085f04b39074807358ab28089e9a7a62f7a1b15b08d93a2c01799ecbc3e1c9383574e6fb11eed696f76b774a2ae4e0c01012edbeab3e00fa3ba95dcf03c59178822efd2b4666148d8b72a89136a5254f9a2fcf41a7dfb9ecd98639024b1eadac2890c74474dfea10ad0af5dd08870e9b033f7e1244ed728e41e16c537354a71c985ef7c3a8c5a2a3de5cd54f01fabdf05eccedc5bc241b4da35a904cb106492132d140343029cc3180dd39815520bab67046a02"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x40}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}], {0x14}}, 0x6714}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 20.849368882s ago: executing program 8 (id=1706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) 20.726501998s ago: executing program 0 (id=1708): openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2004064, &(0x7f0000000000)=ANY=[]) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001f6c0)=""/102400, 0x19000) ioprio_set$pid(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsopen(0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000500)={0x6, 0x0, [{0x0, 0x1, 0x0, 0x0, @irqchip={0x3}}, {0x9, 0x5, 0x1, 0x0, @sint={0x8, 0x5}}, {0x5d400000, 0x3, 0x1, 0x0, @adapter={0xd, 0x5d889c2, 0x3, 0x3, 0x2}}, {0x80000000, 0x2, 0x1, 0x0, @adapter={0x6, 0x6, 0x4, 0x5dd, 0x2}}, {0x1, 0x1, 0x1, 0x0, @msi={0x2, 0x7fff, 0x9, 0x1}}, {0x8, 0x6, 0x0, 0x0, @irqchip={0x4, 0x6}}]}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x424}, 0x1, 0x0, 0x0, 0x408c0}, 0x40001) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) syz_pidfd_open(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 20.288952002s ago: executing program 8 (id=1709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6tnl0\x00', 0x7131}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x133d, 0x0, 0x8, 0x0, 0x0) 20.111526456s ago: executing program 0 (id=1710): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x185) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="1400000013000100000000000000000002"], 0x14}], 0x1, 0x0, 0x0, 0x8000000}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000100)={0xb}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mq_open(0x0, 0xc3, 0x48, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007a1ff00", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setrlimit(0xe, &(0x7f0000000040)={0x20000000005, 0x200000000}) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) 19.508088434s ago: executing program 8 (id=1714): r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r4, 0xfffffffffffffc01, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000100), 0x218888, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17.181033778s ago: executing program 0 (id=1716): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000011480)=[{&(0x7f00000000c0)=""/186, 0xba}], 0x1, 0x7c, 0x100005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x20}}, 0x24000811) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = fsopen(&(0x7f0000000000)='smb3\x00', 0x1) fstat(r3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0xa, &(0x7f00000003c0)=[{0x6, 0x87, 0x6, 0x6}, {0x401, 0x3, 0xc}, {0xfff8, 0x3, 0x5, 0x3}, {0x3, 0x3, 0x8, 0x7}, {0x0, 0x0, 0xfa, 0x7}, {0x3413, 0x55, 0xa, 0x6}, {0x3ff, 0xfe}, {0x80, 0x80, 0x80, 0xffff3fba}, {0x2, 0x7, 0x7, 0x92ef}, {0x2, 0x4, 0x9, 0x2}]}, 0x10) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e0007012a01ffff00000100017c0000040042800c0001802e000600800a00000c0002800800148004"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@ipv4_newroute={0xb4, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x90, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x8c, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x88, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x84, 0x3, "8fd498249133df36da6ee26a0cb5e066cc93ceb97a0a6b2de0bd82ffa9cbedc9120835e49ed02221ad4f0227c6a5891da80000000000000000afb3733aca71f72d9a5a1ba439e355a0a184e3cb8256125a995964771b66f17cf2284697e095dbc322d0df13e673132e2542a4f9b34c29123004ea8acc955eacde969eb114a603"}}}}]}, 0xb4}}, 0xa890) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2d, &(0x7f0000000180), 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) close(0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) add_key(&(0x7f0000000200)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000740), 0x0) io_uring_enter(0xffffffffffffffff, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.595611517s ago: executing program 61 (id=1716): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000011480)=[{&(0x7f00000000c0)=""/186, 0xba}], 0x1, 0x7c, 0x100005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x20}}, 0x24000811) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = fsopen(&(0x7f0000000000)='smb3\x00', 0x1) fstat(r3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0xa, &(0x7f00000003c0)=[{0x6, 0x87, 0x6, 0x6}, {0x401, 0x3, 0xc}, {0xfff8, 0x3, 0x5, 0x3}, {0x3, 0x3, 0x8, 0x7}, {0x0, 0x0, 0xfa, 0x7}, {0x3413, 0x55, 0xa, 0x6}, {0x3ff, 0xfe}, {0x80, 0x80, 0x80, 0xffff3fba}, {0x2, 0x7, 0x7, 0x92ef}, {0x2, 0x4, 0x9, 0x2}]}, 0x10) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e0007012a01ffff00000100017c0000040042800c0001802e000600800a00000c0002800800148004"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@ipv4_newroute={0xb4, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x90, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x8c, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x88, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x84, 0x3, "8fd498249133df36da6ee26a0cb5e066cc93ceb97a0a6b2de0bd82ffa9cbedc9120835e49ed02221ad4f0227c6a5891da80000000000000000afb3733aca71f72d9a5a1ba439e355a0a184e3cb8256125a995964771b66f17cf2284697e095dbc322d0df13e673132e2542a4f9b34c29123004ea8acc955eacde969eb114a603"}}}}]}, 0xb4}}, 0xa890) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2d, &(0x7f0000000180), 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) close(0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) add_key(&(0x7f0000000200)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000740), 0x0) io_uring_enter(0xffffffffffffffff, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.59064271s ago: executing program 8 (id=1719): openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2004064, &(0x7f0000000000)=ANY=[]) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001f6c0)=""/102400, 0x19000) ioprio_set$pid(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsopen(0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000500)={0x6, 0x0, [{0x0, 0x1, 0x0, 0x0, @irqchip={0x3}}, {0x80000001, 0x3, 0x1, 0x0, @irqchip={0x7, 0x1}}, {0x5d400000, 0x3, 0x1, 0x0, @adapter={0xd, 0x5d889c2, 0x3, 0x3, 0x2}}, {0x80000000, 0x2, 0x1, 0x0, @adapter={0x6, 0x6, 0x4, 0x5dd, 0x2}}, {0x1, 0x1, 0x1, 0x0, @msi={0x2, 0x7fff, 0x9, 0x1}}, {0x8, 0x6, 0x0, 0x0, @irqchip={0x4, 0x6}}]}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x424}, 0x1, 0x0, 0x0, 0x408c0}, 0x40001) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) syz_pidfd_open(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 16.128195073s ago: executing program 8 (id=1720): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000011480)=[{&(0x7f00000000c0)=""/186, 0xba}], 0x1, 0x7c, 0x100005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x20}}, 0x24000811) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = fsopen(&(0x7f0000000000)='smb3\x00', 0x1) fstat(r3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0xa, &(0x7f00000003c0)=[{0x6, 0x87, 0x6, 0x6}, {0x401, 0x3, 0xc}, {0xfff8, 0x3, 0x5, 0x3}, {0x3, 0x3, 0x8, 0x7}, {0x0, 0x0, 0xfa, 0x7}, {0x3413, 0x55, 0xa, 0x6}, {0x3ff, 0xfe}, {0x80, 0x80, 0x80, 0xffff3fba}, {0x2, 0x7, 0x7, 0x92ef}, {0x2, 0x4, 0x9, 0x2}]}, 0x10) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e0007012a01ffff00000100017c0000040042800c0001802e000600800a00000c0002800800148004"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@ipv4_newroute={0xb4, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x90, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x8c, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x88, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x84, 0x3, "8fd498249133df36da6ee26a0cb5e066cc93ceb97a0a6b2de0bd82ffa9cbedc9120835e49ed02221ad4f0227c6a5891da80000000000000000afb3733aca71f72d9a5a1ba439e355a0a184e3cb8256125a995964771b66f17cf2284697e095dbc322d0df13e673132e2542a4f9b34c29123004ea8acc955eacde969eb114a603"}}}}]}, 0xb4}}, 0xa890) syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2d, &(0x7f0000000180), 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) add_key(&(0x7f0000000200)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.693915483s ago: executing program 8 (id=1727): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040)) 12.851758067s ago: executing program 62 (id=1727): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040)) 6.91292224s ago: executing program 5 (id=1738): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0x0, 0x44094) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f0000000100), &(0x7f0000000140), 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) write(r6, &(0x7f0000000180)="01010101", 0x4) close(r6) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r7) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f00000003c0), &(0x7f00000002c0), 0x100) fchmodat(r7, &(0x7f0000000300)='./file0\x00', 0x1cd) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f0000000340), &(0x7f0000000380), 0x0) 5.826422796s ago: executing program 5 (id=1739): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_SYNC_REGS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)) 5.605749625s ago: executing program 5 (id=1740): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r2, 0x300, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r6, &(0x7f0000000540)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0xfffe, 0x2, 0x0, 0x3, {0xa, 0x4e22, 0x20064a, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8}}}, 0x80, 0x0}, 0x10040800) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) openat$zero(0xffffffffffffff9c, 0x0, 0x660bbb32c8e0e6fb, 0x0) bind$802154_dgram(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000040004800800020001000000080001"], 0x184}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2100, 0x20) fchown(r8, 0x0, 0xee01) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000200)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000240)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000180)={r9, 0xa0, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x1}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e24, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x1, @mcast2, 0x3}]}, &(0x7f00000001c0)=0x10) 4.73680518s ago: executing program 5 (id=1741): prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000000) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x80008, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000007"], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) kcmp(r1, r2, 0x6, r7, r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@empty}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 4.419933576s ago: executing program 7 (id=1742): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd38\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) dup(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r6, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x4, 0xf, 0xbb, "4aa2940d2d313d8d264b584544b7862882233de393f56bb194a7449c71fc860dd452af2bb614ebe0bf6a373e9e4709b84800ec2b6f8ab865c3aac026c30601", 0x8}, 0x60) socket$phonet_pipe(0x23, 0x5, 0x2) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r9, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 3.326667496s ago: executing program 7 (id=1743): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x6, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4004550c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@bridge_setlink={0x15, 0x13, 0x1, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x10, 0x12120}, [@IFLA_AF_SPEC={0x4}, @IFLA_VF_PORTS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x811}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f4", 0x52, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000010c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x25, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0xffe2) openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) 2.565966884s ago: executing program 5 (id=1744): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000001004e23,rq=0x0000000000000009,\x00']) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757894aae1f081bb3d43ea2a73059a9e69b870ddb236f05414f61c36ee85c0c60fd29248f31a773fd58f37bfca27b2688a798e23ab2922a28e27c82910216bc5543542a1dc113cc527d18bd7da64"], 0xa) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd8, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:random_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ifconfig_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0xd8}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="10d40000a58b542a240012800e00010069703665727370616e000000100002800400120008000d0007"], 0x44}, 0x1, 0x0, 0x0, 0x40890}, 0x20000840) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 1.505529936s ago: executing program 5 (id=1745): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}], 0x1, 0x54) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, 0x0) 1.430076231s ago: executing program 7 (id=1746): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x7b9, &(0x7f0000004880)=0x2) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x14, 0x52, 0xa05, 0x0, 0x25dfdbfd, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x0) 1.18977837s ago: executing program 7 (id=1747): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_SYNC_REGS(r2, 0x4068aea3, &(0x7f0000000040)) 1.017957889s ago: executing program 7 (id=1748): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r2, 0x300, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r6, &(0x7f0000000540)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0xfffe, 0x2, 0x0, 0x3, {0xa, 0x4e22, 0x20064a, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8}}}, 0x80, 0x0}, 0x10040800) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) openat$zero(0xffffffffffffff9c, 0x0, 0x660bbb32c8e0e6fb, 0x0) bind$802154_dgram(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000040004800800020001000000080001"], 0x184}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2100, 0x20) fchown(r8, 0x0, 0xee01) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000200)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000240)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000180)={r9, 0xa0, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x1}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e24, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x1, @mcast2, 0x3}]}, &(0x7f00000001c0)=0x10) 0s ago: executing program 7 (id=1749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) r7 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4048aecb, &(0x7f0000000280)={0x6, 0x0, [{0x1, 0x4, 0x6, 0x8000, 0x27, 0x7, 0x9}, {0xb, 0x8, 0x3, 0x3ff, 0x7ffffdff, 0x8003, 0xffff}, {0x80000019, 0xe5f, 0x0, 0x7, 0xdf3, 0x6, 0x80000001}, {0x80000000, 0x2bb, 0x0, 0xd, 0xa, 0x7fd, 0x400}, {0x80000019, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x80000001, 0x8000002, 0x3, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0x800bd, 0x1, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r13, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x4) kernel console output (not intermixed with test programs): ck nbd5: Possible stuck request ffff888027a60000: control (read@0,1024B). Runtime 30 seconds [ 600.224132][T11075] block nbd5: Possible stuck request ffff888027a60200: control (read@1024,1024B). Runtime 30 seconds [ 600.235190][T11075] block nbd5: Possible stuck request ffff888027a60400: control (read@2048,1024B). Runtime 30 seconds [ 600.246128][T11075] block nbd5: Possible stuck request ffff888027a60600: control (read@3072,1024B). Runtime 30 seconds [ 600.267327][ T10] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 600.295211][ T10] usb 1-1: config 0 has no interface number 0 [ 600.316648][ T10] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 600.354150][ T10] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 600.354267][ T5805] Bluetooth: hci2: command 0x0406 tx timeout [ 600.424152][ T10] usb 1-1: config 0 interface 11 has no altsetting 0 [ 600.430862][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b [ 600.444327][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.457410][ T10] usb 1-1: config 0 descriptor?? [ 600.510403][T14194] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 600.606966][ T10] keyspan 1-1:0.11: Keyspan 4 port adapter converter detected [ 600.778854][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 600.790574][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 600.833921][ T10] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 600.866783][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 600.880161][T14221] FAULT_INJECTION: forcing a failure. [ 600.880161][T14221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.975123][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 600.979829][T14221] CPU: 1 UID: 0 PID: 14221 Comm: syz.2.1356 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.979856][T14221] Tainted: [L]=SOFTLOCKUP [ 