last executing test programs: 15m57.745025659s ago: executing program 3 (id=515): set_tid_address(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x4000054) 15m57.198714728s ago: executing program 3 (id=519): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x0) 15m57.013701189s ago: executing program 3 (id=522): r0 = syz_ublk_setup_io_uring(0x772a, &(0x7f0000000000)={0x0, 0xaa51, 0x8, 0x2, 0x177}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r0, 0x3741, 0x4e9f, 0x18, &(0x7f0000000140)={[0x100000000]}, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000180)=0xbbf, 0x40000, 0x5) r1 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r1, 0x0, 0x0, 0x100800) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$UBLK_U_CMD_GET_PARAMS(r2, 0x80207509, &(0x7f0000000280)={0x0, 0xffff, 0x70, &(0x7f0000000200)={0x70}}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0x8000000, 0x54000, 0x0, 0x0, 0x80, 0x7, 0x3, 0xd, 0xe, 0x6, 0x5, 0x6}, {0xeeef0000, 0xffff1000, 0x2f5266edb2e9e7d8, 0xfc, 0x8, 0x3, 0xd, 0x2, 0x3, 0x1, 0x7, 0x6}, {0x5000, 0x2222c000, 0xc, 0x80, 0x1, 0xd, 0x0, 0x0, 0x5, 0x7f, 0x0, 0x9}, {0x200000, 0x40000, 0xd, 0x10, 0xc, 0xb, 0xd, 0xe, 0x3, 0x7, 0x0, 0x4}, {0x4000, 0x3000, 0x10, 0x5, 0xd1, 0x3, 0x6, 0x2, 0x5, 0x5, 0x3, 0x7}, {0xb000, 0x7000, 0xb, 0x6, 0x2, 0x3, 0x4, 0x6, 0x3, 0xb, 0x3, 0x2}, {0x41000, 0xeeef0000, 0x1f, 0xe1, 0x3, 0x5, 0x6, 0x1c, 0x0, 0x80, 0x1, 0x7}, {0x26000, 0x54000, 0x0, 0x0, 0xe7, 0x8, 0xba, 0x3, 0x5, 0x2, 0x6, 0x1}, {0x1000, 0x8000}, {0x40000, 0x6}, 0x0, 0x0, 0xd000, 0x0, 0xa, 0x8100, 0x5000, [0xda65, 0x7fffffffffffffff, 0x401, 0x2]}) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x6a3, 0xcd0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0xfa, 0x1, 0x3, 0x1, 0x3, 0x8, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0xae6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x5, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x9, 0x10, 0x7}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x201, 0x9, 0x6, 0xed, 0xff}, 0x8c, &(0x7f00000004c0)={0x5, 0xf, 0x8c, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0xc3, 0x5, 0x8, 0xff00, 0x1, [0xc030, 0xff00cf, 0xc0, 0xf, 0x3fc0]}, @generic={0x56, 0x10, 0xa, "78086c50cbf5cc5b40256c890bc78fdb1554ead6cf4a5237566a25208c671cd90469d2c3a3e0169379d440506493ca18bd19a13319a71ad9fabfbfd8e24238ccc245bd2cbe9fc6b22c9e4dc2e276f5ca167e35"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x3, 0x0, 0xf1}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x2, 0xff}]}, 0x6, [{0x15, &(0x7f0000000580)=@string={0x15, 0x3, "b2db58e2d3c1dfafe8682b20b38dea527b1f48"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x33, &(0x7f0000000600)=@string={0x33, 0x3, "1a1925056433cd148f0ab7237b5035bb080a9c768290d68872427e6c7d21091d5e2baac6c2892660cfd54407dd37bf2a7f"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1401}}, {0x85, &(0x7f0000000680)=@string={0x85, 0x3, "9dc591bf8ef8112c5415ba12e9a4c2fe87fd6d2fe63673745498fef2b1467a31178aa0ed505b26771b9b75d913c1eae2f4686b67f0704c2f8678ef1ae169288b3cb4ac855b0637d3ea98b48a6b8cccedf78d00874a82cb72aa86aded9f89dcc3a0843b0c600e6b6cbc90379db0ceee353cc5b900b89e18366235af7ba70215574f68e6"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x809}}]}) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000840)={0xf97cff8c, 0x8, 'SE Linux', "6aac15c0e8238fe0a9c4c932501903b0e02b2682447e0382adb040508677381ef33adc0a7e6fe693f46a9e3593fc1a"}, 0x3f) clock_adjtime(0x3, &(0x7f0000000880)={0x3, 0xffff, 0x10000, 0x8000000000000000, 0x8000000000000000, 0xe8f5, 0x0, 0x1, 0x8, 0x1, 0xffffffff, 0xb, 0x400, 0x0, 0x6, 0x302, 0x9, 0x800, 0xffffffffffffff3e, 0x9, 0xfffffffffffffe00, 0x2, 0x5, 0x6, 0xfffffffffffffff9, 0xffff}) recvmsg(r1, &(0x7f0000001cc0)={&(0x7f0000000980)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000a00)=""/57, 0x39}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/166, 0xa6}, {&(0x7f0000001b00)=""/186, 0xba}, {&(0x7f0000001bc0)=""/32, 0x20}], 0x5, &(0x7f0000001c80)=""/39, 0x27}, 0x2002) r5 = syz_open_dev$sndmidi(&(0x7f0000001d00), 0x8, 0x422400) lsm_list_modules(&(0x7f0000001d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001d80)=0x30, 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000001dc0), 0x200, 0x0) ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(r6, 0x800a6f2f, &(0x7f0000001e00)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000001e40)) socket(0x18, 0x6, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001e80)=0x0) r8 = syz_open_procfs(r7, &(0x7f0000001ec0)='net/connector\x00') ioctl$XFS_IOC_ERROR_CLEARALL(r4, 0x40085875) r9 = syz_open_dev$usbmon(&(0x7f0000001f00), 0xb06, 0x2000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000001f40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_REPLACE(r8, 0xca289435, &(0x7f0000002340)={0x0, 0x2, @start={r10, 0x0, "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", "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"}, [0x8, 0x5fe, 0x2, 0xc40b9a2, 0xac5, 0x2, 0x1, 0x352, 0x2, 0x5, 0x7, 0x5, 0x7, 0x1, 0x9, 0x1f4f, 0x4, 0x100000000, 0x8001, 0x7, 0x80, 0x4, 0xfffffffffffff008, 0xe65, 0x1a, 0x5, 0x101, 0x3ff, 0x7ff, 0xb, 0x8, 0x3, 0x8000, 0x8, 0xfffffffffffffffb, 0x7, 0xca1, 0x7, 0x3, 0x4, 0x6, 0x3, 0xbc0, 0x10000, 0x9, 0x8, 0x8, 0x0, 0xfffffffffffffffb, 0x1, 0x4, 0x9, 0x9, 0x7fffffff, 0x400, 0x101, 0x8000000000000001, 0x6, 0x8, 0x7fff, 0x279b, 0x8e, 0x4000000000000000, 0x7]}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) sendfile(r5, r9, &(0x7f0000002d80)=0x30c1, 0x9) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r8, 0xc0207511, &(0x7f0000002dc0)={r3, 0xffff, 0x0, 0x0, r7}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r8, 0x4018aee2, &(0x7f0000002e40)=@attr_pmu_init) 15m56.935676977s ago: executing program 4 (id=523): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x300000000000000, 0x0, 0x800}, 0x20000000) r3 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0xfff, 0x4) write$nbd(r3, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9, "82b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf700000000ba"}, 0x3a) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={r3, &(0x7f0000000880)="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"}, 0x1c) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x60b17f360213d71e, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 15m54.351683948s ago: executing program 4 (id=527): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x9) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfa, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0x3fad7e17a27f2d2d, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)="5500000018007f5f00fe01b2a4a2809302060000ff41fc01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5b00e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1000"], 0x10}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 15m53.731527225s ago: executing program 3 (id=529): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='/'], 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000019380)={0x2020}, 0x2020) 15m52.390450486s ago: executing program 4 (id=532): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000001000000000800020000000000", 0x24) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r3) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000180)={0x3, 0x0, r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='timers\x00') close_range(r5, 0xffffffffffffffff, 0x0) pidfd_getfd(r3, r3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r8, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}}, 0x0) 15m52.263944341s ago: executing program 3 (id=533): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 15m52.17873875s ago: executing program 4 (id=535): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000400)=ANY=[], 0x0) 15m52.12246523s ago: executing program 3 (id=536): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r1, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) userfaultfd(0xc0800) 15m51.641107626s ago: executing program 4 (id=539): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0:,:\x00', 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x0, 0x1903d, 0x5}}], 0x48}, 0x0) 15m51.066037186s ago: executing program 4 (id=541): syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2030000aaaaaaaaaa0086dd6001010000081100fc020000000000000000000000000000ff02000000000000000000000000000100804e2200089078"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fa0500", 0x48, 0x11, 0x0, @local, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e138060072381f41e5fff9620915b6f78670dfaf9a195fcb2a79cf6b7931c9b4"}}}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd0001", @ANYRES32=r3, @ANYRES64=r2], 0xfdef) r4 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2840) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x2, &(0x7f0000001100)=""/4112, &(0x7f0000000300)=0x1010) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffbff}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000680)='GPL\x00', 0x3}, 0x94) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYRES32], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x8, 0x0, &(0x7f0000000280)="1d1b00ba8d13cdea2aac8a25ec05", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2002}, 0x50) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000040)={0x5, &(0x7f0000000140)=[{0x20, '\x00', @buffer={"82ea4752215f84ce072f69b340d43967b620ed4937b23a6159a5548c80f440e2", 0x20}, 0x8}, {0x32, '\x00', @st={0x4, [{0x2, @svalue=0x4}, {0x3, @svalue=0x3}, {0x2, @svalue=0x3}, {0x0, @svalue=0x4}]}, 0x101}, {0xd, '\x00', @data=0x8, 0x3}, {0x1a, '\x00', @buffer={"5363f29012030b8aa8ad54ac5d0f3ab4de0063ec29f129e53a914313a64f1a08", 0x20}}]}) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) getsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 15m35.219597342s ago: executing program 32 (id=536): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r1, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) userfaultfd(0xc0800) 15m34.958264598s ago: executing program 33 (id=541): syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2030000aaaaaaaaaa0086dd6001010000081100fc020000000000000000000000000000ff02000000000000000000000000000100804e2200089078"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fa0500", 0x48, 0x11, 0x0, @local, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e138060072381f41e5fff9620915b6f78670dfaf9a195fcb2a79cf6b7931c9b4"}}}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd0001", @ANYRES32=r3, @ANYRES64=r2], 0xfdef) r4 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2840) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x2, &(0x7f0000001100)=""/4112, &(0x7f0000000300)=0x1010) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffbff}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000680)='GPL\x00', 0x3}, 0x94) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYRES32], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x8, 0x0, &(0x7f0000000280)="1d1b00ba8d13cdea2aac8a25ec05", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2002}, 0x50) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000040)={0x5, &(0x7f0000000140)=[{0x20, '\x00', @buffer={"82ea4752215f84ce072f69b340d43967b620ed4937b23a6159a5548c80f440e2", 0x20}, 0x8}, {0x32, '\x00', @st={0x4, [{0x2, @svalue=0x4}, {0x3, @svalue=0x3}, {0x2, @svalue=0x3}, {0x0, @svalue=0x4}]}, 0x101}, {0xd, '\x00', @data=0x8, 0x3}, {0x1a, '\x00', @buffer={"5363f29012030b8aa8ad54ac5d0f3ab4de0063ec29f129e53a914313a64f1a08", 0x20}}]}) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) getsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 1m41.305758517s ago: executing program 6 (id=3157): prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e295f120460d780092820102030109021b00010200000009042d000145efe40009050103"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) setsockopt$inet_mtu(r5, 0x0, 0xa, 0x0, 0x0) listen(r1, 0x3e) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0xf, 0xffffffff, 0x47, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7800, 0x7800, 0x0, 0x4}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x81, 0xff, 0x2, 0x500, 0xae4, 0x4240004, r6}) creat(&(0x7f0000000280)='./file0\x00', 0x162) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f000094f000/0x1000)=nil, 0x1000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1m37.886457817s ago: executing program 6 (id=3169): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0xd]}, 0x8, 0x800) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x100000, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x64, 0x65, 0x35, 0x33, 0x33, 0x65, 0x61, 0x37], 0x2d, [0x63, 0x61, 0x38, 0x63], 0x2d, [0x39, 0x31, 0x65, 0x61], 0x2d, [0x31, 0x66, 0x63, 0x39], 0x2d, [0x52, 0x65, 0x65, 0x27, 0x63, 0x33, 0x61, 0x38]}}}, {@subj_role={'subj_role', 0x3d, 'upperdir'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@flag='rw'}]}) openat(r0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1, 