last executing test programs: 15m14.601061912s ago: executing program 32 (id=942): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) epoll_wait(r2, &(0x7f0000000280)=[{}], 0x1, 0x4000005) close_range(r0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mknodat$loop(r4, &(0x7f0000000040)='./file0\x00', 0x40, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) (async) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) (async) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14m59.886514169s ago: executing program 2 (id=1017): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1a001}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x5336ae46a3975501}}]}, 0x40}, 0x1, 0x0, 0x0, 0x802}, 0x0) syz_open_dev$MSR(0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfffffffe}]}]}]}, 0x38}}, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) 14m58.969279673s ago: executing program 2 (id=1019): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(r2, &(0x7f0000000a00)=[{&(0x7f00000001c0)=""/59, 0x3b}], 0x1) 14m55.705633393s ago: executing program 2 (id=1028): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000300)="fb55841f209647ba0c9c0e89d3499577b7cfa68164680805008532aa825433f75748a0a3f71f981ea4e4fd0b5c009d248d711af2d82c8ef11972006cfa9f3a3f746d5ee5e09f2a77115157723d798b6dda33aa405ebf90687641ea88fdab29225a095b217b66fc551a6a5ae9635d4cbf647f0cf9182d9f3e9b5c9ef0", 0x7c}, {&(0x7f00000006c0)="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", 0xff8}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f00000046c0)="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", 0xf6f}], 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) 14m54.697245203s ago: executing program 2 (id=1035): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x28) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_usb_connect(0x5, 0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff7079ea082402f6200101000905850308"], 0x0) 14m51.981841991s ago: executing program 2 (id=1043): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r0}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) 14m51.28855537s ago: executing program 2 (id=1048): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1a001}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x5336ae46a3975501}}]}, 0x40}, 0x1, 0x0, 0x0, 0x802}, 0x0) syz_open_dev$MSR(0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfffffffe}]}]}]}, 0x38}}, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) 14m50.404603941s ago: executing program 33 (id=1048): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1a001}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x5336ae46a3975501}}]}, 0x40}, 0x1, 0x0, 0x0, 0x802}, 0x0) syz_open_dev$MSR(0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfffffffe}]}]}]}, 0x38}}, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) 11m37.585053722s ago: executing program 4 (id=1594): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) ftruncate(r0, 0x81ff) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x1ff, 0x1, 0x4, 0x0, 0x2, 0x7, 0x0, 0x0, 0x20, 0x1d}}, 0x50) getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 11m36.882280039s ago: executing program 4 (id=1595): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x8026}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x44) ioctl$int_out(r1, 0x2, &(0x7f0000000000)) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4, 0x801, 0x0, 0x3}}, 0x2e) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r11, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x4, 0xf, 0xbb, "4aa2940d2d313d8d264b584544b7862882233de393f56bb194a7449c71fc860dd452af2bb614ebe0bf6a373e9e4709b84800ec2b6f8ab865c3aac026c30601", 0x8}, 0x60) 11m33.516105759s ago: executing program 4 (id=1607): syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da09"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc804}, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x4041) syz_usb_connect(0x3, 0xa5a, &(0x7f00000006c0)={{0x12, 0x1, 0x310, 0x41, 0xf1, 0xf8, 0xff, 0x403, 0xe40b, 0x7439, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa48, 0x3, 0x9, 0x81, 0x0, 0x8, "", [{{0x9, 0x4, 0x3, 0x2, 0xb, 0x34, 0xf4, 0x40, 0xef, [], [{{0x9, 0x5, 0x9, 0x10, 0x0, 0x6, 0x2, 0xca, [@generic={0x73, 0x21, "d8884c1ee2e468634385735497cb99058212a7e7a3b0ecbd687d3d22683fdacf28b9be646100bd30619829ac532a51375bb6a1d4cf38e536130e81c829ab1837fd5ef7db477512ad4af91924b9a3a2a81e6a6433b3a0cf3331a2bb2f15d4691ed8c60ebfe739b91ef1606ff783447cdcc2"}, @generic={0xc6, 0x4d, "d3b3b42fb266266a9c8fea849a60b0ee14cefc78a3f6892784274a3073c4c181325b90169eb21493c9faa4dad20ff5edc17e71b22276e9f4dd54d46f182775050043f9b54b7819b73b867df788c473d3f4aab3bb1c5dfb6c2a252260f66479a742b562882e7b7461ec58e33841bbde0f4da4458692e3a885989ea3f7322a198800d744afaddb6a7bd29f83f6269c4538bddaf68634ef069e1c5c1b4fbaca25acada3aec421fa1ce4a300a63ccd8bba9d5c6d610e3e61fab9891b09fe4fb7ef5a5c9e1f94"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x9, 0x7a, 0x2, [@generic={0xbb, 0xf, "b1e0c8601a05d89f9686955cd3f08da4f75c65689c1f9fc5259f4ae03860447faa77f60e683eddc001309f0c24a967634a9ac00ba47a30dfc03466af4e1417a964e34ac4d7395776968ee60448165f6606b709e80115f37de784d7d89e4389f83173da14b55d0b0b3fcbbb787617cfead3a32ed8967b4ad0197ac7fc2e52a8d2b540b83a24b0c20eec0523bff7a8169c23145621d1f779d96f6ccc7ccc851a010e21dc0c8090f4cc9cb08973e35dd63750e4ff0eaf8676ce93"}, @generic={0x8d, 0xe, "c11615d512b633f0a4a400dde086ba51eba441d6ac86143ec9590895843f4f48bd94b373f5f29f77be1400f70604e7146a3ecfb03394ff17093c68eca63a4f067fd34b13825c68145b5b6aab9deffda3f1ba9889d4c33c019744c6be6c1939f721ad9cc452c173945d8581f346e10ca856902d0bc735b90776434c561ec28c1ced3c692a0edf6392600399"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x4, 0x0, 0x3, [@generic={0x22, 0x14, "5c609379debff4fb6dde9d826c7abd28c838476a5e9f15f26bf2b8792cf90070"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x0, 0x80, 0xea, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x200}]}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0x14, 0x1, 0x8}}, {{0x9, 0x5, 0x6, 0xc, 0x8, 0x2, 0x5, 0x30, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x5}, @generic={0xf3, 0xb, "21ce8d15392f090bc21f7c65c78293fe4a2e882344711faa62a58227b825a255001ffd54b4ad1e12b4f29df25cf50b10a22e3b75edfc5a8c0c1f6413518d76c6627eac1eac7e8ad140a4244bbc2b82268799686e763cdd9df32c1cf4834c7db34eb3cf054abfb7d61bf9305846c230e117da359a3e547a0f5e0020174600cc063ac9cc4368262b9305c541800961dd1044c44765565cc7844f8164d8d2724296a0b0f03e2544ccbf2fb9bd327caeac6b31f847523f00d5bfcb0edcedbbe8e7b5eba673031cf373e4404302da76f5e5a2bc7846be3d5da7ff0b12247a92ef65876957f5dd768e2b4186001c72064018f9ca"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x1, 0xef, 0xc}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x6, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x1a}, @generic={0xad, 0x30, "0a754e72de6e09ec1463c8740c0b4da193f59aae912e7b1492e52cab50c23bb9cf74e11f233c31b33e74e2baea880ebd439f61eb7822c7be54155b9cec763a536b867144e6fdd0f75bf152aa573ed9d31cb942a3f4da22cbb98c979ea631515020165dac61e5ac6dbb97cc54770c5e295c8dca875bebd05b14e5b728bb00b8e6cf78398d59dbcb1ebfcaba39ed7a6f2762a5ddb4deba6e7a9289d7ac36ba53a3efe513e9772cef32c7241b"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x7, 0x9, 0xff}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x1, 0x6, 0x9a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x52}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x9, 0x4, 0x8}}]}}, {{0x9, 0x4, 0x33, 0x4, 0xc, 0xff, 0x6, 0x14, 0x2, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0xe7, 0x9, 0x8, 0x1}, {0x6, 0x24, 0x1a, 0x1, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xe1, 0x3, 0xd, 0xc3, 0x5, 0x5}, @dmm={0x7, 0x24, 0x14, 0x9, 0x504}, @network_terminal={0x7, 0x24, 0xa, 0x3a, 0x9, 0x8, 0xb}, @mdlm={0x15, 0x24, 0x12, 0x1}, @obex={0x5, 0x24, 0x15, 0x6}, @country_functional={0xe, 0x24, 0x7, 0xff, 0x2, [0x7, 0x1, 0x9, 0xfeac]}]}], [{{0x9, 0x5, 0x2, 0x10, 0x10, 0xc, 0x5, 0x34, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0xfff}, @generic={0x5, 0x31, "fcd13e"}]}}, {{0x9, 0x5, 0x9, 0x1f560865aa9738ef, 0x8, 0x8, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x800}]}}, {{0x9, 0x5, 0x0, 0x10, 0x100, 0x9, 0x7f, 0xfd}}, {{0x9, 0x5, 0x5, 0x8, 0x200, 0x2, 0x2}}, {{0x9, 0x5, 0x14af4393b685578b, 0x10, 0x200, 0x3, 0x8, 0xb0, [@generic={0xae, 0x11, "8b60feee69ae7056b89d7c3e97babc5464ff9d8dcccc5dbb552e6e392b3a6cf88e8b3780c822192a0797f5704062841b139a26a436f54a7e8f3d4711e00b40fc3c444e836a1d8d04810086d3ae3a52a1091574273e821d60565012a2554eaedc88eb8b416ead6131fd9ac157f626c5800fb942082abffbfc66be2ea67a8fac7e221825e02e0a30b244c4325e91e95427b12f2b1f0e2828505b5226c47e7d75f22ae43ae7a128ed3b063a9a23"}, @generic={0xe4, 0x7, "dbee82d14da44ff6e09f5c23568bf00e515650a55d3022eee33061916ad392745265d07d889f7526ab8a73c2be4bd30ee04d3ec253581892655e68f62087318185a81c13b097130a5df1947cc3d4419674b69ac3f3d446eac2093ab09ee80218534b511e07cbe13b9dd6e78b3a3608a6865a14c901b93b23e6e50e652312f3483886cce47aa2152d600302dec7b19457602058a75206e4f6d7fbe4628647f3136cb318e6e15eabc76e3be0fd293b45530fbf84e1491d3766117ee6de22b609561bbfe1db6d2b372f01ee6ea71b1d51902157fe182e1af2d802ca5e3635d92ecb60d4"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0xae, 0x70, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xfe, 0x2}]}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0x8, 0x0, 0x93, [@generic={0x11, 0xf, "79031f02cfe694d22af304ebc46da7"}, @generic={0x31, 0x5, "59977ab334dc402eec9262f5fb0ed94a0f6fbf94fb3a18c7da8ef05c677efd2ec69822dfa140bd6bbbb702aacf73b1"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x7, 0xa, 0x8a, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x1}]}}, {{0x9, 0x5, 0xa, 0x3, 0x220, 0x8, 0x7, 0xfe}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x3, 0xfd, 0x0, [@generic={0x29, 0x10, "5a17eefafd676f6a466c708c40f189a72f95fcbf18d67208f4f466fade4681674080170f4887b0"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x2}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3d7, 0x8, 0x9, 0x6e, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x5}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x8, 0xf2, 0x5}}]}}, {{0x9, 0x4, 0x4b, 0xb2, 0xd, 0xff, 0x9d, 0x9e, 0x6, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "ae57ca34348b"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x1, 0xab45, 0x14}, [@country_functional={0x6, 0x24, 0x7, 0x10, 0x9}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "9923a8df12"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0xe1, 0xd66b, 0x6}, {0x6, 0x24, 0x1a, 0x8, 0x20}, [@mdlm={0x15, 0x24, 0x12, 0xa6}, @mbim={0xc, 0x24, 0x1b, 0x7f, 0x7, 0x7f, 0xc, 0x0, 0x5}, @country_functional={0x10, 0x24, 0x7, 0x42, 0x1, [0xa, 0x9, 0x9, 0x3, 0x9]}, @acm={0x4, 0x24, 0x2, 0x4}, @country_functional={0x6, 0x24, 0x7, 0x8b, 0x6}, @country_functional={0x8, 0x24, 0x7, 0x4, 0x4, [0x0]}]}], [{{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x0, 0x7, 0x5}}, {{0x9, 0x5, 0x2, 0x17, 0x20, 0x3, 0xc8, 0xe}}, {{0x9, 0x5, 0x2, 0x1b, 0x8, 0x9b, 0xc, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x240, 0x6, 0xe8, 0xcf}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x58, 0xd}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x5, 0x1, 0x99}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x6, 0x40, 0x3, [@generic={0xbf, 0x31, "d2b4580d5757aab266d7bc95cb6bc4853b823d511b3955f413aedf5dbc65fdb79b5b37099dcefee613def70ca28eb0df0227156e8ab30d7ca88a230c760bcd390e3e4a4d855aaae66ad8a52add918386d4b8dfdc567ed0d08acf21b239bed6fb7ecba58b7a2f0bb4ef96ff1276c0d93a1b9effe7a4289e0048139c3a69fe8f2d70a0726da26b71bdb11bdce26f32ec1a61f32cd4fd3b6695f3a1dcb3d9fe4dea8ccec1565c95fc07f4c0e970c13d2bb3ea6a7cd5e5d78ae99064a3cc70"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x2, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x456d}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x64}]}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x9, 0x2, 0x9, [@generic={0x77, 0xd, "8d9e4610974f2e2b432c5a3240ce2e4ecb4fa9067c01c462edd525880f83f540166ceee45508a2fe5fe56faa199508a2279082196a39a45d1afef81bdc484db98cb083d5f590748b53a35ad5016fc273dba423fa4de0610c2cefb56a6bbc0b9fa209a28f22a217066096473a02be32027de9ae7cd8"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xe0, 0x6}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x6, 0x10, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x5}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x40, 0x6, 0x7f}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x71}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x5, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0xed3b}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x6}]}}]}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x7, 0xfe, 0xb9, 0x20, 0x8}, 0x47, &(0x7f0000000040)={0x5, 0xf, 0x47, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x54, 0x6, 0x7, 0x3, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x4, 0x1, 0xff, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x7f, 0x5, 0xff00}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0xf, 0x7d, 0x3, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "9e40c2720096c2a3e7cfa334b5926371"}]}, 0x9, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2809}}, {0x83, &(0x7f0000000100)=@string={0x83, 0x3, "67b924c103ccf1989169116e3eef630d5a15e64fc5e3a08f0008d66d54ebbdf3bd96e11629c2a2c7108bd59fa2f6e95e3f9daa88991725e710def402cfe4d942cc1c1bae9b20012b83e45cff4918b186efd153d8180d1dfdcb9fa4a4e01c01bd1f7bd5e488f61d23a2c9288265d43336e0d24327b23caf77c5094e732d83d5361e"}}, {0x4, &(0x7f00000001c0)=@string={0x4, 0x3, ':D'}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x82, &(0x7f0000000240)=@string={0x82, 0x3, "6a0a3bc403ea1a742b7e4a1f3f7ee588ee73e4d3c0b2131a85d7c79cac622fa0c3421a5a2073788762d5a6303685e1f770a9092b4039b28992c6d4b795c16bdc051afd8ad96fe735bed703a71f6ae9bd2341cdc5f1510c3d80a60e7a300b06350f5f576a71c7c4635bba751d731297604812740fe94df36df6cf3222669a72a9"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x408}}, {0xff, &(0x7f0000000380)=@string={0xff, 0x3, "ed01e4430ee156113288fe60aef96cccd0308c6a3b65ad3e51d6a3e55f378b9b393639bd4fcdd929eaa8a8f6e24936cb79000063af53dc3acb07439b29123c0438d8e0d609ea4a88e5d21435b25f7f0f77cc1167e1d67e3916ba72d28282fcb0330544eb44375619e236aa9438cdd52c743c1d6514a7745539a46b25550f5471859845f0ccead896e05b088ee873b715a0d97bfe452bd560976b90688ff39ba270fbae60f0fef78e5f75ee65838ce92b06f3ccf3eb51e9cefea749b14849a5e599d3b48db761b8cd245c23ba2e1db7e40797a615ad6978db50b8f3da098b8d4c911fe2d660d0653414550ed3195c2a94c70989b70172143348a40c2fed"}}, {0x8c, &(0x7f0000000480)=@string={0x8c, 0x3, "d6d2a53ca179bdc40284964afc9f760ca502b9a44d0a141a77214aae250b0d93a28d00fd08940df50b5977c2a86a4ddd05f39f0f6fb4081bbc10b0070b3a986a9992ccc0c11a2a2f149eb1106101e7d968e0dfdf579f73a3c5d2cc9376a9d1199421f3b676202fff18b2702c0a95c759ed54c9393925fdbb7977b0537c714c7568a04a70a7be6dea2a5b"}}]}) 11m29.401022402s ago: executing program 4 (id=1617): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000000), 0x0}, 0x20) socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = epoll_create1(0x0) epoll_pwait(r3, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x3, &(0x7f0000000080)={[0x9]}, 0x8) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_dev$radio(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f00000001c0)={0x1ebb, 0x38414761, 0x3, @stepwise={0x2, 0x3, 0x8, 0x3, 0x6, 0x6}}) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) 11m28.958599092s ago: executing program 4 (id=1621): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000380)=@ethtool_dump={0x3e, 0x7f, 0xb5d}}) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) syz_io_uring_setup(0x48a, &(0x7f0000000440)={0x0, 0x931e, 0x0, 0x3, 0x100000d1}, &(0x7f0000000140)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x2e00) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x84) mkdir(0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000000)={0x807e, 0x873e, 0x7, 0x8, 0xb3, 0x81}) 11m28.018847709s ago: executing program 4 (id=1622): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000700000a6f000000030a0fdb00000000000000000a002005090073797a310000000014000480080002403cb140bb0800014000000003100008800c0002400001000000000005140000001100010000000000000000800100000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6e74610000000044000280080001400000000c080003400000000008000340000000170800014000000003080002400000002308000140000000120800024000000018080002"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x44000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef3", 0x15}, {0x0}], 0x4}, 0x800) (async) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) r9 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) syz_usb_disconnect(r9) (async) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) (async) ioctl$UI_DEV_CREATE(r9, 0x4004550a) (async) r10 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r10, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r10, 0xc0287c02, &(0x7f0000000400)={r11, &(0x7f00000007c0)=[{0x80000000}], &(0x7f0000000100)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r10, 0xc0287c02, &(0x7f0000000280)={r13, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r10, 0xc0347c03, &(0x7f000000a300)={{r12, r15, 0x5, [0x80000001, 0x4]}, {r14, r16, 0x4, [0xc1b, 0x4]}, 0x0, [0x7e, 0x8]}) 11m12.594166886s ago: executing program 34 (id=1622): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000700000a6f000000030a0fdb00000000000000000a002005090073797a310000000014000480080002403cb140bb0800014000000003100008800c0002400001000000000005140000001100010000000000000000800100000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6e74610000000044000280080001400000000c080003400000000008000340000000170800014000000003080002400000002308000140000000120800024000000018080002"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x44000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef3", 0x15}, {0x0}], 0x4}, 0x800) (async) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) r9 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) syz_usb_disconnect(r9) (async) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) (async) ioctl$UI_DEV_CREATE(r9, 0x4004550a) (async) r10 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r10, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r10, 0xc0287c02, &(0x7f0000000400)={r11, &(0x7f00000007c0)=[{0x80000000}], &(0x7f0000000100)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r10, 0xc0287c02, &(0x7f0000000280)={r13, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r10, 0xc0347c03, &(0x7f000000a300)={{r12, r15, 0x5, [0x80000001, 0x4]}, {r14, r16, 0x4, [0xc1b, 0x4]}, 0x0, [0x7e, 0x8]}) 8m7.733056384s ago: executing program 5 (id=2191): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0x0, 0x0, 0x0, 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4d) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, 0x0, 0x0, &(0x7f0000561000/0x1000)=nil, 0x1000, 0x1004000}) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0xc0, 0x1, 0x4, 0x0, 0x9}) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405668, &(0x7f0000000140)={0x9, 0x1, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x34565559}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) 8m5.438741272s ago: executing program 5 (id=2193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x10006}, 0x1c) socket$kcm(0x29, 0x5, 0x0) syz_usb_connect(0x1, 0x24, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x28181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x10002, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x261f]}}], 0xffc8) 8m1.13683735s ago: executing program 5 (id=2203): syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x101102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x428, 0x0, 0x240, 0xffffffff, 0x1a0, 0x0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) fcntl$lock(r0, 0x5, &(0x7f00000004c0)={0x0, 0x3, 0x2a25fcf5, 0xa91, r2}) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0xc989, 0x0, 0xfff7ffdf, 0x173}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x74, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x604a}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x0) io_uring_enter(r3, 0x2b92, 0xf9d0, 0x4, 0x0, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RLERRORu(r8, &(0x7f0000000240)=ANY=[], 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r8, 0x0) 8m0.017118717s ago: executing program 5 (id=2206): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) preadv(r3, &(0x7f00000047c0)=[{&(0x7f0000002640)=""/21, 0x15}], 0x1, 0x53b0, 0x2000000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) 7m59.489268258s ago: executing program 5 (id=2207): ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) writev(r2, &(0x7f0000000380), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d968119f68f58d94773b9ab884100003c"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000c00)={0x2020}, 0x2020) pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0xadc) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xf, &(0x7f0000002c40)=ANY=[@ANYBLOB="1800000001000000000000000104000062070c00fcffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70c0000ff0f00007b8af8ff00000000bfa200080000ff00000000000000ffffb703000008000000b70400000000000085000058716ef793bd0082000000185900000600000000000000000000009500000000000000ff92b0655e7f2990b9885b50d04519950c78d4"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x7c, &(0x7f00000002c0)=""/124, 0x40f00, 0x10, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f00000000c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x3, 0x1, 0x84}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000340)=[r3, r3, r3, r1, r3, r3], &(0x7f00000003c0)=[{0x1, 0x3, 0x5}, {0x5, 0x4, 0x0, 0x4}, {0x3, 0x4, 0x8, 0x1}], 0x10, 0x10001}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r5, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x6f, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x87, 0xb, 0x3, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x100}}}, {{@ipv6={@remote, @private0, [0xff000000], [0xffffffff, 0x0, 0x0, 0xffffff00], 'wg1\x00', 'vlan0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x54}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x18, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r7, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd, 0x3f, 0x6, '\b\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000003700)={0x0, 0x0, 0x0}, 0x800) 7m58.124619388s ago: executing program 5 (id=2210): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000380)={0x2, @pix={0x4365, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0xa, 0x5, 0x0, 0x3, 0x1, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x28a441, 0x143) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x30, 0x1, 0x2, 0x301, 0x0, 0x0, {0x1}, [@CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x0) listen(0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000000)=""/135, 0x87}], 0x1, 0x5d, 0x40000003) sendmmsg$inet6(r5, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="9c457f50c3fedf29aad103f83a78c4f5ced159faf540befc7357d3750e6c0fd57cbb11f05b89dc5870650bc8d390e4029cd02cb0ef83997d8a7878a8ca4097314f92957ba537b857f40010cad794463511911588ba50b6a57bdf55239b0c1beafedcf8ee1999d62704c043bed02110334437c8c1864c6b8ed72805adacd7da322d32c9f706acd10113ef1af531ef127487e9", 0x92}, {&(0x7f0000000600)}], 0x2, &(0x7f0000000200)=[@dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x6c, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x81}, @pad1, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}], 0x68}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0x7, @private1, 0x6}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000001600)="6c0a281db3073a52def91b76e6ac78ad57658876d2eaace32f21693b63f1dcd14695278f02e66234a4b6ab40cd5a816f99319622a7f0fe2b9b47fdcb709f07ebd532adaaf76973bf09552ae0e587894f1bca1aaa02a954de8914670b548fb4815f64d89c941e5d0dbd7b01946e7fe69214054f0bf84103fd", 0x78}], 0x1, &(0x7f0000001680)=[@hoplimit={{0x14, 0x29, 0x34, 0x10}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x73, 0xa, '\x00', [@generic={0x9, 0x2f, "f1df729e2f2b17233d73527746016a0ed3885e4a847b13e9b5b71e64b2ae513baa2a632da2d54426be6ed9e45a7c90"}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x4}, @hao={0xc9, 0x10, @mcast2}]}}}], 0x88}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffffb, @private0, 0xa}, 0x1c, &(0x7f0000001840)=[{&(0x7f0000001740)}], 0x1, &(0x7f0000001880)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}, @tclass={{0x14, 0x29, 0x43, 0x40}}, @hopopts={{0x78, 0x29, 0x36, {0x32, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @generic={0x2, 0x51, "a1bbf6b74e94902e9129ae9c43514885280738c26cd690e1687bcdff8e47c743c84a3921cac2a2cb4b3f922f4002c8f32fe62b7dc212d87cad9a7de709dbbdb080ddbe7994c5df9a32bf69e3b86bcd2ddd"}]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0xff, 0x0, 0x1, 0x8}}}, @dontfrag={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x3ff}}, @rthdr={{0x58, 0x29, 0x39, {0x5e, 0x8, 0x0, 0x0, 0x0, [@mcast1, @private1, @remote, @loopback]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xa8}}], 0x160}}, {{&(0x7f0000001a00)={0xa, 0x4e24, 0x7, @loopback, 0x5}, 0x1c, &(0x7f0000001c80)=[{&(0x7f0000001a40)="453895a669328852ec5eb87d747fb740f9fbddd525656c6760e68a3cc3c8cacd", 0x20}, {&(0x7f0000001a80)}, {&(0x7f0000001ac0)="09b6bfd9f31a92a6004430e9486e76ba1647087a01099f6b938974bc3246dc28a4ceaba961136c518ad082407ce9550dd0b1b35e73", 0x35}, {&(0x7f0000001b00)="78e608c9e69ad97265fd9f2d911206533a5f20c2adf9f4a12a964a76f5380c93833526b9d8b16cd91ca1bf05ce7d509896bb044436de7eb9a0974a0b8d6604925a43684f", 0x44}, {0x0}], 0x5, &(0x7f0000001d00)=[@dstopts_2292={{0x88, 0x29, 0x4, {0x3b, 0xd, '\x00', [@generic={0xc0, 0x4b, "02ca29c6a6a38b05063fa79a0a0ae4b992c712396a3d6f231e585948f441d462aed1b74823777f340e9a637b40043ad00be7b3d60752b28204f9ef490e5693de6a265ad974a0612c1df192"}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xa}}, @jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x1, [0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x80}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x5e, 0x2, 0x2, 0xd, 0x0, [@mcast1]}}}, @rthdr={{0xa8, 0x29, 0x39, {0x6c, 0x12, 0x1, 0x20, 0x0, [@local, @private2, @dev={0xfe, 0x80, '\x00', 0x1d}, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7f}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x3b, 