600.979861][T14221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 600.979870][T14221] Call Trace: [ 600.979876][T14221] [ 600.979882][T14221] dump_stack_lvl+0x100/0x190 [ 600.979912][T14221] should_fail_ex.cold+0x5/0xa [ 600.979932][T14221] _copy_from_iter+0x1f4/0x1690 [ 600.979958][T14221] ? __asan_memset+0x23/0x50 [ 600.979979][T14221] ? __pfx__copy_from_iter+0x10/0x10 [ 600.980000][T14221] ? __pfx___alloc_skb+0x10/0x10 [ 600.980024][T14221] netlink_sendmsg+0x808/0xda0 [ 600.980048][T14221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.980065][T14221] ? __might_fault+0xc0/0x140 [ 600.980093][T14221] ____sys_sendmsg+0xa54/0xc30 [ 600.980115][T14221] ? __pfx_____sys_sendmsg+0x10/0x10 [ 600.980144][T14221] ___sys_sendmsg+0x190/0x1e0 [ 600.980167][T14221] ? __pfx____sys_sendmsg+0x10/0x10 [ 600.980213][T14221] __sys_sendmsg+0x170/0x220 [ 600.980229][T14221] ? __pfx___sys_sendmsg+0x10/0x10 [ 600.980259][T14221] do_syscall_64+0x106/0xf80 [ 600.980275][T14221] ? clear_bhb_loop+0x40/0x90 [ 600.980294][T14221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.980310][T14221] RIP: 0033:0x7f4a4db9c799 [ 600.980323][T14221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.980338][T14221] RSP: 002b:00007f4a4e98e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.980354][T14221] RAX: ffffffffffffffda RBX: 00007f4a4de15fa0 RCX: 00007f4a4db9c799 [ 600.980364][T14221] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000007 [ 600.980373][T14221] RBP: 00007f4a4e98e090 R08: 0000000000000000 R09: 0000000000000000 [ 600.980382][T14221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.980391][T14221] R13: 00007f4a4de16038 R14: 00007f4a4de15fa0 R15: 00007fff60f2ae18 [ 600.980412][T14221] [ 601.244555][ T10] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 601.988024][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 602.071954][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 602.179732][ T10] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 602.257354][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 602.306275][ T10] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 602.350098][ T10] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 602.505904][T14240] netlink: 'syz.7.1359': attribute type 2 has an invalid length. [ 603.603802][ T10] usb 1-1: USB disconnect, device number 24 [ 603.625295][ T10] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 603.660519][ T10] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 603.739736][ T10] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 603.786725][ T10] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 603.787472][ T10] keyspan 1-1:0.11: device disconnected [ 604.732263][T14271] netlink: 348 bytes leftover after parsing attributes in process `syz.7.1364'. [ 605.738803][ T12] bridge_slave_1: left allmulticast mode [ 605.800562][ T12] bridge_slave_1: left promiscuous mode [ 606.052825][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.531512][T14292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.555798][T14292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.657504][T14293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.724510][ T2628] block nbd2: Possible stuck request ffff8880279a8000: control (read@0,1024B). Runtime 90 seconds [ 606.736278][T14286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.747600][ T2628] block nbd2: Possible stuck request ffff8880279a8200: control (read@1024,1024B). Runtime 90 seconds [ 606.758865][ T2628] block nbd2: Possible stuck request ffff8880279a8400: control (read@2048,1024B). Runtime 90 seconds [ 606.770639][ T2628] block nbd2: Possible stuck request ffff8880279a8600: control (read@3072,1024B). Runtime 90 seconds [ 606.786394][ T12] bridge_slave_0: left allmulticast mode [ 606.792152][ T12] bridge_slave_0: left promiscuous mode [ 606.798116][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.023532][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 607.034374][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 607.054646][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 607.070858][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 607.106603][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 607.365982][T14303] nbd6: detected capacity change from 0 to 63 [ 607.433894][T14311] block nbd0: NBD_DISCONNECT [ 607.499210][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.535517][T14311] block nbd0: Send disconnect failed -32 [ 607.604413][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.642738][ T12] bond0 (unregistering): Released all slaves [ 607.781534][ T5805] block nbd6: Receive control failed (result -104) [ 607.927721][T14276] syzkaller0: entered promiscuous mode [ 607.933208][T14276] syzkaller0: entered allmulticast mode [ 608.812180][T14325] overlayfs: failed lookup in lower (newroot/71, name='bus', err=-40): overlapping layers [ 609.164167][ T5805] Bluetooth: hci5: command tx timeout [ 611.040250][T14334] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1375'. [ 611.234183][ T5805] Bluetooth: hci5: command tx timeout [ 612.478344][T14353] netlink: 'syz.0.1378': attribute type 2 has an invalid length. [ 612.950540][ T30] audit: type=1400 audit(1772370519.696:699): avc: denied { connect } for pid=14361 comm="syz.1.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 612.970715][T14364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8480 sclass=netlink_route_socket pid=14364 comm=syz.7.1379 [ 613.012627][T14299] chnl_net:caif_netlink_parms(): no params data found [ 613.080991][T14364] ISOFS: Unable to identify CD-ROM format. [ 613.315314][ T5805] Bluetooth: hci5: command tx timeout [ 613.325253][ T30] audit: type=1400 audit(1772370520.066:700): avc: denied { accept } for pid=14368 comm="syz.2.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 613.478876][ T30] audit: type=1400 audit(1772370520.106:701): avc: denied { shutdown } for pid=14361 comm="syz.1.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 613.510614][T14378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.548187][T14378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.647134][T14378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.656461][T14378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.744801][ T12] hsr_slave_0: left promiscuous mode [ 613.764187][ T5809] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 613.775821][ T12] hsr_slave_1: left promiscuous mode [ 613.821640][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.861354][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.882379][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.898557][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.014184][ T12] veth1_macvtap: left promiscuous mode [ 614.040147][ T12] veth0_macvtap: left promiscuous mode [ 614.059599][ T12] veth1_vlan: left promiscuous mode [ 614.074374][ T12] veth0_vlan: left promiscuous mode [ 614.855115][T14402] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1387'. [ 615.338458][ T12] team0 (unregistering): Port device team_slave_1 removed [ 615.372225][ T12] team0 (unregistering): Port device team_slave_0 removed [ 615.396424][ T5812] Bluetooth: hci5: command tx timeout [ 615.720025][ T5812] Bluetooth: hci0: command 0x0406 tx timeout [ 615.906628][T14299] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.948543][T14299] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.973328][T14299] bridge_slave_0: entered allmulticast mode [ 616.023112][T14299] bridge_slave_0: entered promiscuous mode [ 616.049756][T14299] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.072555][T14299] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.084216][ T5805] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 616.092941][T14299] bridge_slave_1: entered allmulticast mode [ 616.116347][T14299] bridge_slave_1: entered promiscuous mode [ 616.279776][T14299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.311581][T14299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.353622][T14299] team0: Port device team_slave_0 added [ 616.362211][T14299] team0: Port device team_slave_1 added [ 616.392234][T14299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.407825][T14299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.443825][T14299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.458870][T14299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.466055][T14299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.494940][ T5915] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 616.495800][T14299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.555379][ T5882] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 616.585555][T14299] hsr_slave_0: entered promiscuous mode [ 616.591163][ T30] audit: type=1400 audit(1772370523.346:702): avc: denied { getopt } for pid=14426 comm="syz.2.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 616.612185][T14299] hsr_slave_1: entered promiscuous mode [ 616.620180][T14299] debugfs: 'hsr0' already exists in 'hsr' [ 616.626420][T14299] Cannot create hsr debugfs directory [ 616.656972][ T5915] usb 8-1: Using ep0 maxpacket: 16 [ 616.668425][ T5915] usb 8-1: config 0 has an invalid interface number: 134 but max is 0 [ 616.684171][ T5915] usb 8-1: config 0 has no interface number 0 [ 616.699457][ T5915] usb 8-1: config 0 interface 134 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 616.717374][ T5882] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 616.723177][ T5915] usb 8-1: config 0 interface 134 has no altsetting 0 [ 616.726791][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.739258][ T5915] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 616.751597][ T5915] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.755518][ T5882] usb 2-1: Product: syz [ 616.762752][ T5915] usb 8-1: Product: syz [ 616.769664][ T5882] usb 2-1: Manufacturer: syz [ 616.772594][ T5915] usb 8-1: Manufacturer: syz [ 616.786195][ T5915] usb 8-1: SerialNumber: syz [ 616.803940][ T5915] usb 8-1: config 0 descriptor?? [ 616.806926][ T5882] usb 2-1: SerialNumber: syz [ 616.831640][ T5882] usb 2-1: config 0 descriptor?? [ 616.848678][ T5882] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 029 [ 616.953349][ T30] audit: type=1400 audit(1772370523.706:703): avc: denied { ioctl } for pid=14450 comm="syz.0.1395" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 617.008573][ T30] audit: type=1400 audit(1772370523.746:704): avc: denied { ioctl } for pid=14450 comm="syz.0.1395" path="socket:[58287]" dev="sockfs" ino=58287 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 617.476390][T14299] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 617.519671][ T5882] i2c i2c-1: failure reading functionality [ 617.534900][ T5882] i2c i2c-1: connected i2c-tiny-usb device [ 617.547656][T14299] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 617.563753][ T5882] usb 2-1: USB disconnect, device number 29 [ 617.615990][T14299] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 617.664894][T14299] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 617.922915][T14299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.984557][T14299] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.999364][T14275] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.006544][T14275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.028656][ T8510] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.035810][ T8510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.480557][T14299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 619.063274][T14505] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1399'. [ 619.207703][ T5915] ftdi_sio 8-1:0.134: FTDI USB Serial Device converter detected [ 619.221630][T14299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.258225][ T5915] usb 8-1: Detected FT-X [ 619.271617][ T5915] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 619.299617][ T5915] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 619.326911][ T5915] ftdi_sio 8-1:0.134: GPIO initialisation failed: -71 [ 619.357489][ T5915] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 619.403782][ T5915] usb 8-1: USB disconnect, device number 17 [ 619.424438][ T5915] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 619.441601][ T5915] ftdi_sio 8-1:0.134: device disconnected [ 619.546533][T14513] netlink: 348 bytes leftover after parsing attributes in process `syz.7.1402'. [ 620.136898][T14526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1401'. [ 620.284910][T14527] FAULT_INJECTION: forcing a failure. [ 620.284910][T14527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.370057][T14527] CPU: 0 UID: 0 PID: 14527 Comm: syz.0.1403 Tainted: G L syzkaller #0 PREEMPT(full) [ 620.370087][T14527] Tainted: [L]=SOFTLOCKUP [ 620.370093][T14527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 620.370103][T14527] Call Trace: [ 620.370109][T14527] [ 620.370116][T14527] dump_stack_lvl+0x100/0x190 [ 620.370149][T14527] should_fail_ex.cold+0x5/0xa [ 620.370171][T14527] _copy_to_user+0x32/0xd0 [ 620.370199][T14527] simple_read_from_buffer+0xcb/0x170 [ 620.370228][T14527] proc_fail_nth_read+0x1af/0x230 [ 620.370253][T14527] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 620.370278][T14527] ? rw_verify_area+0xce/0x6d0 [ 620.370300][T14527] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 620.370323][T14527] vfs_read+0x1e4/0xb30 [ 620.370353][T14527] ? __pfx_vfs_read+0x10/0x10 [ 620.370376][T14527] ? __fget_files+0x215/0x3d0 [ 620.370401][T14527] ? __fget_files+0x21f/0x3d0 [ 620.370427][T14527] ksys_read+0x12a/0x250 [ 620.370452][T14527] ? __pfx_ksys_read+0x10/0x10 [ 620.370486][T14527] do_syscall_64+0x106/0xf80 [ 620.370504][T14527] ? clear_bhb_loop+0x40/0x90 [ 620.370526][T14527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.370549][T14527] RIP: 0033:0x7f5a2175cfce [ 620.370564][T14527] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 620.370581][T14527] RSP: 002b:00007f5a22635fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 620.370598][T14527] RAX: ffffffffffffffda RBX: 00007f5a226366c0 RCX: 00007f5a2175cfce [ 620.370609][T14527] RDX: 000000000000000f RSI: 00007f5a226360a0 RDI: 0000000000000004 [ 620.370619][T14527] RBP: 00007f5a22636090 R08: 0000000000000000 R09: 0000000000000000 [ 620.370630][T14527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.370641][T14527] R13: 00007f5a21a16038 R14: 00007f5a21a15fa0 R15: 00007ffec2c7e8c8 [ 620.370665][T14527] [ 620.662895][T14299] veth0_vlan: entered promiscuous mode [ 620.677711][T14299] veth1_vlan: entered promiscuous mode [ 620.729531][T14299] veth0_macvtap: entered promiscuous mode [ 620.738728][T14299] veth1_macvtap: entered promiscuous mode [ 620.751235][T14299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.761651][T14299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.780235][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.103128][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.112127][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.177995][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.393757][T11075] block nbd1: Possible stuck request ffff888027948000: control (read@0,1024B). Runtime 150 seconds [ 621.393881][ T2628] block nbd3: Possible stuck request ffff8880279d8000: control (read@0,1024B). Runtime 90 seconds [ 621.405621][T11075] block nbd1: Possible stuck request ffff888027948200: control (read@1024,1024B). Runtime 150 seconds [ 621.426870][ T5882] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 621.434531][T11075] block nbd1: Possible stuck request ffff888027948400: control (read@2048,1024B). Runtime 150 seconds [ 621.445583][T11075] block nbd1: Possible stuck request ffff888027948600: control (read@3072,1024B). Runtime 150 seconds [ 621.455740][ T2628] block nbd3: Possible stuck request ffff8880279d8200: control (read@1024,1024B). Runtime 90 seconds [ 621.467914][ T2628] block nbd3: Possible stuck request ffff8880279d8400: control (read@2048,1024B). Runtime 90 seconds [ 621.502014][T14544] orangefs_mount: mount request failed with -4 [ 621.505201][ T2628] block nbd3: Possible stuck request ffff8880279d8600: control (read@3072,1024B). Runtime 90 seconds [ 621.634343][ T5882] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.661827][ T5882] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 621.736570][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.737716][ T5882] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 621.752138][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.769573][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 621.819768][ T5882] usb 1-1: Product: syz [ 621.841302][ T5882] usb 1-1: Manufacturer: syz [ 621.857447][ T5882] usb 1-1: SerialNumber: syz [ 621.869774][T14275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.884389][T14275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.890384][ T5882] usb 1-1: config 0 descriptor?? [ 622.065764][T14562] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1368'. [ 622.189442][ T10] usb 1-1: USB disconnect, device number 26 [ 623.936484][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.943443][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.631659][T14603] FAULT_INJECTION: forcing a failure. [ 624.631659][T14603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.687802][T14603] CPU: 0 UID: 0 PID: 14603 Comm: syz.0.1416 Tainted: G L syzkaller #0 PREEMPT(full) [ 624.687833][T14603] Tainted: [L]=SOFTLOCKUP [ 