0x8ffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvlan1\x00'}) 1m35.301203917s ago: executing program 6 (id=3180): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) creat(&(0x7f0000000000)='./file0\x00', 0xb2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r5 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x48}}, 0x440088c4) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800"], 0x48) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r10, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r11}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r10, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x4001, 0x0, 0x0}], 0x2}) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x9, 0xfffffffffffffffd, 0x7) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x144, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xfc, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0xd, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000064ec00ad43c08d81ab8dbb87042a522f6b576dba6f60e7bb470fc3fb8ba516e30827bb56d41dd62c41c10995edac33a83136be08f4892126c9bec8f377821807382fe266fb872d381902d51d16eb7f30f196d34f1a0e5b5644b57818eda121c9ab6549421e4733d8c2cbcd22979113fecabb7d678197326430a46e5f3d70605b206d62e04be6205363888e5863f2abfc09fd5bd8b168a947d0a4734cb708ef14db9f6413102a150fe79fd63d429f3ee88507e77bf8d85afdd06e2e764bb36fce631086e9934b45eaef1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32=r12, @ANYRES32=r13, @ANYBLOB='&'], 0x10) 1m31.343691597s ago: executing program 6 (id=3187): open(0x0, 0x8440, 0x85) pipe2$9p(0x0, 0x80000) userfaultfd(0x80001) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = fsopen(&(0x7f0000000080)='qnx4\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x2) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="00071e0b000004a8b121cf1c4bd49b30f34e95432d650da0b209ec1207d251d5fdc5e89b9db85a191552a7c40c9721661e31799b7a2029257625c34a348856f29858997f2af32a5851ae65a6e3ef838a6095516a922bd769c3f09c10ee96072c4540b12272674b4a47b1805bf7fb65a8c21b89c3d2b5f56ca3fb8b3cc71b17b156ac11cc80267f8ebc6c1082e5722200beb9dba92e9f77f8d483c8d768b6eb58028f1703fd78b12be6d640e96d6f8aa2b3eab7112c5f8cc48f98d960e1b432690f8c39d7708291f86afd6845ae1f97e87ebd0000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) 1m29.655665037s ago: executing program 6 (id=3193): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}, [{0x9, 0x0, 0x4}, {0x7d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc9d1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x448eade7, 0x3}, {0x0, 0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x400}, {}, {}, {0x0, 0xfffffffe, 0x0, 0x4000000}, {0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x8001}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80000}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x100}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0xfffffffe, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xd5}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x7bf}, {0x0, 0x10}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x800, 0x6}, {0x0, 0x3}, {}, {0x0, 0x0, 0x80000000, 0x3}, {}, {}, {0x0, 0x5, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0xffffffff}, {}, {}, {0x0, 0x0, 0x31e9}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, {}, {0xf4, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffe}, {0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {0xa7}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x1000}, {0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {}, {}, {0x4, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 1m26.755107568s ago: executing program 6 (id=3198): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x98, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4054}, 0x4000000) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setlease(r2, 0x400, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdd7, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffd96, 0x0, 0x0, 0x0, 0x3}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001600)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x100400c1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x6) fchdir(r7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) 1m9.645485883s ago: executing program 34 (id=3198): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x98, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4054}, 0x4000000) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setlease(r2, 0x400, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdd7, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffd96, 0x0, 0x0, 0x0, 0x3}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001600)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x100400c1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x6) fchdir(r7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) 44.217606643s ago: executing program 2 (id=3292): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000001100"], 0xe8}}, 0x0) (fail_nth: 3) 43.88730819s ago: executing program 2 (id=3293): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x7e74, 0x3, 0x3}, 0x18, 0x3) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r2, r2, 0x2f}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r3, 0x4, r3}, 0xf) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a60c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b8", 0xed}, {&(0x7f0000000180)="88e584aac45d6d83e6c2c8857149eb55d2c259a747dbdfc05b7e87150dcc7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a800c03902057e1ec6c9a195d347386118cbfbb67848d7783900dd047aeed9e789b9ea73ca850c5f9dbf67", 0x69}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec62472820000000000000000", 0xd6}, {&(0x7f0000004480)="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", 0xda5}, {&(0x7f0000000500)="f4f6ec3f1f6e4804195e1668ee6a8b994dcc5f47b255f609e705d9fbea086981", 0x20}], 0x5) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r1, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) r6 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x80010, r6, 0x15b77000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000a00)={0x1, 0x0, [{0x1, 0x0, 0x3, 0x6, 0x6, 0xfffffffb, 0x2c0000}]}) r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000200)={{0x2000, 0xd000, 0xe, 0x0, 0x8, 0xf5, 0x11, 0xa5, 0x0, 0x0, 0x8, 0xeb}, {0xeeef0000, 0xeeef0000, 0xa, 0x3, 0x5, 0x7, 0x4, 0x14, 0x0, 0x5, 0x8, 0x3}, {0x5000, 0x2000, 0xb, 0xc, 0x26, 0x7, 0x81, 0x3, 0x80, 0x4, 0x1, 0x70}, {0xdddd0000, 0x6000, 0x0, 0xfe, 0x6, 0xaa, 0xc3, 0xfb, 0x0, 0x2, 0x5, 0xe}, {0xb000, 0xc000, 0x9, 0xff, 0xc, 0x9, 0x6, 0x7, 0x5, 0x6, 0x68, 0xfc}, {0x4, 0x10000, 0x9, 0x9, 0x5, 0x5, 0x42, 0x7, 0xb0, 0x1, 0x0, 0x10}, {0x4000, 0x0, 0xe, 0x1, 0xc, 0x8, 0x2, 0xfd, 0xe4, 0x1, 0x14, 0x5}, {0x41000, 0xeeee8000, 0xa, 0x21, 0xc, 0x8, 0xa, 0xa, 0x6, 0x8, 0x43, 0x3}, {0x1000, 0x5}, {0xeeee8000, 0x6}, 0x40000000, 0x0, 0x58000, 0x200, 0x2000004, 0x801, 0xeeee0c00, [0x1, 0x1004, 0x1, 0x19]}) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000e40)={"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"}) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r11}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000005000000000000000c000000850000007d000000b7080000000000007b8af8ff00000000b7080000002000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7050000000000000900"/32], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 42.442973984s ago: executing program 2 (id=3297): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000240001082dbd7000fadbdf1b0c0000000600030000000000"], 0x1c}, 0x19}, 0x40010) 40.495110043s ago: executing program 2 (id=3300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000004000000000900000500000028"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="66a9020100003e64f2ac6766c744240000a000006766c7442402040000006766c744240600000000670f011c2466b80500000066b9008000000f01d964360f300f01c30f01cff30f090f01df0f09", 0x4e}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r8 = accept$alg(r7, 0x0, 0x0) write$binfmt_script(r8, &(0x7f0000000600), 0xfec8) recvmmsg(r8, &(0x7f0000006900)=[{{&(0x7f0000000180)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000240)}, 0x401}, {{&(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)=""/199, 0xc7}, {&(0x7f0000000400)=""/37, 0x25}], 0x2, &(0x7f0000000480)=""/72, 0x48}, 0x800}, {{&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/17, 0x11}, {&(0x7f0000001a00)=""/216, 0xd8}], 0x3, &(0x7f0000001b40)=""/150, 0x96}, 0x80000000}, {{&(0x7f0000001c00)=@generic, 0x80, &(0x7f0000002080)=[{&(0x7f0000001c80)=""/144, 0x90}, {&(0x7f0000001d40)=""/163, 0xa3}, {&(0x7f0000001e00)=""/89, 0x59}, {&(0x7f0000001e80)=""/136, 0x88}, {&(0x7f0000001f40)=""/224, 0xe0}, {&(0x7f0000002040)=""/60, 0x3c}], 0x6}, 0x8}, {{&(0x7f0000002100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002180)=""/177, 0xb1}, {&(0x7f0000002240)=""/180, 0xb4}, {&(0x7f0000002300)=""/171, 0xab}, {&(0x7f00000023c0)=""/194, 0xc2}, {&(0x7f00000024c0)=""/21, 0x15}], 0x5, &(0x7f0000002580)=""/4096, 0x1000}, 0xffff9725}, {{&(0x7f0000003580)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003940)=[{&(0x7f0000003600)=""/231, 0xe7}, {&(0x7f0000003700)=""/122, 0x7a}, {&(0x7f0000003780)=""/89, 0x59}, {&(0x7f0000003800)=""/78, 0x4e}, {&(0x7f0000003880)=""/157, 0x9d}], 0x5}, 0xfffffffc}, {{&(0x7f00000039c0)=@ax25={{}, [@null, @null, @netrom, @null, @null, @null, @bcast, @default]}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000003a40)=""/4096, 0x1000}, {&(0x7f0000004a40)=""/226, 0xe2}, {&(0x7f0000004b40)=""/216, 0xd8}], 0x3, &(0x7f0000004c80)=""/135, 0x87}, 0x69}, {{&(0x7f0000004d40)=@ieee802154, 0x80, &(0x7f0000005200)=[{&(0x7f0000004dc0)=""/24, 0x18}, {&(0x7f0000004e00)=""/226, 0xe2}, {&(0x7f0000004f00)=""/210, 0xd2}, {&(0x7f0000005000)=""/223, 0xdf}, {&(0x7f0000005100)=""/50, 0x32}, {&(0x7f0000005140)=""/61, 0x3d}, {&(0x7f0000005180)=""/78, 0x4e}], 0x7, &(0x7f0000005280)=""/71, 0x47}, 0xffff}, {{&(0x7f0000005300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000005500)=[{&(0x7f0000005380)=""/175, 0xaf}, {&(0x7f0000005440)=""/192, 0xc0}], 0x2, &(0x7f0000005540)=""/114, 0x72}, 0x4}, {{&(0x7f00000055c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000006800)=[{&(0x7f0000005640)=""/40, 0x28}, {&(0x7f0000005680)=""/154, 0x9a}, {&(0x7f0000005740)=""/23, 0x17}, {&(0x7f0000005780)=""/48, 0x30}, {&(0x7f00000057c0)=""/19, 0x13}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x6, &(0x7f0000006880)=""/82, 0x52}, 0xf3a1}], 0xa, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 38.947772997s ago: executing program 2 (id=3308): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff00090000000905", @ANYRES16=0xffffffffffffffff], 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRES32=r1, @ANYRES8=r2, @ANYRES32=r4, @ANYRES16=r3, @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4004014}, 0x2000c8c4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301, 0x7}, {0xfffffffd, 0x9}]}}) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'vxcan1\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xffe0, 0x1}, {}, {0x7, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = syz_usb_connect(0x4, 0x24, &(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io$printer(r10, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="4017954823bee4b27b9d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) connect$inet6(r11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 36.339679858s ago: executing program 2 (id=3329): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002780)=@raw={'raw\x00', 0x3c1, 0x3, 0x12e8, 0x1120, 0x178, 0xc, 0x1120, 0x178, 0x1218, 0x258, 0x258, 0x1218, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1348) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000003c0)={@my=0x0}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.numa_stat\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000040)={0xfffffffffffff806, 0x6, 0x7, 0x3, 0x6, 0x9}) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000240)=0x4) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r2, 0xc028644b, &(0x7f0000000100)={0x0, 0x7, 0xa0000, 0x4, 0x6dc, 0x0, 0x4, 0x3}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r2, 0xc008644c, &(0x7f0000000180)={r3}) 19.519985418s ago: executing program 35 (id=3329): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002780)=@raw={'raw\x00', 0x3c1, 0x3, 0x12e8, 0x1120, 0x178, 0xc, 0x1120, 0x178, 0x1218, 0x258, 0x258, 0x1218, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1348) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000003c0)={@my=0x0}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.numa_stat\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000040)={0xfffffffffffff806, 0x6, 0x7, 0x3, 0x6, 0x9}) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000240)=0x4) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r2, 0xc028644b, &(0x7f0000000100)={0x0, 0x7, 0xa0000, 0x4, 0x6dc, 0x0, 0x4, 