0x2, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x3, [0x2]}}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2b, 0x2, 0x2, 0x5, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7fff}}, @tclass={{0x14, 0x29, 0x43, 0x5}}], 0x210}}, {{&(0x7f0000001f40)={0xa, 0x4e23, 0xbf, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8000}, 0x1c, &(0x7f0000002080)=[{&(0x7f0000001f80)="561e8f663fcb7c44c25d7e791bf5ee35758d451b2d3d5b8312b844c11d54f17113ecada7b9a585a24a18bffd337fedd54c7f01716566daa5f4876059e1e758489e1260123362f89f931541d7aca1d63224ba801e6409f387d2a41a53086578de57d5fafc2972c2aad3ac318a1ef23bbc5fab1c212439b6435bdd1650c59001314c12c3e35b39650c9a32e78942ff8e9cdb2c74605454f06875b33dd3cefe371cd6396a837243a00fce482179c6e4e31fcc7447066adbd8c0fd5fa9071c2840cafade4629a99e80fb3950347b396e7c433cdb2e34dd4aa24d2bbbc9e317dd9fc676c8", 0xe2}], 0x1, &(0x7f00000020c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x81}}, @rthdr={{0x48, 0x29, 0x39, {0x0, 0x6, 0x1, 0xe, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local]}}}, @dstopts={{0x30, 0x29, 0x37, {0x3c, 0x2, '\x00', [@pad1, @pad1, @generic={0x3}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x10001}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x0, 0x14, 0x1, 0x2, 0x0, [@empty, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @loopback, @remote, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}], 0x178}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003700)=[@hoplimit={{0x14, 0x29, 0x34, 0x10000}}, @tclass={{0x14, 0x29, 0x43, 0x2}}], 0x30}}], 0x6, 0x2000020) ptrace$setsig(0x4203, r4, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) 7m57.727317978s ago: executing program 35 (id=2210): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000380)={0x2, @pix={0x4365, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0xa, 0x5, 0x0, 0x3, 0x1, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x28a441, 0x143) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x30, 0x1, 0x2, 0x301, 0x0, 0x0, {0x1}, [@CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x0) listen(0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000000)=""/135, 0x87}], 0x1, 0x5d, 0x40000003) sendmmsg$inet6(r5, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="9c457f50c3fedf29aad103f83a78c4f5ced159faf540befc7357d3750e6c0fd57cbb11f05b89dc5870650bc8d390e4029cd02cb0ef83997d8a7878a8ca4097314f92957ba537b857f40010cad794463511911588ba50b6a57bdf55239b0c1beafedcf8ee1999d62704c043bed02110334437c8c1864c6b8ed72805adacd7da322d32c9f706acd10113ef1af531ef127487e9", 0x92}, {&(0x7f0000000600)}], 0x2, &(0x7f0000000200)=[@dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x6c, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x81}, @pad1, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}], 0x68}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0x7, @private1, 0x6}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000001600)="6c0a281db3073a52def91b76e6ac78ad57658876d2eaace32f21693b63f1dcd14695278f02e66234a4b6ab40cd5a816f99319622a7f0fe2b9b47fdcb709f07ebd532adaaf76973bf09552ae0e587894f1bca1aaa02a954de8914670b548fb4815f64d89c941e5d0dbd7b01946e7fe69214054f0bf84103fd", 0x78}], 0x1, &(0x7f0000001680)=[@hoplimit={{0x14, 0x29, 0x34, 0x10}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x73, 0xa, '\x00', [@generic={0x9, 0x2f, "f1df729e2f2b17233d73527746016a0ed3885e4a847b13e9b5b71e64b2ae513baa2a632da2d54426be6ed9e45a7c90"}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x4}, @hao={0xc9, 0x10, @mcast2}]}}}], 0x88}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffffb, @private0, 0xa}, 0x1c, &(0x7f0000001840)=[{&(0x7f0000001740)}], 0x1, &(0x7f0000001880)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}, @tclass={{0x14, 0x29, 0x43, 0x40}}, @hopopts={{0x78, 0x29, 0x36, {0x32, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @generic={0x2, 0x51, "a1bbf6b74e94902e9129ae9c43514885280738c26cd690e1687bcdff8e47c743c84a3921cac2a2cb4b3f922f4002c8f32fe62b7dc212d87cad9a7de709dbbdb080ddbe7994c5df9a32bf69e3b86bcd2ddd"}]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0xff, 0x0, 0x1, 0x8}}}, @dontfrag={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x3ff}}, @rthdr={{0x58, 0x29, 0x39, {0x5e, 0x8, 0x0, 0x0, 0x0, [@mcast1, @private1, @remote, @loopback]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xa8}}], 0x160}}, {{&(0x7f0000001a00)={0xa, 0x4e24, 0x7, @loopback, 0x5}, 0x1c, &(0x7f0000001c80)=[{&(0x7f0000001a40)="453895a669328852ec5eb87d747fb740f9fbddd525656c6760e68a3cc3c8cacd", 0x20}, {&(0x7f0000001a80)}, {&(0x7f0000001ac0)="09b6bfd9f31a92a6004430e9486e76ba1647087a01099f6b938974bc3246dc28a4ceaba961136c518ad082407ce9550dd0b1b35e73", 0x35}, {&(0x7f0000001b00)="78e608c9e69ad97265fd9f2d911206533a5f20c2adf9f4a12a964a76f5380c93833526b9d8b16cd91ca1bf05ce7d509896bb044436de7eb9a0974a0b8d6604925a43684f", 0x44}, {0x0}], 0x5, &(0x7f0000001d00)=[@dstopts_2292={{0x88, 0x29, 0x4, {0x3b, 0xd, '\x00', [@generic={0xc0, 0x4b, "02ca29c6a6a38b05063fa79a0a0ae4b992c712396a3d6f231e585948f441d462aed1b74823777f340e9a637b40043ad00be7b3d60752b28204f9ef490e5693de6a265ad974a0612c1df192"}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xa}}, @jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x1, [0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x80}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x5e, 0x2, 0x2, 0xd, 0x0, [@mcast1]}}}, @rthdr={{0xa8, 0x29, 0x39, {0x6c, 0x12, 0x1, 0x20, 0x0, [@local, @private2, @dev={0xfe, 0x80, '\x00', 0x1d}, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast2}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7f}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x3b, 0x2, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x3, [0x2]}}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2b, 0x2, 0x2, 0x5, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7fff}}, @tclass={{0x14, 0x29, 0x43, 0x5}}], 0x210}}, {{&(0x7f0000001f40)={0xa, 0x4e23, 0xbf, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8000}, 0x1c, &(0x7f0000002080)=[{&(0x7f0000001f80)="561e8f663fcb7c44c25d7e791bf5ee35758d451b2d3d5b8312b844c11d54f17113ecada7b9a585a24a18bffd337fedd54c7f01716566daa5f4876059e1e758489e1260123362f89f931541d7aca1d63224ba801e6409f387d2a41a53086578de57d5fafc2972c2aad3ac318a1ef23bbc5fab1c212439b6435bdd1650c59001314c12c3e35b39650c9a32e78942ff8e9cdb2c74605454f06875b33dd3cefe371cd6396a837243a00fce482179c6e4e31fcc7447066adbd8c0fd5fa9071c2840cafade4629a99e80fb3950347b396e7c433cdb2e34dd4aa24d2bbbc9e317dd9fc676c8", 0xe2}], 0x1, &(0x7f00000020c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x81}}, @rthdr={{0x48, 0x29, 0x39, {0x0, 0x6, 0x1, 0xe, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local]}}}, @dstopts={{0x30, 0x29, 0x37, {0x3c, 0x2, '\x00', [@pad1, @pad1, @generic={0x3}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x10001}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x0, 0x14, 0x1, 0x2, 0x0, [@empty, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @loopback, @remote, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}], 0x178}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003700)=[@hoplimit={{0x14, 0x29, 0x34, 0x10000}}, @tclass={{0x14, 0x29, 0x43, 0x2}}], 0x30}}], 0x6, 0x2000020) ptrace$setsig(0x4203, r4, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) 3m33.25970161s ago: executing program 7 (id=3008): fanotify_init(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e0a0400c900c88be748d1b6f93dee9d00018000000000"], 0xd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffc}, {0xa, 0xe22, 0xffffdffd, @empty, 0x3}, 0xffff, {[0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffff8]}}, 0x5c) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18}, 0xc800) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x20000000000008) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x400600, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000140)=@x86={0xc, 0x5, 0x2, 0x0, 0x7, 0x2, 0x6, 0xc, 0x1, 0x7, 0x0, 0xf, 0x0, 0x4, 0xee96, 0x0, 0xf8, 0x6, 0x14, '\x00', 0x2, 0x5}) 3m32.289095614s ago: executing program 7 (id=3013): openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x20000000000001f2, &(0x7f0000000000)=ANY=[@ANYBLOB="1803"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x2000000, 0x0, 0x0, &(0x7f0000000900), 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf251b0000000700210030"], 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002bc0)=ANY=[@ANYBLOB="1400000010000100000000ff000000000000000a74000000030a01040000000000000000000000050900010073797a300000000008000b4000000003080007006e617400080007006e61740008000a4000000002340008800c00014000000000000000050c00014000000000000001010c00024000000000000000060c000140000000000000020044000000060a0300000000000000000007000002080009400000000108000940000000000c000640000000000000000108000b40000000010c0003400000000000000002140000001100010000000000000000000000000a"], 0xe0}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) recvmmsg(r3, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0) socket$kcm(0x11, 0x3, 0x0) 3m31.059265349s ago: executing program 7 (id=3016): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000340)="f15f380fbc4d4b99b7604d79a24a087355ae47dbff3c64bc6f1a514a3a614d89e3", 0x21}, {&(0x7f0000000500)='m', 0x1}, {&(0x7f0000000540)="69789b3e68b6bb468a00301326eab0eda05e1be62b5f5a509f60c33bf2b169e796c15793c71a66f06e415678d406f12f546a15d50a514b7cc424cf", 0x3b}, {&(0x7f0000000680)}, {&(0x7f0000000880)="e3d83bc2e8ef11477817c33bf43a6dc7601e7240c2a40e5c2f5afaf76e7852dd78cdc6862e4e34705fc1e797599a00a77236f7505824cdebbc3485a382a7138007c497bc80c246bfcc79d9928d22cc5c7bbec7190e82ba9ca106b78fe38a06f7de1ef35b4bd939065bf85002f0a4791b82fcc99e223417515bfde1bcae74cbf1338437ce59d009b5d9862a685186e47c6670b327ae679f99eac336919a4e0c736a264324a93f885b14a6be53d89866", 0xaf}, {&(0x7f0000000940)="fb83fe63ca93cec41f552d76065d983e7cda6bb2f21aaa05a9ee7d75ed14a140f329d12d530ea154d7d21d0aa5517808ef38b13d6189f619adbf33ba19eb2180096e", 0x42}], 0x6, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x11, 0xffffffffffffffff, {0x1}}, './file0\x00'}) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859, 0x0, 0x0, 0xffffffff, 0x0, 0x80000000, 0x0, 0x1}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x40, 0x3e000000, 0x800, 0xbbba, 0x2, 0x18, 0x0, {0x0, 0x2007}, {0x9, 0x3, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x0, 0x20001}, 0x0, 0x0, 0xa, 0x4d612, 0x0, 0x0, 0x0, 0x4000008, 0xfffffffd, 0x0, 0x0, 0x0, 0x39, 0x100, 0x1, 0x1}) removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00') setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60", 0x9b}, {0x0}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a24", 0x3b}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8", 0x1c}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda2681", 0x28}, {&(0x7f0000000ac0)}], 0x7, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m29.393818744s ago: executing program 7 (id=3021): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in6=@remote, @in=@local, 0xfffc, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x9ff, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="cc000000210001000000000004000000fc020000000000000000000000000000fc02000000000000000000000000000100000000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000000000050001100ff0200000000009b59b86cc15668b1898a87d5cf0000000000000000010a0101000000000000000000000000000a010100000000008e0ffe00000000000000000000000600000000000000000000000056be0000000000000a000a002c0013000a010101000000000000000000000000ac1e00010000000000000000000000000000000002000000"], 0xcc}, 0x1, 0x0, 0x0, 0xc060}, 0x0) 3m27.454799763s ago: executing program 7 (id=3023): fanotify_init(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e0a0400c900c88be748d1b6f93dee9d00018000000000"], 0xd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffc}, {0xa, 0xe22, 0xffffdffd, @empty, 0x3}, 0xffff, {[0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffff8]}}, 0x5c) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18}, 0xc800) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x20000000000008) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x400600, 0x0) 3m24.440582497s ago: executing program 7 (id=3029): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x1, 0x11, 0x68, @empty, @empty, 0x8, 0x700, 0xa, 0xfffff001}}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = gettid() sched_setscheduler(r2, 0x5, &(0x7f0000000640)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102359, 0xfffffdf3) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000440)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x99, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb8100200008004500008700000000000190780a010102ffffffff000090780067fffb105c7b2d92c7a4453d65a29fd9f46f222f38ca325aeb6dc22972f90fc4c77d5815152a5fa43b10b011c84014ddcc68c0512af302208b8c5c72fd73ff4194e8bb915cd9c3e8a82165ea2f47fd16e8c730967c6765abc3257589cfbe9f86c532f905756b48eec2971fe963bf10ba708321723d9c9bee4aa8"], 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x1) close(r4) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f00000003c0), 0x0, 0x0, 0xa06002, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x42, 0x810003, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) shutdown(r5, 0x1) 3m8.402372256s ago: executing program 36 (id=3029): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x1, 0x11, 0x68, @empty, @empty, 0x8, 0x700, 0xa, 0xfffff001}}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = gettid() sched_setscheduler(r2, 0x5, &(0x7f0000000640)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102359, 0xfffffdf3) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000440)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x99, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb8100200008004500008700000000000190780a010102ffffffff000090780067fffb105c7b2d92c7a4453d65a29fd9f46f222f38ca325aeb6dc22972f90fc4c77d5815152a5fa43b10b011c84014ddcc68c0512af302208b8c5c72fd73ff4194e8bb915cd9c3e8a82165ea2f47fd16e8c730967c6765abc3257589cfbe9f86c532f905756b48eec2971fe963bf10ba708321723d9c9bee4aa8"], 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x1) close(r4) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f00000003c0), 0x0, 0x0, 0xa06002, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x42, 0x810003, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) shutdown(r5, 0x1) 2m42.648588588s ago: executing program 0 (id=3139): openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="872486", 0x3}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x20000000000001f2, &(0x7f0000000000)=ANY=[@ANYBLOB="1803"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x2000000, 0x0, 0x0, &(0x7f0000000900), 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf251b0000000700210030"], 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002bc0)=ANY=[@ANYBLOB="1400000010000100000000ff000000000000000a74000000030a01040000000000000000000000050900010073797a300000000008000b4000000003080007006e617400080007006e61740008000a4000000002340008800c00014000000000000000050c00014000000000000001010c00024000000000000000060c000140000000000000020044000000060a0300000000000000000007000002080009400000000108000940000000000c000640000000000000000108000b40000000010c0003400000000000000002140000001100010000000000000000000000000a"], 0xe0}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) recvmmsg(r3, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0) socket$kcm(0x11, 0x3, 0x0) 2m41.158614927s ago: executing program 0 (id=3143): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000100)=@reiserfs_5={0x14, 0x5, {0x4, 0x8, 0x7, 0x10, 0xe55}}, 0x800) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$packet(0x11, 0x3, 0x300) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/55, 0x37, 0xffffffffffffffff) setsockopt$packet_int(r2, 0x107, 0x19, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x1a00000, &(0x7f0000001240)='grpquota') r3 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0xffffffffffff8001, 0x400, 0x1, 0x700}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000001200), 0x75, r4, 0x4}, 0x38) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x84, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r5, &(0x7f0000000080)={0x14}, 0x14) r6 = dup(r0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000007b000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000083dd90085000000a7000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 2m39.135657998s ago: executing program 0 (id=3155): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x0, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r6, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000380)={0x0, &(0x7f0000000100)}) io_uring_enter(r6, 0x4e14, 0x913a, 0x41, 0x0, 0x0) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r9, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r9, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x90000009}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 2m37.020711883s ago: executing program 0 (id=3157): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000000)='net/netlink\x00') r2 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc1105511, &(0x7f0000000040)={0xa, 0x3, 0x40, 0x10006, '\x00', 0x7}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0xc1105511, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r3, 0x0, 0x0, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000001480)={0x0, 0x0, r8}) 2m32.635854909s ago: executing program 0 (id=3178): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000340)="f15f380fbc4d4b99b7604d79a24a087355ae47dbff3c64bc6f1a514a3a614d89e3", 0x21}, {&(0x7f0000000500)='m', 0x1}, {&(0x7f0000000540)="69789b3e68b6bb468a00301326eab0eda05e1be62b5f5a509f60c33bf2b169e796c15793c71a66f06e415678d406f12f546a15d50a514b7cc424cf", 0x3b}, {&(0x7f0000000680)="c60978ea1f7353652d7d7af312204f1e4701a9446e1e305f9db167e1dc5b6d0065641add82dcfb44bbd1bf442617fe5120399a68217d236df5328d80026c6fb0c31a9631b2886ff395811916849b48b48b46b9f75c7a93c7c1647d0c2e7776210db3e8877ce7a800658357b6e35c", 0x6e}, {&(0x7f0000000880)="e3d83bc2e8ef11477817c33bf43a6dc7601e7240c2a40e5c2f5afaf76e7852dd78cdc6862e4e34705fc1e797599a00a77236f7505824cdebbc3485a382a7138007c497bc80c246bfcc79d9928d22cc5c7bbec7190e82ba9ca106b78fe38a06f7de1ef35b4bd939065bf85002f0a4791b82fcc99e223417515bfde1bcae74cbf1338437ce59d009b5d9862a685186e47c6670b327ae679f99eac336919a4e0c736a264324a93f885b14a6", 0xaa}, {&(0x7f0000000940)="fb83fe63ca93cec41f552d76065d983e7cda6bb2f21aaa05a9ee7d75ed14a140f329d12d530ea154d7d21d0aa5517808ef38b13d6189f619adbf33ba19eb2180096e", 0x42}], 0x6, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x11, 0xffffffffffffffff, {0x1}}, './file0\x00'}) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859, 0x0, 0x0, 0xffffffff, 0x0, 0x80000000, 0x0, 0x1}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x40, 0x3e000000, 0x800, 0xbbba, 0x2, 0x18, 0x0, {0x0, 0x2007}, {0x9, 0x3, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x0, 0x20001}, 0x0, 0x0, 0xa, 0x4d612, 0x0, 0x0, 0x0, 0x4000008, 0xfffffffd, 0x0, 0x0, 0x0, 0x39, 0x100, 0x1, 0x1}) removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00') setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60", 0x9b}, {0x0}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a24", 0x3b}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8", 0x1c}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda2681", 0x28}, {&(0x7f0000000ac0)}], 0x7, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m31.656796882s ago: executing program 0 (id=3180): add_key$fscrypt_provisioning(&(0x7f0000000280), 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x821, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r3, 0x0, 0xcf, &(0x7f00000002c0)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003440), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400e20004000000080000000400000020000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000400"/28], 0x50) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000540)={"4850f32c5bd10233b97603c9c5575839", 0x0, 0x0, {0x2, 0x4}, {0x80000000, 0x5}, 0x4, [0x3739, 0xd, 0x1, 0x3ff, 0x9, 0xfffffffffffffff7, 0x3, 0xb, 0x60000000000000, 0x8, 0x10, 0x0, 0x1, 0x1, 0x3, 0x100000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000900)={{r1}, r6, 0x4, @inherit={0x50, &(0x7f0000000680)={0x0, 0x1, 0xc, 0xffffffffffff0000, {0xb, 0x4, 0x0, 0x8, 0x5}, [0x6]}}, @subvolid=0x7fff}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') read$watch_queue(r8, &(0x7f0000001080)=""/4088, 0xff8) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r7, 0xfffffffc, 0x7, 0x4, 0x0, [0x0], [0x0, 0x3], [0x0, 0x0, 0x100000, 0x4d8cb8e4], [0x0, 0x0, 0x6, 0x1000000000]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x22001) 2m15.852592956s ago: executing program 37 (id=3180): add_key$fscrypt_provisioning(&(0x7f0000000280), 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x821, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r3, 0x0, 0xcf, &(0x7f00000002c0)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003440), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400e20004000000080000000400000020000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000400"/28], 0x50) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000540)={"4850f32c5bd10233b97603c9c5575839", 0x0, 0x0, {0x2, 0x4}, {0x80000000, 0x5}, 0x4, [0x3739, 0xd, 0x1, 0x3ff, 0x9, 0xfffffffffffffff7, 0x3, 0xb, 0x60000000000000, 0x8, 0x10, 0x0, 0x1, 0x1, 0x3, 0x100000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000900)={{r1}, r6, 0x4, @inherit={0x50, &(0x7f0000000680)={0x0, 0x1, 0xc, 0xffffffffffff0000, {0xb, 0x4, 0x0, 0x8, 0x5}, [0x6]}}, @subvolid=0x7fff}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') read$watch_queue(r8, &(0x7f0000001080)=""/4088, 0xff8) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r7, 0xfffffffc, 0x7, 0x4, 0x0, [0x0], [0x0, 0x3], [0x0, 0x0, 0x100000, 0x4d8cb8e4], [0x0, 0x0, 0x6, 0x1000000000]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x22001) 10.096593877s ago: executing program 3 (id=3631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4048aecb, &(0x7f00000034c0)=@vmx={0x8, 0x0, 0x2080}) 9.649359724s ago: executing program 8 (id=3632): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000800)="b44c8067", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffa}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[], 0x44}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r2}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000e387254e79d97e514ff570ac85d900000040001c001a800800028004000500080000003e1200000800060000000000080000000000000076aa2d0988e08b448cecb71865231879f63d5ed857d966f74162ea670496e3d0e0c1eaad2248f7ef38223e19946d6afa647e5e4e2d93d32f5371147c68b21fbbd6d5affc1a33f1b6e589d0279f3f4b4624bc5fac0b428a6d06a37657453903be870587aab16571f169b1f6c2cc3e55a600cd7e68d02346869f283af634aa1e2745b6218334f5ccee725fbe172b1b55d43f66fb07d7812a0ac5df"], 0x44}}, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/236, 0xec, 0x0, &(0x7f00000002c0)=""/108, 0x6c}, &(0x7f00000004c0)=0x40) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) r7 = epoll_create1(0x0) syz_emit_ethernet(0x93, &(0x7f0000000500)={@remote, @random="e95a15045dca", @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, "f1", "470896", 0x4, "33b9fd93e64ea394b4a97d33539fb55f64e6094b82aa8e4f7eb1c4c8a85c5f5135a51d922c58abb2af1cc9a89a57021d159ce64ed32c461e647e0dad2de7be87168c3ffe9047a146429762fa1442fa4188d0ef37710f223f6363b935a4cd335a04eab3060196117965589ed71f0e222c0e36a2c90740adbdc19adc1bf7"}}}}}, &(0x7f00000005c0)={0x1, 0x3, [0xfd1, 0x375, 0x489, 0x1ba]}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x38011, r8, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r9, r9, 0x0, 0x2000fb) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r10, &(0x7f0000000000)={0x90000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x0, 'pimreg0\x00', {0x4}, 0xff80}) ioctl$EVIOCGABS20(r10, 0x80184560, &(0x7f00000000c0)=""/126) 7.7444776s ago: executing program 6 (id=3634): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000280)={0x0, @reserved}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{0x4972, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x1}) ioctl$UI_DEV_CREATE(r2, 0x5501) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f00000027c0)={0x2020}, 0x628) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000180)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0xfffffffffffffe3d, 0x3) fdatasync(r5) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x2400c010) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0), 0x40002, 0x0) write$FUSE_DIRENT(r7, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 7.645099407s ago: executing program 8 (id=3635): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYBLOB="faa8f09a2dd43edbe93bcd451287ce67012b5ec907106a0bbc2643a663b7b21149079cfcc45f146a72757cbf181e5b1b4792dadf42b228611dcc58edd11a5b874503beed", @ANYBLOB="0000000000000000140012800a000100767863616e000000040002800800", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0x0, 0x0, 0x0, 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4d) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, 0x0, 0x0, &(0x7f0000561000/0x1000)=nil, 0x1000, 0x1004000}) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0xc0, 0x1, 0x4, 0x0, 0x9}) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405668, &(0x7f0000000140)={0x9, 0x1, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x34565559}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) 6.748209457s ago: executing program 6 (id=3637): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) socket(0x2000000000000021, 0x2, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000001c0)=0x7) pipe2$watch_queue(&(0x7f00000000c0), 0x80) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x5522, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000080)) r7 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0x4000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, &(0x7f0000000240)={&(0x7f0000000300)=""/95, 0x5f}) move_pages(0x0, 0x0, 0x0, &(0x7f0000000040)=[0x4], 0x0, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x9) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.686899574s ago: executing program 8 (id=3638): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffff9, 