624.687839][T14603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 624.687850][T14603] Call Trace: [ 624.687855][T14603] [ 624.687862][T14603] dump_stack_lvl+0x100/0x190 [ 624.687894][T14603] should_fail_ex.cold+0x5/0xa [ 624.687917][T14603] _copy_from_iter+0x1f4/0x1690 [ 624.687946][T14603] ? __asan_memset+0x23/0x50 [ 624.687969][T14603] ? __pfx__copy_from_iter+0x10/0x10 [ 624.687993][T14603] ? __pfx___alloc_skb+0x10/0x10 [ 624.688020][T14603] netlink_sendmsg+0x808/0xda0 [ 624.688046][T14603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.688066][T14603] ? __might_fault+0xc0/0x140 [ 624.688098][T14603] ____sys_sendmsg+0xa54/0xc30 [ 624.688123][T14603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.688157][T14603] ___sys_sendmsg+0x190/0x1e0 [ 624.688182][T14603] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.688236][T14603] __sys_sendmsg+0x170/0x220 [ 624.688254][T14603] ? __pfx___sys_sendmsg+0x10/0x10 [ 624.688288][T14603] do_syscall_64+0x106/0xf80 [ 624.688307][T14603] ? clear_bhb_loop+0x40/0x90 [ 624.688335][T14603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.688353][T14603] RIP: 0033:0x7f5a2179c799 [ 624.688368][T14603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.688385][T14603] RSP: 002b:00007f5a22636028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.688401][T14603] RAX: ffffffffffffffda RBX: 00007f5a21a15fa0 RCX: 00007f5a2179c799 [ 624.688412][T14603] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 624.688423][T14603] RBP: 00007f5a22636090 R08: 0000000000000000 R09: 0000000000000000 [ 624.688433][T14603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.688443][T14603] R13: 00007f5a21a16038 R14: 00007f5a21a15fa0 R15: 00007ffec2c7e8c8 [ 624.688464][T14603] [ 625.064244][ T5817] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 625.627950][ T5817] usb 6-1: Using ep0 maxpacket: 32 [ 625.641348][ T5817] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 625.666876][ T5817] usb 6-1: config 0 has no interface number 0 [ 626.021528][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1417'. [ 626.145633][ T5817] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 626.199167][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.232824][ T5817] usb 6-1: Product: syz [ 626.266670][ T5817] usb 6-1: Manufacturer: syz [ 626.271314][ T5817] usb 6-1: SerialNumber: syz [ 626.423565][ T5817] usb 6-1: config 0 descriptor?? [ 626.437236][ T2628] block nbd4: Possible stuck request ffff888027a48000: control (read@0,1024B). Runtime 90 seconds [ 626.448261][ T2628] block nbd4: Possible stuck request ffff888027a48200: control (read@1024,1024B). Runtime 90 seconds [ 626.468662][ T2628] block nbd4: Possible stuck request ffff888027a48400: control (read@2048,1024B). Runtime 90 seconds [ 626.480527][ T2628] block nbd4: Possible stuck request ffff888027a48600: control (read@3072,1024B). Runtime 90 seconds [ 626.495909][ T5817] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 626.983931][T14630] FAULT_INJECTION: forcing a failure. [ 626.983931][T14630] name failslab, interval 1, probability 0, space 0, times 0 [ 626.997912][T14630] CPU: 0 UID: 0 PID: 14630 Comm: syz.0.1422 Tainted: G L syzkaller #0 PREEMPT(full) [ 626.997943][T14630] Tainted: [L]=SOFTLOCKUP [ 626.997949][T14630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 626.997959][T14630] Call Trace: [ 626.997966][T14630] [ 626.997973][T14630] dump_stack_lvl+0x100/0x190 [ 626.998007][T14630] should_fail_ex.cold+0x5/0xa [ 626.998030][T14630] should_failslab+0xc2/0x120 [ 626.998059][T14630] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 626.998083][T14630] ? anon_vma_clone+0x2bd/0xc70 [ 626.998107][T14630] anon_vma_clone+0x2bd/0xc70 [ 626.998135][T14630] __split_vma+0x51f/0xd90 [ 626.998162][T14630] ? __pfx___split_vma+0x10/0x10 [ 626.998189][T14630] ? __pfx___vma_start_write+0x10/0x10 [ 626.998209][T14630] ? __pfx_mas_prev+0x10/0x10 [ 626.998236][T14630] vms_gather_munmap_vmas+0x39f/0x1500 [ 626.998265][T14630] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 626.998293][T14630] ? mas_walk+0x6ef/0x9b0 [ 626.998318][T14630] __mmap_region+0x492/0x29e0 [ 626.998342][T14630] ? rcu_is_watching+0x12/0xc0 [ 626.998364][T14630] ? __pfx___mmap_region+0x10/0x10 [ 626.998390][T14630] ? __lock_acquire+0x4a5/0x2630 [ 626.998418][T14630] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 626.998449][T14630] ? __lock_acquire+0x4a5/0x2630 [ 626.998491][T14630] ? lock_acquire+0x1cf/0x380 [ 626.998517][T14630] ? find_held_lock+0x2b/0x80 [ 626.998549][T14630] ? rcu_is_watching+0x12/0xc0 [ 626.998568][T14630] ? trace_sched_exit_tp+0x13a/0x180 [ 626.998635][T14630] mmap_region+0x30a/0x3e0 [ 626.998664][T14630] do_mmap+0xc63/0x12f0 [ 626.998687][T14630] ? __pfx_do_mmap+0x10/0x10 [ 626.998704][T14630] ? __pfx_down_write_killable+0x10/0x10 [ 626.998732][T14630] vm_mmap_pgoff+0x29e/0x470 [ 626.998755][T14630] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 626.998772][T14630] ? __fget_files+0x215/0x3d0 [ 626.998794][T14630] ? __fget_files+0x21f/0x3d0 [ 626.998816][T14630] ksys_mmap_pgoff+0x3c8/0x650 [ 626.998836][T14630] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 626.998851][T14630] ? fput+0x79/0x100 [ 626.998874][T14630] ? ksys_write+0x1ac/0x250 [ 626.998900][T14630] ? __pfx_ksys_write+0x10/0x10 [ 626.998927][T14630] __x64_sys_mmap+0x125/0x190 [ 626.998948][T14630] do_syscall_64+0x106/0xf80 [ 626.998966][T14630] ? clear_bhb_loop+0x40/0x90 [ 626.998988][T14630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.999006][T14630] RIP: 0033:0x7f5a2179c799 [ 626.999021][T14630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.999038][T14630] RSP: 002b:00007f5a225f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 626.999056][T14630] RAX: ffffffffffffffda RBX: 00007f5a21a16180 RCX: 00007f5a2179c799 [ 626.999067][T14630] RDX: 000000000000000a RSI: 0000000000b36000 RDI: 0000200000000000 [ 626.999078][T14630] RBP: 00007f5a225f4090 R08: 0000000000000008 R09: 0000000000000000 [ 626.999088][T14630] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000001 [ 626.999099][T14630] R13: 00007f5a21a16218 R14: 00007f5a21a16180 R15: 00007ffec2c7e8c8 [ 626.999123][T14630] [ 627.321899][T14627] orangefs_mount: mount request failed with -4 [ 627.407864][ T5817] usb 6-1: selecting invalid altsetting 1 [ 627.413642][ T5817] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 627.629569][T14633] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 627.708815][ T5817] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 627.808970][T14633] CIFS mount error: No usable UNC path provided in device string! [ 627.808970][T14633] [ 627.829474][ T5817] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 627.922177][T14633] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 628.224453][ T5817] usb 6-1: media controller created [ 628.245218][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 628.494932][ T5817] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 628.714466][ T5809] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 628.946998][ T5817] zl10353_read_register: readreg error (reg=127, ret==-71) [ 628.955029][ T5817] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 629.003546][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 629.090963][ T5817] usb 6-1: USB disconnect, device number 18 [ 629.201072][ T5809] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 629.254992][ T5809] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 629.844090][ T5809] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 629.853203][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.948570][T14640] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 629.999032][ T5809] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 630.474786][T11075] block nbd5: Possible stuck request ffff888027a60000: control (read@0,1024B). Runtime 60 seconds [ 630.485670][T11075] block nbd5: Possible stuck request ffff888027a60200: control (read@1024,1024B). Runtime 60 seconds [ 630.501059][T11075] block nbd5: Possible stuck request ffff888027a60400: control (read@2048,1024B). Runtime 60 seconds [ 630.513403][T11075] block nbd5: Possible stuck request ffff888027a60600: control (read@3072,1024B). Runtime 60 seconds [ 630.569470][T14640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.604514][T14640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.274028][T14675] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1430'. [ 631.465083][ T10] usb 1-1: USB disconnect, device number 27 [ 632.666423][T14688] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1432'. [ 633.930708][T14708] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 634.205569][ T30] audit: type=1326 audit(1772370540.746:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14698 comm="syz.7.1435" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcce3d9c799 code=0x0 [ 634.293696][T14706] orangefs_mount: mount request failed with -4 [ 634.426434][T14707] netlink: 'syz.0.1437': attribute type 2 has an invalid length. [ 635.060010][T14718] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1438'. [ 636.257891][T14729] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1442'. [ 637.314269][ T2628] block nbd2: Possible stuck request ffff8880279a8000: control (read@0,1024B). Runtime 120 seconds [ 637.326978][ T2628] block nbd2: Possible stuck request ffff8880279a8200: control (read@1024,1024B). Runtime 120 seconds [ 637.338107][ T2628] block nbd2: Possible stuck request ffff8880279a8400: control (read@2048,1024B). Runtime 120 seconds [ 637.349116][ T2628] block nbd2: Possible stuck request ffff8880279a8600: control (read@3072,1024B). Runtime 120 seconds [ 637.601326][T14751] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1446'. [ 638.004107][T11075] block nbd6: Possible stuck request ffff888027b10000: control (read@0,1024B). Runtime 30 seconds [ 638.016823][T11075] block nbd6: Possible stuck request ffff888027b10200: control (read@1024,1024B). Runtime 30 seconds [ 638.475192][T11075] block nbd6: Possible stuck request ffff888027b10400: control (read@2048,1024B). Runtime 30 seconds [ 638.487445][T11075] block nbd6: Possible stuck request ffff888027b10600: control (read@3072,1024B). Runtime 30 seconds [ 638.676332][T14765] orangefs_mount: mount request failed with -4 [ 638.910059][ T30] audit: type=1400 audit(1772370545.666:706): avc: denied { map } for pid=14776 comm="syz.5.1453" path="socket:[59305]" dev="sockfs" ino=59305 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 638.953834][ T30] audit: type=1400 audit(1772370545.696:707): avc: denied { read accept } for pid=14776 comm="syz.5.1453" path="socket:[59305]" dev="sockfs" ino=59305 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 638.980740][T14778] FAULT_INJECTION: forcing a failure. [ 638.980740][T14778] name failslab, interval 1, probability 0, space 0, times 0 [ 639.013158][T14778] CPU: 1 UID: 0 PID: 14778 Comm: syz.1.1451 Tainted: G L syzkaller #0 PREEMPT(full) [ 639.013187][T14778] Tainted: [L]=SOFTLOCKUP [ 639.013192][T14778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 639.013202][T14778] Call Trace: [ 639.013208][T14778] [ 639.013215][T14778] dump_stack_lvl+0x100/0x190 [ 639.013245][T14778] should_fail_ex.cold+0x5/0xa [ 639.013267][T14778] should_failslab+0xc2/0x120 [ 639.013293][T14778] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 639.013316][T14778] ? skb_clone+0x190/0x400 [ 639.013337][T14778] skb_clone+0x190/0x400 [ 639.013355][T14778] netlink_deliver_tap+0xaed/0xcc0 [ 639.013380][T14778] netlink_unicast+0x650/0x870 [ 639.013403][T14778] ? __pfx_netlink_unicast+0x10/0x10 [ 639.013431][T14778] netlink_sendmsg+0x8b0/0xda0 [ 639.013461][T14778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.013480][T14778] ? __might_fault+0xc0/0x140 [ 639.013509][T14778] ____sys_sendmsg+0xa54/0xc30 [ 639.013533][T14778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 639.013564][T14778] ___sys_sendmsg+0x190/0x1e0 [ 639.013589][T14778] ? __pfx____sys_sendmsg+0x10/0x10 [ 639.013643][T14778] __sys_sendmsg+0x170/0x220 [ 639.013662][T14778] ? __pfx___sys_sendmsg+0x10/0x10 [ 639.013695][T14778] do_syscall_64+0x106/0xf80 [ 639.013715][T14778] ? clear_bhb_loop+0x40/0x90 [ 639.013736][T14778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.013754][T14778] RIP: 0033:0x7f810979c799 [ 639.013770][T14778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.013788][T14778] RSP: 002b:00007f810a659028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.013804][T14778] RAX: ffffffffffffffda RBX: 00007f8109a16090 RCX: 00007f810979c799 [ 639.013815][T14778] RDX: 0000000020084084 RSI: 0000200000000580 RDI: 0000000000000004 [ 639.013824][T14778] RBP: 00007f810a659090 R08: 0000000000000000 R09: 0000000000000000 [ 639.013835][T14778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.013845][T14778] R13: 00007f8109a16128 R14: 00007f8109a16090 R15: 00007ffe26247ae8 [ 639.013869][T14778] [ 640.194540][T14793] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1455'. [ 640.517748][T14736] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 640.538329][T14736] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 640.623551][T14736] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 640.667048][T14736] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 640.717912][T14805] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1459'. [ 641.221558][ T5805] Bluetooth: hci4: link tx timeout [ 641.228747][ T5805] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 641.326746][T14736] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 641.333161][T14736] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 641.359536][T14736] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 641.389808][T14736] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 643.317141][ T5805] Bluetooth: hci4: command 0x0406 tx timeout [ 643.338335][T14736] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 643.347620][T14736] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 643.476952][T14736] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 643.483720][T14736] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 643.817908][ T5883] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 644.379375][ T30] audit: type=1400 audit(1772370551.136:708): avc: denied { read write } for pid=13389 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 644.654519][ T30] audit: type=1400 audit(1772370551.136:709): avc: denied { open } for pid=13389 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 644.836246][ T5883] usb 6-1: device descriptor read/all, error -71 [ 644.925131][ T30] audit: type=1400 audit(1772370551.136:710): avc: denied { ioctl } for pid=13389 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 645.785041][ T30] audit: type=1800 audit(1772370552.546:711): pid=14929 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1469" name="bus" dev="ramfs" ino=60676 res=0 errno=0 [ 647.404224][T14966] cgroup: Unknown subsys name 'uid>00000000000000000000' [ 647.464113][ T30] audit: type=1326 audit(1772370554.156:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14960 comm="syz.5.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429899c799 code=0x7ffc0000 [ 647.950982][ T30] audit: type=1326 audit(1772370554.156:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14960 comm="syz.5.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429899c799 code=0x7ffc0000 [ 648.056392][ T30] audit: type=1326 audit(1772370554.156:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14960 comm="syz.5.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f429899c799 code=0x7ffc0000 [ 648.236845][T14974] 9p: Bad value for 'wfdno' [ 648.340268][ T30] audit: type=1326 audit(1772370554.156:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14960 comm="syz.5.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429899c799 code=0x7ffc0000 [ 648.860810][ T30] audit: type=1326 audit(1772370554.156:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14960 comm="syz.5.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429899c799 code=0x7ffc0000 [ 648.918555][ T30] audit: type=1326 audit(1772370554.156:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14960 comm="syz.5.