0x3}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r2, 0xc008644c, &(0x7f0000000180)={r3}) 13.715531757s ago: executing program 1 (id=3401): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') creat(&(0x7f0000000040)='./file1\x00', 0x32) 10.985199131s ago: executing program 1 (id=3409): unshare(0x62040200) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) semget$private(0x0, 0x4, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b000000000000000000000000000400", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x1, 0x2, 0x0, 0x1}, 0x8) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040ed5000410", @ANYRESHEX], 0x11) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) 9.279259082s ago: executing program 1 (id=3413): socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xfff3, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000880}, 0x20000000) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x1000004, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) userfaultfd(0x80001) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket$kcm(0x11, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @loopback}, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1f7, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x4, 0x6, 0x7ff}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24050886) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 9.185113709s ago: executing program 1 (id=3414): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000c22fa0)=[{0x0}], 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x240000, 0x0) recvmsg$can_bcm(r3, &(0x7f0000001dc0)={&(0x7f0000000140)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001d00)=[{&(0x7f00000001c0)=""/45, 0x2d}, {&(0x7f0000000240)=""/35, 0x23}, {&(0x7f0000000400)=""/168, 0xa8}, {&(0x7f00000005c0)=""/242, 0xf2}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/50, 0x32}], 0x6, &(0x7f0000001d80)=""/3, 0x3}, 0x102) r4 = socket$nl_generic(0x10, 0x3, 0x10) shmctl$IPC_INFO(0x0, 0x3, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000005", @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdf2508000000180004801300010062726f6164636173742d6c696e6b0000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x48c0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000001000000090000000005"], 0x50) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000c80)={'ip6gre0\x00', &(0x7f0000000c00)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x1, 0x8, 0x14, @empty, @empty, 0x0, 0x80, 0x9, 0x44f5}}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f00090582"], 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000080)=0x40, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x6099cf13}, &(0x7f0000000080)=0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x240802, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r8, 0xffff0001}, &(0x7f0000000100)=0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r10, 0x0, r9, 0x0, 0x10000008ebc, 0x0) 8.560283936s ago: executing program 5 (id=3416): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001680)=ANY=[@ANYRESOCT=r1], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1480733e3a2240811e73f9dfac4ce389d0d800006a229e53c492fd581d2af8075ab728ccf9a604a77c6d62cf7dc502d37ed25c77e57a9e1d92748964019c04a5cd611c6c70c32ce4484e27358ed283000000000000008048eab7375f43f9b70a4933a69cbab8c1bbf30c2d73e7c2dbda"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x100, 0x2, 0x1b0}, &(0x7f0000000540)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000003c0)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x6, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001300010027bd70000000000007000000", @ANYRES32=r12, @ANYBLOB="00000000020000000c001a800800058004000280"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r14, r15, r16, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x3, 0x8000000000000001, 0x0, 0x0, 0x10, 0x1, {0x2}}) r17 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$lock(r17, 0x24, &(0x7f0000000400)={0x0, 0x2, 0x7ffffffffffffffc, 0x2}) syz_io_uring_submit(r4, r9, r16, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x28, 0x0, r17, 0x0, &(0x7f0000000100)='./file0\x00', 0x20, 0x100, 0x12345}) r18 = socket(0x22, 0x80000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r18, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) setsockopt$bt_BT_CHANNEL_POLICY(r18, 0x112, 0xa, &(0x7f0000000040)=0x1, 0x4) 7.855455673s ago: executing program 5 (id=3419): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000400)="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", 0x358}], 0x1, 0x0, 0xfffffffffffffdbb}}], 0x1, 0x20008000) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x11d, 0x1b, 0x0, &(0x7f00000021c0)) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000040)=0x6, 0x4) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000000c0)=0xb) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r12, 0x9, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000180)={'\x00', 0x7, 0x3, 0xfffffff7}) 6.591317156s ago: executing program 5 (id=3422): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a60c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b8", 0xed}, {&(0x7f0000000180)="88e584aac45d6d83e6c2c8857149eb55d2c259a747dbdfc05b7e87150dcc7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a800c03902057e1ec6c9a195d347386118cbfbb67848d7783900dd047aeed9e789b9ea73ca850c5f9dbf67", 0x69}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec62472820000000000000000", 0xd6}, {&(0x7f0000004480)="d21e96a9f6be3d72e3f91fa2db455d6b88df49377d7988389bd1ecc97042b565d013ec3fcee93a43afdf71b3751d0f53e4ca87fd4b71713fcc3b729c601778385e68ae4e55370c965ca8189dcf4f4e8c70fc343965f9c540163a19215f1d988f1bf6b6f57ce74575d0a1223da74c72adeed27d968bfdcd14597ebe90fc5167cbc1f5856d6b387bc5c419db52f682bcf13ce9e1d6110291bce66848b7392445ffb232c6b70bff2783564b2a62fa6cf3783f6cf6e84c90162b7cbf0192971f05c597dc20b3c879bd342e9e29e93c8240e8dbb137d3d8fcc8f49b37938a52ef12f7d963ff76b91f1473369d06d500d9b88c4f0e0b0ca9049d6b2f3c1886ff41404fab2855eaf1310fa65425a3e9513e33cee970a08de795368e9fe8055fdc5786010c764b3d3ccebec687d242267e932df33cf50c665ea82f1dcf1af952b0e4bf2e35d3c1bdead12e22b371543769fc19a0d893ebb9d71c4da000e2d18a572fdf7c23d921d959caebfbe3ab9157fc9ab6e3dcb88eaa5a5a8af223d7a25a8f198b10dedf68b6d2759a806b6a5bcf3693734ceebeea16b995304511db8d97b62f548213c614bc2dd9b843450eb575c8a8f290af70331a269f1cab6fd6e1f9ef687d80952ba7f14da8cf892d0a5b16dd181d8a7b780055d3b79782a2f4c29c6b9c64bdcde1175ef26c75d0bca19e2be27acb3fdf22a7cff8a659899de59fb2d3e4920881a0900958685263b3fb8dafa6402f5812f16de9e53eda3c86520d5267df729d2add8724d7541b60a3e9a4b70b5f1af83e81071d7e3eb6a9817383632008fbfff89f1c1ab39d9d898d555a0190fa11c8bdfd2d1b49d06fc56acdc426568ccbebbf6f3ce278148f319a1f84adcfb49a675c6d119f52e10386cdd0740199b20087f7c8f75d93959e39d2948a17789f6c6fda65dcb42743b466bcdd06bbe7afccd2b59c0c3f4dc62b8cee2a785ce704bbc47f480079b5f21ace7e5f2f149360370e866565af026b14ec4d9214884661156b5313c233ef1abd2807eb9b586845e3df8001e56b8d4f7c5c9b7e46b81e278ea0a7afb8286183285c390558d750277a7d72a6dab2cf1f29b0d4c847991ec65dd1757889dc9a6e94ce22b58e25cfac06c73532a53663a27208daaf3b4ad5a8c74e4e62b160219f49b6983674f7a71e56f45c3df8c13c93b2ed468749843dd8954a0d03acc61e5008ccc5a5db5a42d04abdf112e71e4d5876c3ea0db715648a5bb55b5ffd2377aea32f19a07e610456b5a6dda7ab4e6d11a88a5910f7f394c7a53d7c032e5506c3b26d54cbe73bfb37cda2439b23c785566668d8111570b7004fa565a156e45c9b672c6ebfb4d08bc681de9ea0215a43a1eefe7a0fb72caf494414c61510c00a8c5e37c4efeca3a1d171f44abbca94a9899b299363bbd1ecdc91d19d6a179f00bd958e372916fde873aaa167bb6be50219c76e6bee7a207f43b729eea5c00052eccb9986b6c137019c47f3fc1d69d68569f8c1d97ecc6b3dec37813f358778edfa2515fd9c4ca7e73966942f65c1a3cc9770065836625671725e3617030df067961c50d2e53a1c69d0e116eb9e0c052e71b3bcc85354829b71295cae5ffbcd5c2794fd16f8601ff5d7278693e384d477920e4619be578ac11f4ef327e5c5298d24ba29fddc7317fc90c69ddc991ee2f3a34c40c2afcd77350c008b9f70b76c97f51bd1359d376cfc83ec0f14a183cef8eccc014bf36d8384262edd4bb03f743c4628bccfef1050deafd13bdcbd73a356a8c630cc4f0665420d414c59276ff1d85ef058069a1ea280b9ae476ea9aa64652c4a83b9b086fd02a3372ae9683521d81ce846ce9b030e81b7523e8f5355c26c66d9182b9b3e089917089a07bf5159f1439200ad74d735b020ccb78225a015c76a57c19344556bce75da0d44e88e2227f5f4a90bb00eb27decf0d0dcf1b6dd0f9146f0191a7f58e3c6a1568e747ba674c33fd6715678232ea1385e8e54955e70ce306fad514235c8bc2576e84444a674c149a67d8db5fea81813aa311fa701bc401101b14661b0f091dad3a1895f3d32fc7012e59e090f487fc9f19e878e04c40eb906deedb29cf65839486f11c4fb7d9c1be6a1c95471d939cc0c85f6fead85e4d081ccc6e2a51784ec4d3f0b13796609161bfcb38a029c10b084e87ceff5483ec6c9691b0ad6a3d05e13e8c48d0700cc58b9436d8011c48381d6ca0ac279c3c71a625585c8b257c54fcb9e9d07183ee0d90b0b5255d153fae38c6c25636846c31142f269229ac4a1d35df88eeaa9413dde791642c9b0ce903cef64609886d18df63515de769df208c9db2acda7db5181f52bb99e74f84b01106c8419543ec2b5106623789316cd825995e42d0cf9f8296f2e5155dbaae8113de5c7a1dddfe42770064e2aae3f100f97d890e3e7eb63ca80d1a8c672ae8e8eaee5b838653a20a58171dc78509a55ea2c590bcffe3f0ca7731edecc2cf3e63c8e8ce335a4f9541691282df4f24a208cd1400dce5e40ddde35dd22c9e75ded061cb349d8cbc92bc00f9c9c4ff49fe887ea630ffc66a087065a90e072b56c9386f3cccda4acb0f10538f361cd860a7efec0eb83ea5165d6a6612800a8d6c7426b0916fc6aec0e7d81ee1a57657ac5c32b58d4e573bf820bc67cc0896012ccff2ace1de0b13f70a744e116a300aaffd1a6ad24513532fb9b9452454874a432cb5f5f6fa2f35668e6e3eb98fdc5c15dc5513c44a26d318d2b7372d6dc1da69d342b95ecb05777716264c79f4a3b953d6acc1006318fd352eb92621360d62b1c651c1fa0dec9a9fe674347902228373bed540251eebb2a8ede5e4f47bacf6acde6f8c5b95dc8b8214175d5649994c710709a5bfdd73360c35af7fc2ea4d35f14994bdccce242be14bff1ce7010b1c353479a1f038dc52e76d5d97340d98e3ad783a4ad95a469eee9193c7e5f93d84f847a6710230fb26f6e0122cb3f0400e7c485b704e3916c4fb0340bed2b4e7640b3ea40a9741f32f81e761119919e9e3fe16aba0b691e9d4e8fc959ae97dad37225a0d3fff627d6241fc0826cc863ec6e0a6c78956dc8878bb8c34dec173161c844462baf2a0d40fb6ea7c6bcf6a4501b92b1bf35c9b1c7d09ad3ee84b5c846404062d6fef2e53f4121b3a04341b58c05460bfa09ff6b92275923798897293e4cc80e6ee6facbab718550e838724ac19c2f86ee656fd607106951936eb56a3263819a69525b9d8bd4b1196ae503b6ee7071f881d740c5781040a78168037ccf819e24a9e3b55dc629aa788972a018d72371e2d64905bcc52b68977a5be41c52dfd42c6dd106a073682ef6c1b09c3d6004436bb6f59c06445768c217b3f36cf8f231e5128944f15fca908e1340cb4d175e9da1f15d5cbdf8fdc2493620b62dee93dfcaf1a56f781b04ef16d0b33e774d89deb827c6ccc4cb83d510c5ba6029317379896b3880f1b2d9f08e6aaf1518b9378f87b135c526782c09eb28b5d74d09cae156dc1809ae258753a59a6b453f28580c3f8ca41cd2977fb2c8f78159e5b5360417b2a72e359e8dc3ee76bed00cce7018286ddd88ee211457683b8136380c1f6281c23308dc08943bdcc36a4bd310d097ac2f5603b214fc3616e1092f3f4c2cda3e098709cf98cbfbd20995c8daa7ece6bb4349c17f07c591eebf1a94c94f1211c6e52837c1e75409c7e7c115b3871fc5cdf1262ece5894a9a4cb264931047074ddc6b4cccf6707b160be4558c6cc0d8c7dc2de6b86af7489815c84517d106ba538c1f4ea22ec6fd29cbc76f94467c51684778649d867041e2c952f4717c6d20345c94ad67f343985f7db04bf6010f6f9308d4ec9ed41620efc7c95fd8c596d22d0302654f81f96a31a05b954768deb359c624537a6fdb450ad54324618b14df9e03f82cbf3f7b73f3535bfe44553c0a37dad2070b5c0565111da8ecf31d412b744d897ebc8e98fbb1e25312686539fd021b68ce5cfada2682a617932911350326eab213b43f436b0d65922bfbc459238d54708f39bdff1ee745aa1bf072670fa55a13e146df08c157927326556667f98002b54fe3ed150a59d359c2b481708b92e204dc3b9a30aae1489cfdc37a17669f5b5077945e0a8ae33c8c1c228486a313560773b32b05aec13f3fd9c42a1824d7c82c7b0b04d55064cf7a0924b243cf184567d26bd4095fbe0dc326ca71b0a3dba3b66511ad69cfb9dabcf71b85342db0bb9d23f29b7d1f1213d48e215eaf70e132e8ce34cf5e2dfd93bbbe7420a6db52641d1be52abeccb216193a993a18f0620a70b479776ccc705f095e915b9cc4a0fb62d11228fb1e5bcc0efa78969639969799dbe63f5f27be3d3fd7f2f5134f5ac3abf3a0a5601480296a6b85bea2090bf13c8f3d3c3a7ffa858b20775f249aaea7d753e9129bae065332bad8d783f9967322a2c358147f450fb5d6a7176c8015b33333106d30d2c690781703c18afb5e88423ffd8b6da20901db90e28647cb4727dbed71210db7ab7c9909b6a142e26757f22f742f84148ac2d88c6ec3bb24832a4b9889705571ced0e0d541a6ae909e3aa854c7f52e939c7062563711890e7046f0736b92188fdbae304953dc5e0bf9de92558ef9d41524ea68ec5f380902fd00719afd0bbc77e9b5034004f0820f22cac8ba92557c9186050a8aa7065a5d5d06b7d8b7bd0fcc4a30aaff5fa0bb2fdd85e801b53859dad6151be7c00f68c34ca8fcd96ddf9980d809d28730d1a86d057f2716637bea7ae9c34dcbf69a9e400cf42dfbbea8b03dc34683df85b3696c7570bed2bfee77bcbbaf3035d81a0308371ff1df315c53c66198221e3be1046eab7e71903dea93c388de23a13848d4b1d6109c067f40f67b17ab3dd7554ba9c51fc7b715acf04ff50d5588898c2db0f83c7b3948fe7ce0dbb6fde93de2d6bd3b27487a3f85ae7aa0000", 0xda5}, {&(0x7f0000000500)="f4f6ec3f1f6e4804195e1668ee6a8b994dcc5f47b255f609e705d9fbea086981", 0x20}], 0x5) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 6.513258947s ago: executing program 7 (id=3423): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r4 = epoll_create1(0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x10000001}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000180001efff000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x1010, r5, 