0x7fff, 0x4, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffff, 0x400001, 0xc000, 0x0, 0x0, 0xee01, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket(0xa, 0x3, 0x3a) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) setresgid(r5, r6, 0x0) read$FUSE(r2, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x41, 0x80000000000008, 0x800032b, 0x1, 0x9, 0x2000000001, 0x0, 0x0, 0x120, 0x4000, 0x0, r7, r8, 0x501, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r0, &(0x7f00000001c0)={0x25, 0x19, 0x1, {0x1, {0x1, 0x3, 0x8}, 0x12c, 0x0, r8, 0x0, 0x4, 0x7f, 0x80000001, 0x9, 0x3, 0x0, 0x4000000000a, 0x0, 0x0, 0x4, 0xfff, 0x8, 0x8, 0xfffffffffffffffd}}, 0xa0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0xff28) sendto$inet(r0, &(0x7f0000000340)="0c268a927f1f6588b967481241ba78600a34f65a8286cc6fd955995cbc0567cafec94f10c618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf9fdab050b037511bf746bec66ba", 0x56, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) 6.38330702s ago: executing program 9 (id=3641): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x6d5f, &(0x7f0000000940)={0x0, 0x7779, 0x0, 0x100000, 0x186}, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0xa, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_targets\x00') socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 6.138457214s ago: executing program 9 (id=3643): syz_io_uring_setup(0x599e, &(0x7f0000000200)={0x0, 0x6775, 0x0, 0x1, 0x102}, 0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000140)) write$tun(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="0000dada64fe76a701d03aff00000000000000000000000000000001fc0000000000000000000000000000000200000000000000c2040000100000003c08040407480000fe8000000000000000000000000000bb0000000000000000000000000000000100000000000000000000000000000000fc0200000000000000000000000000012102018100000000ff02000000000000000000000000000129080404b540ef0000000000000000b182cf4c9221d6e344b900000000000000000000000000000000000000ffff6401010120010000000000000000000000000002fc01000000000000000000000000000001019078000000006a8c7ac401015c01fe880000000000000000000000000001fe8800000000000000000000000001012e0a010700000000ff023a609cd923f32e208dd11a0000000000000000000000000001fc0100000000000000000000000000012001000000000000000000000000000200000000000000000000000000000001fc0200000000000000000000000000008904040203400800fe8000000000000000000000000000bb0000000000000000000000000000000134fad0bbfbf43230830d1f7f0b07c8ff04c848ba7aa17e9f965d381049d5e23d9d77c443cb3f19d79c6c37ec10fbae86dbf7d22377ac88ce8d26b075f4e6"], 0x1fc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32], 0xe8}}, 0x20040014) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) unshare(0x8040480) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000040)={0x7, 0x0, 0x2, 0xc, "0020742010000000000000000000fffb00"}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = getpid() sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x5) prlimit64(r4, 0x1, &(0x7f0000000180)={0x80, 0xc}, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x10, 0x1, 0x0, 0x0, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0xfffffffe}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x3}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) socket(0x22, 0x4, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.915157403s ago: executing program 3 (id=3644): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') close_range(r0, 0xffffffffffffffff, 0x2) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x28cf) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r1, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r1, 0x80000001, 0x4) r2 = getpgrp(0x0) syz_pidfd_open(r2, 0x0) statx(r0, 0x0, 0x1000, 0x20, 0x0) 5.561276122s ago: executing program 8 (id=3645): syz_open_dev$vim2m(0x0, 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x6, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x20000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) r1 = socket(0x1f, 0x4, 0xf18b) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0xfffffffc}}, 0x8}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000400), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'pimreg0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) socket$inet6_tcp(0xa, 0x1, 0x0) 5.413685944s ago: executing program 3 (id=3646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125c", 0x1e}, {&(0x7f0000000640)="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", 0x2df}, {&(0x7f0000002680)="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", 0xc9c}, {&(0x7f0000000440)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7", 0x30}], 0x4}, 0x4005) 5.261392017s ago: executing program 6 (id=3647): gettid() sched_setscheduler(0x0, 0x1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x50424752, 0x2, @stepwise={0x5, 0xbc, 0x4, 0x766, 0x6, 0x2}}) syz_emit_vhci(&(0x7f000001b140)=ANY=[@ANYBLOB="043506aaaaaaaa8a78c757144864f8d7c8b1877fe526db4f8934d571b28c59f76b7b48b898a092c6f812f4dfc3dd8545d9e7fd634c11552f70ac760d"], 0x9) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r2, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x0, 0x7, 0x4, &(0x7f0000000080)={0x1d, "146f060000000000000000000000000000000000000000000000000000000400"}}) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0xe000003, 0x0, 0x0, 0x1, 0x80000000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x6, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000140)={0x0, r4}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000080)=@arm64) syz_emit_ethernet(0x4a, &(0x7f000001b180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaac0aaaa86dd608a37f200142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a000005", @ANYRESHEX, @ANYBLOB="ceac432a6ae5cc339ba2321a4a7c6d47a12acd71e3a3756efc3687450148537f67c699a1667e8bffd396851d61a4be0368998fc4a04451a5ff131a888119cb82f21d199e37798818100f4b036cc45bac1f3036bb17c08e75147b6660", @ANYBLOB="5000ffff90780000"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f000001b000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f000001b0c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f000001b080)={&(0x7f000001b040)={0x24, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7ff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20080000}, 0x4000004) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socket$nl_netfilter(0x10, 0x3, 0xc) 4.973727439s ago: executing program 3 (id=3648): socket(0xa, 0x3, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x0, 0x0, 0xf, 0x2, [], '9#'}, @datasec={0x0, 0x1, 0x0, 0xf, 0x2, [{0x2, 0x6, 0x2}], "921c"}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) r0 = syz_clone(0x20000080, &(0x7f0000000100)="00ac480f8036d5f7f0e1aefb5030263338c9893ecf73e833e4eb381222aeab47426d7887", 0x24, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000300)="461c67e0204cea4a94dc7373ccfcf00097f70e71b94dbe5a6ccedaaf76d97c492912ddb4245151a999f55dca010a25f2fe76e388ed96b591883a42328da10916cb9b2d6da4e70c73c1b75e669bbab6509b67469f2698ccf168527ad3b33f9a9b00164eb11ab76bfbe2d5ed53123d10254119f45ec8204e3ac6686c6ae5ddb2fb2cd36b9683ab423ae0c246eba783ea3983c6c97367be2cc6663b7ef8db4035a636b076fa2e33a4eb7819ace7b2ed6a8a332b7485119a371c07764d3347fcd989ed778a550a177ca7d7a42010") prlimit64(r0, 0x2, &(0x7f0000000140)={0xf9d5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) tkill(r1, 0xe) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0xffffffff}, @typedef={0x7}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x61, 0x30, 0x61]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x100a7c1, '\x00', 0x0, r6, 0x0, 0x1}, 0x50) 4.906648907s ago: executing program 9 (id=3649): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYBLOB="faa8f09a2dd43edbe93bcd451287ce67012b5ec907106a0bbc2643a663b7b21149079cfcc45f146a72757cbf181e5b1b4792dadf42b228611dcc58edd11a5b874503beed", @ANYBLOB="0000000000000000140012800a000100767863616e000000040002800800", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0x0, 0x0, 0x0, 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4d) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, 0x0, 0x0, &(0x7f0000561000/0x1000)=nil, 0x1000, 0x1004000}) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0xc0, 0x1, 0x4, 0x0, 0x9}) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405668, &(0x7f0000000140)={0x9, 0x1, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x34565559}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) 3.964767433s ago: executing program 8 (id=3650): creat(0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5a3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) readv(r1, &(0x7f0000004900)=[{&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000380)=""/255, 0xff}, {&(0x7f0000000480)=""/237, 0xed}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/255, 0xff}, {&(0x7f0000003700)=""/160, 0xa0}, {&(0x7f00000037c0)=""/168, 0xa8}, {&(0x7f0000003880)=""/87, 0x57}, {&(0x7f00000049c0)=""/4112, 0x1010}], 0xa) 3.867859612s ago: executing program 1 (id=3651): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2170004}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x10) 3.666325892s ago: executing program 1 (id=3652): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000340)="f15f380fbc4d4b99b7604d79a24a087355ae47dbff3c64bc6f1a514a3a614d89e3", 0x21}, {&(0x7f0000000500)='m', 0x1}, {&(0x7f0000000540)="69789b3e68b6bb468a00301326eab0eda05e1be62b5f5a509f60c33bf2b169e796c15793c71a66f06e415678d406f12f546a15d50a514b7cc424cf", 0x3b}, {&(0x7f0000000680)="c60978ea1f7353652d7d7af312204f1e4701a9446e1e305f9db167e1dc5b6d0065641add82dcfb44bbd1bf442617fe5120399a68217d236df5328d80026c6fb0c31a9631b2886ff395811916849b48b48b46b9f75c7a93c7c1647d0c2e7776210db3e8877ce7a800658357b6e35c", 0x6e}, {&(0x7f0000000880)="e3d83bc2e8ef11477817c33bf43a6dc7601e7240c2a40e5c2f5afaf76e7852dd78cdc6862e4e34705fc1e797599a00a77236f7505824cdebbc3485a382a7138007c497bc80c246bfcc79d9928d22cc5c7bbec7190e82ba9c", 0x58}, {&(0x7f0000000940)="fb83fe63ca93cec41f552d76065d983e7cda6bb2f21aaa05a9ee7d75ed14a140f329d12d530ea154d7d21d0aa5517808ef38b13d6189f619adbf33ba19eb2180096e", 0x42}], 0x6, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x11, 0xffffffffffffffff, {0x1}}, './file0\x00'}) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859, 0x0, 0x0, 0xffffffff, 0x0, 0x80000000, 0x0, 0x1}}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x40, 0x3e000000, 0x800, 0xbbba, 0x2, 0x18, 0x0, {0x0, 0x2007}, {0x9, 0x3, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x0, 0x20001}, 0x0, 0x0, 0xa, 0x4d612, 0x0, 0x0, 0x0, 0x4000008, 0xfffffffd, 0x0, 0x0, 0x0, 0x39, 0x100, 0x1, 0x1}) removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00') setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60", 0x9b}, {0x0}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a24", 0x3b}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8", 0x1c}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda2681", 0x28}, {&(0x7f0000000ac0)}], 0x7, 0x4d9e, 0x8) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.665604149s ago: executing program 9 (id=3653): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x6d5f, &(0x7f0000000940)={0x0, 0x7779, 0x0, 0x100000, 0x186}, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0xa, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_targets\x00') socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.635473102s ago: executing program 6 (id=3654): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x6}, 0x48) bpf$BPF_GET_MAP_INFO(0x4, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x474481, 0x100) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r3, &(0x7f00000010c0)=""/4096, 0x1000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=0x0}}) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{}, {&(0x7f000001b040)}], 0x2}, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x80045017, 0x1000000000000) openat$cgroup(r0, &(0x7f000001b000)='syz0\x00', 0x200002, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, &(0x7f0000000080)={0x1, 0x1, 0x15, 0xf, 0x61, 0x0}) 3.21307484s ago: executing program 1 (id=3655): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in6=@remote, @in=@local, 0xfffc, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x9ff, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="cc000000210001000000000004000000fc020000000000000000000000000000fc02000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000000000050001100ff0200000000009b59b86cc15668b1898a87d5cf0000000000000000010a0101000000000000000000000000000a010100000000008e0ffe00000000000000000000000600000000000000000000000056be0000000000000a000a002c0013000a010101000000000000000000000000ac1e00010000000000000000000000000000000002000000"], 0xcc}, 0x1, 0x0, 0x0, 0xc060}, 0x0) r7 = getpgid(0x0) syz_pidfd_open(r7, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000083c0)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r8, 0x80585414, &(0x7f00000000c0)) 3.197580909s ago: executing program 9 (id=3656): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x2000}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0x4000009, 0xffffffff, {{0x5, 0x4, 0x3, 0x2f, 0x14, 0x67, 0x0, 0xfa, 0x4, 0x0, @remote, @rand_addr=0x64010100}}}}) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff0000"], 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61156c00000000006113500000000000bfa000000000000016000f00080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', r3, @fallback=0xf}, 0x94) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x154}}, 0x20008030) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x401, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r7, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100, 0xff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x2) syz_fuse_handle_req(r7, &(0x7f0000006140)="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", 0x2000, 0x0) 3.014902917s ago: executing program 6 (id=3657): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES64], 0xfdef) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x31) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x4020400) pselect6(0x40, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x6, 0xb7fb, 0x0, 0x0, 0x100}, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x40, 0x635, 0x80003, 0x0, 0x7}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f0000000500)={0x20, 0xf, 0xf3, {0xf3, 0x30, "ab9b5b3674867aa2ccd05f12c95748d25dff121e7be1f2a487b59f017349ff7de9cb0f54f67b8738d20c627b15db4fa641531c4004f89777c36d26d38f8de6e9eb71e51df501ed2fae465ab9981f6f0778c0d123ba381f4becf6d4742aa3511d7f79d0d6c08c166394eae2c31baab87da0270490f23688b5300d6b2757ca09bcb14604248d63e111698e9d1c4c00f4106e51e60095ae27826aaf3685f17c96d00e906618cd272e1034d6a2b302c85fdc3299a19634bae9cf69fc62ab570a9977253276682f74b547fecba7c642b79328e0598c2d2757f8c3767f9d0d35e34a460015be491f399496a68040f13e3f9bda04"}}, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], &(0x7f00000003c0)=ANY=[@ANYBLOB="002208080400907302a7c69d052d"], &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x200, 0x4, 0x1, {0x22, 0xcf2}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x20, 0x14, 0xb3, "1c326ad464fa2e1e83e9aa65e7e9070aad49a60b41160861731d014c504ba397ad39815b7eda15850ec2a57bcaa87df7897678b4e273a50e44302ea12904a3ac0838749c5b2519691a2c58d1db0701200e1d7aea1c618f2281b0db3267811477f9429df335efd4cbf5537746add8a18572e7f042ca55bf1c3f22f2768a4f47dfc3a208f343592f0dbb0380d7ed8f59b0914dfdfc8bde50325b5f8a7ff36838a1514f2cfa55772b4bb73a4a4ac2d7f488c6697d"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000840)={0x20, 0x1, 0x30, "d19804c8e8e91dc8a350b0ecb0e94c52a0ebc1b1c8d51a74be07773ff271be705502d8083c8d68663f4889a4fc6e023c"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0xe0}}) r2 = syz_open_dev$hiddev(&(0x7f0000000300), 0xf, 0x4000) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000340)={0x3, 0x1, 0xffffdb63}) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000380)={0x2, @pix={0x4365, 0x8, 0x584e4f53, 0x3, 0x2, 0x7, 0x1, 0x5, 0x0, 0x8, 0x1, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x28a441, 0x143) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.985845225s ago: executing program 8 (id=3658): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502", @ANYRES32], 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xb9c, &(0x7f0000001b00)=ANY=[@ANYRES8, @ANYRESOCT, @ANYBLOB="774d73543d95e59afa2bbb0c466893705140790626bebf405f12e370cdd7929f13"]) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 2.211647799s ago: executing program 1 (id=3659): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0x0, 0x0, 0x0, 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4d) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, 0x0, 0x0, &(0x7f0000561000/0x1000)=nil, 0x1000, 0x1004000}) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0xc0, 0x1, 0x4, 0x0, 0x9}) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405668, &(0x7f0000000140)={0x9, 0x1, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x34565559}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x5c}}, 0x40) 1.750613473s ago: executing program 1 (id=3660): syz_open_dev$vim2m(0x0, 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x6, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x20000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) r1 = socket(0x1f, 0x4, 0xf18b) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0xfffffffc}}, 0x8}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000400), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'pimreg0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) socket$inet6_tcp(0xa, 0x1, 0x0) 1.60558507s ago: executing program 9 (id=3661): connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x8d) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r3, 0x0, 0x7}, 0x38) r4 = fanotify_init(0x1a, 0x1) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x124) fanotify_mark(r4, 0x1, 0x4000001a, r7, 0x0) mknodat$null(r7, &(0x7f0000000140)='./file1\x00', 0x2, 0x103) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x18, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff8}, [@exit, @call={0x85, 0x0, 0x0, 0x46}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x436f}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0xa3, &(0x7f00000003c0)=""/163, 0x41100, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000000c0)={0x3, 0x5, 0x34}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000100)=[{0x4, 0x3, 0x10, 0x3}, {0x2, 0x2, 0x1, 0x2}], 0x10, 0x9}, 0x94) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r8, r9, 0x12, 0x0, @val=@netfilter={0x7, 0x1, 0xc00000, 0x1}}, 0x20) 1.184907249s ago: executing program 3 (id=3662): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2170004}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x10) 1.094868582s ago: executing program 6 (id=3663): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5a3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) readv(r1, &(0x7f0000004900)=[{&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000380)=""/255, 0xff}, {&(0x7f0000000480)=""/237, 0xed}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/255, 0xff}, {&(0x7f0000003700)=""/160, 0xa0}, {&(0x7f00000037c0)=""/168, 0xa8}, {&(0x7f0000003880)=""/87, 0x57}, {&(0x7f00000049c0)=""/4112, 0x1010}], 0xa) 796.095377ms ago: executing program 3 (id=3664): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) read(r1, &(0x7f0000000100)=""/89, 0x59) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b2000000000"], 0x28}}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x5, 0x0, {0x7, 0x0, 0x0, r4, 0x8, 0xf2, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}]}, 0x28}, 0x1, 0x1000000, 0x0, 0xc00c841}, 0x0) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0)=0x4) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x5, 0x20, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 0s ago: executing program 1 (id=3665): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0xd8, 0x170, 0xffffffff, 0xd8, 0x228, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3]}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32, @ANYBLOB="ffff018abe00"/23], 0x50) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() ioprio_get$pid(0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0xc67e7be33bfcd098, &(0x7f0000000180)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1={0xfc, 0x1, '\x00', 0x2}, 0x9}, @ib={0x1b, 0x6, 0x9, {"49c13bc2632ff7799458db1ad3028c6a"}, 0x8, 0x4, 0x6}}}, 0x118) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000500), 0x9, 0x428581) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) write$usbip_server(r8, &(0x7f0000000a00)=@ret_submit={{0x3, 0x2, 0x0, 0x0, 0x9}, 0x2cd20bfa, 0x0, 0x3a7287ea, 0x25a, 0x80, 0x0, "", [{0x5, 0x7, 0xffff, 0x3}, {0x0, 0x1ff, 0x1, 0xb8d}, {0x5, 0x7, 0x5, 0x10001}, {0x3, 0x6, 0x8, 0x5}, {0x3, 0x8, 0x5, 0xffffffff}, {0x7fffffff, 0x5, 0x9, 0x1000}, {0x6f07, 0x9, 0x2, 0x40}, {0x4, 0x3, 0x2, 0x1d}, {0x1, 0x7, 0x84, 0xfff}, {0x0, 0x1, 0x10, 0xffff}, {0x9f1, 0x1, 0x100, 0x6}, {0x0, 0x9, 0x2e6db1be, 0x7}, {0x7, 0x40, 0x401, 0x6}, {0x0, 0xffffb6cd, 0xffff, 0x400}, {0x3, 0x7, 0x750f, 0x41}, {0x8, 0x2, 0xc6fd, 0x847}, {0xd132, 0x10, 0x32a7, 0x8}, {0xfffffff8, 0x5, 0x8, 0xa7}, {0x9, 0x6, 0x0, 0x29}, {0x9, 0x3, 0xda1e, 0x1}, {0x6c3, 0x8, 0x5, 0x5}, {0xf, 0x800, 0xfff, 0x2}, {0x40, 0x6, 0x2, 0x5}, {0x9, 0x81, 0x6, 0x9}, {0x8, 0xd, 0xfffffff2, 0x800}, {0x1, 0x45a, 0x9, 0x8}, {0x5, 0xe, 0x9, 0x1000}, {0x12, 0x6, 0x5, 0x9}, {0x4, 0x8, 0xf, 0x622545a4}, {0x5, 0x40, 0x4, 0x3bf1}, {0x63c1, 0x9, 0x5, 0x1}, {0x7, 0xf, 0x4, 0x4}, {0x81, 0x4, 0x5, 0xf357}, {0xff, 0x1ff, 0xc3b5, 0xa}, {0x2, 0xa, 0x6, 0x21cc99b9}, {0xa09, 0x0, 0x7fffffff, 0xfffffffc}, {0x0, 0x5, 0x0, 0x4}, {0x200, 0x8, 0xfffffff7, 0x5}, {0x7ff, 0xffffffff, 0x401, 0x5}, {0x6, 0xfffffffb, 0x12, 0xff}, {0x1, 0x400, 0x2, 0x1}, {0xfffffeff, 0x3, 0x4, 0xc2}, {0x1, 0x81, 0x70000000, 0x93}, {0x0, 0x3367, 0xf}, {0x8000, 0x7, 0x1}, {0x5, 0x1, 0x8000, 0xcbe}, {0x7, 0x9, 0x39, 0xe}, {0x9, 0xfffffffb, 0x1, 0x7}, {0x6, 0x3e7, 0xff000000, 0x10001}, {0x6, 0x2, 0x80000000, 0xfffffa2d}, {0x5, 0xc, 0x3, 0x4}, {0x10001, 0x10, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x4}, {0x5, 0x8, 0x4, 0x3}, {0x8, 0x9, 0x2, 0x101}, {0x7fff, 0x3, 0x9, 0xb}, {0x7, 0xf4f6, 0xffffffff, 0x7}, {0x8, 0x4, 0x73, 0x4}, {0x3ff, 0x5, 0x9, 0xa}, {0x81, 0x5, 0x5, 0x401}, {0x57, 0x0, 0x5, 0x1b}, {0x5, 0x98cb, 0x7dc3, 0xf}, {0xe, 0x1, 0x1, 0x3af}, {0x7, 0x3, 0xffff, 0x9}, {0x200, 0x7, 0x1e, 0x2}, {0x7fffffff, 0x5, 0x1000, 0xf}, {0x2, 0x4, 0x3ff, 0x7}, {0x8, 0xffff, 0x2, 0x1df63973}, {0xa, 0xe, 0xe653, 0x4}, {0x8, 0x7b8, 0x9, 0x800}, {0xfffffffa, 0x9, 0x0, 0x81}, {0x9, 0x4, 0x8, 0x4}, {0x259, 0x0, 0x8001, 0xdbc}, {0xffff, 0xb0b, 0x3ff, 0x5}, {0xd, 0x8, 0x4, 0x3}, {0x3, 0x5, 0x8}, {0xa93, 0x8, 0x0, 0x6f3}, {0x0, 0x2}, {0x7, 0x1b80, 0x101, 0x143c00}, {0x7fff, 0x2, 0xf2, 0x9}, {0x8, 0xffffffff, 0x0, 0x100}, {0x1000, 0x8001, 0x8, 0x9}, {0x2, 0x9, 0x401, 0x8}, {0x6, 0x6, 0x9, 0x8}, {0x1, 0x4, 0xd71b, 0x2}, {0x5, 0x8, 0x7, 0x75}, {0x7e4, 0x3, 0x5, 0x80}, {0x5, 0x4, 0xfffffffe, 0x223e7736}, {0x1e, 0x5, 0xd, 0x6}, {0xfffffff9, 0x0, 0x7, 0x3}, {0x1, 0x401, 0x10001, 0x100}, {0x80, 0x1000, 0x4, 0x5}, {0x401, 0xf7, 0x5, 0x70000000}, {0x100, 0xf, 0x78a7, 0x6}, {0x3, 0xfffffff9, 0x8, 0x7a}, {0x8, 0x2, 0x2, 0x8}, {0xff, 0x4, 0x6, 0x75}, {0x2, 0x7f, 0xfffffff8, 0x703}, {0x3, 0x9, 0x3, 0x2}, {0x10, 0x7, 0xffff, 0xa}, {0x10, 0x2, 0x46a, 0xf73230d}, {0xb, 0x8, 0xe, 0x9}, {0x7, 0xffffffff, 0x10}, {0x5, 0x8, 0xe, 0xe48}, {0x2a, 0x9, 0x5, 0x7fbae54f}, {0xe, 0x6, 0x1, 0xc0}, {0x6, 0x4, 0xcca9, 0x4}, {0x1, 0x2, 0x1, 0x23}, {0x80, 0x40, 0x2ea300c7, 0x2}, {0x6, 0x5, 0xf9}, {0xfffffffe, 0xa974, 0x0, 0xd}, {0x5, 0x474, 0x6, 0x4}, {0x80, 0x3, 0x6, 0x500}, {0x4, 0x4, 0x8, 0xb}, {0x5bfaa272, 0x1, 0x1}, {0x1, 0xaa, 0x7, 0x6a}, {0x6, 0x6378, 0x5, 0x3ff}, {0x5, 0x5, 0xd, 0x3}, {0x8, 0x5, 0x9, 0xb0}, {0xff0000, 0x9, 0x80000000, 0xfffffff8}, {0x7, 0x0, 0x7, 0x4}, {0x493c, 0x101, 0x10001, 0x8}, {0x80000, 0x5, 0x2, 0x6c3}, {0x2, 0x2, 0xffffffff, 0x401}, {0xffffffff, 0xffff, 0x2}, {0x3, 0x5, 0x4, 0x545}, {0xcb5, 0x5, 0x0, 0x474}, {0x8, 0x7, 0x1, 0x2}, {0x80, 0x7, 0x4, 0x3}, {0x0, 0x9ba, 0x7fff, 0xcf}, {0x2b, 0xffffffff, 0x9}, {0x7, 0x8, 0x4, 0x7}, {0x7, 0x4e8, 0x10, 0x8}, {0x7, 0x5, 0x1000, 0x8000}, {0x6, 0x7ff, 0x2, 0x800}, {0x1, 0xfff, 0x2, 0xa}, {0x100, 0x0, 0x4, 0x800000}, {0xfb, 0xfc, 0x1, 0x6}, {0x7ff, 0x80000001, 0xfffffffa, 0x4}, {0x79, 0x7, 0x1000, 0x100}, {0x68, 0x3, 0x2d84}, {0x4, 0x3, 0x1000, 0x7fff}, {0xffff, 0x2, 0xb, 0x9}, {0x7, 0xffffffff, 0x1, 0xff}, {0x5, 0x3, 0x2, 0x8}, {0x8, 0x4, 0x14}, {0x1, 0x5, 0xa913}, {0x8, 0xecf, 0x7ff, 0xffffffff}, {0x7fffffff, 0x9, 0xff, 0x80000}, {0x5, 0x7fffffff, 0x1, 0x6}, {0x0, 0xf2f0, 0x1, 0x2}, {0x0, 0x7, 0x0, 0x2}, {0xfd42db34, 0xe, 0x3, 0xffff}, {0x0, 0x7, 0x6, 0x6}, {0x9, 0x2, 0x6, 0x6}, {0x3, 0xa, 0x2, 0x8}, {0x8, 0xfffffff7, 0x98, 0x6}, {0x8, 0x9, 0x200, 0x7}, {0x0, 0x1, 0x7a, 0x6}, {0xd20e, 0xfffffff8, 0x3ff}, {0x80000001, 0x1, 0x20000, 0x200}, {0xffffffff, 0x9, 0x2, 0x2}, {0x4, 0xba32, 0x5b78, 0xfffffff6}, {0xf, 0x20000, 0x9, 0x98000000}, {0xed6, 0x6, 0x39, 0x2}, {0x9, 0xf, 0x9, 0xffffffff}, {0x80000000, 0xb, 0x753, 0x80000001}, {0x2, 0x2, 0x3, 0x4}, {0x1, 0xbeb, 0x5, 0x8}, {0x5, 0x9, 0xfffffffa, 0x1}, {0x7, 0x6e6, 0x87, 0x7fffffff}, {0x101, 0x8, 0x9, 0x7}, {0xfffffff8, 0x2, 0xe, 0x9}, {0x3, 0x2, 0x40, 0x902}, {0x2094, 0x600000, 0x3, 0x8}, {0x8, 0x0, 0x3, 0x7}, {0x8, 0x8, 0xb, 0x8}, {0x7fff, 0x80, 0x2, 0x8}, {0x6, 0x2, 0x4, 0x7}, {0xc, 0x54a, 0x10001, 0xfffffffc}, {0x1, 0x2, 0x2, 0x9b70}, {0x9, 0x3, 0x0, 0x4}, {0x7, 0x7, 0x3, 0x41408551}, {0x4, 0x7, 0x1, 0x6}, {0xd, 0x3ff, 0x9, 0x3}, {0x6b1614e4, 0x8000, 0x2, 0x1}, {0x8, 0x1, 0xdad0}, {0x7, 0x8fa1, 0xd93b, 0xb}, {0x3, 0x61c, 0x1ff, 0x3}, {0xffff, 0x5, 0xa4a, 0x1}, {0x7, 0xfffffffe, 0x8, 0x2}, {0x2, 0x81, 0x1, 0xbab}, {0x61f04f3c, 0x0, 0x7, 0xffff}, {0x1, 0xab, 0x400, 0xffff}, {0x6, 0x2, 0x1, 0x9}, {0x1, 0x8, 0xc, 0x7}, {0x9, 0x4, 0x7, 0x1}, {0x5, 0x704c, 0x7, 0xffff3d8e}, {0x9, 0x0, 0x0, 0x8c1}, {0x7, 0x9, 0x8001, 0x2}, {0x40, 0xc, 0xa, 0x3}, {0x6, 0xfffffffa, 0x1000, 0x1}, {0x7fffffff, 0x7fffffff, 0x0, 0x2}, {0x48, 0x993, 0x5, 0x26d37d77}, {0x8000800, 0x1, 0x4, 0x2}, {0x8, 0xfffff6a3, 0x4, 0x9}, {0x4, 0x2, 0xfffffffb, 0x607d7748}, {0x1, 0x7, 0x1ff, 0x8001}, {0x200, 0x8, 0x5, 0x2}, {0xffff, 0x7, 0x90d, 0x3}, {0x4, 