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f429899c799 code=0x7ffc0000 [ 649.176988][T14994] FAULT_INJECTION: forcing a failure. [ 649.176988][T14994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.202064][T14994] CPU: 0 UID: 0 PID: 14994 Comm: syz.5.1483 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.202089][T14994] Tainted: [L]=SOFTLOCKUP [ 649.202093][T14994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 649.202100][T14994] Call Trace: [ 649.202104][T14994] [ 649.202109][T14994] dump_stack_lvl+0x100/0x190 [ 649.202132][T14994] should_fail_ex.cold+0x5/0xa [ 649.202146][T14994] _copy_from_iter+0x1f4/0x1690 [ 649.202166][T14994] ? __asan_memset+0x23/0x50 [ 649.202181][T14994] ? __pfx__copy_from_iter+0x10/0x10 [ 649.202197][T14994] ? __pfx___alloc_skb+0x10/0x10 [ 649.202207][T14994] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 649.202226][T14994] netlink_sendmsg+0x808/0xda0 [ 649.202242][T14994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.202254][T14994] ? __might_fault+0xc0/0x140 [ 649.202274][T14994] ____sys_sendmsg+0xa54/0xc30 [ 649.202290][T14994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 649.202311][T14994] ___sys_sendmsg+0x190/0x1e0 [ 649.202328][T14994] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.202360][T14994] __sys_sendmsg+0x170/0x220 [ 649.202372][T14994] ? __pfx___sys_sendmsg+0x10/0x10 [ 649.202392][T14994] do_syscall_64+0x106/0xf80 [ 649.202404][T14994] ? clear_bhb_loop+0x40/0x90 [ 649.202418][T14994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.202430][T14994] RIP: 0033:0x7f429899c799 [ 649.202440][T14994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.202450][T14994] RSP: 002b:00007f4299871028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.202462][T14994] RAX: ffffffffffffffda RBX: 00007f4298c15fa0 RCX: 00007f429899c799 [ 649.202469][T14994] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000004 [ 649.202475][T14994] RBP: 00007f4299871090 R08: 0000000000000000 R09: 0000000000000000 [ 649.202482][T14994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.202488][T14994] R13: 00007f4298c16038 R14: 00007f4298c15fa0 R15: 00007ffc09a35a98 [ 649.202502][T14994] [ 649.692381][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 649.692400][ T30] audit: type=1400 audit(1772370556.276:730): avc: denied { ioctl } for pid=14984 comm="syz.0.1480" path="socket:[61832]" dev="sockfs" ino=61832 ioctlcmd=0x8930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 650.044163][ T10] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 650.209472][ T10] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 650.222652][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.235989][ T5915] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 650.254664][ T10] usb 8-1: Product: syz [ 650.258844][ T10] usb 8-1: Manufacturer: syz [ 650.263430][ T10] usb 8-1: SerialNumber: syz [ 650.289881][ T10] usb 8-1: config 0 descriptor?? [ 650.310856][ T10] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 018 [ 650.408360][ T5915] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 650.427513][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.530512][ T5915] usb 2-1: Product: syz [ 650.547602][ T5915] usb 2-1: Manufacturer: syz [ 650.552228][ T5915] usb 2-1: SerialNumber: syz [ 650.584476][ T5915] usb 2-1: config 0 descriptor?? [ 650.622171][ T5915] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 030 [ 650.916056][ T10] i2c i2c-1: failure reading functionality [ 650.997650][ T10] i2c i2c-1: connected i2c-tiny-usb device [ 651.016090][ T10] usb 8-1: USB disconnect, device number 18 [ 651.317096][ T5915] i2c i2c-2: connected i2c-tiny-usb device [ 651.628770][ T792] usb 2-1: USB disconnect, device number 30 [ 652.034704][ T2628] block nbd3: Possible stuck request ffff8880279d8000: control (read@0,1024B). Runtime 120 seconds [ 652.048537][ T2628] block nbd3: Possible stuck request ffff8880279d8200: control (read@1024,1024B). Runtime 120 seconds [ 652.048536][T11075] block nbd1: Possible stuck request ffff888027948000: control (read@0,1024B). Runtime 180 seconds [ 652.048572][T11075] block nbd1: Possible stuck request ffff888027948200: control (read@1024,1024B). Runtime 180 seconds [ 652.063157][ T2628] block nbd3: Possible stuck request ffff8880279d8400: control (read@2048,1024B). Runtime 120 seconds [ 652.074438][T11075] block nbd1: Possible stuck request ffff888027948400: control (read@2048,1024B). Runtime 180 seconds [ 652.081457][ T2628] block nbd3: Possible stuck request ffff8880279d8600: control (read@3072,1024B). Runtime 120 seconds [ 652.092542][T11075] block nbd1: Possible stuck request ffff888027948600: control (read@3072,1024B). Runtime 180 seconds [ 653.511106][ T5964] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 653.602717][ T5964] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 654.118610][T15074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8480 sclass=netlink_route_socket pid=15074 comm=syz.2.1492 [ 654.193293][T15074] /dev/nullb0: Can't open blockdev [ 655.387259][T15081] nbd0: detected capacity change from 0 to 63 [ 655.495476][ T5809] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 655.520588][ T5809] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 656.122189][ T5812] block nbd0: Receive control failed (result -104) [ 656.516149][ T2628] block nbd4: Possible stuck request ffff888027a48000: control (read@0,1024B). Runtime 120 seconds [ 656.539360][ T2628] block nbd4: Possible stuck request ffff888027a48200: control (read@1024,1024B). Runtime 120 seconds [ 656.565810][ T2628] block nbd4: Possible stuck request ffff888027a48400: control (read@2048,1024B). Runtime 120 seconds [ 656.592835][ T2628] block nbd4: Possible stuck request ffff888027a48600: control (read@3072,1024B). Runtime 120 seconds [ 657.268966][ T30] audit: type=1400 audit(1772370563.846:731): avc: denied { call } for pid=15119 comm="syz.0.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 659.270446][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 659.281151][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 659.293344][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 659.301231][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 659.312163][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 659.771193][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 659.795467][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 659.803227][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 659.818970][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 659.826510][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 660.006871][T15155] orangefs_mount: mount request failed with -4 [ 660.512030][ T10] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 660.744125][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 660.794715][ T10] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 660.803811][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.845679][ T10] usb 8-1: Product: syz [ 660.849896][ T10] usb 8-1: Manufacturer: syz [ 660.856298][T15153] chnl_net:caif_netlink_parms(): no params data found [ 660.874100][ T10] usb 8-1: SerialNumber: syz [ 660.906443][ T10] r8152-cfgselector 8-1: Unknown version 0x0000 [ 660.912719][ T10] r8152-cfgselector 8-1: config 0 descriptor?? [ 661.004285][T11075] block nbd5: Possible stuck request ffff888027a60000: control (read@0,1024B). Runtime 90 seconds [ 661.015411][T11075] block nbd5: Possible stuck request ffff888027a60200: control (read@1024,1024B). Runtime 90 seconds [ 661.024147][ T5817] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 661.026703][T11075] block nbd5: Possible stuck request ffff888027a60400: control (read@2048,1024B). Runtime 90 seconds [ 661.045221][T11075] block nbd5: Possible stuck request ffff888027a60600: control (read@3072,1024B). Runtime 90 seconds [ 661.162266][T15153] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.198019][ T5817] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 661.203093][T15153] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.224286][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.232331][ T5817] usb 2-1: Product: syz [ 661.263287][T15153] bridge_slave_0: entered allmulticast mode [ 661.271425][ T5817] usb 2-1: Manufacturer: syz [ 661.278444][T15153] bridge_slave_0: entered promiscuous mode [ 661.304488][ T5817] usb 2-1: SerialNumber: syz [ 661.320655][ T5817] usb 2-1: config 0 descriptor?? [ 661.335135][T15153] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.347067][ T5817] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 031 [ 661.365675][T15153] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.386495][T15153] bridge_slave_1: entered allmulticast mode [ 661.415752][T15153] bridge_slave_1: entered promiscuous mode [ 661.529204][T15153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.876363][ T5805] Bluetooth: hci0: command tx timeout [ 661.966786][T15153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.966970][ T5817] i2c i2c-1: connected i2c-tiny-usb device [ 662.091777][T15153] team0: Port device team_slave_0 added [ 662.134740][T15153] team0: Port device team_slave_1 added [ 662.234232][ T5883] usb 2-1: USB disconnect, device number 31 [ 662.373280][T15153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.393369][T15153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.544480][T15153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.690129][T15153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.698518][T15153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.798038][T15153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.987066][T15153] hsr_slave_0: entered promiscuous mode [ 663.061820][T15153] hsr_slave_1: entered promiscuous mode [ 663.080271][T15153] debugfs: 'hsr0' already exists in 'hsr' [ 663.104101][T15153] Cannot create hsr debugfs directory [ 663.497348][ T30] audit: type=1400 audit(1772370570.246:732): avc: denied { create } for pid=15224 comm="syz.1.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 663.613824][ T10] r8152-cfgselector 8-1: Unknown version 0x0000 [ 663.684538][ T10] r8152-cfgselector 8-1: bad CDC descriptors [ 663.721304][ T30] audit: type=1400 audit(1772370570.256:733): avc: denied { write } for pid=15224 comm="syz.1.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 663.761970][ T10] r8152-cfgselector 8-1: USB disconnect, device number 19 [ 663.909963][T15235] netlink: 'syz.1.1513': attribute type 2 has an invalid length. [ 663.954621][ T5805] Bluetooth: hci0: command tx timeout [ 666.263274][ T5805] Bluetooth: hci0: command tx timeout [ 666.514997][T15246] could not allocate digest TFM handle sha256-avx [ 666.723444][T15268] mkiss: ax0: crc mode is auto. [ 667.455362][ T2628] block nbd2: Possible stuck request ffff8880279a8000: control (read@0,1024B). Runtime 150 seconds [ 667.468227][ T2628] block nbd2: Possible stuck request ffff8880279a8200: control (read@1024,1024B). Runtime 150 seconds [ 667.479440][ T2628] block nbd2: Possible stuck request ffff8880279a8400: control (read@2048,1024B). Runtime 150 seconds [ 667.491627][ T2628] block nbd2: Possible stuck request ffff8880279a8600: control (read@3072,1024B). Runtime 150 seconds [ 668.037261][T11075] block nbd6: Possible stuck request ffff888027b10000: control (read@0,1024B). Runtime 60 seconds [ 668.224755][T15153] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 668.274506][ T5812] Bluetooth: hci0: command tx timeout [ 668.320632][T15153] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 668.372277][T15153] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 668.403883][T15153] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 668.410678][ T5915] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 668.486113][T11075] block nbd6: Possible stuck request ffff888027b10200: control (read@1024,1024B). Runtime 60 seconds [ 668.497225][T11075] block nbd6: Possible stuck request ffff888027b10400: control (read@2048,1024B). Runtime 60 seconds [ 668.518436][T11075] block nbd6: Possible stuck request ffff888027b10600: control (read@3072,1024B). Runtime 60 seconds [ 668.574349][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 668.597281][ T5915] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 668.615834][ T5915] usb 2-1: config 0 has no interface number 0 [ 668.643968][ T5915] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 668.658090][T15153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.670232][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.736244][T15314] netlink: 'syz.0.1527': attribute type 2 has an invalid length. [ 669.002634][T15153] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.120739][ T8511] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.127932][ T8511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.330172][ T8511] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.337337][ T8511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.515211][ T5915] usb 2-1: Product: syz [ 669.519430][ T5915] usb 2-1: Manufacturer: syz [ 669.528904][ T5915] usb 2-1: SerialNumber: syz [ 669.555017][ T5915] usb 2-1: config 0 descriptor?? [ 669.570717][ T5915] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 669.758487][T15320] netlink: 4236 bytes leftover after parsing attributes in process `syz.7.1529'. [ 669.779949][ T5915] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 669.836043][ T5915] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 669.978468][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 670.388582][T15333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1523'. [ 670.468274][ T30] audit: type=1400 audit(1772370577.226:734): avc: denied { connect } for pid=15294 comm="syz.1.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 670.820739][T15153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.871895][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 670.872140][ T5808] usb 2-1: USB disconnect, device number 32 [ 670.928954][ T5808] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 670.975224][ T5808] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 670.998891][ T5808] quatech2 2-1:0.51: device disconnected [ 671.389183][T15153] veth0_vlan: entered promiscuous mode [ 671.428186][T15153] veth1_vlan: entered promiscuous mode [ 671.472679][T15153] veth0_macvtap: entered promiscuous mode [ 672.584462][T15153] veth1_macvtap: entered promiscuous mode [ 672.678278][T15391] SELinux: truncated policydb string identifier [ 672.694281][T15391] SELinux: failed to load policy [ 672.747349][T15153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.103570][T15153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.177180][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.224467][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.233218][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.284323][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.741914][ T6227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.769644][ T6227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.850515][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.859493][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.107579][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.216471][T15459] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1556'. [ 675.649961][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.870682][ T30] audit: type=1400 audit(1772370582.626:735): avc: denied { connect } for pid=15466 comm="syz.0.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 676.010939][ T30] audit: type=1400 audit(1772370582.766:736): avc: denied { write } for pid=15466 comm="syz.0.1561" path="socket:[63923]" dev="sockfs" ino=63923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 676.395146][ T9045] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 676.411474][ T30] audit: type=1400 audit(1772370583.166:737): avc: denied { listen } for pid=15482 comm="syz.1.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 676.623819][ T9045] usb 1-1: Using ep0 maxpacket: 16 [ 676.673322][T15488] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1560'. [ 676.708939][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.719762][ T9045] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.847095][ T9045] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.910574][ T9045] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 676.938574][ T9045] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.966697][ T9045] usb 1-1: config 0 descriptor?? [ 677.073752][ T30] audit: type=1400 audit(1772370583.826:738): avc: denied { mounton } for pid=15490 comm="syz.1.1565" path="/proc/429/cgroup" dev="proc" ino=63952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 677.390187][ T9045] hid (null): nested delimiters [ 677.410907][ T9045] kye 0003:0458:5016.000B: control desc unexpectedly large [ 677.449150][ T9045] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.000B/input/input37 [ 677.642262][ T9045] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.000B/input/input38 [ 677.714750][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.875589][ T9045] kye 0003:0458:5016.000B: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 678.114829][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.419543][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.815701][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.856535][ T5915] usb 1-1: reset high-speed USB device number 28 using dummy_hcd [ 680.538316][T15546] SELinux: truncated policydb string identifier [ 680.541208][T15543] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1573'. [ 680.544797][T15546] SELinux: failed to load policy [ 680.555311][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.616850][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.635223][T15535] FAULT_INJECTION: forcing a failure. [ 680.635223][T15535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.677131][T15535] CPU: 0 UID: 0 PID: 15535 Comm: syz.0.1572 Tainted: G L syzkaller #0 PREEMPT(full) [ 680.677163][T15535] Tainted: [L]=SOFTLOCKUP [ 680.677169][T15535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 680.677180][T15535] Call Trace: [ 680.677186][T15535] [ 680.677192][T15535] dump_stack_lvl+0x100/0x190 [ 680.677225][T15535] should_fail_ex.cold+0x5/0xa [ 680.677248][T15535] _copy_from_iter+0x1f4/0x1690 [ 680.677277][T15535] ? __asan_memset+0x23/0x50 [ 680.677301][T15535] ? __pfx__copy_from_iter+0x10/0x10 [ 680.677325][T15535] ? __pfx___alloc_skb+0x10/0x10 [ 680.677341][T15535] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 680.677371][T15535] netlink_sendmsg+0x808/0xda0 [ 