0xddfa000) fcntl$notify(r6, 0x402, 0x80000014) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r7 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000380)={0x0, &(0x7f0000000040)=[@in_dx={0x69, 0x20, {0xa26e, 0x6}}, @code={0xa, 0x42, {"660f605587450f90dd67f3470f1ef9650f7979b836243b8f69e897e93e410f211d0f2394f20f5e732e4c0fc79a00480000"}}, @nested_amd_invlpga={0x17d, 0x20, {0x7000, 0x2214}}, @nested_amd_invlpga={0x17d, 0x20, {0xddde1000, 0x1bdf}}, @wr_drn={0x68, 0x20, {0x4, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x5d, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xda, 0x0, 0x2, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control64=0x2026, 0x1, 0x8, 0x40}}, @cpuid={0x64, 0x18, {0x1, 0xfffffff8}}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_load_code={0x12e, 0x55, {0x3, "c4a36d48bebe82000074b90a0b00000f32f20f21c40f01d144cf440f350f20d835080000000f22d8662666420f38825100138278d6e479c40209cf7631"}}, @cpuid={0x64, 0x18, {0x4, 0x40}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x63, 0x2, 0x3, 0x3}}, @wr_crn={0x67, 0x20, {0x2, 0x1}}, @wr_crn={0x67, 0x20, {0x3, 0x2}}, @wr_drn={0x68, 0x20, {0x7, 0x3}}, @out_dx={0x6a, 0x28, {0x3c8, 0x1, 0x80000001}}, @wr_drn={0x68, 0x20, {0x0, 0xf15}}], 0x30f}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6.431145955s ago: executing program 5 (id=3424): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r1 = socket$inet6(0xa, 0x1, 0x100) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40080c1}, 0x800) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(0x0, &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000100)="99", 0x1, 0x0) add_key(&(0x7f0000000340)='.request_key_auth\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) sched_setaffinity(0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) io_setup(0x3f, &(0x7f0000000140)=0x0) (async, rerun: 64) r8 = timerfd_create(0x0, 0x0) (rerun: 64) io_submit(r7, 0x2, &(0x7f0000000500)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f00000006c0)="462962ab7bb643", 0x7, 0xfffffffffffffffe}]) (async) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="8fd61d0710b23d94175468d6ecf4770b0f04fb151aa8", @ANYRESOCT, @ANYRESDEC=0x0], 0x28}, 0x1, 0x0, 0x0, 0x24044836}, 0xc494) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r10, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/87, 0x57}, {&(0x7f0000000440)=""/149, 0x95}, {&(0x7f0000000500)=""/252, 0xfc}, {&(0x7f0000000600)=""/148, 0x94}, {&(0x7f00000006c0)=""/20, 0x14}, {&(0x7f0000000700)=""/146, 0x92}], 0x6, 0x5, 0x0) (async) rt_sigqueueinfo(0x0, 0x3c, &(0x7f00000000c0)={0x17, 0x7b7, 0xfffffffc}) (async) unshare(0x64000600) (async) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0x7fffffff, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) 6.306988576s ago: executing program 8 (id=3425): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf2502000000000081001e000000080006"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf250100000008000700e00000010e0001006e65742f6c3263617000000008000200050000000400080000000060"], 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) r3 = fsopen(&(0x7f0000000180)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='iocharset', &(0x7f0000000440)='ntbs3\x002\xbf\x8f*\xc7\x03\xd8\x18\xe9\xb41\xdb*\xc4\xb2b/5\x81\x10\x8a\xdaZ\x86\xafq\xf6W\xfe\xed)>\x9f\x99ji\xc4\xf2q\v\tr\xc5\xd7\x96\x8e\x84&\xb2\n>\x8b\xd0\xee\x95\x1b\x88\xd1m\xef\x9eN\xe8R\xbf\x03dD\xfc\xe4 \x7f\xe0\x8bX\xd3^l\xe9\xd0s\xe6\xc9\xf2a\x1c\xc2\'\x8a|\xe5\x06Q\xce\xc3\x8e\xfdi\x0e\x81\xde\x1b\x85\xdfk\xa3\xce9\x9b\xc9\x18\x9a\xea\xc3\xeb\xfds\x04c\xb5y\xdb~\r\x97>Ut\xe0\xf6\v\xf8\xdcE\v\xa8z\x82\x84\xb1~\x82\xeb\x0fW{\x00\x14\xa89\x11d>ub\xeb\x85F\xd8\xd3\x83V\x82\xae\xf6\x0e\xfe\x1d\xaa\xf7\x8d\xde\xb6V$\x0f~\x05w\x1f3\x12\xfc$.\xab\xf2I{\xf3\xee\xe2\x1e\b3\xe5\xb7}j\x0f\xdd\xc5\x17\xf6\xb7i`%\xe3\x02\xa1|f\xdcL\xee\x9b\x88\xaa\xa9\x1b\x1f\xbcg\xa6]F\xf9w]BFr-\x0f\xd6\x10\xa7\x06\xd4\xa1\f\xac\xa3R\xe8\x02v', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb1) r4 = syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$lock(r5, 0x5, &(0x7f0000000000)={0x1, 0x1, 0x7fffffff, 0x9, r4}) io_setup(0x8, &(0x7f0000000600)) close_range(r5, r5, 0x2) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448df, &(0x7f0000000b40)) socket$phonet_pipe(0x23, 0x5, 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) unshare(0x22020600) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6.171664948s ago: executing program 0 (id=3426): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80), 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) 5.142284656s ago: executing program 0 (id=3427): socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xfff3, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000880}, 0x20000000) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x1000004, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18}}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) userfaultfd(0x80001) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket$kcm(0x11, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @loopback}, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1f7, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x4, 0x6, 0x7ff}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24050886) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 5.089585744s ago: executing program 7 (id=3428): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r4 = epoll_create1(0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x10000001}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000180001"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x1010, r5, 0xddfa000) fcntl$notify(r6, 0x402, 0x80000014) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r7 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000380)={0x0, &(0x7f0000000040)=[@in_dx={0x69, 0x20, {0xa26e, 0x6}}, @code={0xa, 0x42, {"660f605587450f90dd67f3470f1ef9650f7979b836243b8f69e897e93e410f211d0f2394f20f5e732e4c0fc79a00480000"}}, @nested_amd_invlpga={0x17d, 0x20, {0x7000, 0x2214}}, @nested_amd_invlpga={0x17d, 0x20, {0xddde1000, 0x1bdf}}, @wr_drn={0x68, 0x20, {0x4, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x5d, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xda, 0x0, 0x2, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control64=0x2026, 0x1, 0x8, 0x40}}, @cpuid={0x64, 0x18, {0x1, 0xfffffff8}}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_load_code={0x12e, 0x55, {0x3, "c4a36d48bebe82000074b90a0b00000f32f20f21c40f01d144cf440f350f20d835080000000f22d8662666420f38825100138278d6e479c40209cf7631"}}, @cpuid={0x64, 0x18, {0x4, 0x40}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x63, 0x2, 0x3, 0x3}}, @wr_crn={0x67, 0x20, {0x2, 0x1}}, @wr_crn={0x67, 0x20, {0x3, 0x2}}, @wr_drn={0x68, 0x20, {0x7, 0x3}}, @out_dx={0x6a, 0x28, {0x3c8, 0x1, 0x80000001}}, @wr_drn={0x68, 0x20, {0x0, 0xf15}}], 0x30f}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.962780329s ago: executing program 8 (id=3429): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20001091}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(0xffffffffffffffff, 0x8b23, &(0x7f0000000040)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x29}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000006c0)="04d28058b5784467c8653b87a1f87d65338b1454020a802f9281193011fd0c74dff60b5c210dc156a140e2b78131b04293383f13bc30aed52d2ae624c4e1fe79f9a8dd0ecba22be33f6e4d3e1b0039c1"}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf250c0000000c"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a31000000001400038008"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x4000000) socket$kcm(0x10, 0x2, 0x10) 4.90776705s ago: executing program 0 (id=3430): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) splice(r1, 0x0, r2, 0x0, 0x7c1f, 0x8) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000003c0), 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x600, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000], [0x4000000], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) write$bt_hci(r4, &(0x7f0000000200)=ANY=[], 0x6) ioctl$NILFS_IOCTL_GET_CPSTAT(r3, 0x80186e83, &(0x7f00000000c0)) fsopen(&(0x7f0000000080)='minix\x00', 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x1000) socket(0x2b, 0x1, 0x1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x7d4165c9) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x0, 0x4000003, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r10, 0x0) 4.603132592s ago: executing program 7 (id=3431): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000200), &(0x7f0000000580)=[r1], &(0x7f00000001c0)=[0xfffffffffffffff8, 0xd, 0x77, 0x1]}) 4.35421084s ago: executing program 8 (id=3432): write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="d6f5fbcf8c5f6b1eab996ddbb1a3fa9e7faef2c7e9b975084ebb6f5557284549957db0e43ddd82283e9404df9f48beef3bbdd77a64dd1807932d9fc1530c25d99c0108e15f903702feb5de78597f9aa52ffbbaa5b0228712aba726a32334d84e12920ffc0f4553e561dc7b6570bcaca912b5e63022bbf50cdbee9d0cc9586939fe7d49ccbde680e7e0cd18997741457262cdba41de28c9e3a6e1fe79bd5c5c2459f4f619fc95346792b3f20155bbaaa9a07248026b6159c403bea11fa2b5e85ba3e189f96d08063e2d3fc85078655058cd151e6e60ed04bd487becfe0ec08c6af41bd54fe99c4b94c18fa34940161469afcd05e1c1cd5a98ba5f28d768fcec333f2cb041afc799c8eea8f460e58de122899d699da77dcb9655b52b93be558a36c317426b69e9240d73f87776a10bec23122eeb4dee2bb94c9fed02d69693935ca436bdc62cfb19aa3c7d2be9c561eca2", 0x150) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000000000040711e192000000000000109022400010000e80b0904000001030002000921fd7ffd9026080122e301090581038936927b2efb53ea31736830f5ad7f44167199124d2b0686aa39a0d2c0bdfb6413a8d2c94fa8a8a45cc629fcb2010651285e2bc6627e4af857cc51e72789597ff82e8a6713dd8ff630c76a0230555005019ed7cf7ad54af0da78dd5fb2872a481130bab149d0867362e95f929b15138f46a6b4c3be5cd8e343fd23015dcf0d1482bca4d6108cffe5a717dbf4d105508e39c4dc7ec924d161b1ded0bfca6125213a46edaa5c777e88221a3fc3402f0344d221f5"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000006c0), 0x20041, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 4.186697155s ago: executing program 7 (id=3433): sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="68020000010501010000000000000000050000065402010000000000810000006400010405001f0073797a31000000000000000000000000000000000000000000000000000000003de49a697763c1d26b44090a94b4a1ae83a34cf498713925ae23432d7089339a787f7f7d5a7e01474465a1d8aa14418d6e38fff5c65bb86a04b08afd3de1b339f7ff080000000000010000807f00090002000000080000004001058001000000f5de00000500ffff01fdffff050000000300010001000000010000000200060003000000090000000700ff0f02000000ff07000001000100000000007f00000004000800020000000b0000000000070002000000eb5282ec03000000080000000900ffff01000000faffffff05000000030000000100000001000100010000000000000007008200010000000100000009"], 0x268}, 0x1, 0x0, 0x0, 0x20044080}, 0x44) r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (fail_nth: 2) 4.149435282s ago: executing program 0 (id=3434): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a60c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b8", 0xed}, {&(0x7f0000000180)="88e584aac45d6d83e6c2c8857149eb55d2c259a747dbdfc05b7e87150dcc7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a800c03902057e1ec6c9a195d347386118cbfbb67848d7783900dd047aeed9e789b9ea73ca850c5f9dbf67", 0x69}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec62472820000000000000000", 0xd6}, {&(0x7f0000004480)="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", 0xda5}, {&(0x7f0000000500)="f4f6ec3f1f6e4804195e1668ee6a8b994dcc5f47b255f609e705d9fbea086981", 0x20}], 0x5) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 3.84352803s ago: executing program 1 (id=3435): socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xfff3, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000880}, 0x20000000) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x1000004, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18}}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) userfaultfd(0x80001) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket$kcm(0x11, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @loopback}, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1f7, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x4, 0x6, 0x7ff}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24050886) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 3.842319196s ago: executing program 0 (id=3436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, 0x0, 0x20000011) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r0, 0x36, 0x0, 0x5, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYRES64=r6], 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf", @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)=@x86={0x81, 0x7, 0x63, 0x0, 0x7, 0xa, 0x0, 0x3, 0x7, 0x92, 0x3, 0x6, 0x0, 0x7f, 0x5ab, 0x2, 0xc9, 0x9, 0x1, '\x00', 0x8, 0x800}) 3.531569069s ago: executing program 5 (id=3437): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x88c0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x6, &(0x7f00000000c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000000)={0x2, @sdr={0x0, 0xfff}}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x4, 0x0, 0x30383653, 0x4, 0x800, 0x4, 0x5, 0x4, 0x0, 0x4, 0x1, 0x6}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3b94, &(0x7f0000000300)={0x48}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) kcmp(r2, r2, 0x6, r6, r4) lsm_get_self_attr(0x67, &(0x7f0000000600)={0x0, 0x0, 0xc2, 0xa2, ""/162}, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x461c95ecff1f2675, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 3.52832653s ago: executing program 7 (id=3438): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000000c0), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x105) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x80, 0x7, 0x5}, 0xc}, 0x20, 0x7d, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x1029577e49}]}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xfffffffffffffffe) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x7f, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0xb3, 0x39da], 0x30000, 0x2010d3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r7, &(0x7f0000002640)={0x2020}, 0x2020) mprotect(&(0x7f0000588000/0x3000)=nil, 0x3000, 0x2) 1.496953983s ago: executing program 5 (id=3439): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f0000000080)=0x5) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x48831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000001c0)={0x2, 0x0, @remote, 0x1}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000001, 0x8000, &(0x7f00000000c0)=0x80) mmap(&(0x7f0000acd000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getegid() shutdown(0xffffffffffffffff, 0x1) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x4c}}, 0x890) 664.944908ms ago: executing program 8 (id=3440): socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xfff3, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000880}, 0x20000000) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x1000004, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18}}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) userfaultfd(0x80001) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket$kcm(0x11, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @loopback}, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1f7, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x4, 0x6, 0x7ff}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24050886) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 370.860799ms ago: executing program 1 (id=3441): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = openat$kvm(0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x3, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0x4, 0x0, 0xb, 0x2, 0x1, 0x1, 0x4, 0x81, 0x59, 0x59}, {0xa000, 0x60000, 0xd, 0x2, 0x2, 0x3, 0x2d, 0x3, 0x3, 0xa3, 0x3, 0x7}, {0xe000, 0x6000, 0xc, 0x8, 0x9, 0xc, 0x2, 0xaf, 0x0, 0x5, 0x3, 0x6}, {0x0, 0x40000, 0x9, 0xc, 0x65, 0x1f, 0x43, 0x9, 0x4, 0xfc, 0x4, 0x1}, {0x5000, 0x1, 0xd, 0x1, 0x4c, 0x8, 0x7, 0xf4, 0x1, 0x8, 0x3, 0x10}, {0xe000, 0xdddd0000, 0x2, 0x27, 0x0, 0x8, 0xb, 0xa4, 0x6, 0x6, 0x3, 0x4}, {0x60000, 0x80e6000, 0xd, 0x6, 0x2, 0x31, 0x9, 0x5, 0x9, 0xff, 0x34, 0x3}, {0x2000, 0x2, 0xf, 0xc, 0x0, 0x6, 0x2, 0x8, 0xef, 0x82, 0x2, 0x1}, {0x9000, 0x9}, {0x54000, 0x6}, 0x10, 0x0, 0x8080000, 0x8, 0x4, 0x3d01, 0x70000, [0x8000000000000000, 0x5, 0x0, 0x9]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x4, 0x2004cb, 0x0, 0xa1d, 0x4068ff, 0x5, 0x0, 0x3, 0xa], 0xdddd0000, 0x202}) 348.693211ms ago: executing program 0 (id=3442): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r1 = dup(r0) mmap(&(0x7f0000097000/0x1000)=nil, 0x1000, 0x4, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setuid(0xee01) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x4000800, 0x0, 0x0) syz_ublk_setup_queues(r2, r8, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r2}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x3f00, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r7, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) syz_kvm_setup_cpu$x86(r6, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="0f01db52660f38802b660f0156fc2f0f20a70f78d90f21380f013e00a0f30fa6c8", 0x21}], 0x1, 0x2, &(0x7f00000002c0), 0x0) 295.336224ms ago: executing program 8 (id=3443): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000200), &(0x7f0000000580)=[r1], &(0x7f00000001c0)=[0xfffffffffffffff8, 0xd, 0x77, 0x1]}) 171.837068ms ago: executing program 8 (id=3444): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000000001bb0500000000000000000a0000053c0001800c000280050001"], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1}, 0x23) syz_emit_ethernet(0xc9, &(0x7f0000000440)={@empty, @remote, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x3, 0x0, 0x4}}, {@llc={0x4, {@snap={0x0, 0xfe, 'N', "2eac45", 0x80f3, "63ca9c8d3f494f60bdb59ade9d141b9326da2b5de968f222ba1ac06109bb3fed8ec74a1267fd9809a158bf218d61965b60f0b8d1aa964f55cbf900e717c74db50b43d7fee7658b2c5f6b0f938f84f6af86fcaf800f1c9d2524e8e0daca8ba9ce890ed1db527c226fcb61c253858acc59b7113bf379784be0fe199674e5ff0a7dea96901e3c149c6b649af166cead851e3f72b3945c61dc6e56b3bcc35f37f05e9e7d10f48ccbe87ac7e9ff"}}}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001d14"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x11, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x6}, {0x6d}}, [@map_fd={0x18, 0x3, 0x1, 0x0, r3}], {{0x7, 0x1, 0xc, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 7 (id=3445): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}]}, 0x48}}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="0240330007000000186a0000090000000000000003dd0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$pid(0x1, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) io_submit(0x0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r4, 0x0}]) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3163, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x14, &(0x7f0000001740)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014038f00b70300002bb900000008000000bc0900efff00000045090100002000009500000000000000181200e4ffffff", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf9800000000000056090000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x2000000, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x12, 0x60a, 0x1c0, 0x202, 0x320, 0x2e8, 0x2e8, 0x320, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private}, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'geneve1\x00', {}, {}, 0x3c}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x6b}}, @common=@icmp6={{0x28}, {0xb, "52e1"}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc2, 0x8, 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x13, 0x40, 0x0, 0x2, 'pptp\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) sendmmsg$inet(r8, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): 16857] ? alloc_empty_file+0x5b/0x1c0 [ 1036.701287][T16857] ? __pfx_stack_trace_save+0x10/0x10 [ 1036.701315][T16857] alloc_empty_file+0x5b/0x1c0 [ 1036.701348][T16857] path_openat+0xe8/0x31a0 [ 1036.701375][T16857] ? kasan_save_stack+0x3f/0x50 [ 1036.701395][T16857] ? kasan_save_stack+0x30/0x50 [ 1036.701417][T16857] ? kasan_save_track+0x14/0x30 [ 1036.701437][T16857] ? __kasan_slab_alloc+0x89/0x90 [ 1036.701458][T16857] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1036.701490][T16857] ? do_getname+0x35/0x390 [ 1036.701520][T16857] ? do_sys_openat2+0xc5/0x1e0 [ 1036.701549][T16857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.701576][T16857] ? __pfx_path_openat+0x10/0x10 [ 1036.701616][T16857] do_file_open+0x20e/0x430 [ 1036.701647][T16857] ? __pfx_do_file_open+0x10/0x10 [ 1036.701698][T16857] ? alloc_fd+0x476/0x790 [ 1036.701730][T16857] ? do_getname+0x191/0x390 [ 1036.701771][T16857] do_sys_openat2+0x10d/0x1e0 [ 1036.701804][T16857] ? __pfx_do_sys_openat2+0x10/0x10 [ 1036.701834][T16857] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1036.701870][T16857] ? __fget_files+0x21f/0x3d0 [ 1036.701904][T16857] __x64_sys_openat+0x12d/0x210 [ 1036.701952][T16857] ? __pfx___x64_sys_openat+0x10/0x10 [ 1036.701983][T16857] ? ksys_write+0x1ac/0x250 [ 1036.702012][T16857] ? rcu_is_watching+0x12/0xc0 [ 1036.702048][T16857] do_syscall_64+0x115/0x870 [ 1036.702077][T16857] ? clear_bhb_loop+0x40/0x90 [ 1036.702105][T16857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.702129][T16857] RIP: 0033:0x7ff34819ce59 [ 1036.702148][T16857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.702169][T16857] RSP: 002b:00007ff3490f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1036.702191][T16857] RAX: ffffffffffffffda RBX: 00007ff348416090 RCX: 00007ff34819ce59 [ 1036.702206][T16857] RDX: 0000000000080d02 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1036.702221][T16857] RBP: 00007ff3490f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.702235][T16857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.702248][T16857] R13: 00007ff348416128 R14: 00007ff348416090 R15: 00007ffd6a7df8e8 [ 1036.702279][T16857] [ 1038.450346][ T10] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1039.020690][T16654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.071614][T16654] veth0_vlan: entered promiscuous mode [ 1039.088206][T16654] veth1_vlan: entered promiscuous mode [ 1039.132862][T16654] veth0_macvtap: entered promiscuous mode [ 1039.143725][T16654] veth1_macvtap: entered promiscuous mode [ 1039.166332][T16654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.187793][T16654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1039.203033][ T9585] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.221866][ T9585] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.416269][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1039.525518][ T9585] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.582638][ T9585] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.943523][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.997562][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1040.015608][ T9585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.024066][ T10] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1040.024124][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.038578][ T10] usb 3-1: config 0 descriptor?? [ 1040.055141][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1040.072736][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 1040.084010][ T9585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.100330][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1040.122471][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1040.131769][ T10] usb 3-1: media controller created [ 1040.141989][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1040.165541][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 1040.170355][ T9585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.193959][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1040.217736][ T9585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.229675][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input59 [ 1040.302305][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 1040.329821][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1040.503591][ T5715] dvb-usb: bulk message failed: -22 (1/0) [ 1040.624317][ T5715] dvb-usb: error while querying for an remote control event. [ 1040.824496][ T5715] dvb-usb: bulk message failed: -22 (1/0) [ 1040.939607][ T5715] dvb-usb: error while querying for an remote control event. [ 1041.161469][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1041.177841][ T10] dvb-usb: error while querying for an remote control event. [ 1041.191453][ T805] usb 3-1: USB disconnect, device number 99 [ 1041.208199][T16901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3000'. [ 1041.244889][T16901] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3000'. [ 1041.309953][ T805] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1041.333113][ T5739] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1041.528111][ T5739] usb 6-1: Using ep0 maxpacket: 8 [ 1041.546576][ T5739] usb 6-1: config 0 interface 0 altsetting 22 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1041.595536][ T5739] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1041.652085][ T5739] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1041.685521][ T5739] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.084296][ T5739] usb 6-1: config 0 descriptor?? [ 1042.626353][T16910] xt_hashlimit: size too large, truncated to 1048576 [ 1042.665201][ T5739] zydacron 0003:13EC:0006.0014: unknown main item tag 0x2 [ 1042.748588][ T5739] zydacron 0003:13EC:0006.0014: unknown main item tag 0x0 [ 1042.793721][ T5739] zydacron 0003:13EC:0006.0014: unknown main item tag 0x0 [ 