0x75c6544b, 0x1000, 0x8001}, {0x3, 0x1, 0x0, 0x2}, {0xfff, 0x8, 0x80, 0x5}, {0x7, 0xc, 0x2, 0x8}, {0x7, 0x574e560e, 0x3, 0x19}, {0x9, 0x2b30eacb, 0x54, 0x9}, {0x7, 0x7, 0x2, 0x821}, {0x0, 0x8, 0x6, 0x3}, {0x6, 0x68, 0x0, 0x6}, {0x7, 0x0, 0x2, 0x3}, {0x6, 0xbb6f, 0x12}, {0x4, 0x2, 0x758, 0x1}, {0x2, 0x3, 0x7, 0x5}, {0x6, 0x3, 0x1}, {0x9, 0x2, 0xe, 0x1}, {0x2, 0x0, 0x2, 0x3}, {0xd, 0xfff, 0x1, 0x2}, {0x7, 0x0, 0x8, 0x4}, {0xb6, 0x1, 0x10001}, {0x1, 0xffffffff, 0x3, 0x2}, {0x3, 0x4, 0x334d, 0x3}, {0xffffffff, 0x8, 0xffffffff, 0x3c}, {0x8, 0xf, 0x6418, 0xb}, {0xb, 0x4, 0x8, 0x1}, {0xfff, 0x9, 0x80, 0x4}, {0x7, 0x9e2, 0x401, 0xc000}, {0x9, 0x8, 0x6, 0x101}, {0x401, 0x4, 0x1, 0x4}, {0x3, 0x0, 0x800, 0x10000}, {0x9, 0x40000000, 0xffff}, {0x1, 0x9, 0x2a5, 0xf3b}, {0x36, 0x3, 0x2, 0x7ff}, {0x6, 0x246, 0x6e7, 0x7f}, {0x2, 0x0, 0x9, 0x1}, {0x198, 0x3, 0x5, 0x1}, {0x4, 0x1, 0x7, 0x5}, {0xa, 0x4, 0x6, 0xa1e0}, {0x2, 0x8432, 0x677, 0x17dc}, {0x7, 0x6, 0x3, 0x1}, {0x8001, 0x2, 0x0, 0xb818}, {0x4, 0x5, 0x3, 0xb3}, {0xd219, 0x150f, 0xd, 0x2}, {0x7fff, 0x8, 0x10}, {0x100, 0x6, 0xfff, 0x5}, {0x0, 0x0, 0xffffffff, 0xc44a}, {0xd8, 0x3, 0xfffffff9, 0x7}, {0x2, 0x5, 0x200, 0x6}, {0x4, 0x4, 0x5, 0x6}, {0xfffffc00, 0x9, 0x8, 0xffffffff}, {0x0, 0xf, 0x6, 0x1ff}, {0xf, 0xffffff7f, 0x3ff, 0x9}, {0xfff, 0x3, 0x3, 0x7}, {0x4f90049c, 0x2185d4b3, 0x8000, 0x2}, {0x8, 0x1, 0xffffffff, 0x9}, {0x8305, 0x7fffffff, 0x8001, 0x10001}, {0x3e, 0x10d5, 0x8, 0x3}, {0x80, 0x587, 0x5, 0x1}, {0x6, 0x7fff, 0x7b70, 0x3}, {0x9, 0x2, 0x7, 0x3ff}, {0x7, 0x7, 0x9, 0xf}, {0x8, 0x10001, 0x9}, {0x6, 0x8, 0x0, 0x4}, {0xf7ec, 0x25, 0xe81f, 0x8}, {0x5, 0x7, 0xd, 0x4}, {0x81, 0x1ff, 0x8, 0x3}, {0x0, 0x4, 0x80000001, 0xc782}, {0x4, 0x8, 0x731d, 0xa}, {0x7, 0x1, 0xfffffeff, 0x81}, {0x5, 0x10000, 0x5, 0x9}, {0x6d3fe6fd, 0x401, 0x6, 0x800}, {0x4, 0x1d, 0x4, 0x5}, {0x3447, 0x2, 0x1, 0xfb4}, {0x7, 0x4, 0x9, 0x9}, {0x3, 0x3, 0xbe33, 0x8}, {0x3, 0xfffff997, 0x3, 0x9}, {0x8, 0x9, 0xb88c, 0x6}, {0x692f, 0x5, 0x1, 0x5}, {0x2, 0x9, 0x9, 0xfffffffa}, {0x1, 0x1ff, 0x1, 0x1}, {0x7, 0xe140, 0x3, 0x2}, {0x9725, 0x6, 0x2, 0x4}, {0x8, 0xa3, 0x6, 0x7dd2}, {0x7, 0x4d17, 0x4, 0x400}, {0x5, 0x8001, 0x812, 0x39}, {0x80, 0x9, 0x9}, {0xffff, 0x54, 0xbad5}, {0xb, 0xffffffff, 0xb4, 0x10000}, {0x3, 0x7, 0x9e000000, 0x7fff}, {0x7, 0x81, 0x1, 0x2}, {0x6, 0xe6, 0xfffff801, 0x7}, {0xc, 0x7ff, 0xe, 0x7fffffff}, {0xffffff78, 0x9, 0x7, 0x7fffffff}, {0x80000001, 0xfffffff5, 0xc, 0x3}, {0x6, 0x40, 0x7, 0x400}, {0xfffffffa, 0x8, 0x1000, 0x7}, {0x8, 0x5, 0x7f, 0xe1}, {0xfffff717, 0x6b9, 0x4e4, 0xf55}, {0x40, 0x0, 0x7, 0x4}, {0xfffffffb, 0x7, 0x2, 0x9}, {0x8, 0x5, 0x8, 0x2}, {0x43df, 0x101, 0x0, 0x1}, {0x6, 0x4, 0x1000, 0xc}, {0xfffffff9, 0x2, 0x5, 0x2}, {0x101, 0x30c, 0x6, 0xffff}, {0x8, 0x8, 0x0, 0x1}, {0x8, 0x3, 0x8, 0xf}, {0xe11, 0x0, 0x4, 0x831}, {0xae1, 0x0, 0x9}, {0x10001, 0x0, 0x9, 0x6}, {0xe, 0x4, 0x1ff, 0x7}, {0x6, 0x10001, 0xd, 0x9}, {0xeb, 0x101, 0xdd, 0x1}, {0x6, 0x4fb, 0x7fff}, {0x7, 0xc529, 0x8, 0x2}, {0x1ff, 0xd, 0x6c, 0xffffffff}, {0xe7, 0x5, 0xffffffa1, 0x19c}, {0xfffffffa, 0x0, 0x3, 0x6}, {0x100, 0x5, 0x10, 0x8}, {0x4, 0x8, 0x8, 0x9898}, {0x3f3d, 0x40, 0xfffff3d0, 0x907}, {0x800, 0x5, 0x9, 0x6}, {0x8000, 0x3, 0x2, 0x3}, {0x4, 0x4, 0x7, 0x9}, {0x0, 0x10000, 0x6, 0x8}, {0x0, 0xcf9c, 0x8}, {0x9, 0x6, 0x1, 0x8}, {0x2, 0x6a, 0x80000000, 0x7ff}, {0x74c, 0x6, 0x3ff, 0x5}, {0x8, 0x2, 0x8000, 0x3}, {0x10, 0xa}, {0x2, 0x5, 0x101}, {0x7fff8, 0x6, 0x3f, 0xc000}, {0x252, 0x2, 0x2, 0x10000}, {0x5, 0x7, 0x4, 0x3}, {0x3f9, 0x1, 0xfffffff7, 0x28}, {0x4, 0x80000000, 0x765af04c}, {0x8, 0xff, 0x70, 0x6}, {0xfffffffc, 0x5, 0x80000000, 0x7}, {0x1ff, 0xb, 0x40, 0x4}, {0x9, 0xffff, 0x33, 0x3}, {0x682, 0x3, 0x9, 0x5}, {0x8, 0x4, 0x8, 0x7}, {0x0, 0x200, 0x7}, {0x1, 0xd1, 0x0, 0x6}, {0x4, 0xdc2, 0x9, 0x1}, {0x800, 0x2, 0x18000, 0x7}, {0x9, 0x6, 0x3, 0x9}, {0x13262f, 0x2, 0x9}, {0xd, 0x9, 0x6, 0x7}, {0x3, 0x6, 0xfffff001, 0x1}, {0x6, 0x5, 0x40}, {0xb, 0x6, 0x5, 0x5}, {0x1, 0x6, 0x2, 0x1}, {0x80000001, 0x42, 0x7, 0x8000}, {0x0, 0x0, 0x9, 0x1}, {0x8001, 0x3, 0x1, 0x401}, {0xfffffffa, 0x5, 0x80, 0x2}, {0x3, 0x6, 0x5, 0xfffffff9}, {0x3, 0xa, 0x3, 0x4}, {0x3, 0x10000, 0xed4f, 0xa}, {0x7, 0x8, 0x4, 0x100}, {0x1, 0x8, 0x101}, {0x4, 0x8, 0x100, 0x1ff}, {0x4, 0x8, 0x7, 0x101}, {0x1000000, 0x24, 0x6, 0x1}, {0x3ff, 0x0, 0x8}, {0x7, 0x7, 0x4, 0xfda7c91}, {0x6, 0x3, 0x3, 0x2}, {0x0, 0xacff, 0x8, 0x401}, {0x2, 0x8, 0x6}, {0x6, 0x800, 0x8, 0xf85}, {0x0, 0x6, 0x4, 0x200}, {0x4, 0x0, 0x6, 0x2555}, {0x61b, 0x4e48, 0x6, 0x2}, {0xeb, 0x80000000, 0xffffffc0, 0x4}, {0x9, 0x685f013d, 0x95, 0x10000}, {0x0, 0x7, 0x5, 0x7}, {0x8000, 0xfffffff8, 0xcc7d, 0x40}, {0x3, 0x8, 0xfffffffc, 0x9}, {0x27, 0x101, 0x1, 0x8}, {0x40, 0x4, 0x200, 0x9}, {0x1, 0xf5, 0x1ff, 0x3}, {0x7, 0x1, 0x8, 0x10}, {0x4, 0x9, 0x3}, {0x4, 0xfffffffd}, {0x6, 0x6, 0x80, 0x31bc}, {0x7, 0x6, 0x246, 0xffffff23}, {0x6b, 0x9, 0x8, 0x800}, {0x10000, 0xf, 0x2, 0x8}, {0xe07c, 0x3, 0x40, 0x6}, {0x4000, 0x6, 0x8, 0x9}, {0xfb8, 0xfc, 0x2, 0x7ff}, {0xfff, 0x81, 0x2, 0x7}, {0x7fffffff, 0x7fff, 0x800, 0x5}, {0x7, 0x8, 0x5d}, {0x1ff, 0x8, 0x8, 0x340000}, {0x2, 0x7, 0x3, 0x9}, {0xd2a1, 0x10001, 0x6a3d, 0xfffffff1}, {0x9, 0x9, 0x8, 0xafe00}, {0x7fffffff, 0x3, 0x8, 0x8001}, {0x8, 0xd25, 0xcd6d, 0x4}, {0x6, 0xfff, 0x9, 0x6ae69289}, {0x3, 0xcf, 0x80, 0xa}, {0xffffff29, 0x9, 0x7f, 0x2}, {0x401, 0x80, 0xac, 0x9}, {0x1, 0xff, 0x8, 0x9}, {0x1, 0xf48, 0x3, 0x4}, {0xfffffffd, 0x5, 0x8001, 0xb}, {0x6, 0x6, 0x294, 0xfe1a}, {0x3, 0x6, 0x0, 0x43}, {0xfff, 0x4, 0x5, 0xffffc2c4}, {0x3, 0xe, 0x7, 0x81}, {0x7, 0x7, 0x6b84, 0x1}, {0x3, 0x0, 0x66, 0x4}, {0x9, 0x6, 0x0, 0xf6}, {0x0, 0x3, 0x7f}, {0x1, 0x8, 0x0, 0x5}, {0x3, 0x200, 0x200, 0x7}, {0x7, 0x1, 0x7, 0x400}, {0x40, 0x3ff, 0x3, 0x2}, {0x0, 0x6, 0x80000000, 0xc65}, {0x9, 0x80000000, 0x6, 0x7ff}, {0x0, 0x1, 0x3, 0x400}, {0x2, 0x1, 0x5ea6, 0x1ff}, {0x5, 0x8, 0x1, 0x7f}, {0x5, 0x7fff, 0x1, 0xffff0001}, {0x86c, 0x9, 0x19, 0xfffff801}, {0x80, 0x6, 0x0, 0x7ff}, {0x4, 0xffff, 0x4, 0x6}, {0x6, 0x1, 0x2, 0x219436c8}, {0x3, 0x800, 0xfffffffa, 0xffffffff}, {0x9, 0xbb, 0x9, 0x7}, {0x5, 0xe8, 0x4, 0x8}, {0x103, 0xff, 0x7b2, 0x9}, {0xf, 0x10000, 0x7f, 0x8}, {0x100, 0x8000, 0x2, 0xa}, {0x7, 0x6, 0x7, 0xe0e1}, {0x2, 0x9, 0x0, 0x1}, {0x2, 0x6, 0xe, 0x1}, {0x4, 0x400, 0x9698, 0x1ff}, {0x0, 0x0, 0x185, 0xfff}, {0x0, 0xd8, 0x5, 0x7}, {0x5, 0x8001, 0x14c, 0x5}, {0x66, 0x5, 0x800, 0xb}, {0x6, 0x7ff, 0x10000, 0x80000001}, {0x3, 0x8000, 0x3, 0xfff}, {0x7, 0x1ff, 0xe59c, 0x7fffffff}, {0x6, 0x0, 0xfffffff8, 0x4}, {0x4, 0x40, 0x1, 0x8}, {0x1, 0xfffffffe, 0x6eb, 0x2}, {0x0, 0x7fffffff, 0x0, 0x7f}, {0x8001, 0x7, 0x2, 0x9}, {0x0, 0x9, 0x2, 0x2}, {0x6, 0x5, 0x1, 0x4}, {0x1, 0x8, 0x81}, {0x1, 0x7, 0x5, 0x8}, {0x4, 0x5ce, 0x4, 0x1}, {0xff, 0x7, 0xb8e8, 0x6}, {0xff, 0x9, 0x8001, 0x5}, {0x5, 0xfff, 0x9, 0x8}, {0xa9, 0x3, 0x800, 0x100}, {0x1f, 0x0, 0x1, 0x7fffffff}, {0x2, 0x7, 0xfffffeff, 0x3}, {0xa21, 0x9, 0x2, 0x6}, {0x2, 0xcf67, 0x5, 0x8}, {0x6, 0x33, 0x6, 0x77}, {0x9, 0x9c3, 0x8, 0x97b2}, {0x1, 0x8, 0x0, 0x10}, {0x38b7, 0x1, 0x8, 0x30a}, {0x8000, 0x5, 0x3}, {0x3ff, 0x90, 0x8, 0x8}, {0x3, 0x8, 0x1, 0x2}, {0x4, 0x100, 0xecac, 0x18}, {0x2, 0x3, 0x9, 0x6}, {0xc9, 0x0, 0xff, 0x2fac4fb2}, {0x5, 0x0, 0xb7c, 0x8}, {0x4, 0xfffffff9, 0x9, 0x4}, {0x63, 0x0, 0x5, 0x80000001}, {0x8, 0x2, 0xa, 0x5}, {0x0, 0x2, 0x9, 0x2}, {0x9, 0xb, 0x7, 0x8}, {0x1ff, 0x7ff, 0x6, 0x80000000}, {0x0, 0x8, 0x101, 0x9}, {0xc, 0x2, 0x1000, 0x10}, {0x0, 0x9b3, 0x3, 0x58}, {0xa18a, 0x1}, {0x0, 0x6, 0x7ff, 0x4}, {0x764, 0x6, 0xdad, 0x9}, {0x6, 0xffffffff, 0x6, 0x6}, {0xffffd7c2, 0x1, 0x8903, 0x3}, {0xffff, 0x1ff, 0x4, 0x5}, {0x2, 0x7fff, 0x2, 0xb}, {0x3, 0x7, 0x9, 0xf}, {0x3, 0x10000, 0x4, 0x3e1}, {0x7, 0x5, 0x42f, 0xf}, {0x7, 0x1, 0x45a, 0xbd9b}, {0xfffffffc, 0x9, 0x0, 0x1}, {0x3ff, 0x8000, 0x9, 0x1027}, {0x6, 0x4, 0x72319662, 0x3}, {0x3dc7, 0x101, 0x9, 0xc9}, {0x3e, 0x1, 0x0, 0x10000}, {0x7, 0x0, 0x3, 0xff}, {0x101, 0x5637, 0x8, 0x8000}, {0x7, 0x80000000, 0x100, 0x4}, {0x10, 0xf, 0x6, 0x96}, {0x6, 0x7, 0x1, 0xffff8001}, {0x5, 0x6, 0x4, 0xe}, {0x6, 0x3, 0xfffffffe, 0x5}, {0x6, 0x73, 0x5, 0x5}, {0x0, 0x4, 0x57f8, 0x2}, {0x7ff, 0x1, 0xfffff6af}, {0x5, 0x4d39, 0xfffffffb, 0x9}, {0x2, 0x7, 0xfffffff7, 0x7}, {0xed, 0x6, 0x1, 0x6}, {0x8001, 0xfff, 0x9, 0x5}, {0x4, 0x9, 0x7fff, 0x6}, {0x5, 0x4, 0x0, 0x1}, {0x100, 0xff, 0x0, 0x200}, {0x80, 0x4, 0x6d, 0x4f5}, {0x6, 0x8, 0x3, 0x7fff}, {0x49, 0x3, 0x65d}, {0x85bc, 0x889, 0x5, 0x5}, {0xff, 0x7, 0x8, 0xd}, {0x3, 0x1, 0xfffffff8, 0x2}, {0x9, 0x0, 0x3, 0x5}, {0x3, 0x5d, 0x6, 0x8}, {0x1ff, 0x9, 0xd, 0x3355}, {0x3dc5, 0xeab, 0x9, 0x3}, {0x4, 0x6, 0x168, 0x2}, {0x7, 0x82, 0xc, 0x576}, {0x1, 0x1, 0x26, 0x401}, {0x8, 0x6, 0x8, 0x32a}, {0xc2, 0x3, 0x8, 0x8}, {0x3, 0x1, 0xf, 0x10001}, {0x5, 0x200, 0xec, 0x100}, {0x1, 0x605, 0x8000, 0x8}, {0xed9c, 0x9, 0x8ab, 0xffffffff}, {0x8fa2, 0x0, 0x0, 0xfffffff3}, {0x9, 0xbc13, 0xfffffc00, 0x103}, {0x9, 0x8581, 0x6}, {0x7, 0x6, 0x1, 0x125}, {0x2, 0x3dee, 0x9, 0x4549}, {0x7f, 0x2, 0x40, 0xc6}, {0x7fff, 0x2, 0x4c236446, 0x82a}, {0x9, 0xffffffff, 0x8, 0x6c60}, {0x7, 0x9, 0x7ff, 0x1}, {0x6, 0x1, 0x4, 0x4}, {0x1, 0x0, 0x401, 0x6}, {0x9, 0x81, 0xffff8001, 0x3}, {0x0, 0x4, 0xfffffeff, 0x401}, {0x75, 0x4, 0xfff, 0x10001}, {0x7, 0x951, 0x5, 0x1}, {0x1da, 0x8, 0x7, 0x7}, {0x800, 0x8000, 0x6e, 0x3}, {0x40, 0x9, 0xacc, 0x6}, {0x0, 0x200, 0x3, 0x8}, {0x50000000, 0x6, 0x8, 0x3}, {0x7, 0xffffffff, 0x1, 0x4}, {0x101, 0x8, 0x1}, {0x4, 0x6, 0x23, 0x8}, {0xff, 0x0, 0xfffffff9, 0x6}, {0xfffffff7, 0x2, 0x500000, 0x6}, {0x81, 0x80000000, 0x5, 0xfffffff7}, {0x9, 0x7, 0xc8b, 0x7}, {0xe, 0x7fff, 0x7, 0x101}, {0x1, 0x7f, 0x6, 0x80000001}, {0x8, 0x400, 0x7, 0x2}, {0x3, 0x40000, 0x798, 0x7}, {0x6, 0x10, 0x6, 0x12ee424a}, {0x6, 0x3, 0xfffffffe, 0x8}, {0x6, 0x7fffffff, 0x2, 0x3}, {0x5, 0x6, 0x1, 0x10001}, {0xffffffc9, 0x6, 0x9, 0xffff}, {0x3, 0x5, 0xf7600000, 0x7fffffff}, {0x80, 0x5, 0x8e, 0x9}, {0x7b85, 0x10, 0x17, 0x2}, {0x8, 0x81, 0x7, 0x7}, {0x7fffffff, 0x80000001, 0xffff, 0xfffffff9}, {0x6, 0x2, 0xd9, 0x6}, {0x400, 0x5, 0xffff7fff, 0x5}, {0x4, 0xf, 0x8, 0x9}, {0x5, 0x84, 0x1, 0x9}, {0x9, 0x8, 0x1, 0x2}, {0x6, 0x2, 0x7, 0x8}, {0x1, 0x4, 0x0, 0xe}, {0x7, 0x7ff, 0x9, 0x101}, {0x7fffffff, 0x2, 0x2}, {0xfffffffc, 0x3, 0x3, 0x1000}, {0x4, 0xfffffc01, 0x9}, {0x3, 0x800, 0xa, 0xb}, {0x80000000, 0x1, 0x3, 0x1}, {0x6, 0x4, 0x3}]}, 0x25d0) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000840)={0x28, 0x2, r7, 0x0, &(0x7f0000007000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r7, 0x0, &(0x7f00000001c0)="ecf8eb", 0x3, 0x7}) ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f0000000180)={0x28, 0x5, 0x0, r7, 0x1000, 0x7, 0x3ffe}) kernel console output (not intermixed with test programs): .711852][T17626] usb 9-1: Using ep0 maxpacket: 16 [ 1143.750207][T17626] usb 9-1: config 166 has an invalid interface number: 177 but max is 1 [ 1143.779252][T17626] usb 9-1: config 166 has an invalid interface number: 34 but max is 1 [ 1143.800078][T17626] usb 9-1: config 166 has no interface number 0 [ 1143.809746][T17626] usb 9-1: config 166 has no interface number 1 [ 1143.845665][T17626] usb 9-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1143.856952][T17626] usb 9-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1143.935693][T17626] usb 9-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1143.989724][T17626] usb 9-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1144.003895][T18273] __nla_validate_parse: 3 callbacks suppressed [ 1144.003912][T18273] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3096'. [ 1144.092617][T18154] veth0_vlan: entered promiscuous mode [ 1144.093875][T17626] usb 9-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1144.122376][T18154] veth1_vlan: entered promiscuous mode [ 1144.272012][T11012] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1144.327019][T17626] usb 9-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1144.443981][T18283] xt_hashlimit: size too large, truncated to 1048576 [ 1144.490055][T18154] veth0_macvtap: entered promiscuous mode [ 1144.512136][T18154] veth1_macvtap: entered promiscuous mode [ 1144.550452][T18154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1144.589552][T18154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1144.609647][ T147] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.621565][ T147] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.631097][T11012] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1144.639525][T11012] usb 2-1: config 0 has no interface number 0 [ 1144.650684][T11012] usb 2-1: too many endpoints for config 0 interface 51 altsetting 42: 240, using maximum allowed: 30 [ 1144.663342][ T147] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.678307][T17626] usb 9-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1144.720412][T11012] usb 2-1: config 0 interface 51 altsetting 42 has 0 endpoint descriptors, different from the interface descriptor's value: 240 [ 1144.723056][T17626] usb 9-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1144.736196][T11012] usb 2-1: config 0 interface 51 has no altsetting 0 [ 1144.827948][ T147] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.903064][T11012] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1144.949649][T11012] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.987928][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1144.990838][T11012] usb 2-1: config 0 descriptor?? [ 1145.036229][T17626] usb 9-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1145.061605][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.225847][T18288] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3099'. [ 1145.391920][ T3021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.399750][ T3021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.432191][T17626] usb 9-1: config 166 interface 177 has no altsetting 0 [ 1145.444970][T17626] usb 9-1: config 166 interface 34 has no altsetting 0 [ 1145.468227][T11012] usb 2-1: string descriptor 0 read error: -71 [ 1145.482387][T11012] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1145.508877][T11012] gspca_cpia1: usb_control_msg 05, error -71 [ 1145.567921][T17626] usb 9-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1145.592845][T17626] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.623501][T11012] gspca_cpia1: usb_control_msg 01, error -71 [ 1145.629507][T11012] cpia1 2-1:0.51: only firmware version 1 is supported (got: 0) [ 1145.699023][T17626] usb 9-1: Product: syz [ 1145.721738][T17626] usb 9-1: Manufacturer: syz [ 1145.771639][T17626] usb 9-1: SerialNumber: syz [ 1145.827756][T11012] usb 2-1: USB disconnect, device number 91 [ 1146.065561][T17626] ums-realtek 9-1:166.177: USB Mass Storage device detected [ 1146.121644][ T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1146.324173][T17626] ums-realtek 9-1:166.34: USB Mass Storage device detected [ 1146.392668][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 1146.401004][ T24] usb 10-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1146.410780][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.419033][ T24] usb 10-1: Product: syz [ 1146.423499][ T24] usb 10-1: Manufacturer: syz [ 1146.428209][ T24] usb 10-1: SerialNumber: syz [ 1146.477007][ T24] usb 10-1: config 0 descriptor?? [ 1146.590599][T17626] ums-realtek 9-1:166.34: probe with driver ums-realtek failed with error -5 [ 1146.633891][T17626] uvcvideo 9-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1146.664040][T17626] uvcvideo 9-1:166.34: No valid video chain found. [ 1146.675422][T18305] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1146.740553][T17626] usb 9-1: USB disconnect, device number 24 [ 1146.833634][T11012] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1147.336733][ T24] peak_usb 10-1:0.0: PEAK-System PCAN-USB Pro hwrev 4119905602 serial 33270019.46A7C642 (2 channels) [ 1147.362735][ T24] peak_usb 10-1:0.0 can0: sending command failure: -22 [ 1147.396725][ T24] peak_usb 10-1:0.0 can0: sending command failure: -22 [ 1147.540615][T18292] 9p: Unknown Cache mode or invalid value 0’ºßvŽö€mÒ [ 1147.555664][ T24] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -22 [ 1147.578049][T11012] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.619312][T18292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.641851][T11012] usb 2-1: config 0 has no interfaces? [ 1147.647331][T11012] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1147.671997][T18292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.708432][T11012] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.747684][T11012] usb 2-1: config 0 descriptor?? [ 1148.069514][ T5917] usb 10-1: USB disconnect, device number 2 [ 1148.111536][T11012] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1148.191370][T18312] syzkaller0: entered promiscuous mode [ 1148.241535][T18312] syzkaller0: entered allmulticast mode [ 1148.312754][T11012] usb 1-1: Using ep0 maxpacket: 32 [ 1148.342087][T11012] usb 1-1: config 9 has an invalid interface number: 61 but max is 0 [ 1148.372233][T11012] usb 1-1: config 9 has no interface number 0 [ 1148.379068][T11012] usb 1-1: config 9 interface 61 has no altsetting 0 [ 1148.394602][T11012] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0000, bcdDevice=ba.e3 [ 1148.404646][T11012] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.414518][T11012] usb 1-1: Product: syz [ 1148.418716][T11012] usb 1-1: Manufacturer: syz [ 1148.423463][T18319] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3107'. [ 1148.432878][T11012] usb 1-1: SerialNumber: syz [ 1148.472384][T18320] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3107'. [ 1148.869982][T18324] syz2: rxe_newlink: already configured on ipvlan0 [ 1149.738097][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 16 seconds [ 1149.754546][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 16 seconds [ 1149.766669][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 16 seconds [ 1149.777744][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 16 seconds [ 1150.930096][T17626] usb 2-1: USB disconnect, device number 92 [ 1151.303509][T18328] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3109'. [ 1151.991003][T11012] usb 1-1: USB disconnect, device number 61 [ 1153.241605][T18358] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3118'. [ 1153.905564][T18370] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3122'. [ 1154.274664][T18373] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3123'. [ 1154.303306][T18373] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3123'. [ 1154.577474][T18375] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3121'. [ 1154.593169][T18375] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3121'. [ 1155.096718][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 20 seconds [ 1155.107476][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 20 seconds [ 1155.121011][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 20 seconds [ 1155.134024][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 20 seconds [ 1155.151850][T18363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3120'. [ 1155.191605][ T29] audit: type=1400 audit(1772477883.913:630): avc: denied { accept } for pid=18378 comm="syz.9.3125" path="socket:[69510]" dev="sockfs" ino=69510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1155.238362][T18380] xt_hashlimit: max too large, truncated to 1048576 [ 1155.291635][ T24] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1155.481505][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1155.489755][ T24] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1155.499790][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.507971][ T24] usb 7-1: Product: syz [ 1155.512209][ T24] usb 7-1: Manufacturer: syz [ 1155.516846][ T24] usb 7-1: SerialNumber: syz [ 1155.521588][ T6059] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1155.580579][T18388] siw: device registration error -23 [ 1156.725691][ T24] usb 7-1: config 0 descriptor?? [ 1156.791520][ T6059] usb 2-1: Using ep0 maxpacket: 8 [ 1156.957752][ T6059] usb 2-1: device descriptor read/all, error -71 [ 1157.242822][T18398] use of bytesused == 0 is deprecated and will be removed in the future, [ 1157.251314][T18398] use the actual size instead. [ 1157.389115][ T24] peak_usb 7-1:0.0: PEAK-System PCAN-USB Pro hwrev 4119905602 serial 33270019.46A7C642 (2 channels) [ 1157.453444][ T24] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1157.504527][ T24] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1157.584457][T18377] 9p: Unknown Cache mode or invalid value 0’ºßvŽö€mÒ [ 1157.674609][T18377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.748271][T18377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.873339][ T24] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -22 [ 1157.976207][ T24] usb 7-1: USB disconnect, device number 52 [ 1158.733355][T18410] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3133'. [ 1158.903150][T15142] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 1159.871544][ T5844] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1159.909153][T18421] sp0: Synchronizing with TNC [ 1160.031553][ T5844] usb 10-1: Using ep0 maxpacket: 32 [ 1160.047964][ T5844] usb 10-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1160.057271][ T5844] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.069804][ T5844] usb 10-1: Product: syz [ 1160.401942][T18425] fuse: Unknown parameter 'racerPid: 0 [ 1160.401942][T18425] Uid: 0 0 0 0 [ 1160.401942][T18425] Gid: 0 0 0 0 [ 1160.401942][T18425] FDSize: 256 [ 1160.401942][T18425] Groups: 0 10 [ 1160.401942][T18425] NStgid: 147 [ 1160.401942][T18425] NSpid: 148 [ 1160.401942][T18425] NSpgid: 147 [ 1160.401942][T18425] NSsid: 0 [ 1160.401942][T18425] Kthread: 0 [ 1160.401942][T18425] VmPeak: 102224 kB [ 1160.401942][T18425] VmSize: 102224 kB [ 1160.401942][T18425] VmLck: 0 kB [ 1160.401942][T18425] VmPin: 0 kB [ 1160.401942][T18425] VmHWM: 24156 kB [ 1160.401942][T18425] VmRSS: 24156 kB [ 1160.401942][T18425] RssAnon: 1424 kB [ 1160.401942][T18425] RssFile: 22732 kB [ 1160.401942][T18425] RssShmem: 0 kB [ 1160.401942][T18425] VmData: 36584 kB [ 1160.401942][T18425] VmStk: 132 kB [ 1160.401942][T18425] VmExe: 1772 kB [ 1160.401942][T18425] VmLib: 8 kB [ 1160.401942][T18425] VmPTE: 136 kB [ 1160.401942][T18425] VmSwap: 0 kB [ 1160.401942][T18425] HugetlbPages: 0 kB [ 1160.401942][T18425] CoreDumping: 0 [ 1160.401942][T18425] THP_enabled: 1 [ 1160.401942][T18425] untag_mask: 0xffffffffffffffff [ 1160.401942][T18425] Threads: 2 [ 1160.401942][T18425] SigQ: 0/12960 [ 1160.401942][T18425] SigPnd: 0000000000000000 [ 1160.401942][T18425] ShdPnd: 0000000000000000 [ 1160.401942][T18425] SigBlk: 0000000000000000 [ 1160.401942][T18425] SigIgn: fffffffefffaba35 [ 1160.401942][T18425] SigCgt: 0000000100010440 [ 1160.401942][T18425] CapInh: 0000000000000000 [ 1160.401942][T18425] CapPrm: 000001ffff77ffff [ 1160.401942][T18425] CapEff: 000001ffff77ffff [ 1160.401942][T18425] CapBnd: 000001ffffffffff [ 1160.401942][T18425] CapAmb: 0000000000000000 [ 1160.401942][T18425] NoNewPrivs: 0 [ 1160.401942][T18425] Seccomp: 0 [ 1160.401942][T18425] Seccomp_filters: 0 [ 1160.401942][T18425] Speculation_Store_Bypass: thread vulnerable [ 1160.401942][T18425] SpeculationIndirectBranch: conditional enabled [ 1160.401942][T18425] Cpus_allowed: 3 [ 1160.591537][ T5844] usb 10-1: Manufacturer: syz [ 1160.685833][T18424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3139'. [ 1160.696651][T18424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3139'. [ 1160.712414][ T5844] usb 10-1: SerialNumber: syz [ 1160.737915][ T5844] usb 10-1: config 0 descriptor?? [ 1160.785353][T18428] sp0: Synchronizing with TNC [ 1160.852538][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 24 seconds [ 1160.863312][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 24 seconds [ 1160.871835][T18429] sp0: Found TNC [ 1160.874563][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 24 seconds [ 1160.889254][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 24 seconds [ 1161.030725][T18431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3141'. [ 1161.130234][T18434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3141'. [ 1161.366634][ T5844] peak_usb 10-1:0.0: PEAK-System PCAN-USB Pro hwrev 4119905602 serial 33270019.46A7C642 (2 channels) [ 1161.378294][ T5844] peak_usb 10-1:0.0 can0: sending command failure: -22 [ 1161.414645][ T5844] peak_usb 10-1:0.0 can0: sending command failure: -22 [ 1161.620205][T18441] 9p: Unknown Cache mode or invalid value 0’ºßvŽö€mÒ [ 1161.639634][T18441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.648695][T18441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.748667][T18445] FAULT_INJECTION: forcing a failure. [ 1161.748667][T18445] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.761412][ T29] audit: type=1400 audit(1772477890.483:631): avc: denied { name_connect } for pid=18440 comm="syz.6.3144" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1161.763533][T18445] CPU: 1 UID: 0 PID: 18445 Comm: syz.6.3144 Tainted: G L syzkaller #0 PREEMPT(full) [ 1161.763556][T18445] Tainted: [L]=SOFTLOCKUP [ 1161.763562][T18445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1161.763571][T18445] Call Trace: [ 1161.763577][T18445] [ 1161.763583][T18445] dump_stack_lvl+0x100/0x190 [ 1161.763611][T18445] should_fail_ex.cold+0x5/0xa [ 1161.763631][T18445] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1161.763651][T18445] should_failslab+0xc2/0x120 [ 1161.763679][T18445] __kmalloc_noprof+0xe0/0x850 [ 1161.763706][T18445] tomoyo_realpath_from_path+0xb6/0x690 [ 1161.763729][T18445] tomoyo_path_number_perm+0x23c/0x580 [ 1161.763744][T18445] ? tomoyo_path_number_perm+0x22e/0x580 [ 1161.763761][T18445] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1161.763799][T18445] ? find_held_lock+0x2b/0x80 [ 1161.763817][T18445] ? __fget_files+0x215/0x3d0 [ 1161.763831][T18445] ? hook_file_ioctl_common+0x146/0x410 [ 1161.763856][T18445] ? __fget_files+0x21f/0x3d0 [ 1161.763875][T18445] security_file_ioctl+0xd3/0x230 [ 1161.763895][T18445] __x64_sys_ioctl+0xb7/0x210 [ 1161.763918][T18445] do_syscall_64+0x106/0xf80 [ 1161.763934][T18445] ? clear_bhb_loop+0x40/0x90 [ 1161.763954][T18445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.763970][T18445] RIP: 0033:0x7f4a9d99c799 [ 1161.763983][T18445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.763998][T18445] RSP: 