680.677397][T15535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.677416][T15535] ? __might_fault+0xc0/0x140 [ 680.677446][T15535] ____sys_sendmsg+0xa54/0xc30 [ 680.677470][T15535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 680.677503][T15535] ___sys_sendmsg+0x190/0x1e0 [ 680.677529][T15535] ? __pfx____sys_sendmsg+0x10/0x10 [ 680.677581][T15535] __sys_sendmsg+0x170/0x220 [ 680.677600][T15535] ? __pfx___sys_sendmsg+0x10/0x10 [ 680.677634][T15535] do_syscall_64+0x106/0xf80 [ 680.677653][T15535] ? clear_bhb_loop+0x40/0x90 [ 680.677675][T15535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.677692][T15535] RIP: 0033:0x7f5a2179c799 [ 680.677707][T15535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.677724][T15535] RSP: 002b:00007f5a22636028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.677742][T15535] RAX: ffffffffffffffda RBX: 00007f5a21a15fa0 RCX: 00007f5a2179c799 [ 680.677754][T15535] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 680.677765][T15535] RBP: 00007f5a22636090 R08: 0000000000000000 R09: 0000000000000000 [ 680.677776][T15535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.677786][T15535] R13: 00007f5a21a16038 R14: 00007f5a21a15fa0 R15: 00007ffec2c7e8c8 [ 680.677810][T15535] [ 681.154461][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.264141][ T10] usb 1-1: USB disconnect, device number 28 [ 681.547204][T15565] xt_connbytes: Forcing CT accounting to be enabled [ 681.556358][T15565] Cannot find set identified by id 0 to match [ 681.638670][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.884743][ T5915] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 682.118307][ T2750] block nbd1: Possible stuck request ffff888027948000: control (read@0,1024B). Runtime 210 seconds [ 682.164161][ T2750] block nbd1: Possible stuck request ffff888027948200: control (read@1024,1024B). Runtime 210 seconds [ 682.177236][ T2628] block nbd3: Possible stuck request ffff8880279d8000: control (read@0,1024B). Runtime 150 seconds [ 682.192049][ T5915] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 682.205506][ T2628] block nbd3: Possible stuck request ffff8880279d8200: control (read@1024,1024B). Runtime 150 seconds [ 682.209977][ T2750] block nbd1: Possible stuck request ffff888027948400: control (read@2048,1024B). Runtime 210 seconds [ 682.217331][ T2628] block nbd3: Possible stuck request ffff8880279d8400: control (read@2048,1024B). Runtime 150 seconds [ 682.243350][ T2628] block nbd3: Possible stuck request ffff8880279d8600: control (read@3072,1024B). Runtime 150 seconds [ 682.314345][ T2750] block nbd1: Possible stuck request ffff888027948600: control (read@3072,1024B). Runtime 210 seconds [ 682.368421][ T5915] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 682.582068][ T5915] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 683.149727][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.152922][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 683.194879][ T5915] usb 2-1: SerialNumber: syz [ 683.359806][T15571] Bluetooth: MGMT ver 1.23 [ 683.452852][T15571] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1575'. [ 683.898292][ T30] audit: type=1400 audit(1772370590.636:739): avc: denied { getopt } for pid=15585 comm="syz.0.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 684.194833][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.296852][T10927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.356551][T15590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.365727][T15590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.374134][T15590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.472662][ T5915] usb 2-1: skipping empty audio interface (v1) [ 684.592916][ T5915] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 684.788145][ T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 685.193781][ T5915] usb 2-1: USB disconnect, device number 33 [ 685.287528][T13846] udevd[13846]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 685.326568][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.336223][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.394613][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 685.404387][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.423780][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.528504][ T10] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 685.541679][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.573248][T15600] syzkaller0: entered promiscuous mode [ 685.604654][T15600] syzkaller0: entered allmulticast mode [ 685.610771][ T10] usb 9-1: config 0 descriptor?? [ 685.964666][ T2628] block nbd0: Possible stuck request ffff888027882800: control (read@0,1024B). Runtime 30 seconds [ 685.975352][ T2628] block nbd0: Possible stuck request ffff888027882a00: control (read@1024,1024B). Runtime 30 seconds [ 685.986464][ T2628] block nbd0: Possible stuck request ffff888027882c00: control (read@2048,1024B). Runtime 30 seconds [ 685.997552][ T2628] block nbd0: Possible stuck request ffff888027882e00: control (read@3072,1024B). Runtime 30 seconds [ 686.035625][ T10] hid (null): nested delimiters [ 686.049903][ T10] kye 0003:0458:5016.000C: control desc unexpectedly large [ 686.177933][ T10] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.000C/input/input39 [ 686.282642][ T5882] net_ratelimit: 372 callbacks suppressed [ 686.282659][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.289966][ T10] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.000C/input/input40 [ 686.535324][ T10] kye 0003:0458:5016.000C: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.8-1/input0 [ 686.606332][ T2628] block nbd4: Possible stuck request ffff888027a48000: control (read@0,1024B). Runtime 150 seconds [ 686.617639][ T2628] block nbd4: Possible stuck request ffff888027a48200: control (read@1024,1024B). Runtime 150 seconds [ 686.651318][ T2628] block nbd4: Possible stuck request ffff888027a48400: control (read@2048,1024B). Runtime 150 seconds [ 686.675986][ T2628] block nbd4: Possible stuck request ffff888027a48600: control (read@3072,1024B). Runtime 150 seconds [ 687.360624][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.428383][T15650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1589'. [ 687.953867][T15659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 688.312982][T15667] overlayfs: missing 'lowerdir' [ 688.436091][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.447561][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.636351][ T5817] usb 9-1: USB disconnect, device number 13 [ 688.759316][ T30] audit: type=1400 audit(1772370595.516:740): avc: denied { connect } for pid=15675 comm="syz.8.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 688.759449][ T5883] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 688.790278][T15674] orangefs_mount: mount request failed with -4 [ 689.329593][ T5883] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 689.338288][ T5883] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.358414][ T5883] usb 1-1: config 0 has no interface number 0 [ 689.393885][ T5883] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 689.424165][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.446681][ T5883] usb 1-1: Product: syz [ 689.452004][ T5883] usb 1-1: Manufacturer: syz [ 689.456940][ T5883] usb 1-1: SerialNumber: syz [ 689.469683][ T5883] usb 1-1: config 0 descriptor?? [ 689.478517][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.794563][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.906871][T15664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.012317][T15694] netlink: 'syz.8.1597': attribute type 2 has an invalid length. [ 690.074654][T15664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.585469][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.097860][T11075] block nbd5: Possible stuck request ffff888027a60000: control (read@0,1024B). Runtime 120 seconds [ 691.108965][T11075] block nbd5: Possible stuck request ffff888027a60200: control (read@1024,1024B). Runtime 120 seconds [ 691.120497][T11075] block nbd5: Possible stuck request ffff888027a60400: control (read@2048,1024B). Runtime 120 seconds [ 691.131926][T11075] block nbd5: Possible stuck request ffff888027a60600: control (read@3072,1024B). Runtime 120 seconds [ 691.146086][ T5915] IPVS: starting estimator thread 0... [ 691.335028][T15719] IPVS: using max 45 ests per chain, 108000 per kthread [ 691.469099][ T5883] uvcvideo 1-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 691.489187][ T5883] uvcvideo 1-1:0.64: No valid video chain found. [ 691.507050][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.546528][ T5883] usb 1-1: USB disconnect, device number 29 [ 691.638849][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.482241][T15747] FAULT_INJECTION: forcing a failure. [ 692.482241][T15747] name failslab, interval 1, probability 0, space 0, times 0 [ 692.509056][T15747] CPU: 1 UID: 0 PID: 15747 Comm: syz.0.1603 Tainted: G L syzkaller #0 PREEMPT(full) [ 692.509087][T15747] Tainted: [L]=SOFTLOCKUP [ 692.509094][T15747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 692.509104][T15747] Call Trace: [ 692.509111][T15747] [ 692.509118][T15747] dump_stack_lvl+0x100/0x190 [ 692.509151][T15747] should_fail_ex.cold+0x5/0xa [ 692.509176][T15747] should_failslab+0xc2/0x120 [ 692.509206][T15747] __kmalloc_cache_noprof+0x7a/0x6f0 [ 692.509227][T15747] ? snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 692.509259][T15747] snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 692.509284][T15747] ? trace_contention_end+0xa5/0x180 [ 692.509304][T15747] ? __mutex_lock+0x26a/0x1b90 [ 692.509326][T15747] ? trace_contention_end+0x140/0x180 [ 692.509345][T15747] ? snd_pcm_oss_get_active_substream+0x153/0x1d0 [ 692.509374][T15747] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 692.509400][T15747] ? __pfx___mutex_lock+0x10/0x10 [ 692.509428][T15747] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 692.509457][T15747] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 692.509487][T15747] snd_pcm_oss_ioctl+0x1c08/0x3720 [ 692.509514][T15747] ? __fget_files+0x215/0x3d0 [ 692.509531][T15747] ? hook_file_ioctl_common+0x146/0x410 [ 692.509558][T15747] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 692.509587][T15747] ? selinux_file_ioctl+0x139/0x290 [ 692.509608][T15747] ? selinux_file_ioctl+0xb4/0x290 [ 692.509629][T15747] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 692.509656][T15747] __x64_sys_ioctl+0x18e/0x210 [ 692.509685][T15747] do_syscall_64+0x106/0xf80 [ 692.509703][T15747] ? clear_bhb_loop+0x40/0x90 [ 692.509726][T15747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.509750][T15747] RIP: 0033:0x7f5a2179c799 [ 692.509767][T15747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.509784][T15747] RSP: 002b:00007f5a22615028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 692.509803][T15747] RAX: ffffffffffffffda RBX: 00007f5a21a16090 RCX: 00007f5a2179c799 [ 692.509815][T15747] RDX: 0000200000000040 RSI: 00000000c0045002 RDI: 0000000000000003 [ 692.509826][T15747] RBP: 00007f5a22615090 R08: 0000000000000000 R09: 0000000000000000 [ 692.509836][T15747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.509847][T15747] R13: 00007f5a21a16128 R14: 00007f5a21a16090 R15: 00007ffec2c7e8c8 [ 692.509872][T15747] [ 692.769549][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.800830][T15754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.927779][T15757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.494847][T11338] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 694.516726][T15770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.658041][T11338] usb 1-1: Using ep0 maxpacket: 16 [ 694.677309][T11338] usb 1-1: config 0 has an invalid interface number: 134 but max is 0 [ 694.685590][T11338] usb 1-1: config 0 has no interface number 0 [ 694.691707][T11338] usb 1-1: config 0 interface 134 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 694.711387][T11338] usb 1-1: config 0 interface 134 has no altsetting 0 [ 694.734326][T11338] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 694.746088][T11338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.760574][T11338] usb 1-1: Product: syz [ 694.766518][T15752] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 694.768458][T11338] usb 1-1: Manufacturer: syz [ 694.786557][T11338] usb 1-1: SerialNumber: syz [ 694.809683][T11338] usb 1-1: config 0 descriptor?? [ 694.840933][T15754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.924928][T15752] usb 2-1: Using ep0 maxpacket: 16 [ 694.943884][T15752] usb 2-1: config 0 has an invalid interface number: 134 but max is 0 [ 694.952223][T15752] usb 2-1: config 0 has no interface number 0 [ 694.958630][T15752] usb 2-1: config 0 interface 134 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 694.972034][T15752] usb 2-1: config 0 interface 134 has no altsetting 0 [ 694.994727][T15752] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 695.007154][T15752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.021094][T15752] usb 2-1: Product: syz [ 695.025546][T15752] usb 2-1: Manufacturer: syz [ 695.030179][T15752] usb 2-1: SerialNumber: syz [ 695.052120][T15752] usb 2-1: config 0 descriptor?? [ 695.875101][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.308839][T15799] orangefs_mount: mount request failed with -4 [ 696.828759][T15813] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1613'. [ 697.092203][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.182551][T11338] ftdi_sio 1-1:0.134: FTDI USB Serial Device converter detected [ 697.231563][T11338] usb 1-1: Detected FT-X [ 697.314100][T11338] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 697.366539][T11338] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 697.388374][T15752] ftdi_sio 2-1:0.134: FTDI USB Serial Device converter detected [ 697.408299][T15752] usb 2-1: Detected FT-X [ 697.408425][T11338] ftdi_sio 1-1:0.134: GPIO initialisation failed: -71 [ 697.417965][T15752] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 697.440555][T15752] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 697.475419][ T2628] block nbd2: Possible stuck request ffff8880279a8000: control (read@0,1024B). Runtime 180 seconds [ 697.486223][ T2628] block nbd2: Possible stuck request ffff8880279a8200: control (read@1024,1024B). Runtime 180 seconds [ 697.514287][ T2628] block nbd2: Possible stuck request ffff8880279a8400: control (read@2048,1024B). Runtime 180 seconds [ 697.525723][ T2628] block nbd2: Possible stuck request ffff8880279a8600: control (read@3072,1024B). Runtime 180 seconds [ 697.554426][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.579501][T15752] ftdi_sio 2-1:0.134: GPIO initialisation failed: -71 [ 697.593149][T15752] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 697.601684][T11338] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 697.623023][T15752] usb 2-1: USB disconnect, device number 34 [ 697.637086][T15752] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 697.712094][T15823] SELinux: truncated policydb string identifier [ 697.719103][T15823] SELinux: failed to load policy [ 698.020978][T15752] ftdi_sio 2-1:0.134: device disconnected [ 698.093586][T11338] usb 1-1: USB disconnect, device number 30 [ 698.112602][T11338] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 698.198374][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.207335][T11075] block nbd6: Possible stuck request ffff888027b10000: control (read@0,1024B). Runtime 90 seconds [ 698.381798][T15827] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1614'. [ 698.854526][T11338] ftdi_sio 1-1:0.134: device disconnected [ 698.860378][T11075] block nbd6: Possible stuck request ffff888027b10200: control (read@1024,1024B). Runtime 90 seconds [ 698.871655][T11075] block nbd6: Possible stuck request ffff888027b10400: control (read@2048,1024B). Runtime 90 seconds [ 698.887115][T11075] block nbd6: Possible stuck request ffff888027b10600: control (read@3072,1024B). Runtime 90 seconds [ 699.234824][ T5964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.274933][T11338] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 699.397216][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.434917][T11338] usb 2-1: Using ep0 maxpacket: 16 [ 699.441763][T11338] usb 2-1: config 0 has an invalid interface number: 134 but max is 0 [ 699.450084][T11338] usb 2-1: config 0 has no interface number 0 [ 699.456456][T11338] usb 2-1: config 0 interface 134 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 699.473578][T11338] usb 2-1: config 0 interface 134 has no altsetting 0 [ 699.509566][T11338] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 699.520030][T11338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.528524][T11338] usb 2-1: Product: syz [ 699.532951][T11338] usb 2-1: Manufacturer: syz [ 699.538079][T11338] usb 2-1: SerialNumber: syz [ 699.554283][ T5919] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 699.572294][T11338] usb 2-1: config 0 descriptor?? [ 699.684566][T15848] syzkaller0: entered promiscuous mode [ 699.690655][T15848] syzkaller0: entered allmulticast mode [ 699.797083][ T5919] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.807549][ T5919] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 699.852824][T15829] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1616'. [ 699.876416][ T5919] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 