1042.822064][ T5739] zydacron 0003:13EC:0006.0014: unknown main item tag 0x0 [ 1042.842085][ T5739] zydacron 0003:13EC:0006.0014: unknown main item tag 0x0 [ 1042.865781][ T5739] zydacron 0003:13EC:0006.0014: unknown main item tag 0x0 [ 1042.888278][ T5739] zydacron 0003:13EC:0006.0014: unknown main item tag 0x0 [ 1042.902956][ T5739] zydacron 0003:13EC:0006.0014: unknown main item tag 0x0 [ 1042.911181][ T5739] zydacron 0003:13EC:0006.0014: unknown main item tag 0x0 [ 1042.929119][ T5739] zydacron 0003:13EC:0006.0014: hidraw0: USB HID v0.06 Device [HID 13ec:0006] on usb-dummy_hcd.5-1/input0 [ 1042.966879][ T5739] usb 6-1: USB disconnect, device number 59 [ 1043.337170][T16916] fido_id[16916]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1043.717416][T16928] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1045.952982][ T6002] block nbd2: Possible stuck request ffff888028830000: control (read@0,1024B). Runtime 150 seconds [ 1045.963851][ T6002] block nbd2: Possible stuck request ffff8880288301c0: control (read@1024,1024B). Runtime 150 seconds [ 1045.974995][ T6002] block nbd2: Possible stuck request ffff888028830380: control (read@2048,1024B). Runtime 150 seconds [ 1046.418078][T16933] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1046.456114][T16933] overlayfs: failed to set xattr on upper [ 1046.483736][T16933] overlayfs: ...falling back to redirect_dir=nofollow. [ 1046.521610][T16933] overlayfs: ...falling back to index=off. [ 1046.540069][T16933] overlayfs: ...falling back to uuid=null. [ 1046.564075][T16933] overlayfs: failed to clone lowerpath [ 1046.599344][ T29] audit: type=1400 audit(2000000178.045:1857): avc: denied { lock } for pid=16956 comm="syz.5.3015" path="/dev/nbd5" dev="devtmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1048.840822][T16986] FAULT_INJECTION: forcing a failure. [ 1048.840822][T16986] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.954753][T16986] CPU: 1 UID: 0 PID: 16986 Comm: syz.6.3024 Tainted: G L syzkaller #0 PREEMPT(full) [ 1048.954790][T16986] Tainted: [L]=SOFTLOCKUP [ 1048.954799][T16986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1048.954811][T16986] Call Trace: [ 1048.954819][T16986] [ 1048.954828][T16986] dump_stack_lvl+0x100/0x190 [ 1048.954860][T16986] should_fail_ex.cold+0x5/0xa [ 1048.954892][T16986] ? sel_write_validatetrans+0x263/0x4d0 [ 1048.954922][T16986] should_failslab+0xc2/0x120 [ 1048.954947][T16986] __kmalloc_noprof+0xe0/0x850 [ 1048.954981][T16986] ? _copy_from_user+0x59/0xd0 [ 1048.955012][T16986] sel_write_validatetrans+0x263/0x4d0 [ 1048.955043][T16986] ? __pfx_sel_write_validatetrans+0x10/0x10 [ 1048.955089][T16986] vfs_write+0x2aa/0x1070 [ 1048.955115][T16986] ? __pfx_sel_write_validatetrans+0x10/0x10 [ 1048.955150][T16986] ? __pfx_vfs_write+0x10/0x10 [ 1048.955173][T16986] ? __fget_files+0x215/0x3d0 [ 1048.955209][T16986] ? __fget_files+0x21f/0x3d0 [ 1048.955245][T16986] ksys_write+0x12a/0x250 [ 1048.955270][T16986] ? __pfx_ksys_write+0x10/0x10 [ 1048.955297][T16986] ? rcu_is_watching+0x12/0xc0 [ 1048.955334][T16986] do_syscall_64+0x115/0x870 [ 1048.955368][T16986] ? clear_bhb_loop+0x40/0x90 [ 1048.955397][T16986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.955420][T16986] RIP: 0033:0x7f5dc479ce59 [ 1048.955439][T16986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.955460][T16986] RSP: 002b:00007f5dc563b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1048.955482][T16986] RAX: ffffffffffffffda RBX: 00007f5dc4a15fa0 RCX: 00007f5dc479ce59 [ 1048.955498][T16986] RDX: 0000000000000062 RSI: 00002000000014c0 RDI: 0000000000000003 [ 1048.955512][T16986] RBP: 00007f5dc563b090 R08: 0000000000000000 R09: 0000000000000000 [ 1048.955526][T16986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1048.955539][T16986] R13: 00007f5dc4a16038 R14: 00007f5dc4a15fa0 R15: 00007ffd2771fa18 [ 1048.955574][T16986] [ 1050.001805][T16994] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3027'. [ 1050.046776][T16994] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1050.409816][ T5816] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1050.643729][ T5816] usb 6-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 1050.680397][ T5816] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1050.727904][ T5816] usb 6-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 1050.756144][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.802320][ T5816] usb 6-1: config 0 descriptor?? [ 1050.845462][ T5816] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1050.948840][T17004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3031'. [ 1051.487941][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1051.503548][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1051.511772][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1051.522043][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1051.529799][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1051.740789][T13133] syz_tun (unregistering): left allmulticast mode [ 1051.868182][ T29] audit: type=1400 audit(2000000182.917:1858): avc: denied { accept } for pid=17025 comm="syz.0.3035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1052.209184][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1052.546467][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1053.806644][ T50] Bluetooth: hci3: command tx timeout [ 1054.545554][ T1217] usb 6-1: USB disconnect, device number 60 [ 1054.786381][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1055.148020][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1055.481972][T17060] netlink: 'syz.0.3043': attribute type 10 has an invalid length. [ 1055.857753][T17060] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.868025][T17060] bond0: (slave team0): Enslaving as an active interface with an up link [ 1056.071781][ T50] Bluetooth: hci3: command tx timeout [ 1056.346871][ T29] audit: type=1400 audit(2000000187.051:1859): avc: denied { write } for pid=17064 comm="syz.1.3045" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1056.510787][T17015] lo speed is unknown, defaulting to 1000 [ 1056.527056][T17068] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1056.782496][T14135] block nbd0: Possible stuck request ffff88802872e000: control (read@0,1024B). Runtime 270 seconds [ 1057.943822][ T48] bridge_slave_1: left allmulticast mode [ 1057.949701][ T48] bridge_slave_1: left promiscuous mode [ 1057.956230][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.021835][ T48] bridge_slave_0: left allmulticast mode [ 1058.048056][ T48] bridge_slave_0: left promiscuous mode [ 1058.077471][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.325674][ T50] Bluetooth: hci3: command tx timeout [ 1059.881753][T17086] FAULT_INJECTION: forcing a failure. [ 1059.881753][T17086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1059.899913][T17086] CPU: 1 UID: 0 PID: 17086 Comm: syz.5.3051 Tainted: G L syzkaller #0 PREEMPT(full) [ 1059.899946][T17086] Tainted: [L]=SOFTLOCKUP [ 1059.899954][T17086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1059.899965][T17086] Call Trace: [ 1059.899972][T17086] [ 1059.899980][T17086] dump_stack_lvl+0x100/0x190 [ 1059.900010][T17086] should_fail_ex.cold+0x5/0xa [ 1059.900038][T17086] _copy_from_iter+0x1f4/0x1690 [ 1059.900064][T17086] ? rcu_is_watching+0x12/0xc0 [ 1059.900093][T17086] ? trace_kmem_cache_alloc+0xd5/0x100 [ 1059.900115][T17086] ? __kasan_slab_alloc+0x89/0x90 [ 1059.900142][T17086] ? __pfx__copy_from_iter+0x10/0x10 [ 1059.900166][T17086] ? __asan_memset+0x23/0x50 [ 1059.900193][T17086] ? __build_skb_around+0x278/0x390 [ 1059.900219][T17086] ? is_vmalloc_addr+0x86/0xa0 [ 1059.900250][T17086] netlink_sendmsg+0x808/0xda0 [ 1059.900281][T17086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1059.900315][T17086] sock_write_iter+0x524/0x5a0 [ 1059.900354][T17086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1059.900378][T17086] ? __pfx_sock_write_iter+0x10/0x10 [ 1059.900410][T17086] ? bpf_lsm_file_permission+0x9/0x10 [ 1059.900438][T17086] ? security_file_permission+0x76/0x210 [ 1059.900468][T17086] ? rw_verify_area+0xce/0x6d0 [ 1059.900491][T17086] vfs_write+0x6ac/0x1070 [ 1059.900512][T17086] ? __pfx_sock_write_iter+0x10/0x10 [ 1059.900536][T17086] ? __pfx_vfs_write+0x10/0x10 [ 1059.900555][T17086] ? find_held_lock+0x2b/0x80 [ 1059.900591][T17086] ksys_write+0x1f8/0x250 [ 1059.900612][T17086] ? __pfx_ksys_write+0x10/0x10 [ 1059.900634][T17086] ? rcu_is_watching+0x12/0xc0 [ 1059.900665][T17086] do_syscall_64+0x115/0x870 [ 1059.900689][T17086] ? clear_bhb_loop+0x40/0x90 [ 1059.900714][T17086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.900734][T17086] RIP: 0033:0x7ff34819ce59 [ 1059.900751][T17086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.900769][T17086] RSP: 002b:00007ff349118028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1059.900788][T17086] RAX: ffffffffffffffda RBX: 00007ff348415fa0 RCX: 00007ff34819ce59 [ 1059.900802][T17086] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 1059.900814][T17086] RBP: 00007ff349118090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.900826][T17086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1059.900838][T17086] R13: 00007ff348416038 R14: 00007ff348415fa0 R15: 00007ffd6a7df8e8 [ 1059.900865][T17086] [ 1060.081189][T14135] block nbd0: Possible stuck request ffff88802872e1c0: control (read@1024,1024B). Runtime 270 seconds [ 1060.174760][T14135] block nbd0: Possible stuck request ffff88802872e380: control (read@2048,1024B). Runtime 270 seconds [ 1060.187072][T14135] block nbd0: Possible stuck request ffff88802872e540: control (read@3072,1024B). Runtime 270 seconds [ 1060.581053][ T50] Bluetooth: hci3: command tx timeout [ 1062.359418][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1062.369649][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.380921][ T48] bond0 (unregistering): (slave team0): Releasing backup interface [ 1062.389731][ T48] bond0 (unregistering): Released all slaves [ 1062.401901][ T48] bond1 (unregistering): Released all slaves [ 1062.739947][ T48] tipc: Left network mode [ 1062.903867][ T29] audit: type=1400 audit(2000000193.068:1860): avc: denied { lock } for pid=17094 comm="syz.5.3054" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=66676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1062.909356][T17107] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1062.952133][T17095] IPVS: stopping backup sync thread 17107 ... [ 1062.966507][T17103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3055'. [ 1062.991672][T17103] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3055'. [ 1063.004968][T14135] block nbd6: Possible stuck request ffff888028975080: control (read@0,1024B). Runtime 270 seconds [ 1063.012420][T17108] binder: Binderfs stats mode cannot be changed during a remount [ 1063.016860][T14135] block nbd6: Possible stuck request ffff888028975240: control (read@1024,1024B). Runtime 270 seconds [ 1063.037620][T14135] block nbd6: Possible stuck request ffff888028975400: control (read@2048,1024B). Runtime 270 seconds [ 1063.055694][ T29] audit: type=1400 audit(2000000193.197:1861): avc: denied { remount } for pid=17101 comm="syz.0.3057" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1063.761717][T14135] block nbd6: Possible stuck request ffff8880289755c0: control (read@3072,1024B). Runtime 270 seconds [ 1065.065179][T17015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.072637][T17015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.080563][T17015] bridge_slave_0: entered allmulticast mode [ 1065.089086][T17015] bridge_slave_0: entered promiscuous mode [ 1065.167048][T17015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.174743][T17015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.184129][T17015] bridge_slave_1: entered allmulticast mode [ 1065.205896][T17015] bridge_slave_1: entered promiscuous mode [ 1065.386669][T17015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1065.498303][T17142] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3061'. [ 1065.550707][T17015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1065.699432][ T29] audit: type=1400 audit(2000000195.670:1862): avc: denied { write } for pid=17096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1066.100433][ T29] audit: type=1400 audit(2000000196.048:1863): avc: denied { write } for pid=17150 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1066.168574][T17152] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 1066.997964][T17160] overlayfs: failed to clone upperpath [ 1068.124100][T17015] team0: Port device team_slave_0 added [ 1068.180078][T17015] team0: Port device team_slave_1 added [ 1068.531177][ T5281] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1069.141125][ T5722] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1069.328405][ T5722] usb 7-1: Using ep0 maxpacket: 8 [ 1069.381795][ T5722] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1069.438608][ T5722] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1069.524672][T17015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1069.535038][ T5722] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1069.556096][T17015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.591356][ T5722] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 63688, setting to 1024 [ 1069.618386][ T5722] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1069.633833][T17015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1069.644810][ T5722] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1069.660417][ T5722] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.670779][T17015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.689006][T17015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.720838][ T5722] usb 7-1: config 0 descriptor?? [ 1069.722098][T17015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1069.768020][T17181] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1070.040075][T17181] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1070.080056][T17181] tmpfs: Unknown parameter 'usrquota(' [ 1070.081450][T17015] hsr_slave_0: entered promiscuous mode [ 1070.121429][T17015] hsr_slave_1: entered promiscuous mode [ 1070.389176][T17015] debugfs: 'hsr0' already exists in 'hsr' [ 1070.481315][T17015] Cannot create hsr debugfs directory [ 1070.482090][ T805] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1070.704852][ T50] Bluetooth: hci0: Opcode 0x0c03 failed: -71 [ 1070.705351][ T10] usb 7-1: USB disconnect, device number 70 [ 1070.812965][ T805] usb 6-1: Using ep0 maxpacket: 16 [ 1070.884584][ T805] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 21, changing to 7 [ 1070.915056][ T805] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1070.929169][ T805] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1088, setting to 1024 [ 1070.945200][ T805] usb 6-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice= 0.40 [ 1071.121417][ T805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.155492][ T805] usb 6-1: Product: syz [ 1072.160761][ T805] usb 6-1: Manufacturer: syz [ 1072.179580][ T805] usb 6-1: SerialNumber: syz [ 1072.636883][ T48] hsr_slave_0: left promiscuous mode [ 1072.658006][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1072.678354][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1072.873295][ T29] audit: type=1400 audit(2000000202.295:1864): avc: denied { getopt } for pid=17225 comm="syz.1.3078" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1072.974651][ T805] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1073.019865][ T805] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1073.077959][ T805] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1073.314175][ T805] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1073.514232][ T805] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1073.521544][ T29] audit: type=1400 audit(2000000202.895:1865): avc: denied { write } for pid=17198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1074.154748][ T805] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1074.199035][ T805] usb 6-1: USB disconnect, device number 61 [ 1074.249865][ T29] audit: type=1400 audit(2000000203.569:1866): avc: denied { write } for pid=17249 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1074.307851][T11592] udevd[11592]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1074.451425][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1074.489089][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1074.685695][ T5281] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1075.359211][ T5722] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 1076.277391][ T5722] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1076.324660][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.359808][ T5722] usb 1-1: config 0 descriptor?? [ 1076.387095][ T5722] cp210x 1-1:0.0: cp210x converter detected [ 1076.596978][ T1217] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1077.225599][ T1217] usb 7-1: Using ep0 maxpacket: 8 [ 1077.345922][ T1217] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1077.478677][ T1217] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.566154][ T1217] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1077.601522][ T1217] pvrusb2: ********** [ 1077.628793][ T1217] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1077.728650][ T1217] pvrusb2: Important functionality might not be entirely working. [ 1077.774204][ T5722] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1077.794979][ T1217] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1077.866147][ T5722] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1077.890334][ T1217] pvrusb2: ********** [ 1077.914495][T17269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.953440][ T5722] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1077.960594][T17269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.006878][ T5722] usb 1-1: USB disconnect, device number 98 [ 1078.038979][ T5722] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1078.075079][ T5722] cp210x 1-1:0.0: device disconnected [ 1078.389629][ T29] audit: type=1400 audit(2000000207.389:1867): avc: denied { write } for pid=17268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1078.448828][ T48] IPVS: stop unused estimator thread 0... [ 1078.652251][ T29] audit: type=1400 audit(2000000207.629:1868): avc: denied { write } for pid=17298 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1078.696728][T17301] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3094'. [ 1078.744839][ T9] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1078.911173][ T2363] pvrusb2: Invalid write control endpoint [ 1078.950515][ T6002] block nbd2: Possible stuck request ffff888028830000: control (read@0,1024B). Runtime 180 seconds [ 1078.961516][ T6002] block nbd2: Possible stuck request ffff8880288301c0: control (read@1024,1024B). Runtime 180 seconds [ 1078.972644][ T6002] block nbd2: Possible stuck request ffff888028830380: control (read@2048,1024B). Runtime 180 seconds [ 1078.983625][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1078.983683][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1078.983725][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1079.094022][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1079.136599][ T1217] usb 7-1: USB disconnect, device number 71 [ 1079.164084][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1079.186277][ T9] usb 6-1: Product: syz [ 1079.200983][ T9] usb 6-1: Manufacturer: syz [ 1079.228091][ T9] usb 6-1: SerialNumber: syz [ 1079.302649][ T2363] pvrusb2: Invalid write control endpoint [ 1079.320971][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1079.330724][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1079.338298][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1079.348376][ T2363] pvrusb2: Device being rendered inoperable [ 1079.360662][ T2363] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1079.373791][ T2363] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1079.417377][ T2363] pvrusb2: Attached sub-driver cx25840 [ 1079.455094][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1079.490389][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1079.506046][ T9] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1079.853944][T17295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3093'. [ 1080.119407][T17325] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=22 sclass=netlink_audit_socket pid=17325 comm=syz.6.3098 [ 1080.607025][ T805] usb 6-1: USB disconnect, device number 62 [ 1080.847006][ T805] usblp0: removed [ 1080.872983][ T29] audit: type=1400 audit(2000000209.677:1869): avc: denied { write } for pid=17314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1081.064336][T17015] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1081.104713][ T29] audit: type=1400 audit(2000000209.890:1870): avc: denied { write } for pid=17343 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1081.139941][T17015] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1081.168037][T17015] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1081.533436][T17015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1081.649091][T17015] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1081.687854][T17015] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1081.730426][T17015] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1081.804148][T17015] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1082.196057][T17015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1082.334025][T17015] 8021q: adding VLAN 0 to HW filter on device team0 [ 1082.460173][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.467948][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1082.732863][ T3395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.740033][ T3395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1082.877668][T17383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3109'. [ 1083.592694][T14405] usb 7-1: new full-speed USB device number 72 using dummy_hcd [ 1083.819685][T14405] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.845664][T14405] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1083.849592][ T29] audit: type=1400 audit(2000000212.418:1871): avc: denied { write } for pid=17353 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1083.866025][T14405] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1083.950168][T14405] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.020165][T14405] usb 7-1: config 0 descriptor?? [ 1084.062830][T14405] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1084.091025][T14405] dvb-usb: bulk message failed: -22 (3/0) [ 1084.116260][T14405] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1084.165417][T14405] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1084.193304][T14405] usb 7-1: media controller created [ 1084.226393][ T1217] usb 1-1: new low-speed USB device number 99 using dummy_hcd [ 1084.268488][T14405] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1084.461711][ T1217] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 1084.656371][ T1217] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1084.685070][T14405] dvb-usb: bulk message failed: -22 (6/0) [ 1084.791653][T14405] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1084.933909][ T1217] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1085.025558][T14405] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input60 [ 1085.026805][ T1217] usb 1-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 1085.068137][ T29] audit: type=1400 audit(2000000213.507:1872): avc: denied { write } for pid=17400 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1085.177134][T14405] dvb-usb: schedule remote query interval to 150 msecs. [ 1085.248839][T14405] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1085.258968][ T1217] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.363497][ T1217] usb 1-1: config 0 descriptor?? [ 1085.421266][T14405] dvb-usb: bulk message failed: -22 (1/0) [ 1085.448811][T14405] dvb-usb: error while querying for an remote control event. [ 1085.464887][T17396] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1085.555542][T14405] usb 7-1: USB disconnect, device number 72 [ 1085.687361][T14405] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1086.227655][ T1217] lg-g15 0003:046D:C227.0015: unknown main item tag 0x5 [ 1086.274982][ T1217] lg-g15 0003:046D:C227.0015: unknown main item tag 0x6 [ 1086.319268][ T1217] lg-g15 0003:046D:C227.0015: item fetching failed at offset 37/40 [ 1086.372505][ T1217] lg-g15 0003:046D:C227.0015: probe with driver lg-g15 failed with error -22 [ 1086.447783][ T1217] usb 1-1: USB disconnect, device number 99 [ 1086.698122][ T29] audit: type=1400 audit(2000000215.057:1873): avc: denied { write } for pid=17414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1086.775744][T17447] netpci0: tun_chr_ioctl cmd 1074025672 [ 1086.793587][T17447] netpci0: ignored: set checksum enabled [ 1086.907977][T17015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1086.979769][ T29] audit: type=1400 audit(2000000215.315:1874): avc: denied { write } for pid=17451 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1086.999006][T17453] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1087.031109][T17453] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1087.059539][T17015] veth0_vlan: entered promiscuous mode [ 1087.075929][ T29] audit: type=1400 audit(2000000215.352:1875): avc: denied { firmware_load } for pid=17452 comm="syz.1.3121" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1087.103022][T17015] veth1_vlan: entered promiscuous mode [ 1087.108704][ T5722] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1087.179118][T17015] veth0_macvtap: entered promiscuous mode [ 