002b:00007f4a9e887028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1161.764013][T18445] RAX: ffffffffffffffda RBX: 00007f4a9dc16180 RCX: 00007f4a9d99c799 [ 1161.764023][T18445] RDX: 0000000000000000 RSI: 0000000000005402 RDI: 0000000000000009 [ 1161.764032][T18445] RBP: 00007f4a9e887090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.764041][T18445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.764050][T18445] R13: 00007f4a9dc16218 R14: 00007f4a9dc16180 R15: 00007ffd8b524138 [ 1161.764072][T18445] [ 1161.764078][T18445] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1162.143775][ T5844] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -22 [ 1162.185798][ T5844] usb 10-1: USB disconnect, device number 3 [ 1162.762709][T18459] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3147'. [ 1162.883423][ T6059] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1163.121603][ T6059] usb 10-1: device descriptor read/64, error -71 [ 1163.423117][ T6059] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1163.583272][ T6059] usb 10-1: device descriptor read/64, error -71 [ 1163.868882][T18474] xt_hashlimit: size too large, truncated to 1048576 [ 1163.925328][T18470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3154'. [ 1163.935024][T18470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3154'. [ 1164.078816][ T6059] usb usb10-port1: attempt power cycle [ 1164.515924][ T29] audit: type=1326 audit(1772477893.253:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18476 comm="syz.0.3155" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fabac19c799 code=0x0 [ 1165.614011][ T5917] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1165.801640][ T5917] usb 9-1: Using ep0 maxpacket: 32 [ 1165.837528][ T5917] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1165.857120][ T5917] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.891529][ T5917] usb 9-1: Product: syz [ 1165.909944][ T5917] usb 9-1: Manufacturer: syz [ 1166.005914][ T5917] usb 9-1: SerialNumber: syz [ 1166.024903][ T5917] usb 9-1: config 0 descriptor?? [ 1166.626078][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 28 seconds [ 1166.636843][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 28 seconds [ 1166.648081][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 28 seconds [ 1166.659206][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 28 seconds [ 1166.710305][ T5917] peak_usb 9-1:0.0: PEAK-System PCAN-USB Pro hwrev 4119905602 serial 33270019.46A7C642 (2 channels) [ 1166.743280][ T5917] peak_usb 9-1:0.0 can0: sending command failure: -22 [ 1166.798336][ T5917] peak_usb 9-1:0.0 can0: sending command failure: -22 [ 1166.954984][ T5917] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -22 [ 1167.127163][T18497] syz_tun: entered promiscuous mode [ 1167.141771][T18499] 9p: Unknown Cache mode or invalid value 0’ºßvŽö€mÒ [ 1167.149100][T18497] macsec1: entered promiscuous mode [ 1167.161823][T18497] macsec1: entered allmulticast mode [ 1167.321575][T18499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.351968][T18499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.459191][T18498] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3161'. [ 1167.569841][ T5917] usb 9-1: USB disconnect, device number 25 [ 1167.626692][T18503] bridge0: entered promiscuous mode [ 1167.632517][T18503] macsec2: entered promiscuous mode [ 1167.903481][ T29] audit: type=1326 audit(1772477896.643:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18506 comm="syz.6.3163" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a9d99c799 code=0x0 [ 1168.181770][ T29] audit: type=1400 audit(1772477896.913:634): avc: denied { setopt } for pid=18510 comm="syz.8.3166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1168.284693][T18514] fuse: Bad value for 'rootmode' [ 1168.459373][T18519] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3168'. [ 1168.589475][T18522] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1168.870464][T18526] xt_hashlimit: size too large, truncated to 1048576 [ 1169.640011][T18541] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3174'. [ 1170.116811][T18548] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1170.142338][T18549] syz_tun: entered allmulticast mode [ 1171.362446][T18560] syz_tun: entered allmulticast mode [ 1171.682138][T18569] netlink: 'syz.1.3182': attribute type 1 has an invalid length. [ 1171.738640][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1171.745202][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1172.191180][T18577] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1172.277610][T18579] netlink: 'syz.6.3185': attribute type 1 has an invalid length. [ 1172.373786][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 32 seconds [ 1172.384494][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 32 seconds [ 1172.395411][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 32 seconds [ 1172.406423][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 32 seconds [ 1173.225104][ T5917] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1173.645125][ T5917] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1173.658825][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.668744][ T5917] usb 2-1: Product: syz [ 1173.679012][ T5917] usb 2-1: Manufacturer: syz [ 1173.684948][ T5917] usb 2-1: SerialNumber: syz [ 1173.811500][ T51] Bluetooth: hci6: command 0x0406 tx timeout [ 1174.361987][T14966] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1174.525323][T18607] netlink: 'syz.6.3193': attribute type 1 has an invalid length. [ 1174.589451][T14966] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1174.607931][T14966] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.871823][T14966] usb 10-1: Product: syz [ 1174.876271][T14966] usb 10-1: Manufacturer: syz [ 1174.880987][T14966] usb 10-1: SerialNumber: syz [ 1175.295645][ T5917] rtl8150 2-1:1.0: couldn't reset the device [ 1175.302274][ T5917] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1175.460005][T17626] usb 2-1: USB disconnect, device number 95 [ 1175.544044][T18613] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3194'. [ 1175.628312][T14966] rtl8150 10-1:1.0: eth13: rtl8150 is detected [ 1175.881772][T14966] usb 10-1: USB disconnect, device number 7 [ 1175.960214][T18625] FAULT_INJECTION: forcing a failure. [ 1175.960214][T18625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1175.973391][T18625] CPU: 1 UID: 0 PID: 18625 Comm: syz.8.3198 Tainted: G L syzkaller #0 PREEMPT(full) [ 1175.973424][T18625] Tainted: [L]=SOFTLOCKUP [ 1175.973431][T18625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1175.973442][T18625] Call Trace: [ 1175.973449][T18625] [ 1175.973456][T18625] dump_stack_lvl+0x100/0x190 [ 1175.973489][T18625] should_fail_ex.cold+0x5/0xa [ 1175.973512][T18625] _copy_from_user+0x2e/0xd0 [ 1175.973539][T18625] copy_msghdr_from_user+0x9f/0x4f0 [ 1175.973565][T18625] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1175.973602][T18625] ___sys_sendmsg+0x106/0x1e0 [ 1175.973627][T18625] ? __pfx____sys_sendmsg+0x10/0x10 [ 1175.973681][T18625] __sys_sendmsg+0x170/0x220 [ 1175.973700][T18625] ? __pfx___sys_sendmsg+0x10/0x10 [ 1175.973726][T18625] ? rcu_is_watching+0x12/0xc0 [ 1175.973753][T18625] do_syscall_64+0x106/0xf80 [ 1175.973773][T18625] ? clear_bhb_loop+0x40/0x90 [ 1175.973796][T18625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.973814][T18625] RIP: 0033:0x7f5e3b79c799 [ 1175.973829][T18625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1175.973847][T18625] RSP: 002b:00007f5e3c68c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1175.973865][T18625] RAX: ffffffffffffffda RBX: 00007f5e3ba16180 RCX: 00007f5e3b79c799 [ 1175.973877][T18625] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1175.973888][T18625] RBP: 00007f5e3c68c090 R08: 0000000000000000 R09: 0000000000000000 [ 1175.973899][T18625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1175.973910][T18625] R13: 00007f5e3ba16218 R14: 00007f5e3ba16180 R15: 00007fffde4f8778 [ 1175.973935][T18625] [ 1176.401494][ T6059] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1176.591480][ T6059] usb 2-1: Using ep0 maxpacket: 32 [ 1176.610177][T18631] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 1176.637940][ T6059] usb 2-1: config 9 has an invalid interface number: 61 but max is 0 [ 1176.689461][ T6059] usb 2-1: config 9 has no interface number 0 [ 1176.750072][ T6059] usb 2-1: config 9 interface 61 has no altsetting 0 [ 1176.802328][ T6059] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0000, bcdDevice=ba.e3 [ 1176.811393][ T6059] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.119350][ T6059] usb 2-1: Product: syz [ 1177.130923][ T6059] usb 2-1: Manufacturer: syz [ 1177.152043][ T6059] usb 2-1: SerialNumber: syz [ 1177.713848][T18651] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1178.191829][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 36 seconds [ 1178.206924][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 36 seconds [ 1178.219032][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 36 seconds [ 1178.231558][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 36 seconds [ 1179.309333][T18647] syzkaller0: entered promiscuous mode [ 1179.356222][T18647] syzkaller0: entered allmulticast mode [ 1179.785043][T18658] netlink: 'syz.6.3203': attribute type 2 has an invalid length. [ 1180.331198][ T6059] usb 2-1: USB disconnect, device number 96 [ 1180.383103][T18666] binder: 18665:18666 ioctl c0306201 0 returned -14 [ 1181.221633][ T6059] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 1181.385059][T18682] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3209'. [ 1181.471012][ T6059] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1181.518712][ T6059] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 8 [ 1181.557723][ T6059] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1181.585014][ T6059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.627677][ T6059] usb 2-1: config 0 descriptor?? [ 1181.653829][T18675] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1181.705160][T18674] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3208'. [ 1181.715564][T18674] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3208'. [ 1181.871188][ T6059] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1182.081939][T11012] usb 2-1: USB disconnect, device number 97 [ 1183.081505][T11012] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 1183.674712][T11012] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.686590][T11012] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1183.702424][T11012] usb 7-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1183.721860][T11012] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.739519][T11012] usb 7-1: config 0 descriptor?? [ 1183.892820][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 40 seconds [ 1183.903731][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 40 seconds [ 1183.916049][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 40 seconds [ 1183.927006][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 40 seconds [ 1184.021501][T11012] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1184.321496][T11012] usb 2-1: Using ep0 maxpacket: 32 [ 1184.328018][T11012] usb 2-1: config 9 has an invalid interface number: 61 but max is 0 [ 1184.339813][T11012] usb 2-1: config 9 has no interface number 0 [ 1184.346267][T11012] usb 2-1: config 9 interface 61 has no altsetting 0 [ 1184.358386][T11012] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0000, bcdDevice=ba.e3 [ 1184.368060][T11012] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.385851][T11012] usb 2-1: Product: syz [ 1184.395453][T11012] usb 2-1: Manufacturer: syz [ 1184.400088][T11012] usb 2-1: SerialNumber: syz [ 1184.542935][T18723] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3220'. [ 1184.991321][T18728] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1185.125661][T15142] Bluetooth: hci5: unexpected event for opcode 0x2043 [ 1185.918478][T11012] usb 7-1: USB disconnect, device number 53 [ 1186.001553][ T6059] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1187.230854][ T6059] usb 9-1: Using ep0 maxpacket: 16 [ 1187.385020][ T6059] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1187.468608][ T6059] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1187.619686][ T6059] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 2047, setting to 1024 [ 1187.663333][T18732] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3222'. [ 1187.693442][T18732] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3222'. [ 1187.745242][ T6059] usb 9-1: string descriptor 0 read error: -22 [ 1187.806350][ T6059] usb 9-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 1187.847198][T12413] usb 2-1: USB disconnect, device number 98 [ 1187.873081][ T6059] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.170202][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1188.186130][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1188.195734][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1188.205401][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1188.214790][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1188.311553][ T24] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1188.481479][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1188.488380][ T24] usb 7-1: config 1 has an invalid interface number: 58 but max is 0 [ 1188.496872][ T24] usb 7-1: config 1 has no interface number 0 [ 1188.503413][ T24] usb 7-1: config 1 interface 58 altsetting 6 bulk endpoint 0x8 has invalid maxpacket 1024 [ 1188.515407][ T24] usb 7-1: config 1 interface 58 altsetting 6 bulk endpoint 0xB has invalid maxpacket 64 [ 1188.526424][ T24] usb 7-1: config 1 interface 58 has no altsetting 0 [ 1188.535949][ T24] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0126, bcdDevice=bd.e4 [ 1188.549247][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.558349][ T24] usb 7-1: Product: syz [ 1188.562769][ T24] usb 7-1: Manufacturer: syz [ 1188.568079][ T24] usb 7-1: SerialNumber: syz [ 1188.581506][T18743] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1188.590398][T18743] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1188.620461][T18754] netlink: 'syz.1.3229': attribute type 1 has an invalid length. [ 1189.075819][ T24] kvaser_usb 7-1:1.58: error -ENODEV: Cannot get usb endpoint(s) [ 1189.426073][ T24] usb 7-1: USB disconnect, device number 54 [ 1189.664113][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 44 seconds [ 1189.675850][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 44 seconds [ 1189.681976][T18747] chnl_net:caif_netlink_parms(): no params data found [ 1189.693789][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 44 seconds [ 1189.705128][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 44 seconds [ 1189.844839][T18771] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3232'. [ 1190.228637][T18747] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.291875][ T51] Bluetooth: hci7: command tx timeout [ 1190.319656][T18747] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.391991][T18747] bridge_slave_0: entered allmulticast mode [ 1190.399306][T18747] bridge_slave_0: entered promiscuous mode [ 1190.455583][T18747] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.472423][T18747] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.490198][T18747] bridge_slave_1: entered allmulticast mode [ 1190.516885][T18747] bridge_slave_1: entered promiscuous mode [ 1190.717681][T11012] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1190.729625][ T6059] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1190.872897][T18747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1190.891710][T14966] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1190.909010][T18747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1190.918211][T11012] usb 10-1: Using ep0 maxpacket: 32 [ 1191.001924][T11012] usb 10-1: config 9 has an invalid interface number: 61 but max is 0 [ 1191.010581][ T6059] usb 9-1: USB disconnect, device number 26 [ 1191.202000][T11012] usb 10-1: config 9 has no interface number 0 [ 1191.211574][T14966] usb 2-1: Using ep0 maxpacket: 32 [ 1191.218272][T14966] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1191.235360][T14966] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1191.245789][T14966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.271540][T11012] usb 10-1: config 9 interface 61 has no altsetting 0 [ 1191.337310][T14966] usb 2-1: Product: syz [ 1191.351597][T14966] usb 2-1: Manufacturer: syz [ 1191.358370][T11012] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0000, bcdDevice=ba.e3 [ 1191.382518][T18747] team0: Port device team_slave_0 added [ 1191.397523][T14966] usb 2-1: SerialNumber: syz [ 1191.405296][T11012] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.419267][T18747] team0: Port device team_slave_1 added [ 1191.421857][T11012] usb 10-1: Product: syz [ 1191.429595][T14966] usb 2-1: config 0 descriptor?? [ 1191.437020][T11012] usb 10-1: Manufacturer: syz [ 1191.442202][T18787] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1191.453438][T14966] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input64 [ 1191.493852][T18747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1191.500796][T18747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1191.571700][T11012] usb 10-1: SerialNumber: syz [ 1191.639879][T18747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1191.710640][T18787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.730110][T18747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1191.742123][T18787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.766299][T18747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1191.801506][T18747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1192.062672][T18800] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1192.975587][T14966] usb 2-1: USB disconnect, device number 99 [ 1192.981577][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1192.993328][ T51] Bluetooth: hci7: command tx timeout [ 1194.100516][ T9] usb 10-1: USB disconnect, device number 8 [ 1194.184397][T18747] hsr_slave_0: entered promiscuous mode [ 1194.190654][T18747] hsr_slave_1: entered promiscuous mode [ 1194.213867][T18803] netlink: 'syz.1.3240': attribute type 1 has an invalid length. [ 1194.252189][T18747] debugfs: 'hsr0' already exists in 'hsr' [ 1194.268160][T18747] Cannot create hsr debugfs directory [ 1195.325126][ T51] Bluetooth: hci7: command tx timeout [ 1195.387705][ T29] audit: type=1400 audit(1772477924.123:635): avc: denied { create } for pid=18813 comm="syz.1.3243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1195.428567][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 48 seconds [ 1195.518606][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 48 seconds [ 1195.530203][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 48 seconds [ 1196.004149][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 48 seconds [ 1196.149373][T18824] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3244'. [ 1196.918457][T18842] kAFS: unable to lookup cell 'ÿ' [ 1196.926632][T18842] kAFS: unable to lookup cell '(,c¾Ì' [ 1197.333430][T11012] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1197.424888][ T51] Bluetooth: hci7: command tx timeout [ 1197.524643][T11012] usb 10-1: Using ep0 maxpacket: 32 [ 1197.558010][T11012] usb 10-1: config 9 has an invalid interface number: 61 but max is 0 [ 1197.567001][T11012] usb 10-1: config 9 has no interface number 0 [ 1197.574130][T11012] usb 10-1: config 9 interface 61 has no altsetting 0 [ 1197.605885][T11012] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0000, bcdDevice=ba.e3 [ 1197.631752][T11012] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.661519][ T5917] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1197.680276][T11012] usb 10-1: Product: syz [ 1197.705711][T11012] usb 10-1: Manufacturer: syz [ 1197.710611][T11012] usb 10-1: SerialNumber: syz [ 1197.819393][T18850] syzkaller0: entered promiscuous mode [ 1197.826780][T18850] syzkaller0: entered allmulticast mode [ 1197.842666][ T5917] usb 7-1: Using ep0 maxpacket: 32 [ 1197.850697][ T5917] usb 7-1: config 9 has an invalid interface number: 221 but max is 1 [ 1197.882321][ T5917] usb 7-1: config 9 has an invalid interface number: 221 but max is 1 [ 1197.910870][ T5917] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.951545][ T5917] usb 7-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 1197.981249][ T5917] usb 7-1: config 9 has no interface number 0 [ 1198.001571][ T5917] usb 7-1: config 9 interface 221 has no altsetting 0 [ 1198.023368][ T5917] usb 7-1: New USB device found, idVendor=0582, idProduct=74ce, bcdDevice=ba.38 [ 1198.109181][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.176380][T18865] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1199.083568][ T5917] usb 7-1: Product: syz [ 1199.099406][ T5917] usb 7-1: Manufacturer: syz [ 1199.109651][ T5917] usb 7-1: SerialNumber: syz [ 1200.416144][T18875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1200.434020][T18875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1200.952956][ T6059] usb 10-1: USB disconnect, device number 9 [ 1201.004624][T18878] netlink: 'syz.9.3254': attribute type 1 has an invalid length. [ 1201.209086][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 52 seconds [ 1201.219915][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 52 seconds [ 1201.231066][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 52 seconds [ 1201.242409][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 52 seconds [ 1203.573915][T18878] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1203.776807][ T5917] usb 7-1: USB disconnect, device number 55 [ 1203.860470][T18747] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1204.062556][T14685] udevd[14685]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:9.221/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1204.117740][T18895] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3257'. [ 1204.178913][T18747] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1204.213867][T18747] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1204.239696][T18747] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1204.431513][ T5917] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1204.516183][T18747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1204.560160][T18747] 8021q: adding VLAN 0 to HW filter on device team0 [ 1204.578633][ T1337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.585728][ T1337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1204.598288][ T5917] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1204.611322][ T5917] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1204.636480][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.643593][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1204.652548][ T5917] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1204.693324][T18747] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1204.709454][T18747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1204.764739][ T5917] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1204.773901][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.798883][ T5917] usb 7-1: Product: syz [ 1204.817202][ T5917] usb 7-1: Manufacturer: syz [ 1204.830224][ T5917] usb 7-1: SerialNumber: syz [ 1204.885578][ T5917] hub 7-1:1.0: bad descriptor, ignoring hub [ 1204.894057][ T5917] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1205.178602][T18924] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3260'. [ 1205.778860][ T5917] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1205.846861][T18747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1206.009266][T18884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.028267][T18747] veth0_vlan: entered promiscuous mode [ 1206.054920][T18884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.064368][T18747] veth1_vlan: entered promiscuous mode [ 1206.125641][T18747] veth0_macvtap: entered promiscuous mode [ 1206.165114][T18747] veth1_macvtap: entered promiscuous mode [ 1206.183789][T18747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1206.206479][T18747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1206.236414][T12896] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.271627][T12896] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.310189][T12896] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.338329][T12896] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.833317][T18884] usb 7-1: reset high-speed USB device number 56 using dummy_hcd [ 1206.857893][T18945] syzkaller0: entered promiscuous mode [ 1206.869065][T18945] syzkaller0: entered allmulticast mode [ 1206.932888][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 56 seconds [ 1206.943688][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 56 seconds [ 1206.954724][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 56 seconds [ 1206.965994][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 56 seconds [ 1207.079421][T18884] usb 7-1: device firmware changed [ 1207.139005][T14966] usb 7-1: USB disconnect, device number 56 [ 1207.145147][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.157425][T18952] netlink: 'syz.8.3266': attribute type 1 has an invalid length. [ 1207.179571][T14966] usblp0: removed [ 1207.184294][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.372079][T14966] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1207.715632][ T3021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.755457][ T3021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.913182][T18969] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3268'. [ 1207.923442][T14966] usb 7-1: device not accepting address 57, error -71 [ 1208.114672][ T29] audit: type=1400 audit(1772477936.843:636): avc: denied { connect } for pid=18971 comm="syz.8.