699.884878][T15829] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1616'. [ 699.888852][ T5919] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 699.923126][T15829] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1616'. [ 699.933160][ T5919] usb 9-1: SerialNumber: syz [ 700.531819][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.597324][T10927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.909566][T15882] ip6t_srh: unknown srh match flags 4000 [ 701.258528][T15890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1624'. [ 701.608814][T15239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.660651][T11338] ftdi_sio 2-1:0.134: FTDI USB Serial Device converter detected [ 701.682918][T11338] usb 2-1: Detected FT-X [ 701.698618][T11338] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 701.801947][T11338] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 702.094119][T11338] ftdi_sio 2-1:0.134: GPIO initialisation failed: -71 [ 702.123075][T11338] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 702.178594][T11338] usb 2-1: USB disconnect, device number 35 [ 702.241584][ T5919] usb 9-1: skipping empty audio interface (v1) [ 702.278006][T11338] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 702.291740][T15907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8480 sclass=netlink_route_socket pid=15907 comm=syz.5.1626 [ 702.333450][T11338] ftdi_sio 2-1:0.134: device disconnected [ 702.365035][T15904] tipc: Started in network mode [ 702.367043][ T5919] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 702.369913][T15904] tipc: Node identity de0c119ee238, cluster identity 4711 [ 702.370046][T15904] tipc: Enabled bearer , priority 0 [ 702.708411][T15239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.721875][ T5919] usb 9-1: USB disconnect, device number 14 [ 702.770882][T13846] udevd[13846]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 702.811983][T15907] /dev/nullb0: Can't open blockdev [ 703.603054][T15903] tipc: Disabling bearer [ 703.622975][T15752] tipc: Node number set to 1010045342 [ 703.660150][T10927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.719256][T15239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.090384][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1638'. [ 704.195839][T15940] xt_socket: unknown flags 0x4 [ 704.776933][T15752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.845350][T15239] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 705.024286][T15239] usb 9-1: Using ep0 maxpacket: 32 [ 705.284093][T15239] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 705.292186][T15239] usb 9-1: config 0 has no interface number 0 [ 705.307706][T15239] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 705.317087][T15239] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.428874][T15239] usb 9-1: Product: syz [ 705.433124][T15239] usb 9-1: Manufacturer: syz [ 705.438211][T15239] usb 9-1: SerialNumber: syz [ 705.565420][T15239] usb 9-1: config 0 descriptor?? [ 705.582141][T15239] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 705.799429][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.691108][ T5964] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 707.252467][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.264031][T10927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.264732][T15239] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 707.293654][T15239] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 707.376098][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 707.449757][ T5964] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 707.622591][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.633834][T15996] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1640'. [ 707.646275][ T5964] usb 6-1: Product: syz [ 707.656916][ T5964] usb 6-1: Manufacturer: syz [ 707.661603][ T5964] usb 6-1: SerialNumber: syz [ 707.786726][ T5964] usb 6-1: config 0 descriptor?? [ 708.049347][T14275] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.069859][ T5964] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 021 [ 708.085551][T15998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8480 sclass=netlink_route_socket pid=15998 comm=syz.7.1648 [ 708.145478][T16000] ISOFS: Unable to identify CD-ROM format. [ 708.277703][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.703560][ T5964] i2c i2c-1: failure reading functionality [ 708.718698][ T5964] i2c i2c-1: connected i2c-tiny-usb device [ 708.741784][ T5964] usb 6-1: USB disconnect, device number 21 [ 708.997769][T11338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.162395][T14275] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.207697][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 709.217191][ T5964] usb 9-1: USB disconnect, device number 15 [ 709.226838][ T5964] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 709.258291][ T5964] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 709.385245][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.683559][ T5964] quatech2 9-1:0.51: device disconnected [ 709.933168][T14275] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.187983][T16039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1653'. [ 710.441899][T11338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.466893][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.759328][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.769253][T16043] xt_TCPMSS: Only works on TCP SYN packets [ 711.794731][T11338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.206636][T11075] block nbd1: Possible stuck request ffff888027948000: control (read@0,1024B). Runtime 240 seconds [ 712.297166][T11075] block nbd1: Possible stuck request ffff888027948200: control (read@1024,1024B). Runtime 240 seconds [ 712.331806][T11075] block nbd1: Possible stuck request ffff888027948400: control (read@2048,1024B). Runtime 240 seconds [ 712.370313][T11075] block nbd1: Possible stuck request ffff888027948600: control (read@3072,1024B). Runtime 240 seconds [ 712.397323][T14275] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.459766][T16058] netlink: 'syz.0.1657': attribute type 2 has an invalid length. [ 712.535076][T16045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 712.771800][T16060] Invalid logical block size (18) [ 712.848780][T15693] block nbd3: Possible stuck request ffff8880279d8000: control (read@0,1024B). Runtime 180 seconds [ 712.857312][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.900720][T15693] block nbd3: Possible stuck request ffff8880279d8200: control (read@1024,1024B). Runtime 180 seconds [ 712.953423][T15693] block nbd3: Possible stuck request ffff8880279d8400: control (read@2048,1024B). Runtime 180 seconds [ 713.003492][T15693] block nbd3: Possible stuck request ffff8880279d8600: control (read@3072,1024B). Runtime 180 seconds [ 713.662418][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.913545][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.940563][T14275] bridge_slave_1: left allmulticast mode [ 714.977561][T16087] overlayfs: conflicting lowerdir path [ 714.986226][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.995830][T14275] bridge_slave_1: left promiscuous mode [ 715.001658][T14275] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.498352][T14275] bridge_slave_0: left allmulticast mode [ 715.554003][T14275] bridge_slave_0: left promiscuous mode [ 715.559877][T14275] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.901212][ T8511] Bluetooth: hci2: Frame reassembly failed (-84) [ 715.922435][T16104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.936123][T16104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.944584][T16104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.952973][T16104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.961582][T16104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.970050][T16104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.978428][T16104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.039085][ T2628] block nbd0: Possible stuck request ffff888027882800: control (read@0,1024B). Runtime 60 seconds [ 716.052050][ T2628] block nbd0: Possible stuck request ffff888027882a00: control (read@1024,1024B). Runtime 60 seconds [ 716.065083][ T2628] block nbd0: Possible stuck request ffff888027882c00: control (read@2048,1024B). Runtime 60 seconds [ 716.076555][ T2628] block nbd0: Possible stuck request ffff888027882e00: control (read@3072,1024B). Runtime 60 seconds [ 716.398435][T14275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.412982][T14275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.424316][T14275] bond0 (unregistering): Released all slaves [ 716.485758][T16115] netlink: 'syz.5.1666': attribute type 2 has an invalid length. [ 716.691142][ T2628] block nbd4: Possible stuck request ffff888027a48000: control (read@0,1024B). Runtime 180 seconds [ 716.702368][ T2628] block nbd4: Possible stuck request ffff888027a48200: control (read@1024,1024B). Runtime 180 seconds [ 716.713871][ T2628] block nbd4: Possible stuck request ffff888027a48400: control (read@2048,1024B). Runtime 180 seconds [ 716.728279][ T2628] block nbd4: Possible stuck request ffff888027a48600: control (read@3072,1024B). Runtime 180 seconds [ 716.866163][T16095] syzkaller1: entered promiscuous mode [ 716.882096][T16095] syzkaller1: entered allmulticast mode [ 717.025433][ T5808] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 717.792096][T14275] hsr_slave_0: left promiscuous mode [ 717.815921][T14275] hsr_slave_1: left promiscuous mode [ 717.833074][T14275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.852424][T14275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.894326][ T5808] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 717.914123][ T5808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.922155][ T5808] usb 8-1: Product: syz [ 717.936883][T14275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.950871][ T5808] usb 8-1: Manufacturer: syz [ 717.954189][ T5812] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 717.977091][ T5808] usb 8-1: SerialNumber: syz [ 717.988533][T14275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.024787][ T5808] usb 8-1: config 0 descriptor?? [ 718.052188][ T5808] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 020 [ 718.087203][T14275] veth1_macvtap: left promiscuous mode [ 718.092777][T14275] veth0_macvtap: left promiscuous mode [ 718.124680][T14275] veth1_vlan: left promiscuous mode [ 718.129992][T14275] veth0_vlan: left promiscuous mode [ 718.790903][ T792] net_ratelimit: 52 callbacks suppressed [ 718.790922][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.870182][ T5808] i2c i2c-1: failure reading functionality [ 718.917095][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 718.927396][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 718.937413][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 718.945322][ T5808] i2c i2c-1: connected i2c-tiny-usb device [ 718.955216][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 718.962802][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 718.976339][ T5808] usb 8-1: USB disconnect, device number 20 [ 719.456660][T16156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.465925][T16156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.480042][T16156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.488881][T16156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.497584][T16156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.506353][T16156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.514999][T16156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.523588][T16156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.532226][T16156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.723714][T14275] team0 (unregistering): Port device team_slave_1 removed [ 720.756466][T14275] team0 (unregistering): Port device team_slave_0 removed [ 720.871787][ T30] audit: type=1400 audit(1772370627.626:741): avc: denied { setopt } for pid=16161 comm="syz.0.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 720.994242][ T5805] Bluetooth: hci2: command tx timeout [ 721.076682][ T30] audit: type=1400 audit(1772370627.836:742): avc: denied { read write } for pid=16169 comm="syz.5.1677" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 721.121792][ T30] audit: type=1400 audit(1772370627.836:743): avc: denied { open } for pid=16169 comm="syz.5.1677" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 721.171686][T15752] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 721.179497][T11075] block nbd5: Possible stuck request ffff888027a60000: control (read@0,1024B). Runtime 150 seconds [ 721.191908][T11075] block nbd5: Possible stuck request ffff888027a60200: control (read@1024,1024B). Runtime 150 seconds [ 721.204422][T11075] block nbd5: Possible stuck request ffff888027a60400: control (read@2048,1024B). Runtime 150 seconds [ 721.215463][T11075] block nbd5: Possible stuck request ffff888027a60600: control (read@3072,1024B). Runtime 150 seconds [ 721.395061][T15752] usb 1-1: Using ep0 maxpacket: 16 [ 721.435602][T15752] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 721.451239][ T5919] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 721.468916][T14275] IPVS: stop unused estimator thread 0... [ 721.514090][ T9] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 721.611295][ T5919] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 721.635133][ T5919] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.643188][ T5919] usb 9-1: Product: syz [ 721.657442][T15752] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 721.660710][T16147] chnl_net:caif_netlink_parms(): no params data found [ 721.673520][T15752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.692177][ T5919] usb 9-1: Manufacturer: syz [ 721.694145][T15752] usb 1-1: Product: syz [ 721.697214][ T5919] usb 9-1: SerialNumber: syz [ 721.701140][T15752] usb 1-1: Manufacturer: syz [ 721.719919][T15752] usb 1-1: SerialNumber: syz [ 721.960472][T15752] usb 1-1: config 0 descriptor?? [ 722.171227][T15752] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 722.197047][ T5919] usb 9-1: config 0 descriptor?? [ 722.199056][T15752] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 722.205584][ T5919] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 016 [ 722.247437][ T9] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 722.269123][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.296138][ T9] usb 8-1: Product: syz [ 722.363727][ T9] usb 8-1: Manufacturer: syz [ 722.368452][ T9] usb 8-1: SerialNumber: syz [ 722.385661][ T9] usb 8-1: config 0 descriptor?? [ 722.400926][ T9] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 021 [ 722.448569][T14275] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.481192][T16147] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.488561][T16147] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.496895][T16147] bridge_slave_0: entered allmulticast mode [ 722.504691][T16147] bridge_slave_0: entered promiscuous mode [ 722.513287][T16147] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.529635][T16147] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.538455][T16147] bridge_slave_1: entered allmulticast mode [ 722.548870][T16147] bridge_slave_1: entered promiscuous mode [ 722.575749][T14275] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.633095][ T5919] (null): failure reading functionality [ 722.670413][ T5919] i2c i2c-1: failure reading functionality [ 722.730939][ T5919] i2c i2c-1: connected i2c-tiny-usb device [ 722.747559][T16147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.767397][ T5919] usb 9-1: USB disconnect, device number 16 [ 722.778900][T15752] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 722.853708][T14275] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.892793][T16147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.995108][T14275] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.014976][ T9] i2c i2c-2: connected i2c-tiny-usb device [ 723.074209][ T5805] Bluetooth: hci2: command tx timeout [ 723.108107][T16147] team0: Port device team_slave_0 added [ 723.117797][T16147] team0: Port device team_slave_1 added [ 723.206065][T16147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.210007][ T5808] usb 8-1: USB disconnect, device number 21 [ 723.263835][T16147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.304431][T16147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.345451][T16147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.369522][T16147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.397304][T16147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.648278][T15752] em28xx 1-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 723.670618][T16147] hsr_slave_0: entered promiscuous mode [ 723.681437][T15752] em28xx 1-1:0.0: board has no eeprom [ 723.777974][T16147] hsr_slave_1: entered promiscuous mode [ 723.788823][T16147] debugfs: 'hsr0' already exists in 'hsr' [ 723.794764][T16147] Cannot create hsr debugfs directory [ 723.844482][T15752] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 723.852327][T15752] em28xx 1-1:0.0: dvb set to bulk mode. [ 723.874341][ T5808] em28xx 1-1:0.0: Binding DVB extension [ 724.710391][T15752] usb 1-1: USB disconnect, device number 31 [ 724.735002][T15752] em28xx 1-1:0.0: Disconnecting em28xx [ 724.817647][ T5808] em28xx 1-1:0.0: Registering input extension [ 724.865248][T15752] em28xx 1-1:0.0: Closing input extension [ 724.889255][T14275] bridge_slave_1: left allmulticast mode [ 724.904792][T14275] bridge_slave_1: left promiscuous mode [ 724.986185][T16233] netlink: 'syz.7.1686': attribute type 2 has an invalid length. [ 725.377642][ T5805] Bluetooth: hci2: command tx timeout [ 725.676344][T14275] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.692138][T15752] em28xx 1-1:0.0: Freeing device [ 725.700273][T15239] net_ratelimit: 683 callbacks suppressed [ 725.700289][T15239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.783536][T14275] bridge_slave_0: left allmulticast mode [ 725.791162][T14275] bridge_slave_0: left promiscuous mode [ 725.797328][T14275] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.224562][T14275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.247556][T14275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.262106][T14275] bond0 (unregistering): Released all slaves [ 726.436125][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.560913][T14275] tipc: Left network mode [ 727.110254][T16274] netlink: 'syz.5.1685': attribute type 2 has an invalid length. [ 727.130348][T15239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.396213][ T5805] Bluetooth: hci2: command tx timeout [ 727.714774][T15693] block nbd2: Possible stuck request ffff8880279a8000: control (read@0,1024B). Runtime 210 seconds [ 727.725630][T15693] block nbd2: Possible stuck request ffff8880279a8200: control (read@1024,1024B). Runtime 210 seconds [ 727.736617][T15239] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 727.744456][T15693] block nbd2: Possible stuck request ffff8880279a8400: control (read@2048,1024B). Runtime 210 seconds [ 727.755464][T15693] block nbd2: Possible stuck request ffff8880279a8600: control (read@3072,1024B). Runtime 210 seconds [ 727.935055][T15239] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.998837][T15239] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 728.017309][T15239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.040127][T16147] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.067808][T15239] usb 1-1: Product: syz [ 728.072001][T15239] usb 1-1: Manufacturer: syz [ 728.094055][T15239] usb 1-1: SerialNumber: syz [ 728.114918][T15239] usb 1-1: config 0 descriptor?? [ 728.130383][T15239] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected [ 728.150621][T15239] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 728.198599][T15752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.210305][T15239] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 728.804015][T16278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.837383][T11075] block nbd6: Possible stuck request ffff888027b10000: control (read@0,1024B). Runtime 120 seconds [ 728.845421][T16278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.874510][T11075] block nbd6: Possible stuck request ffff888027b10200: control (read@1024,1024B). Runtime 120 seconds [ 728.897303][T16289] syzkaller0: entered promiscuous mode [ 728.908677][T11075] block nbd6: Possible stuck request ffff888027b10400: control (read@2048,1024B). Runtime 120 seconds [ 728.910864][T11338] usb 1-1: USB disconnect, device number 32 [ 728.920157][T11075] block nbd6: Possible stuck request ffff888027b10600: control (read@3072,1024B). Runtime 120 seconds [ 728.954161][T16289] syzkaller0: entered allmulticast mode [ 729.019106][T11338] garmin_gps 1-1:0.0: device disconnected [ 729.095025][T16147] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.174390][T10927] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 729.194464][T14275] hsr_slave_0: left promiscuous mode [ 729.214940][T14275] hsr_slave_1: left promiscuous mode [ 729.222722][T14275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.238918][T15752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.274552][T14275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.287686][T14275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.302424][T14275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.349246][T14275] veth1_macvtap: left promiscuous mode [ 729.367122][T10927] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 729.370713][T14275] veth0_macvtap: left promiscuous mode [ 729.384067][T10927] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.400145][T14275] veth1_vlan: left promiscuous mode [ 729.416226][T14275] veth0_vlan: left promiscuous mode [ 729.422598][T10927] usb 9-1: Product: syz [ 729.432749][T10927] usb 9-1: Manufacturer: syz [ 729.453054][T10927] usb 9-1: SerialNumber: syz [ 729.475533][T10927] usb 9-1: config 0 descriptor?? [ 729.485387][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.498816][T10927] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 017 [ 730.248203][T10927] i2c i2c-1: connected i2c-tiny-usb device [ 730.415167][T15239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.479028][T10927] usb 9-1: USB disconnect, device number 17 [ 730.535027][T14275] team0 (unregistering): Port device team_slave_1 removed [ 730.586790][T14275] team0 (unregistering): Port device team_slave_0 removed [ 731.476544][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.504132][T15752] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 731.670620][T15752] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 731.681663][T15752] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 731.704826][T15752] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 731.721165][T16341] netlink: 'syz.8.1704': attribute type 2 has an invalid length. [ 731.738328][T15752] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.036718][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.043849][T15752] usb 8-1: usb_control_msg returned -32 [ 732.079031][T15752] usbtmc 8-1:16.0: can't read capabilities [ 732.520369][T15239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.528531][T10927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.299348][T16147] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.528591][T16147] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.590143][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.604569][T14274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.625301][T10927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.640625][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.067016][T16354] syzkaller0: entered promiscuous mode [ 734.072493][T16354] syzkaller0: entered allmulticast mode [ 734.441707][T10927] usb 8-1: USB disconnect, device number 22 [ 734.502187][T14275] IPVS: stop unused estimator thread 0... [ 734.773913][T16147] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 735.742705][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.847000][T11338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.895180][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.114968][T16147] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 737.248421][T16147] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 737.262195][ T24] kernel read not supported for file /bluetooth/6lowpan_control (pid: 24 comm: kworker/1:0) [ 737.274220][T15240] kernel write not supported for file /bluetooth/6lowpan_control (pid: 15240 comm: kworker/1:5) [ 737.659989][T15240] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 737.891753][T15240] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.908222][T15240] usb 6-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 737.921537][T15240] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.959716][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.012429][T15240] usb 6-1: config 0 descriptor?? [ 738.030937][T15240] rndis_host 6-1:0.0: skipping garbage [ 738.057584][T15240] usb 6-1: bad CDC descriptors [ 738.271076][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 738.338132][T16405] SELinux: truncated policydb string identifier [ 738.344845][T16405] SELinux: failed to load policy [ 738.675492][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 738.682969][T15240] usb 6-1: USB disconnect, device number 22 [ 738.690974][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 738.698986][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 738.714298][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 738.919795][T10927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.994867][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.039167][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.259855][T16147] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 741.034200][ T5812] Bluetooth: hci3: command tx timeout [ 741.074363][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.104812][ T8511] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.194934][T16147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.367474][ T8511] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.447955][T16147] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.597919][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 741.611254][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 741.619507][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 741.633289][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 741.646245][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 741.654230][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.671298][ T8511] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.739230][T16463] netlink: 'syz.5.1729': attribute type 23 has an invalid length. [ 741.833460][ T5808] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 741.977230][T16403] chnl_net:caif_netlink_parms(): no params data found [ 742.024012][ T5808] usb 8-1: Using ep0 maxpacket: 32 [ 742.057082][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.066936][ T5808] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 742.087746][ T5808] usb 8-1: config 0 has no interface number 0 [ 742.100176][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.107382][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.120288][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.147128][ T5808] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 742.158505][ T8511] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.169674][ T5808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.183211][ T5808] usb 8-1: Product: syz [ 742.188661][ T5808] usb 8-1: Manufacturer: syz [ 742.193354][ T5808] usb 8-1: SerialNumber: syz [ 742.202787][ T5808] usb 8-1: config 0 descriptor?? [ 742.213930][ T5808] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 742.263638][ T6227] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.270789][ T6227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.295863][T16403] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.304203][T16403] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.323550][T16403] bridge_slave_0: entered allmulticast mode [ 742.332272][T16403] bridge_slave_0: entered promiscuous mode [ 742.341569][T16403] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.349030][T16403] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.362921][T16403] bridge_slave_1: entered allmulticast mode [ 742.371622][T16403] bridge_slave_1: entered promiscuous mode [ 742.440633][ T5808] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 742.466354][ T5808] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 742.526537][T16403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.590974][T16403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.631718][ T8511] bridge_slave_1: left allmulticast mode [ 742.637549][ T8511] bridge_slave_1: left promiscuous mode [ 742.643386][ T8511] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.654361][ T8511] bridge_slave_0: left allmulticast mode [ 742.660010][ T8511] bridge_slave_0: left promiscuous mode [ 742.665980][ T8511] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.733146][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 742.914810][T11075] block nbd1: Possible stuck request ffff888027948000: control (read@0,1024B). Runtime 270 seconds [ 742.920349][T15693] block nbd3: Possible stuck request ffff8880279d8000: control (read@0,1024B). Runtime 210 seconds [ 742.925656][T11075] block nbd1: Possible stuck request ffff888027948200: control (read@1024,1024B). Runtime 270 seconds [ 742.925682][T11075] block nbd1: Possible stuck request ffff888027948400: control (read@2048,1024B). Runtime 270 seconds [ 742.925704][T11075] block nbd1: Possible stuck request ffff888027948600: control (read@3072,1024B). Runtime 270 seconds [ 742.978133][T15693] block nbd3: Possible stuck request ffff8880279d8200: control (read@1024,1024B). Runtime 210 seconds [ 743.004187][T15693] block nbd3: Possible stuck request ffff8880279d8400: control (read@2048,1024B). Runtime 210 seconds [ 743.016828][ T8511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.029945][ T8511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.054173][T15693] block nbd3: Possible stuck request ffff8880279d8600: control (read@3072,1024B). Runtime 210 seconds [ 743.069849][ T8511] bond0 (unregistering): Released all slaves [ 743.076036][ T5805] Bluetooth: hci3: command tx timeout [ 743.146868][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 743.155067][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.182971][ T5808] usb 8-1: USB disconnect, device number 23 [ 743.233328][T16403] team0: Port device team_slave_0 added [ 743.245489][ T5808] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 743.302750][T16403] team0: Port device team_slave_1 added [ 743.336157][ T5808] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 743.352648][ T5808] quatech2 8-1:0.51: device disconnected [ 743.499014][T16403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.530730][T16403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.584307][T16403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.709019][ T8511] hsr_slave_0: left promiscuous mode [ 743.716880][ T5805] Bluetooth: hci0: command tx timeout [ 743.732120][ T8511] hsr_slave_1: left promiscuous mode [ 743.738410][ T8511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.746820][ T8511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.758886][ T8511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.767709][ T8511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.778625][ T8511] veth1_macvtap: left promiscuous mode [ 743.784559][ T8511] veth0_macvtap: left promiscuous mode [ 743.790139][ T8511] veth1_vlan: left promiscuous mode [ 743.797011][ T8511] veth0_vlan: left promiscuous mode [ 743.966284][ T8511] team0 (unregistering): Port device team_slave_1 removed [ 743.978597][ T8511] team0 (unregistering): Port device team_slave_0 removed [ 744.074086][T16403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.081089][T16403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.107258][T16403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.201968][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.259139][T16502] syzkaller0: entered promiscuous mode [ 744.266268][T16502] syzkaller0: entered allmulticast mode [ 744.280590][T16458] chnl_net:caif_netlink_parms(): no params data found [ 744.416014][T16147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.490644][T16403] hsr_slave_0: entered promiscuous mode [ 744.523417][T16403] hsr_slave_1: entered promiscuous mode [ 744.536671][T16403] debugfs: 'hsr0' already exists in 'hsr' [ 744.548020][T16403] Cannot create hsr debugfs directory [ 745.053388][T16458] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.076780][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.101852][T16458] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.123752][T16458] bridge_slave_0: entered allmulticast mode [ 745.154212][ T5805] Bluetooth: hci3: command tx timeout [ 745.173080][T16458] bridge_slave_0: entered promiscuous mode [ 745.236813][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.795858][ T5805] Bluetooth: hci0: command tx timeout [ 746.241320][T15693] block nbd0: Possible stuck request ffff888027882800: control (read@0,1024B). Runtime 90 seconds [ 746.252395][T15693] block nbd0: Possible stuck request ffff888027882a00: control (read@1024,1024B). Runtime 90 seconds [ 746.263326][T15693] block nbd0: Possible stuck request ffff888027882c00: control (read@2048,1024B). Runtime 90 seconds [ 746.274630][T15693] block nbd0: Possible stuck request ffff888027882e00: control (read@3072,1024B). Runtime 90 seconds [ 746.278403][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.784339][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.790710][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.803646][T15693] block nbd4: Possible stuck request ffff888027a48000: control (read@0,1024B). Runtime 210 seconds [ 746.814656][T15693] block nbd4: Possible stuck request ffff888027a48200: control (read@1024,1024B). Runtime 210 seconds [ 746.825724][T15693] block nbd4: Possible stuck request ffff888027a48400: control (read@2048,1024B). Runtime 210 seconds [ 746.836816][T15693] block nbd4: Possible stuck request ffff888027a48600: control (read@3072,1024B). Runtime 210 seconds [ 747.237409][ T5805] Bluetooth: hci3: command tx timeout [ 747.323108][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.066440][ T5175] udevd[5175]: worker [8744] /devices/virtual/block/nbd1 timeout; kill it [ 748.079345][ T5175] udevd[5175]: seq 