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1208.599659][T18981] netlink: 'syz.9.3270': attribute type 21 has an invalid length. [ 1208.696910][T18984] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3271'. [ 1208.762403][T18981] netlink: 156 bytes leftover after parsing attributes in process `syz.9.3270'. [ 1209.093807][T18981] FAULT_INJECTION: forcing a failure. [ 1209.093807][T18981] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.145660][T18981] CPU: 1 UID: 0 PID: 18981 Comm: syz.9.3270 Tainted: G L syzkaller #0 PREEMPT(full) [ 1209.145678][T18981] Tainted: [L]=SOFTLOCKUP [ 1209.145683][T18981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1209.145690][T18981] Call Trace: [ 1209.145693][T18981] [ 1209.145699][T18981] dump_stack_lvl+0x100/0x190 [ 1209.145719][T18981] should_fail_ex.cold+0x5/0xa [ 1209.145734][T18981] should_failslab+0xc2/0x120 [ 1209.145752][T18981] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1209.145766][T18981] ? fib_insert_alias+0x43e/0xe30 [ 1209.145787][T18981] fib_insert_alias+0x43e/0xe30 [ 1209.145803][T18981] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 1209.145824][T18981] ? fib_table_insert+0x761/0x1c70 [ 1209.145839][T18981] ? fib_find_node+0x209/0x280 [ 1209.145866][T18981] fib_table_insert+0x9fd/0x1c70 [ 1209.145883][T18981] ? preempt_schedule_common+0x42/0xc0 [ 1209.145911][T18981] ? __pfx_fib_table_insert+0x10/0x10 [ 1209.145926][T18981] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1209.145944][T18981] ? inet_rtm_newroute+0x172/0x210 [ 1209.145957][T18981] inet_rtm_newroute+0x172/0x210 [ 1209.145970][T18981] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1209.145991][T18981] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1209.146003][T18981] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1209.146015][T18981] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1209.146029][T18981] rtnetlink_rcv_msg+0x95e/0xe90 [ 1209.146041][T18981] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1209.146056][T18981] ? ref_tracker_free+0x37e/0x6c0 [ 1209.146075][T18981] netlink_rcv_skb+0x159/0x420 [ 1209.146089][T18981] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1209.146101][T18981] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1209.146118][T18981] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1209.146133][T18981] netlink_unicast+0x5aa/0x870 [ 1209.146147][T18981] ? __pfx_netlink_unicast+0x10/0x10 [ 1209.146165][T18981] netlink_sendmsg+0x8b0/0xda0 [ 1209.146180][T18981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1209.146192][T18981] ? __might_fault+0x40/0x140 [ 1209.146213][T18981] ____sys_sendmsg+0xa54/0xc30 [ 1209.146234][T18981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1209.146250][T18981] ? __pfx__kstrtoull+0x10/0x10 [ 1209.146265][T18981] ___sys_sendmsg+0x190/0x1e0 [ 1209.146280][T18981] ? __pfx____sys_sendmsg+0x10/0x10 [ 1209.146301][T18981] ? find_held_lock+0x2b/0x80 [ 1209.146323][T18981] __sys_sendmmsg+0x205/0x430 [ 1209.146337][T18981] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1209.146352][T18981] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1209.146371][T18981] ? fput+0x79/0x100 [ 1209.146383][T18981] ? ksys_write+0x1ac/0x250 [ 1209.146398][T18981] ? __pfx_ksys_write+0x10/0x10 [ 1209.146417][T18981] __x64_sys_sendmmsg+0x9c/0x100 [ 1209.146428][T18981] ? lockdep_hardirqs_on+0x78/0x100 [ 1209.146439][T18981] do_syscall_64+0x106/0xf80 [ 1209.146449][T18981] ? clear_bhb_loop+0x40/0x90 [ 1209.146463][T18981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.146474][T18981] RIP: 0033:0x7f5c1e39c799 [ 1209.146484][T18981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.146494][T18981] RSP: 002b:00007f5c1f235028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1209.146504][T18981] RAX: ffffffffffffffda RBX: 00007f5c1e615fa0 RCX: 00007f5c1e39c799 [ 1209.146511][T18981] RDX: 0000000000000001 RSI: 0000200000005200 RDI: 0000000000000003 [ 1209.146518][T18981] RBP: 00007f5c1f235090 R08: 0000000000000000 R09: 0000000000000000 [ 1209.146524][T18981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1209.146530][T18981] R13: 00007f5c1e616038 R14: 00007f5c1e615fa0 R15: 00007ffd42e1e508 [ 1209.146544][T18981] [ 1209.780804][T15142] Bluetooth: hci4: command 0x0406 tx timeout [ 1210.058814][T18996] netlink: 'syz.6.3274': attribute type 2 has an invalid length. [ 1210.394002][ T51] Bluetooth: hci5: unexpected event for opcode 0x0c13 [ 1210.548514][T19008] xt_hashlimit: size too large, truncated to 1048576 [ 1211.432521][T19015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3277'. [ 1211.442286][T19015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3277'. [ 1212.965357][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 60 seconds [ 1212.976128][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 60 seconds [ 1212.987256][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 60 seconds [ 1212.998239][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 60 seconds [ 1213.206285][T19039] netlink: 'syz.9.3282': attribute type 2 has an invalid length. [ 1213.295359][T19030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3280'. [ 1213.305442][T19030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3280'. [ 1213.354625][T19022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3279'. [ 1213.364756][T19022] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3279'. [ 1213.939422][T19052] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3283'. [ 1214.388173][T19056] netlink: 'syz.3.3285': attribute type 2 has an invalid length. [ 1214.811774][T19062] netlink: 'syz.1.3286': attribute type 1 has an invalid length. [ 1215.565722][T19077] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3288'. [ 1216.121537][T18788] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1216.201739][ T24] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1216.361477][T18788] usb 4-1: Using ep0 maxpacket: 32 [ 1216.437088][T18788] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.483375][T18788] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.497191][T19086] netlink: 'syz.9.3291': attribute type 1 has an invalid length. [ 1216.509693][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 1216.537456][ T24] usb 9-1: config 0 has no interfaces? [ 1216.546930][T18788] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1216.976361][T19091] bond1: (slave gretap1): making interface the new active one [ 1216.984438][T19091] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1217.030100][ T24] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1217.040482][T18788] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1217.051506][ T24] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1217.077451][T18788] usb 4-1: Product: syz [ 1217.087736][T18788] usb 4-1: Manufacturer: syz [ 1217.100986][ T24] usb 9-1: Manufacturer: syz [ 1217.254607][T18788] hub 4-1:4.0: USB hub found [ 1217.260327][ T24] usb 9-1: config 0 descriptor?? [ 1217.375616][T18788] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 1217.599767][T19097] netlink: 'syz.3.3289': attribute type 1 has an invalid length. [ 1218.421541][ T10] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 1218.462394][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 64 seconds [ 1218.473162][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 64 seconds [ 1218.484114][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 64 seconds [ 1218.495180][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 64 seconds [ 1218.594369][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.608295][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1218.642491][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1218.675300][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1218.719773][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1218.739283][ T10] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1218.777379][ T10] usb 7-1: Manufacturer: syz [ 1218.814823][ T10] usb 7-1: config 0 descriptor?? [ 1218.901806][T14966] usb 4-1: USB disconnect, device number 21 [ 1219.179101][T19133] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3297'. [ 1219.581638][ T10] rc_core: IR keymap rc-hauppauge not found [ 1219.609473][ T10] Registered IR keymap rc-empty [ 1219.633644][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1219.702524][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1219.716672][ T5917] usb 9-1: USB disconnect, device number 27 [ 1219.753208][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1219.934124][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input65 [ 1220.133731][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1220.316827][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1220.361694][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1220.421786][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1220.701484][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1220.738458][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1221.419969][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1221.755313][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1221.854485][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1221.915232][ T10] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1221.967118][ T10] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 1221.991708][T19159] netlink: 'syz.6.3302': attribute type 1 has an invalid length. [ 1222.001463][ T10] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1222.349166][ T10] usb 7-1: USB disconnect, device number 59 [ 1223.574079][T19187] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3306'. [ 1223.786070][T19192] netlink: 'syz.3.3307': attribute type 2 has an invalid length. [ 1223.823681][T19187] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19187 comm=syz.9.3306 [ 1224.218695][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 68 seconds [ 1224.229758][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 68 seconds [ 1224.242475][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 68 seconds [ 1224.254373][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 68 seconds [ 1226.635387][T19222] /dev/nullb0: Can't lookup blockdev [ 1226.899426][ T29] audit: type=1400 audit(1772477955.413:637): avc: denied { mount } for pid=19215 comm="syz.1.3310" name="/" dev="rpc_pipefs" ino=73146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1227.309362][T19233] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3312'. [ 1227.317526][ T29] audit: type=1400 audit(1772477956.043:638): avc: denied { unmount } for pid=17156 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1227.348712][T18788] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1227.531528][T18788] usb 9-1: Using ep0 maxpacket: 32 [ 1227.548151][T18788] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1227.610854][T18788] usb 9-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1227.644356][T18788] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.684958][T18788] usb 9-1: Product: syz [ 1227.703981][T18788] usb 9-1: Manufacturer: syz [ 1227.734576][T18788] usb 9-1: SerialNumber: syz [ 1227.795334][T18788] usb 9-1: config 0 descriptor?? [ 1227.825205][T19227] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1227.876376][T18788] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input66 [ 1227.916811][T19247] netlink: 'syz.3.3315': attribute type 1 has an invalid length. [ 1229.032393][T19227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1229.165358][T19227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1229.341715][T14966] usb 9-1: USB disconnect, device number 28 [ 1229.341832][ C1] usbtouchscreen 9-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1229.436004][ T29] audit: type=1804 audit(1772477958.123:639): pid=19266 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3319" name="/newroot/83/file0" dev="tmpfs" ino=458 res=1 errno=0 [ 1229.477122][ T5917] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1229.720365][ T29] audit: type=1400 audit(1772477958.153:640): avc: denied { connect } for pid=19258 comm="syz.1.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1229.740981][ T29] audit: type=1400 audit(1772477958.153:641): avc: denied { write } for pid=19258 comm="syz.1.3319" path="socket:[73254]" dev="sockfs" ino=73254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1229.782314][T19268] fuse: Unknown parameter '0x0000000000000003' [ 1229.851476][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 1229.903389][ T5917] usb 4-1: config 1 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1229.920620][ T5917] usb 4-1: config 1 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1229.938577][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c13 [ 1229.945764][ T5917] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1229.982631][ T5917] usb 4-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.40 [ 1230.024474][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.054085][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 72 seconds [ 1230.064779][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 72 seconds [ 1230.079094][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 72 seconds [ 1230.084151][ T5917] usb 4-1: Product: syz [ 1230.090006][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 72 seconds [ 1230.124707][ T5917] usb 4-1: Manufacturer: syz [ 1230.181649][ T5917] usb 4-1: SerialNumber: syz [ 1230.378677][T19285] netlink: 'syz.8.3325': attribute type 2 has an invalid length. [ 1231.401812][ T5917] usbhid 4-1:1.0: can't add hid device: -71 [ 1231.407826][ T5917] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1231.568343][ T5917] usb 4-1: USB disconnect, device number 22 [ 1231.861549][ T24] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 1232.083697][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1232.170213][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 8 [ 1232.210152][ T24] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1232.256749][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.362390][ T24] usb 10-1: config 0 descriptor?? [ 1232.391303][T19294] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1232.581475][T18788] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1232.630252][ T29] audit: type=1400 audit(1772477961.363:642): avc: denied { write } for pid=19309 comm="syz.1.3327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1232.631502][ T24] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1232.792091][T18788] usb 4-1: device descriptor read/64, error -71 [ 1232.841211][T11012] usb 10-1: USB disconnect, device number 10 [ 1233.041517][T18788] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1233.188262][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.223002][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1233.281508][T18788] usb 4-1: device descriptor read/64, error -71 [ 1233.433601][T18788] usb usb4-port1: attempt power cycle [ 1234.001593][ T5917] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 1234.367041][ T5917] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1234.383629][T19347] xt_hashlimit: size too large, truncated to 1048576 [ 1234.401690][ T5917] usb 7-1: not running at top speed; connect to a high speed hub [ 1234.439674][ T5917] usb 7-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.476735][ T5917] usb 7-1: config 12 interface 0 altsetting 7 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 1234.508852][ T5917] usb 7-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1234.544310][ T5917] usb 7-1: config 12 interface 0 has no altsetting 0 [ 1234.572802][ T5917] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1234.582489][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.598560][ T5917] usb 7-1: Product: syz [ 1234.610617][ T5917] usb 7-1: Manufacturer: syz [ 1234.622201][ T5917] usb 7-1: SerialNumber: syz [ 1234.758576][T19354] syzkaller0: entered promiscuous mode [ 1234.795745][T19354] syzkaller0: entered allmulticast mode [ 1234.891205][ T5917] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1234.915019][ T5917] usb 7-1: selecting invalid altsetting 0 [ 1235.261184][ T5917] usb 7-1: USB disconnect, device number 60 [ 1235.341595][T17626] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1235.581554][T17626] usb 4-1: Using ep0 maxpacket: 16 [ 1235.631475][T17626] usb 4-1: config 0 has no interfaces? [ 1235.677085][T17626] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1235.713661][T17626] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1235.741658][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 76 seconds [ 1235.752758][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 76 seconds [ 1235.763703][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 76 seconds [ 1235.776697][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 76 seconds [ 1235.812313][T17626] usb 4-1: Manufacturer: syz [ 1235.840876][T17626] usb 4-1: config 0 descriptor?? [ 1236.616310][T19382] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3338'. [ 1236.880614][T19393] netlink: 'syz.9.3340': attribute type 2 has an invalid length. [ 1239.899469][ T5178] udevd[5178]: worker [17208] /devices/virtual/block/nbd0 is taking a long time [ 1240.768542][T19409] netlink: 'syz.9.3344': attribute type 1 has an invalid length. [ 1240.837357][ T5917] usb 4-1: USB disconnect, device number 26 [ 1241.277433][ T51] Bluetooth: hci5: unexpected event for opcode 0x0c13 [ 1241.346228][T19421] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3347'. [ 1241.441349][T19423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3349'. [ 1241.455731][T19423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3349'. [ 1241.491815][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 80 seconds [ 1241.504812][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 80 seconds [ 1241.511582][ T5917] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1241.515764][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 80 seconds [ 1241.543849][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 80 seconds [ 1241.700375][T19432] netlink: 'syz.9.3351': attribute type 1 has an invalid length. [ 1242.131947][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 1242.138730][ T5917] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1242.267053][ T5917] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1242.276591][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.289949][ T5917] usb 4-1: Product: syz [ 1242.323206][ T5917] usb 4-1: Manufacturer: syz [ 1242.327864][ T5917] usb 4-1: SerialNumber: syz [ 1242.344318][T19437] netlink: 'syz.1.3352': attribute type 1 has an invalid length. [ 1242.364994][ T5917] usb 4-1: config 0 descriptor?? [ 1242.373951][T19419] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1242.429713][ T5917] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input67 [ 1242.441476][ T51] Bluetooth: hci0: unexpected subevent 0x04 length: 9 < 11 [ 1242.461165][T19441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3352'. [ 1242.888352][T19419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.352490][T19419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1243.513608][T19455] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3356'. [ 1243.710538][ T10] usb 4-1: USB disconnect, device number 27 [ 1243.710599][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1244.123141][T19462] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3358'. [ 1244.190002][T19465] netlink: 'syz.1.3359': attribute type 1 has an invalid length. [ 1244.850352][ T51] Bluetooth: hci6: unexpected subevent 0x04 length: 9 < 11 [ 1244.873349][T19470] Bluetooth: MGMT ver 1.23 [ 1244.941572][T19483] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3365'. [ 1245.108191][T19488] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3367'. [ 1245.631745][T19494] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3368'. [ 1246.391543][T11012] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1246.552861][T11012] usb 9-1: Using ep0 maxpacket: 32 [ 1246.574895][T11012] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1247.269518][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 84 seconds [ 1247.284392][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 84 seconds [ 1247.295424][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 84 seconds [ 1247.302633][T11012] usb 9-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1247.327158][T11012] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.327156][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 84 seconds [ 1247.512813][T19525] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3379'. [ 1247.752344][T11012] usb 9-1: Product: syz [ 1247.766173][T11012] usb 9-1: Manufacturer: syz [ 1247.776479][T11012] usb 9-1: SerialNumber: syz [ 1247.822585][T19527] syz_tun: entered allmulticast mode [ 1248.102502][T11012] usb 9-1: config 0 descriptor?? [ 1248.108638][T19509] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1248.168673][T11012] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input68 [ 1248.530289][T19509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.545276][T19509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.593773][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3384'. [ 1248.673170][T19539] xt_hashlimit: size too large, truncated to 1048576 [ 1248.974914][ T6059] usb 9-1: USB disconnect, device number 29 [ 1248.974914][ C0] usbtouchscreen 9-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1249.929419][T19566] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3391'. [ 1250.301195][T19574] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=19574 comm=syz.9.3393 [ 1250.344745][T19574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19574 comm=syz.9.3393 [ 1250.370791][T19574] netlink: 4728 bytes leftover after parsing attributes in process `syz.9.3393'. [ 1251.014734][T19588] syzkaller1: entered promiscuous mode [ 1251.020388][T19588] syzkaller1: entered allmulticast mode [ 1251.126115][T19596] netlink: 'syz.6.3400': attribute type 2 has an invalid length. [ 1252.702269][T19605] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3402'. [ 1252.873166][T19607] xt_hashlimit: size too large, truncated to 1048576 [ 1253.014391][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 88 seconds [ 1253.025279][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 88 seconds [ 1253.041463][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 88 seconds [ 1253.053062][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 88 seconds [ 1253.929754][T19612] netlink: 'syz.8.3403': attribute type 1 has an invalid length. [ 1255.501849][T18788] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1255.655283][T19642] syzkaller0: entered promiscuous mode [ 1255.676193][T18788] usb 9-1: Using ep0 maxpacket: 32 [ 1255.681825][T19642] syzkaller0: entered allmulticast mode [ 1255.695612][T18788] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1255.713823][T18788] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.743218][T19644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3410'. [ 1255.753594][T18788] usb 9-1: Product: syz [ 1255.803433][T18788] usb 9-1: Manufacturer: syz [ 1255.859314][T18788] usb 9-1: SerialNumber: syz [ 1255.885288][T18788] usb 9-1: config 0 descriptor?? [ 1256.142387][T19653] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1256.614391][T19634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.713880][T19660] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3415'. [ 1256.733479][T19634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.737360][T17626] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1256.971642][T18788] peak_usb 9-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1257.087360][T18788] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -71 [ 1257.137381][T18788] usb 9-1: USB disconnect, device number 30 [ 1257.181804][T17626] usb 10-1: Using ep0 maxpacket: 32 [ 1257.212509][T17626] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1257.264238][T17626] usb 10-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1257.312603][T17626] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.320702][T17626] usb 10-1: Product: syz [ 1257.335355][T17626] usb 10-1: Manufacturer: syz [ 1257.354401][T19670] xt_hashlimit: size too large, truncated to 1048576 [ 1257.457260][T17626] usb 10-1: SerialNumber: syz [ 1257.500204][T17626] usb 10-1: config 0 descriptor?? [ 1257.919477][T19656] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1257.930541][T17626] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input69 [ 1258.168519][T19656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.203881][T19656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.780931][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 92 seconds [ 1258.791765][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 92 seconds [ 1258.807576][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 92 seconds [ 1258.817776][T11012] usb 10-1: USB disconnect, device number 11 [ 1258.818577][ C1] usbtouchscreen 10-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1258.834143][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 92 seconds [ 1258.981780][T14966] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 1259.145962][T14966] usb 9-1: no configurations [ 1259.150573][T14966] usb 9-1: can't read configurations, error -22 [ 1259.284431][T19700] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3426'. [ 1259.331510][T14966] usb 9-1: new full-speed USB device number 32 using dummy_hcd [ 1259.530052][T14966] usb 9-1: no configurations [ 1259.543568][T14966] usb 9-1: can't read configurations, error -22 [ 1259.562597][T14966] usb usb9-port1: attempt power cycle [ 1259.877608][ T29] audit: type=1400 audit(1772477988.613:643): avc: denied { create } for pid=19715 comm="syz.6.3432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1259.951899][ T29] audit: type=1400 audit(1772477988.653:644): avc: denied { sys_admin } for pid=19715 comm="syz.6.3432" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1260.191747][T14966] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 1260.246137][T14966] usb 9-1: no configurations [ 1260.250765][T14966] usb 9-1: can't read configurations, error -22 [ 1260.466820][T14966] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 1260.751646][T11012] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1260.810489][T14966] usb 9-1: no configurations [ 1260.839299][T14966] usb 9-1: can't read