22117 '/devices/virtual/block/nbd1' killed [ 748.089727][ T5175] udevd[5175]: worker [5792] /devices/virtual/block/nbd2 timeout; kill it [ 748.099582][ T5175] udevd[5175]: seq 24456 '/devices/virtual/block/nbd2' killed [ 748.107235][ T5175] udevd[5175]: worker [5791] /devices/virtual/block/nbd3 timeout; kill it [ 748.116290][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.124699][ T5175] udevd[5175]: seq 24691 '/devices/virtual/block/nbd3' killed [ 748.144131][ T5175] udevd[5175]: worker [6222] /devices/virtual/block/nbd4 timeout; kill it [ 748.156980][ T5175] udevd[5175]: seq 24741 '/devices/virtual/block/nbd4' killed [ 748.189149][ T5175] udevd[5175]: worker [13845] /devices/virtual/block/nbd6 is taking a long time [ 748.233823][ T5175] udevd[5175]: worker [6055] /devices/virtual/block/nbd5 is taking a long time [ 748.274404][ T5805] Bluetooth: hci0: command tx timeout [ 748.354506][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.396926][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.712146][T16458] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.729741][T16458] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.739668][T16458] bridge_slave_1: entered allmulticast mode [ 749.764441][T16458] bridge_slave_1: entered promiscuous mode [ 749.997501][T16458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.027032][T16458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.363382][ T5805] Bluetooth: hci0: command tx timeout [ 750.434846][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.652386][T16563] Bluetooth: MGMT ver 1.23 [ 750.827285][T16147] veth0_vlan: entered promiscuous mode [ 750.836128][T16458] team0: Port device team_slave_0 added [ 750.845280][T16458] team0: Port device team_slave_1 added [ 751.073336][T16147] veth1_vlan: entered promiscuous mode [ 751.101033][T16458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.124510][T16458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.156766][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.165521][T16458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.180240][T16573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8480 sclass=netlink_route_socket pid=16573 comm=syz.7.1743 [ 751.243277][T11338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.266117][T16574] ISOFS: Unable to identify CD-ROM format. [ 751.326429][T16458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.333393][T16458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.363466][T11075] block nbd5: Possible stuck request ffff888027a60000: control (read@0,1024B). Runtime 180 seconds [ 751.379861][T11075] block nbd5: Possible stuck request ffff888027a60200: control (read@1024,1024B). Runtime 180 seconds [ 751.390886][T11075] block nbd5: Possible stuck request ffff888027a60400: control (read@2048,1024B). Runtime 180 seconds [ 751.414071][T11075] block nbd5: Possible stuck request ffff888027a60600: control (read@3072,1024B). Runtime 180 seconds [ 751.444036][T16458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.474625][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.092530][T16585] SELinux: truncated policydb string identifier [ 752.099148][T16585] SELinux: failed to load policy [ 752.579143][T15240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.047602][T16458] hsr_slave_0: entered promiscuous mode [ 753.079468][T16458] hsr_slave_1: entered promiscuous mode [ 753.094368][T16458] debugfs: 'hsr0' already exists in 'hsr' [ 753.100187][T16458] Cannot create hsr debugfs directory [ 753.890545][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.090120][T16147] veth0_macvtap: entered promiscuous mode [ 754.147236][T16147] veth1_macvtap: entered promiscuous mode [ 754.203714][T16147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.234467][T11338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.416421][T16147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.444327][ T31] INFO: task syz.4.1330:14079 blocked for more than 143 seconds. [ 754.452073][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 754.475500][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 754.529234][ T31] task:syz.4.1330 state:D stack:28136 pid:14079 tgid:14078 ppid:13445 task_flags:0x400040 flags:0x00080002 [ 754.624053][ T31] Call Trace: [ 754.635234][ T31] [ 754.638178][ T31] __schedule+0xfee/0x60e0 [ 754.642580][ T31] ? __lock_acquire+0x4a5/0x2630 [ 754.664048][ T31] ? __pfx___schedule+0x10/0x10 [ 754.668942][ T31] ? find_held_lock+0x2b/0x80 [ 754.673622][ T31] ? schedule+0x2bf/0x390 [ 754.706536][T16613] syzkaller0: entered promiscuous mode [ 754.712008][T16613] syzkaller0: entered allmulticast mode [ 754.717658][ T31] schedule+0xdd/0x390 [ 754.721741][ T31] schedule_preempt_disabled+0x13/0x30 [ 754.734002][ T31] __mutex_lock+0xc9a/0x1b90 [ 754.738630][ T31] ? sync_bdevs+0x153/0x480 [ 754.743146][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 754.764557][ T31] ? __mutex_unlock_slowpath+0x15c/0x790 [ 754.770244][ T31] ? iput.part.0+0x1a0/0xf50 [ 754.794024][ T31] ? sync_bdevs+0x153/0x480 [ 754.798558][ T31] sync_bdevs+0x153/0x480 [ 754.802882][ T31] ksys_sync+0xb0/0xf0 [ 754.808420][ T68] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.837805][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 754.842610][ T31] ? kcov_ioctl+0x16a/0x720 [ 754.847287][ T6749] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.864187][ T6749] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.872944][ T6749] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.873984][ T31] ? do_syscall_64+0x95/0xf80 [ 754.894858][ T31] __do_sys_sync+0xe/0x20 [ 754.899218][ T31] do_syscall_64+0x106/0xf80 [ 754.903816][ T31] ? clear_bhb_loop+0x40/0x90 [ 754.914308][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.917749][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.920219][ T31] RIP: 0033:0x7fd82f39c799 [ 754.994002][ T31] RSP: 002b:00007fd83032b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 755.004549][ T31] RAX: ffffffffffffffda RBX: 00007fd82f615fa0 RCX: 00007fd82f39c799 [ 755.012545][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 755.034095][ T31] RBP: 00007fd82f615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 755.042086][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.064042][ T31] R13: 00007fd82f616038 R14: 00007fd82f615fa0 R15: 00007fff31bf7878 [ 755.072086][ T31] [ 755.083718][ T31] [ 755.083718][ T31] Showing all locks held in the system: [ 755.148963][ T31] 2 locks held by ksoftirqd/1/23: [ 755.174052][ T31] 1 lock held by khungtaskd/31: [ 755.178933][ T31] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 755.214021][ T31] 3 locks held by kworker/u8:4/68: [ 755.219160][ T31] #0: ffff88813fe9c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 755.264029][ T31] #1: ffffc9000210fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 755.284018][ T31] #2: ffffffff90610c28 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 755.334043][ T31] 1 lock held by dhcpcd/5470: [ 755.354011][ T31] #0: ffffffff90610c28 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x1bd/0x1f10 [ 755.363203][ T31] 2 locks held by getty/5562: [ 755.384067][ T31] #0: ffff8880343300a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 755.424028][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 755.474012][ T31] 1 lock held by udevd/5791: [ 755.485464][ T31] #0: ffff888027876358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 755.504128][ T31] 1 lock held by udevd/5792: [ 755.508735][ T31] #0: ffff888027874358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 755.569250][ T31] 1 lock held by udevd/5794: [ 755.573842][ T31] #0: ffff8880273ec358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 755.583396][ T31] 2 locks held by kworker/0:3/5817: [ 755.594900][ T31] #0: ffff88813fe67548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 755.624185][ T31] #1: ffffc90002f37d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 755.674111][ T31] 1 lock held by udevd/6055: [ 755.678711][ T31] #0: ffff888027916358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 755.694030][ T31] 1 lock held by udevd/6222: [ 755.698617][ T31] #0: ffff888027912358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 755.708313][ T31] 3 locks held by kworker/u8:11/6749: [ 755.715163][ T31] #0: ffff8880332a3948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 755.734101][ T31] #1: ffffc900030a7d08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 755.751671][ T31] #2: ffffffff90610c28 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 755.761322][ T31] 1 lock held by udevd/8744: [ 755.766033][ T31] #0: ffff888027870358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 755.775507][ T31] 1 lock held by udevd/13845: [ 755.780292][ T31] #0: ffff8880279fa358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 755.789783][ T31] 1 lock held by syz.4.1330/14079: [ 755.795028][ T31] #0: ffff888027916358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 755.804614][ T31] 3 locks held by syz-executor/16147: [ 755.809964][ T31] #0: ffff888086b84ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 755.819578][ T31] #1: ffff888086b840c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 755.829340][ T31] #2: ffffffff908a8c28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 755.839478][ T31] 5 locks held by syz-executor/16403: [ 755.844908][ T31] #0: ffff888042b94ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 755.854526][ T31] #1: ffff888042b940c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 755.864358][ T31] #2: ffffffff908a8c28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 755.874436][ T31] #3: ffff88803778a2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x770 [ 755.883833][ T31] #4: ffffffff8e7f4ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 755.893888][ T31] 9 locks held by syz-executor/16458: [ 755.899408][ T31] #0: ffff888036a5e420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 755.908398][ T31] #1: ffff8880521a1888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 755.918259][ T31] #2: ffff888029b30f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 755.928336][ T31] #3: ffffffff8fb69488 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 755.938766][ T31] #4: ffff88802bcc00e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xaa/0x600 [ 755.949374][ T31] #5: ffff888077a13250 (&devlink->lock_key#19){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 755.963506][ T5808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.971839][ T31] #6: ffffffff90610c28 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x108/0x830 [ 755.980847][ T31] #7: ffff888055b7cd40 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x47f/0x2580 [ 755.993079][ T31] #8: ffffffff8e7f4ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 756.003169][ T31] 1 lock held by syz.5.1745/16596: [ 756.008462][ T31] #0: ffffffff90610c28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 756.048364][ T31] [ 756.050697][ T31] ============================================= [ 756.050697][ T31] [ 756.067722][ T31] NMI backtrace for cpu 1 [ 756.067740][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 756.067763][ T31] Tainted: [L]=SOFTLOCKUP [ 756.067769][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 756.067779][ T31] Call Trace: [ 756.067785][ T31] [ 756.067792][ T31] dump_stack_lvl+0x100/0x190 [ 756.067822][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 756.067841][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 756.067871][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 756.067897][ T31] sys_info+0x141/0x190 [ 756.067917][ T31] watchdog+0xd25/0x1050 [ 756.067944][ T31] ? __pfx_watchdog+0x10/0x10 [ 756.067965][ T31] ? __kthread_parkme+0x18c/0x230 [ 756.067991][ T31] ? kthread+0x13a/0x450 [ 756.068004][ T31] ? __pfx_watchdog+0x10/0x10 [ 756.068023][ T31] kthread+0x370/0x450 [ 756.068038][ T31] ? __pfx_kthread+0x10/0x10 [ 756.068055][ T31] ret_from_fork+0x754/0xd80 [ 756.068073][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 756.068090][ T31] ? __switch_to+0x7b4/0x1120 [ 756.068111][ T31] ? __pfx_kthread+0x10/0x10 [ 756.068126][ T31] ret_from_fork_asm+0x1a/0x30 [ 756.068157][ T31] [ 756.068169][ T31] Sending NMI from CPU 1 to CPUs 0: [ 756.195367][ C0] NMI backtrace for cpu 0 [ 756.195383][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 756.195403][ C0] Tainted: [L]=SOFTLOCKUP [ 756.195408][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 756.195417][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 756.195444][ C0] RIP: 0010:stack_access_ok+0x11/0x1d0 [ 756.195462][ C0] Code: cc cc cc e8 91 d0 d7 09 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 b8 00 00 00 00 00 fc ff df 41 55 41 54 49 89 d4 <48> 89 fa 55 48 c1 ea 03 48 89 f5 53 48 89 fb 48 83 ec 08 0f b6 04 [ 756.195475][ C0] RSP: 0018:ffffc90000117630 EFLAGS: 00000246 [ 756.195487][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff9179b3b4 [ 756.195496][ C0] RDX: 0000000000000008 RSI: ffffc90000117da8 RDI: ffffc900001176b8 [ 756.195505][ C0] RBP: ffffc90000117700 R08: ffffffff9179b3b8 R09: 0000000000000007 [ 756.195515][ C0] R10: 0000000000000200 R11: 000000000000cf82 R12: 0000000000000008 [ 756.195524][ C0] R13: ffffc900001176b8 R14: ffffc90000117db0 R15: ffffc900001176ec [ 756.195533][ C0] FS: 0000000000000000(0000) GS:ffff888124344000(0000) knlGS:0000000000000000 [ 756.195547][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 756.195565][ C0] CR2: 0000200000404030 CR3: 0000000036e3c000 CR4: 00000000003526f0 [ 756.195574][ C0] Call Trace: [ 756.195579][ C0] [ 756.195585][ C0] unwind_next_frame+0xb0b/0x1ea0 [ 756.195601][ C0] ? process_one_work+0x9d7/0x1920 [ 756.195616][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 756.195633][ C0] arch_stack_walk+0x94/0xf0 [ 756.195649][ C0] ? process_one_work+0x9d7/0x1920 [ 756.195665][ C0] stack_trace_save+0x8e/0xc0 [ 756.195681][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 756.195698][ C0] ? stack_trace_save+0x8e/0xc0 [ 756.195715][ C0] ? __lock_acquire+0x4a5/0x2630 [ 756.195735][ C0] kasan_save_stack+0x30/0x50 [ 756.195753][ C0] ? kasan_save_stack+0x30/0x50 [ 756.195769][ C0] ? kasan_save_track+0x14/0x30 [ 756.195786][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 756.195802][ C0] ? __kmalloc_node_track_caller_noprof+0x304/0x850 [ 756.195821][ C0] ? kmalloc_reserve+0xe8/0x350 [ 756.195837][ C0] ? __alloc_skb+0x185/0x710 [ 756.195848][ C0] ? nsim_dev_trap_report_work+0x2af/0xd10 [ 756.195867][ C0] ? process_one_work+0x9d7/0x1920 [ 756.195892][ C0] kasan_save_track+0x14/0x30 [ 756.195909][ C0] __kasan_kmalloc+0xaa/0xb0 [ 756.195926][ C0] __kmalloc_node_track_caller_noprof+0x304/0x850 [ 756.195945][ C0] ? __alloc_skb+0x185/0x710 [ 756.195956][ C0] ? trace_kmem_cache_alloc+0xa1/0x120 [ 756.195968][ C0] ? __kasan_kfree_large+0x50/0xa0 [ 756.195987][ C0] kmalloc_reserve+0xe8/0x350 [ 756.196004][ C0] __alloc_skb+0x185/0x710 [ 756.196015][ C0] ? __alloc_skb+0x5b7/0x710 [ 756.196027][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 756.196039][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 756.196054][ C0] ? __pfx___might_resched+0x10/0x10 [ 756.196071][ C0] nsim_dev_trap_report_work+0x2af/0xd10 [ 756.196095][ C0] process_one_work+0x9d7/0x1920 [ 756.196113][ C0] ? __pfx_process_one_work+0x10/0x10 [ 756.196129][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 756.196150][ C0] worker_thread+0x5da/0xe40 [ 756.196167][ C0] ? kthread+0x13a/0x450 [ 756.196178][ C0] ? __pfx_worker_thread+0x10/0x10 [ 756.196191][ C0] kthread+0x370/0x450 [ 756.196202][ C0] ? __pfx_kthread+0x10/0x10 [ 756.196215][ C0] ret_from_fork+0x754/0xd80 [ 756.196229][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 756.196243][ C0] ? __switch_to+0x7b4/0x1120 [ 756.196258][ C0] ? __pfx_kthread+0x10/0x10 [ 756.196271][ C0] ret_from_fork_asm+0x1a/0x30 [ 756.196291][ C0] [ 756.632262][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 756.639142][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 756.649801][ T31] Tainted: [L]=SOFTLOCKUP [ 756.654103][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 756.664152][ T31] Call Trace: [ 756.667410][ T31] [ 756.670318][ T31] dump_stack_lvl+0x100/0x190 [ 756.674987][ T31] vpanic+0x552/0x970 [ 756.678965][ T31] ? __pfx_vpanic+0x10/0x10 [ 756.683543][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 756.689686][ T31] panic+0xd1/0xe0 [ 756.693389][ T31] ? __pfx_panic+0x10/0x10 [ 756.697789][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 756.703929][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 756.710168][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 756.716331][ T31] ? watchdog.cold+0x198/0x1ca [ 756.721094][ T31] ? watchdog+0xd35/0x1050 [ 756.725501][ T31] watchdog.cold+0x1a9/0x1ca [ 756.730081][ T31] ? __pfx_watchdog+0x10/0x10 [ 756.734746][ T31] ? __kthread_parkme+0x18c/0x230 [ 756.739758][ T31] ? kthread+0x13a/0x450 [ 756.743979][ T31] ? __pfx_watchdog+0x10/0x10 [ 756.748659][ T31] kthread+0x370/0x450 [ 756.752709][ T31] ? __pfx_kthread+0x10/0x10 [ 756.757285][ T31] ret_from_fork+0x754/0xd80 [ 756.761857][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 756.766949][ T31] ? __switch_to+0x7b4/0x1120 [ 756.771611][ T31] ? __pfx_kthread+0x10/0x10 [ 756.776193][ T31] ret_from_fork_asm+0x1a/0x30 [ 756.780970][ T31] [ 756.784264][ T31] Kernel Offset: disabled [ 756.788570][ T31] Rebooting in 86400 seconds..