configurations, error -22 [ 1260.851596][T15142] Bluetooth: hci0: command 0x0406 tx timeout [ 1260.863525][T14966] usb usb9-port1: unable to enumerate USB device [ 1260.977724][T11012] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1261.014687][T11012] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1261.042634][T11012] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1261.074864][T11012] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1261.101978][T11012] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1261.137215][T11012] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1261.161435][T11012] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1261.161849][T19734] xt_hashlimit: size too large, truncated to 1048576 [ 1261.178670][T11012] usb 4-1: Product: syz [ 1261.187856][T11012] usb 4-1: Manufacturer: syz [ 1261.213428][T11012] cdc_wdm 4-1:1.0: skipping garbage [ 1261.251726][T11012] cdc_wdm 4-1:1.0: skipping garbage [ 1261.268062][T11012] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1261.279310][T11012] cdc_wdm 4-1:1.0: Unknown control protocol [ 1261.422477][T19736] syzkaller0: entered promiscuous mode [ 1261.438322][T19736] syzkaller0: entered allmulticast mode [ 1261.628053][ T9] usb 4-1: USB disconnect, device number 28 [ 1262.000326][T19743] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3439'. [ 1262.211540][T17626] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1262.423338][T17626] usb 9-1: Using ep0 maxpacket: 32 [ 1262.476700][T17626] usb 9-1: config 9 has an invalid interface number: 61 but max is 0 [ 1262.515146][T17626] usb 9-1: config 9 has no interface number 0 [ 1262.542550][T17626] usb 9-1: config 9 interface 61 has no altsetting 0 [ 1262.576574][T17626] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0000, bcdDevice=ba.e3 [ 1262.614697][T17626] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.675440][T17626] usb 9-1: Product: syz [ 1262.679632][T17626] usb 9-1: Manufacturer: syz [ 1263.003161][T17626] usb 9-1: SerialNumber: syz [ 1263.492863][ T9] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 1263.676588][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.005268][T19770] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1264.090230][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1264.104514][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1265.067146][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 96 seconds [ 1265.067432][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1265.077997][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 96 seconds [ 1265.092994][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1265.110520][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1265.118702][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 96 seconds [ 1265.129851][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 96 seconds [ 1265.746724][ T9] usb 4-1: Manufacturer: syz [ 1265.766217][ T9] usb 4-1: config 0 descriptor?? [ 1266.401486][ T9] rc_core: IR keymap rc-hauppauge not found [ 1266.415299][ T9] Registered IR keymap rc-empty [ 1266.427005][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1266.461682][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1266.501901][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1266.537718][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input70 [ 1266.589252][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1266.610634][T17626] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 1266.627933][ T6059] usb 9-1: USB disconnect, device number 35 [ 1266.643110][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1266.672968][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1266.778995][T19785] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3451'. [ 1266.872137][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1266.991598][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1267.025816][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1267.046209][T17626] usb 10-1: no configurations [ 1267.052887][T17626] usb 10-1: can't read configurations, error -22 [ 1267.063455][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1267.094546][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1267.425558][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1267.449200][T17626] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 1267.462194][ T9] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1267.484067][ T9] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1267.532938][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1267.567127][ T9] usb 4-1: USB disconnect, device number 29 [ 1267.639247][T17626] usb 10-1: no configurations [ 1267.648803][T17626] usb 10-1: can't read configurations, error -22 [ 1267.679496][T17626] usb usb10-port1: attempt power cycle [ 1267.918895][T19795] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1268.638632][T17626] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 1268.870903][T17626] usb 10-1: no configurations [ 1268.925909][T17626] usb 10-1: can't read configurations, error -22 [ 1269.091485][T17626] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 1269.591491][T17626] usb 10-1: device not accepting address 15, error -71 [ 1269.641226][T17626] usb usb10-port1: unable to enumerate USB device [ 1269.641707][T14966] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1269.856513][T19811] xt_hashlimit: size too large, truncated to 1048576 [ 1269.900283][T14966] usb 7-1: Using ep0 maxpacket: 32 [ 1269.965704][T14966] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1270.046969][T14966] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1270.059340][ T29] audit: type=1400 audit(1772477998.803:645): avc: denied { map } for pid=19812 comm="syz.8.3461" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1270.094224][T14966] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.113352][T14966] usb 7-1: Product: syz [ 1270.144890][T14966] usb 7-1: Manufacturer: syz [ 1270.157581][T14966] usb 7-1: SerialNumber: syz [ 1270.163576][ T29] audit: type=1400 audit(1772477998.803:646): avc: denied { execute } for pid=19812 comm="syz.8.3461" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1270.207962][T14966] usb 7-1: config 0 descriptor?? [ 1270.229042][T19804] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1270.278979][T14966] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input71 [ 1270.504038][T19804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.512989][T19804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.715171][T14966] usb 7-1: USB disconnect, device number 61 [ 1270.721086][ C0] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1270.865922][T19817] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3462'. [ 1271.030762][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 100 seconds [ 1271.041999][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 100 seconds [ 1271.053152][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 100 seconds [ 1271.064335][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 100 seconds [ 1271.452679][T19823] netlink: 'syz.8.3463': attribute type 1 has an invalid length. [ 1271.460958][ T29] audit: type=1400 audit(1772478000.193:647): avc: denied { getopt } for pid=19818 comm="syz.8.3463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1271.971681][T14966] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 1271.994028][T19823] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1272.095943][T19833] bond10: (slave geneve2): making interface the new active one [ 1272.135014][T14966] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.157870][T14966] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1272.175341][T19833] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 1272.204944][T14966] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1272.215995][T12896] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1272.216068][T12896] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1272.216106][T12896] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1272.216144][T12896] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1272.279643][T14966] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1272.317585][T14966] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1272.327549][T14966] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1272.336194][T14966] usb 10-1: Manufacturer: syz [ 1272.439266][T19843] 9p: Unknown Cache mode or invalid value 0’ºßvŽö€mÒ [ 1272.509904][T14966] usb 10-1: config 0 descriptor?? [ 1272.721493][ T10] usb 7-1: new low-speed USB device number 62 using dummy_hcd [ 1272.879744][T19847] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1272.891655][T14966] rc_core: IR keymap rc-hauppauge not found [ 1272.891674][T14966] Registered IR keymap rc-empty [ 1272.891996][T14966] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1272.929551][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1272.938098][T14966] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1272.979506][ T51] Bluetooth: hci5: unexpected event for opcode 0x0c13 [ 1272.991998][T14966] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1273.006381][ T10] usb 7-1: config 0 has no interface number 0 [ 1273.037685][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1273.060303][T14966] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input72 [ 1273.088898][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1273.122281][ T10] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1273.122300][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.123245][T14966] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1273.151603][ T10] usb 7-1: config 0 descriptor?? [ 1273.159732][T19843] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1273.231089][ T10] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1273.281669][T14966] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1273.332003][T14966] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1273.368628][T14966] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1273.416945][T14966] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1273.460476][T18788] usb 7-1: USB disconnect, device number 62 [ 1273.471961][T14966] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1273.515335][T14966] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1273.558973][T14966] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1273.592157][T14966] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1273.674348][T14966] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 1273.702679][T14966] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 1273.710760][T14966] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1273.828951][T19866] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3474'. [ 1274.339210][T19874] xt_hashlimit: size too large, truncated to 1048576 [ 1274.408231][ T24] usb 10-1: USB disconnect, device number 16 [ 1275.471776][ T10] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1275.654738][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1275.683592][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1275.739208][ T10] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1275.771495][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.814744][ T10] usb 7-1: config 0 descriptor?? [ 1276.252735][ T10] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x2 [ 1276.324120][ T10] pyra 0003:1E7D:2CF6.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 1276.481561][ T10] pyra 0003:1E7D:2CF6.0021: couldn't init struct pyra_device [ 1276.499891][ T10] pyra 0003:1E7D:2CF6.0021: couldn't install mouse [ 1276.585642][ T10] pyra 0003:1E7D:2CF6.0021: probe with driver pyra failed with error -5 [ 1276.715675][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 104 seconds [ 1276.728789][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 104 seconds [ 1276.739873][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 104 seconds [ 1276.751043][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 104 seconds [ 1276.777368][ T10] usb 7-1: USB disconnect, device number 63 [ 1277.455435][T19909] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3487'. [ 1277.465512][T19909] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3487'. [ 1277.495197][T19915] syzkaller0: entered promiscuous mode [ 1277.515400][T19915] syzkaller0: entered allmulticast mode [ 1277.878947][T19921] syzkaller1: entered promiscuous mode [ 1277.884890][T19921] syzkaller1: entered allmulticast mode [ 1277.947982][T19925] fuse: Bad value for 'fd' [ 1278.271487][T14966] usb 7-1: new full-speed USB device number 64 using dummy_hcd [ 1278.826611][T14966] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.856391][T14966] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1278.990086][T14966] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1279.065313][T14966] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1279.080442][T14966] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1279.101480][T14966] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1279.121685][T14966] usb 7-1: Manufacturer: syz [ 1279.155859][T19937] xt_hashlimit: size too large, truncated to 1048576 [ 1279.471235][T14966] usb 7-1: config 0 descriptor?? [ 1280.240711][T19951] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3499'. [ 1280.276582][T14966] rc_core: IR keymap rc-hauppauge not found [ 1280.294484][T19952] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3499'. [ 1280.340459][T14966] Registered IR keymap rc-empty [ 1280.363587][T14966] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1280.474234][T14966] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1280.522392][T14966] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1280.608869][T14966] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input73 [ 1280.773731][T14966] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1280.833356][T14966] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1280.852733][T14966] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1280.895649][T14966] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1280.943805][T14966] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1280.973159][T14966] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1281.026033][T14966] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1281.075721][T14966] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1281.127146][T14966] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1281.182271][T14966] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1281.219298][T14966] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 1281.230488][T14966] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1281.920346][T18788] usb 7-1: USB disconnect, device number 64 [ 1282.455133][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 108 seconds [ 1282.466243][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 108 seconds [ 1282.477317][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 108 seconds [ 1282.488371][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 108 seconds [ 1282.672998][T19999] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3509'. [ 1282.804849][T19994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3508'. [ 1282.814689][T19994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3508'. [ 1283.930016][T19997] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3509'. [ 1285.535695][T11012] usb 7-1: new full-speed USB device number 65 using dummy_hcd [ 1286.134086][T11012] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.151902][T11012] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1286.163690][T11012] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1286.175485][T11012] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1286.190220][T11012] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1286.199542][T11012] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1286.208071][T11012] usb 7-1: Manufacturer: syz [ 1286.233131][T11012] usb 7-1: config 0 descriptor?? [ 1286.561494][T11012] rc_core: IR keymap rc-hauppauge not found [ 1286.575555][T11012] Registered IR keymap rc-empty [ 1286.580785][T11012] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1286.601982][T11012] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1286.633364][T11012] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1286.755496][T11012] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input74 [ 1286.879830][T11012] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1286.911773][T11012] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1286.932393][T20055] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1286.938833][T20055] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3527'. [ 1286.957668][T11012] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1287.003994][T11012] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1287.063225][T20057] netlink: 'syz.3.3528': attribute type 1 has an invalid length. [ 1287.096571][T11012] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1287.252208][T11012] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1287.323008][T11012] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1287.402195][T11012] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1287.626347][T11012] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1287.664077][T11012] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1287.712586][T11012] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 1287.746435][T11012] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1287.791067][T11012] usb 7-1: USB disconnect, device number 65 [ 1287.943362][T20070] xt_hashlimit: size too large, truncated to 1048576 [ 1287.989944][T20064] bond1: (slave gretap1): making interface the new active one [ 1288.009101][T20064] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1288.223952][T20076] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3531'. [ 1288.266428][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 112 seconds [ 1288.291376][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 112 seconds [ 1288.304379][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 112 seconds [ 1288.316967][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 112 seconds [ 1288.334350][T20075] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3531'. [ 1288.714562][T20081] 9p: Unknown Cache mode or invalid value 0’ºßvŽö€mÒ [ 1288.789397][T20083] netlink: 'syz.6.3534': attribute type 2 has an invalid length. [ 1289.058654][T11012] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 1289.223301][T11012] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1289.239096][T11012] usb 4-1: config 0 has no interface number 0 [ 1289.254467][T11012] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1289.265634][T11012] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1289.276572][T11012] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1289.285808][T11012] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.378516][T11012] usb 4-1: config 0 descriptor?? [ 1289.396671][T20081] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1289.415820][T11012] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1289.621757][ T10] usb 4-1: USB disconnect, device number 30 [ 1289.751508][T17626] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1289.911476][T17626] usb 9-1: Using ep0 maxpacket: 8 [ 1289.918695][T17626] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1289.946787][T17626] usb 9-1: config 179 has no interface number 0 [ 1289.968044][T17626] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1289.991537][T17626] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1290.037320][T17626] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1290.065992][T17626] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1290.087715][T17626] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1290.104641][T17626] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1290.116553][T17626] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.154656][T20087] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1290.370113][T18788] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input75 [ 1290.634307][ T24] usb 9-1: USB disconnect, device number 36 [ 1290.634341][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1290.648512][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1290.686202][T20104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3541'. [ 1290.697684][T20104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3541'. [ 1290.845343][T20107] netlink: 'syz.9.3542': attribute type 1 has an invalid length. [ 1292.195347][T20124] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3546'. [ 1292.328118][T20126] netlink: 'syz.1.3548': attribute type 2 has an invalid length. [ 1292.407639][T20123] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3546'. [ 1293.151647][T18788] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1293.347991][T20138] xt_connbytes: Forcing CT accounting to be enabled [ 1293.372061][T18788] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1293.380850][T18788] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1293.431922][T20138] Cannot find set identified by id 0 to match [ 1293.457089][T18788] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1293.486744][T18788] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1293.521153][T18788] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1293.560195][T18788] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1293.603419][T18788] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1293.628240][T18788] usb 7-1: Product: syz [ 1293.642544][T18788] usb 7-1: Manufacturer: syz [ 1293.677185][T18788] cdc_wdm 7-1:1.0: skipping garbage [ 1293.697176][T18788] cdc_wdm 7-1:1.0: skipping garbage [ 1293.718053][T18788] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1293.739398][T18788] cdc_wdm 7-1:1.0: Unknown control protocol [ 1293.838036][T20140] input: syz0 as /devices/virtual/input/input76 [ 1294.102077][T11012] usb 7-1: USB disconnect, device number 66 [ 1294.102617][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 116 seconds [ 1294.128848][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 116 seconds [ 1294.142597][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 116 seconds [ 1294.154120][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 116 seconds [ 1294.624093][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1294.630439][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1294.652126][T20148] syzkaller1: entered promiscuous mode [ 1294.661566][T20148] syzkaller1: entered allmulticast mode [ 1295.219072][ T51] Bluetooth: hci7: unexpected subevent 0x04 length: 9 < 11 [ 1295.221126][T20156] netlink: 'syz.9.3555': attribute type 1 has an invalid length. [ 1295.982108][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1295.982120][T18788] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1296.225131][T18788] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1296.243667][T11012] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1296.320971][T20170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3561'. [ 1296.552816][T20170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3561'. [ 1296.642954][T11012] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1296.654551][T11012] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1296.667149][T11012] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1296.866873][T11012] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1296.884965][T11012] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1297.002980][T11012] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1297.017861][T11012] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1297.030318][T11012] usb 7-1: Product: syz [ 1297.040557][T11012] usb 7-1: Manufacturer: syz [ 1297.317658][T11012] cdc_wdm 7-1:1.0: skipping garbage [ 1297.323722][T11012] cdc_wdm 7-1:1.0: skipping garbage [ 1297.333780][T11012] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1297.351859][T11012] cdc_wdm 7-1:1.0: Unknown control protocol [ 1298.015315][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1298.021929][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1298.031525][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1298.038149][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1298.045641][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1298.052254][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1298.061491][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1298.068097][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1298.074510][ T24] usb 7-1: USB disconnect, device number 67 [ 1298.081437][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1298.084811][T20166] cdc_wdm 7-1:1.0: Tx URB error: -19 [ 1298.088025][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1298.088042][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1298.301900][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 1298.301936][T15142] Bluetooth: hci7: unexpected subevent 0x04 length: 9 < 11 [ 1298.336380][T18788] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1298.378751][T18788] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1299.229373][T20222] nbd: device at index 1 is going down [ 1299.303885][ T29] audit: type=1400 audit(1772478028.043:648): avc: denied { connect } for pid=20163 comm="syz.6.3559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1299.732634][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 120 seconds [ 1299.743451][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 120 seconds [ 1299.754678][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 120 seconds [ 1299.765866][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 120 seconds [ 1299.776890][ T6059] usb 9-1: new full-speed USB device number 37 using dummy_hcd [ 1300.015298][ T6059] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.046718][ T6059] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1300.091439][ T6059] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1300.147643][ T6059] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1300.194594][ T6059] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1300.218695][ T6059] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1300.240413][ T6059] usb 9-1: Manufacturer: syz [ 1300.261839][T20261] 9p: Unknown Cache mode or invalid value 0’ºßvŽö€mÒ [ 1300.272304][ T6059] usb 9-1: config 0 descriptor?? [ 1300.321926][T20263] syzkaller0: entered promiscuous mode [ 1300.327426][T20263] syzkaller0: entered allmulticast mode [ 1300.541569][ T24] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 1300.608991][ T6059] rc_core: IR keymap rc-hauppauge not found [ 1300.615572][T15142] Bluetooth: hci3: command 0x0406 tx timeout [ 1300.621665][T18788] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1300.628364][ T6059] Registered IR keymap rc-empty [ 1300.643484][T18788] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1300.668348][ T6059] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1300.704134][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1300.721780][ T6059] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1300.724488][T20270] netlink: 'syz.1.3581': attribute type 1 has an invalid length. [ 1300.728473][ T24] usb 4-1: config 0 has no interface number 0 [ 1300.747184][ T6059] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1300.831754][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1300.875038][ T6059] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input77 [ 1300.901650][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1300.950100][ T6059] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1300.958745][ T24] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1300.972908][T20275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3581'. [ 1300.990362][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.069988][ T6059] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1301.330895][ T24] usb 4-1: config 0 descriptor?? [ 1301.336246][ T6059] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1301.369962][T20261] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1301.415271][ T6059] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1301.423006][ T24] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1301.471600][ T6059] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1301.521979][ T6059] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1301.562853][ T6059] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1301.800051][T11012] usb 4-1: USB disconnect, device number 31 [ 1301.812226][ T6059] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1301.852342][ T6059] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1302.021807][ T6059] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1302.065562][ T6059] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 1302.096210][ T6059] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1302.321760][ T5917] usb 9-1: USB disconnect, device number 37 [ 1302.691459][T15142] Bluetooth: hci5: command 0x0c1a tx timeout [ 1302.699018][T18788] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1302.728772][T18788] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1302.901945][T20302] netlink: 'syz.6.3589': attribute type 1 has an invalid length. [ 1303.488716][T20313] syzkaller0: entered promiscuous mode [ 1303.511755][T20313] syzkaller0: entered allmulticast mode [ 1303.821604][ T24] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1303.982130][ T24] usb 7-1: device descriptor read/64, error -71 [ 1304.371858][ T24] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1304.486639][ T29] audit: type=1400 audit(1772478033.223:649): avc: denied { setopt } for pid=20329 comm="syz.1.3597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1304.523364][ T24] usb 7-1: device descriptor read/64, error -71 [ 1304.632248][ T24] usb usb7-port1: attempt power cycle [ 1304.795356][T15142] Bluetooth: hci6: command 0x0406 tx timeout [ 1304.810193][T18788] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 1305.071301][T18788] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 1305.261553][ T24] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1305.332020][ T24] usb 7-1: device descriptor read/8, error -71 [ 1305.604235][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 124 seconds [ 1305.615041][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 124 seconds [ 1305.626155][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 124 seconds [ 1305.637183][ T24] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1305.644949][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 124 seconds [ 1305.791680][T20350] /dev/nullb0: Can't lookup blockdev [ 1306.142753][ T29] audit: type=1326 audit(1772478034.883:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20343 comm="syz.1.3602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cdd79c799 code=0x7ffc0000 [ 1306.265724][ T24] usb 7-1: device descriptor read/8, error -71 [ 1306.425909][ T29] audit: type=1326 audit(1772478034.883:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20343 comm="syz.1.3602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cdd79c799 code=0x7ffc0000 [ 1306.476415][T20356] netlink: 'syz.3.3603': attribute type 1 has an invalid length. [ 1306.501886][ T24] usb usb7-port1: unable to enumerate USB device [ 1306.703314][T20365] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1307.251658][T15142] Bluetooth: hci4: command 0x0406 tx timeout [ 1307.601126][ T29] audit: type=1400 audit(1772478035.223:652): avc: denied { name_bind } for pid=20357 comm="syz.9.3605" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1307.607290][T18788] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1308.720816][T18788] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1308.837848][ T29] audit: type=1400 audit(1772478037.573:653): avc: denied { connect } for pid=20369 comm="syz.6.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1308.923158][ T29] audit: type=1400 audit(1772478037.653:654): avc: denied { bind } for pid=20369 comm="syz.6.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1309.264809][ T29] audit: type=1400 audit(1772478037.653:655): avc: denied { listen } for pid=20369 comm="syz.6.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1309.391237][ T29] audit: type=1400 audit(1772478037.653:656): avc: denied { accept } for pid=20369 comm="syz.6.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1310.291466][ T24] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1310.441829][ T24] usb 10-1: device descriptor read/64, error -71 [ 1310.931865][ T24] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1311.071432][ T24] usb 10-1: device descriptor read/64, error -71 [ 1311.181703][ T24] usb usb10-port1: attempt power cycle [ 1311.252973][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 128 seconds [ 1311.263787][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 128 seconds [ 1311.274813][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 128 seconds [ 1311.285809][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 128 seconds [ 1311.288277][T20411] syzkaller0: entered promiscuous mode [ 1311.307717][T20411] syzkaller0: entered allmulticast mode [ 1311.315970][T20413] netlink: 'syz.8.3622': attribute type 1 has an invalid length. [ 1311.366323][T20413] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3622'. [ 1311.491507][T20389] Bluetooth: hci0: command 0x0406 tx timeout [ 1311.497613][T18788] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1311.508369][T18788] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1311.572710][ T24] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1311.712503][ T24] usb 10-1: device descriptor read/8, error -71 [ 1311.952289][ T24] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1311.991437][ T5917] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1312.016195][ T24] usb 10-1: device descriptor read/8, error -71 [ 1312.045647][T20427] xt_hashlimit: size too large, truncated to 1048576 [ 1312.098214][T20389] Bluetooth: hci7: command 0x0406 tx timeout [ 1312.182615][ T24] usb usb10-port1: unable to enumerate USB device [ 1312.467335][ T5917] usb 7-1: Using ep0 maxpacket: 32 [ 1312.472265][T20438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=20438 comm=syz.1.3629 [ 1312.486712][ T5917] usb 7-1: config 9 has an invalid interface number: 61 but max is 0 [ 1312.569634][ T5917] usb 7-1: config 9 has no interface number 0 [ 1312.576855][ T5917] usb 7-1: config 9 interface 61 has no altsetting 0 [ 1312.586010][ T5917] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0000, bcdDevice=ba.e3 [ 1312.673736][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.830362][ T5917] usb 7-1: Product: syz [ 1312.841434][ T5917] usb 7-1: Manufacturer: syz [ 1312.848859][ T5917] usb 7-1: SerialNumber: syz [ 1313.183355][T20448] program syz.8.3632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1313.285433][T20450] syzkaller0: entered promiscuous mode [ 1313.351625][T20450] syzkaller0: entered allmulticast mode [ 1313.363517][T20453] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1314.211612][T18788] Bluetooth: hci7: Opcode 0x0c1a failed: -110 [ 1314.221460][T15142] Bluetooth: hci7: command 0x0406 tx timeout [ 1314.325808][T18788] Bluetooth: hci7: Error when powering off device on rfkill (-110) [ 1314.896502][ T5917] usb 7-1: USB disconnect, device number 72 [ 1315.047908][T20456] input: syz0 as /devices/virtual/input/input78 [ 1315.069435][T20458] netlink: 'syz.8.3635': attribute type 1 has an invalid length. [ 1315.155157][T20459] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3635'. [ 1315.362713][ T29] audit: type=1400 audit(1772478044.083:657): avc: denied { setcheckreqprot } for pid=20455 comm="syz.6.3634" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1316.100309][T20461] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3636'. [ 1316.117367][T20461] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3636'. [ 1316.576293][T20487] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3642'. [ 1317.100282][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 132 seconds [ 1317.114576][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 132 seconds [ 1317.129918][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 132 seconds [ 1317.142479][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 132 seconds [ 1317.360275][T20498] syzkaller0: entered promiscuous mode [ 1317.408857][T20498] syzkaller0: entered allmulticast mode [ 1317.753907][T20503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.761325][T20503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.777919][T20503] bridge0: entered allmulticast mode [ 1317.910769][T20503] bridge_slave_1: left allmulticast mode [ 1317.916997][T20503] bridge_slave_1: left promiscuous mode [ 1317.924018][T20503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.984487][T20515] netlink: 'syz.9.3649': attribute type 1 has an invalid length. [ 1318.062622][T20517] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3649'. [ 1318.270406][T20503] bridge_slave_0: left allmulticast mode [ 1318.456062][T20503] bridge_slave_0: left promiscuous mode [ 1318.464862][T20503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.880083][T20524] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3651'. [ 1318.958836][T20515] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1319.451615][T20536] fuse: Bad value for 'fd' [ 1319.757222][T20541] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3655'. [ 1320.106715][T20542] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3656'. [ 1320.601523][ T5917] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 1320.892688][ T29] audit: type=1400 audit(1772478049.493:658): avc: denied { write } for pid=20507 comm="syz.3.3648" name="file0" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1320.961450][ T5917] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.961909][ T29] audit: type=1400 audit(1772478049.493:659): avc: denied { open } for pid=20507 comm="syz.3.3648" path="/75/file0" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1320.995134][ T5917] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1321.061470][ T5917] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1321.071455][ T29] audit: type=1400 audit(1772478049.493:660): avc: denied { ioctl } for pid=20507 comm="syz.3.3648" path="/75/file0" dev="tmpfs" ino=405 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1321.091428][ T5917] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1321.180860][ T5917] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1321.206364][ T5917] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1321.230143][ T5917] usb 9-1: Manufacturer: syz [ 1321.265423][ T5917] usb 9-1: config 0 descriptor?? [ 1321.622846][ T5917] rc_core: IR keymap rc-hauppauge not found [ 1321.643348][ T5917] Registered IR keymap rc-empty [ 1321.658900][ T5917] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1321.701841][ T5917] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1321.724129][ T5917] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1321.743009][ T5917] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input80 [ 1321.787216][ T5917] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1321.813504][ T5917] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1321.841959][ T5917] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1321.872526][ T5917] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1321.901985][ T5917] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1321.958035][ T5917] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1321.999807][ T5917] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1322.052452][ T5917] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1322.101899][ T5917] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1322.129945][ T5917] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1322.182927][ T5917] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 1322.204991][ T5917] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1322.257928][T20574] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 1322.468375][ T29] audit: type=1400 audit(1772478051.043:661): avc: denied { getopt } for pid=20572 comm="syz.3.3664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1322.551753][ T5917] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1322.772054][T15745] block nbd0: Possible stuck request ffff888027c98000: control (read@0,1024B). Runtime 136 seconds [ 1322.782334][ T30] INFO: task syz.0.3180:18566 blocked for more than 143 seconds. [ 1322.783991][T15745] block nbd0: Possible stuck request ffff888027c98200: control (read@1024,1024B). Runtime 136 seconds [ 1322.790820][ T5917] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1322.801551][T15745] block nbd0: Possible stuck request ffff888027c98400: control (read@2048,1024B). Runtime 136 seconds [ 1322.801580][T15745] block nbd0: Possible stuck request ffff888027c98600: control (read@3072,1024B). Runtime 136 seconds [ 1322.859559][ T30] Tainted: G L syzkaller #0 [ 1322.881195][T20577] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1322.907759][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1322.928143][T14966] usb 9-1: USB disconnect, device number 38 [ 1322.939856][ T30] task:syz.0.3180 state:D stack:27400 pid:18566 tgid:18558 ppid:17559 task_flags:0x400140 flags:0x00080002 [ 1322.952326][ T30] Call Trace: [ 1322.968108][ T30] [ 1322.971251][ T30] __schedule+0xfee/0x6120 [ 1322.976582][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1322.982438][ T5917] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1322.991306][ T5917] usb 4-1: can't read configurations, error -71 [ 1323.017004][ T30] ? __pfx___schedule+0x10/0x10 [ 1323.642386][ T30] ? find_held_lock+0x2b/0x80 [ 1323.653620][ T30] ? schedule+0x2bf/0x390 [ 1323.663516][ T30] schedule+0xdd/0x390 [ 1323.675488][ T30] schedule_preempt_disabled+0x13/0x30 [ 1323.695011][ T30] __mutex_lock+0xc9a/0x1b90 [ 1323.701447][ T30] ? bdev_open+0x41a/0xe40 [ 1323.706317][ T30] ? __rcu_read_unlock+0x26a/0x5e0 [ 1323.711651][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1323.717130][ T30] ? find_inode_fast+0x1fa/0x910 [ 1323.726021][ T30] ? bdev_open+0x41a/0xe40 [ 1323.730518][ T30] bdev_open+0x41a/0xe40 [ 1323.735152][ T30] ? iput+0x3a/0x40 [ 1323.739001][ T30] blkdev_open+0x34e/0x4f0 [ 1323.743501][ T30] do_dentry_open+0x6d8/0x1660 [ 1323.748425][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1323.753823][ T30] vfs_open+0x82/0x3f0 [ 1323.759204][ T30] ? path_openat+0x1389/0x31a0 [ 1323.764702][ T30] path_openat+0x208c/0x31a0 [ 1323.770103][ T30] ? rcu_is_watching+0x12/0xc0 [ 1323.775497][ T30] ? trace_sched_exit_tp+0x13a/0x180 [ 1323.780936][ T30] ? __pfx_path_openat+0x10/0x10 [ 1323.786903][ T30] do_file_open+0x20e/0x430 [ 1323.791754][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1323.796931][ T30] ? __pfx___schedule+0x10/0x10 [ 1323.801895][ T30] ? alloc_fd+0x476/0x790 [ 1323.806377][ T30] ? do_getname+0x191/0x390 [ 1323.811246][ T30] do_sys_openat2+0x10d/0x1e0 [ 1323.816457][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1323.821724][ T30] ? irqentry_exit+0x180/0x670 [ 1323.826558][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 1323.832218][ T30] __x64_sys_openat+0x12d/0x210 [ 1323.837116][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1323.846485][ T30] do_syscall_64+0x106/0xf80 [ 1323.851167][ T30] ? clear_bhb_loop+0x40/0x90 [ 1323.860542][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.866754][ T30] RIP: 0033:0x7fabac15cfce [ 1323.872158][ T30] RSP: 002b:00007fabad043b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1323.887387][ T30] RAX: ffffffffffffffda RBX: 00007fabad0446c0 RCX: 00007fabac15cfce [ 1323.919720][ T30] RDX: 0000000000000000 RSI: 00007fabad043c00 RDI: ffffffffffffff9c [ 1323.943903][ T30] RBP: 00007fabad043c00 R08: 0000000000000000 R09: 0000000000000000 [ 1323.973611][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1323.990613][ T30] R13: 00007fabac416128 R14: 00007fabac416090 R15: 00007ffed7e53258 [ 1324.011898][ T30] [ 1324.023708][ T30] INFO: task syz.0.3180:18567 blocked for more than 144 seconds. [ 1324.072944][ T30] Tainted: G L syzkaller #0 [ 1324.081856][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1324.090592][ T30] task:syz.0.3180 state:D stack:27912 pid:18567 tgid:18558 ppid:17559 task_flags:0x400040 flags:0x00080002 [ 1324.151531][ T30] Call Trace: [ 1324.154845][ T30] [ 1324.157776][ T30] __schedule+0xfee/0x6120 [ 1324.175900][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1324.188120][ T30] ? __pfx___schedule+0x10/0x10 [ 1324.201294][ T30] ? find_held_lock+0x2b/0x80 [ 1324.211115][ T30] ? schedule+0x2bf/0x390 [ 1324.227661][ T30] schedule+0xdd/0x390 [ 1324.241679][ T30] schedule_preempt_disabled+0x13/0x30 [ 1324.247170][ T30] __mutex_lock+0xc9a/0x1b90 [ 1324.263357][ T30] ? bdev_open+0x41a/0xe40 [ 1324.280229][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1324.295094][ T30] ? preempt_schedule_irq+0x7b/0x90 [ 1324.303670][ T30] ? irqentry_exit+0x180/0x670 [ 1324.308737][ T30] ? bdev_open+0x41a/0xe40 [ 1324.315337][ T30] bdev_open+0x41a/0xe40 [ 1324.319758][ T30] blkdev_open+0x34e/0x4f0 [ 1324.325655][ T30] do_dentry_open+0x6d8/0x1660 [ 1324.330514][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1324.335609][ T30] vfs_open+0x82/0x3f0 [ 1324.339742][ T30] path_openat+0x208c/0x31a0 [ 1324.344516][ T30] ? rcu_is_watching+0x12/0xc0 [ 1324.349322][ T30] ? trace_sched_exit_tp+0x13a/0x180 [ 1324.354714][ T30] ? __pfx_path_openat+0x10/0x10 [ 1324.359717][ T30] do_file_open+0x20e/0x430 [ 1324.364374][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1324.369448][ T30] ? __pfx___schedule+0x10/0x10 [ 1324.374655][ T30] ? alloc_fd+0x476/0x790 [ 1324.379091][ T30] do_sys_openat2+0x10d/0x1e0 [ 1324.383950][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1324.389204][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1324.394699][ T30] ? kcov_ioctl+0x16a/0x720 [ 1324.399255][ T30] __x64_sys_openat+0x12d/0x210 [ 1324.406240][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1324.412622][ T30] ? kcov_ioctl+0x16a/0x720 [ 1324.417184][ T30] do_syscall_64+0x106/0xf80 [ 1324.422803][ T30] ? clear_bhb_loop+0x40/0x90 [ 1324.427520][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.434280][ T30] RIP: 0033:0x7fabac15cfce [ 1324.438730][ T30] RSP: 002b:00007fabad022b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1324.447299][ T30] RAX: ffffffffffffffda RBX: 00007fabad0236c0 RCX: 00007fabac15cfce [ 1324.455424][ T30] RDX: 0000000000022001 RSI: 00007fabad022c00 RDI: ffffffffffffff9c [ 1324.463633][ T30] RBP: 00007fabad022c00 R08: 0000000000000000 R09: 0000000000000000 [ 1324.471669][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1324.479666][ T30] R13: 00007fabac416218 R14: 00007fabac416180 R15: 00007ffed7e53258 [ 1324.487909][ T30] [ 1324.491196][ T30] [ 1324.491196][ T30] Showing all locks held in the system: [ 1324.508828][ T30] 1 lock held by khungtaskd/30: [ 1324.517313][ T30] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1324.527726][ T30] 1 lock held by klogd/5167: [ 1324.532463][ T30] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1324.542690][ T30] 2 locks held by getty/5563: [ 1324.547423][ T30] #0: ffff888033ef60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1324.557478][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1324.568023][ T30] 1 lock held by udevd/17208: [ 1324.572786][ T30] #0: ffff8880277f3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1324.582374][ T30] 1 lock held by syz.0.3180/18566: [ 1324.587524][ T30] #0: ffff8880277f3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1324.597195][ T30] 1 lock held by syz.0.3180/18567: [ 1324.602363][ T30] #0: ffff8880277f3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1324.612203][ T30] [ 1324.614598][ T30] ============================================= [ 1324.614598][ T30] [ 1324.623383][ T30] NMI backtrace for cpu 1 [ 1324.623400][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1324.623425][ T30] Tainted: [L]=SOFTLOCKUP [ 1324.623431][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1324.623442][ T30] Call Trace: [ 1324.623447][ T30] [ 1324.623454][ T30] dump_stack_lvl+0x100/0x190 [ 1324.623486][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1324.623505][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1324.623534][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1324.623562][ T30] sys_info+0x141/0x190 [ 1324.623583][ T30] watchdog+0xd25/0x1050 [ 1324.623613][ T30] ? __pfx_watchdog+0x10/0x10 [ 1324.623637][ T30] ? __kthread_parkme+0x18c/0x230 [ 1324.623665][ T30] ? kthread+0x13a/0x450 [ 1324.623680][ T30] ? __pfx_watchdog+0x10/0x10 [ 1324.623701][ T30] kthread+0x370/0x450 [ 1324.623726][ T30] ? __pfx_kthread+0x10/0x10 [ 1324.623744][ T30] ret_from_fork+0x754/0xd80 [ 1324.623763][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1324.623782][ T30] ? __switch_to+0x7b4/0x1120 [ 1324.623803][ T30] ? __pfx_kthread+0x10/0x10 [ 1324.623821][ T30] ret_from_fork_asm+0x1a/0x30 [ 1324.623854][ T30] [ 1324.623862][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1324.749259][ C0] NMI backtrace for cpu 0 [ 1324.749277][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1324.749297][ C0] Tainted: [L]=SOFTLOCKUP [ 1324.749302][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1324.749311][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1324.749330][ C0] Code: 78 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 9f 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1324.749344][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246 [ 1324.749357][ C0] RAX: 0000000007bd45a3 RBX: ffffffff8e4975c0 RCX: ffffffff8b8fec75 [ 1324.749366][ C0] RDX: 0000000000000000 RSI: ffffffff8de72ef9 RDI: ffffffff8c1af6a0 [ 1324.749376][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 1324.749384][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 1324.749394][ C0] R13: 0000000000000000 R14: ffffffff90d98410 R15: 0000000000000000 [ 1324.749403][ C0] FS: 0000000000000000(0000) GS:ffff888124345000(0000) knlGS:0000000000000000 [ 1324.749418][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1324.749427][ C0] CR2: 00007f1cdd9e82f8 CR3: 000000002b70d000 CR4: 00000000003526f0 [ 1324.749437][ C0] Call Trace: [ 1324.749442][ C0] [ 1324.749447][ C0] default_idle+0x9/0x10 [ 1324.749463][ C0] default_idle_call+0x6c/0xb0 [ 1324.749479][ C0] do_idle+0x35b/0x4b0 [ 1324.749497][ C0] ? __pfx_do_idle+0x10/0x10 [ 1324.749515][ C0] cpu_startup_entry+0x4f/0x60 [ 1324.749532][ C0] rest_init+0x251/0x260 [ 1324.749547][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1324.749569][ C0] start_kernel+0x47f/0x480 [ 1324.749586][ C0] x86_64_start_reservations+0x24/0x30 [ 1324.749607][ C0] x86_64_start_kernel+0x12b/0x130 [ 1324.749624][ C0] common_startup_64+0x13e/0x148 [ 1324.749645][ C0] [ 1324.938642][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1324.945498][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1324.956148][ T30] Tainted: [L]=SOFTLOCKUP [ 1324.960445][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1324.970476][ T30] Call Trace: [ 1324.973743][ T30] [ 1324.976651][ T30] dump_stack_lvl+0x100/0x190 [ 1324.981325][ T30] vpanic+0x552/0x970 [ 1324.985282][ T30] ? __pfx_vpanic+0x10/0x10 [ 1324.989772][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1324.995931][ T30] panic+0xd1/0xe0 [ 1324.999655][ T30] ? __pfx_panic+0x10/0x10 [ 1325.004055][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1325.010192][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1325.016329][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1325.022481][ T30] ? watchdog.cold+0x198/0x1ca [ 1325.027226][ T30] ? watchdog+0xd35/0x1050 [ 1325.031628][ T30] watchdog.cold+0x1a9/0x1ca [ 1325.036204][ T30] ? __pfx_watchdog+0x10/0x10 [ 1325.040874][ T30] ? __kthread_parkme+0x18c/0x230 [ 1325.045889][ T30] ? kthread+0x13a/0x450 [ 1325.050111][ T30] ? __pfx_watchdog+0x10/0x10 [ 1325.054773][ T30] kthread+0x370/0x450 [ 1325.058842][ T30] ? __pfx_kthread+0x10/0x10 [ 1325.063411][ T30] ret_from_fork+0x754/0xd80 [ 1325.067983][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1325.073077][ T30] ? __switch_to+0x7b4/0x1120 [ 1325.077751][ T30] ? __pfx_kthread+0x10/0x10 [ 1325.082322][ T30] ret_from_fork_asm+0x1a/0x30 [ 1325.087075][ T30] [ 1325.090345][ T30] Kernel Offset: disabled [ 1325.094653][ T30] Rebooting in 86400 seconds..