1087.395467][T17015] veth1_macvtap: entered promiscuous mode [ 1087.419004][T17015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1087.437153][ T5722] usb 6-1: device descriptor read/64, error -71 [ 1087.460228][T17015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1087.497423][ T9586] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.530004][ T9586] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.556996][ T9586] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.589337][ T9586] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.697023][ T5722] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1087.705358][ T1217] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1087.803068][ T6879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.825085][ T6879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.878853][ T5722] usb 6-1: device descriptor read/64, error -71 [ 1087.890658][ T1217] usb 1-1: Using ep0 maxpacket: 32 [ 1087.915932][ T1217] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1087.936491][ T1217] usb 1-1: config 0 has no interface number 0 [ 1087.950831][ T1217] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1087.962698][ T3395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.984461][ T3395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.998526][ T1217] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1088.023391][ T1217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.039758][ T1217] usb 1-1: Product: syz [ 1088.045260][ T5722] usb usb6-port1: attempt power cycle [ 1088.064357][ T1217] usb 1-1: Manufacturer: syz [ 1088.083428][ T1217] usb 1-1: SerialNumber: syz [ 1088.099099][ T1217] usb 1-1: config 0 descriptor?? [ 1088.123976][ T1217] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1088.149566][ T1217] em28xx 1-1:0.132: Video interface 132 found: [ 1088.204040][ T10] usb 7-1: new full-speed USB device number 73 using dummy_hcd [ 1088.406217][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.431339][ T5722] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1088.441808][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1088.468117][ T10] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1088.478463][ T5722] usb 6-1: device descriptor read/8, error -71 [ 1088.494206][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.522690][ T10] usb 7-1: config 0 descriptor?? [ 1088.548111][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1088.551439][ T29] audit: type=1400 audit(2000000216.755:1876): avc: denied { write } for pid=17459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1088.562937][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 1088.636793][ T29] audit: type=1400 audit(2000000216.829:1877): avc: denied { accept } for pid=17457 comm="syz.0.3122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1088.707930][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1088.734482][ T5722] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1088.740209][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1088.767301][ T10] usb 7-1: media controller created [ 1088.778586][ T5722] usb 6-1: device descriptor read/8, error -71 [ 1088.793235][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1088.810762][ T29] audit: type=1400 audit(2000000217.004:1878): avc: denied { write } for pid=17480 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1088.836972][T14405] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1088.890032][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 1088.908233][ T5722] usb usb6-port1: unable to enumerate USB device [ 1088.939353][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1088.992529][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input61 [ 1089.021955][T14405] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.034889][T14405] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1089.064853][T14405] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1089.089729][T14405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.121645][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 1089.124285][T14405] usb 3-1: config 0 descriptor?? [ 1089.129982][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1089.172784][T14405] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1089.208497][T14405] dvb-usb: bulk message failed: -22 (3/0) [ 1089.251125][T14405] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1089.294487][T14405] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1089.308934][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1089.315290][ T10] dvb-usb: error while querying for an remote control event. [ 1089.323371][T14405] usb 3-1: media controller created [ 1089.348024][T14405] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1089.363403][T14135] block nbd0: Possible stuck request ffff88802872e000: control (read@0,1024B). Runtime 300 seconds [ 1089.407918][ T5816] usb 7-1: USB disconnect, device number 73 [ 1089.414423][T14405] dvb-usb: bulk message failed: -22 (6/0) [ 1089.433023][T14405] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1089.491150][T14405] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input62 [ 1089.530737][ T1217] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1089.541458][T14405] dvb-usb: schedule remote query interval to 150 msecs. [ 1089.550094][T14405] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1089.562146][ T5816] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1089.679674][T14405] usb 3-1: USB disconnect, device number 100 [ 1089.734492][ T1217] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1089.746744][ T1217] em28xx 1-1:0.132: board has no eeprom [ 1089.807593][ T1217] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1089.815868][T14405] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1089.836283][ T1217] em28xx 1-1:0.132: analog set to bulk mode. [ 1089.845772][ T5816] em28xx 1-1:0.132: Registering V4L2 extension [ 1089.981388][ T5816] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1090.036903][ T5816] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1090.403793][ T5816] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1090.436280][ T5816] em28xx 1-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1090.678207][ T5816] em28xx 1-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 1090.721907][ T5816] em28xx 1-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 1090.758364][ T5816] em28xx 1-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 1090.792770][ T5715] usb 1-1: USB disconnect, device number 100 [ 1090.795748][ T5816] em28xx 1-1:0.132: failed to trigger read from i2c address 0x96 (error=-19) [ 1090.849728][ T5715] em28xx 1-1:0.132: Disconnecting em28xx [ 1090.956662][T17507] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3131'. [ 1090.987212][ T5816] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1091.018993][ T5816] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1091.042376][ T5816] em28xx 1-1:0.132: No AC97 audio processor [ 1091.129214][T17512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3131'. [ 1091.249926][ T5816] usb 1-1: Decoder not found [ 1091.275775][ T5816] em28xx 1-1:0.132: failed to create media graph [ 1091.298887][ T5816] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1091.440583][ T5816] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1091.470417][ T5715] em28xx 1-1:0.132: Closing input extension [ 1091.702163][ T5715] em28xx 1-1:0.132: Freeing device [ 1091.929616][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1091.933031][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1092.094146][T17520] ceph: No mds server is up or the cluster is laggy [ 1092.884739][ T29] audit: type=1400 audit(2000000220.760:1879): avc: denied { append } for pid=17532 comm="syz.0.3136" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1092.972407][T14135] block nbd0: Possible stuck request ffff88802872e1c0: control (read@1024,1024B). Runtime 300 seconds [ 1092.984320][T14135] block nbd0: Possible stuck request ffff88802872e380: control (read@2048,1024B). Runtime 300 seconds [ 1092.996377][T14135] block nbd0: Possible stuck request ffff88802872e540: control (read@3072,1024B). Runtime 300 seconds [ 1093.105540][ T29] audit: type=1400 audit(2000000220.963:1880): avc: denied { ioctl } for pid=17534 comm="syz.2.3137" path="socket:[68969]" dev="sockfs" ino=68969 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1093.250900][ T29] audit: type=1400 audit(2000000221.009:1881): avc: denied { append } for pid=17534 comm="syz.2.3137" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1094.145828][T14405] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 1094.165951][T17541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3138'. [ 1094.243947][T17555] netlink: 'syz.2.3143': attribute type 4 has an invalid length. [ 1094.252873][T17555] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3143'. [ 1094.278690][T17555] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1094.344510][T14405] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.382651][T14405] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1094.416596][T14405] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1094.447380][T14405] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.469891][T14405] usb 6-1: config 0 descriptor?? [ 1094.515091][T14405] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1094.530499][T14405] dvb-usb: bulk message failed: -22 (3/0) [ 1094.557446][T14405] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1094.570088][T14405] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1094.577490][T14405] usb 6-1: media controller created [ 1094.584125][T14405] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1094.599355][T14405] dvb-usb: bulk message failed: -22 (6/0) [ 1094.617702][T14405] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1094.638958][T14405] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input63 [ 1094.656038][T14405] dvb-usb: schedule remote query interval to 150 msecs. [ 1094.664800][T14405] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1094.821316][T17574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3150'. [ 1094.831538][T17574] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3150'. [ 1094.840846][T14405] dvb-usb: bulk message failed: -22 (1/0) [ 1094.848970][T14405] dvb-usb: error while querying for an remote control event. [ 1094.879129][ T5816] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1095.053862][ T1217] dvb-usb: bulk message failed: -22 (1/0) [ 1095.059734][ T1217] dvb-usb: error while querying for an remote control event. [ 1096.212828][ T29] audit: type=1804 audit(2000000222.974:1882): pid=17582 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3151" name="file0" dev="tmpfs" ino=434 res=1 errno=0 [ 1096.235288][T14135] block nbd6: Possible stuck request ffff888028975080: control (read@0,1024B). Runtime 300 seconds [ 1096.246996][T14135] block nbd6: Possible stuck request ffff888028975240: control (read@1024,1024B). Runtime 300 seconds [ 1096.277335][ T5715] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1097.316081][T14135] block nbd6: Possible stuck request ffff888028975400: control (read@2048,1024B). Runtime 300 seconds [ 1097.325416][ T1217] dvb-usb: bulk message failed: -22 (1/0) [ 1097.328767][T14135] block nbd6: Possible stuck request ffff8880289755c0: control (read@3072,1024B). Runtime 300 seconds [ 1097.535772][ T5715] usb 7-1: Using ep0 maxpacket: 32 [ 1098.641855][ T5739] usb 6-1: USB disconnect, device number 67 [ 1098.649548][ T5816] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1098.665314][ T1217] dvb-usb: error while querying for an remote control event. [ 1099.461687][ T5816] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1099.504334][ T5816] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1099.541033][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.583233][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3153'. [ 1099.601499][ T5816] usb 1-1: config 0 descriptor?? [ 1099.617810][ T5816] usb 1-1: can't set config #0, error -71 [ 1099.640541][ T48] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1099.644331][ T5715] usb 7-1: device descriptor read/all, error -71 [ 1100.002341][ T5739] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1100.409912][ T48] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1101.132908][ T5816] usb 1-1: USB disconnect, device number 101 [ 1101.151973][ T48] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1101.171758][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3153'. [ 1101.265734][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3153'. [ 1101.276349][ T48] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1101.642602][T14405] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1101.842181][ T5816] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1101.934025][T14405] usb 7-1: Using ep0 maxpacket: 32 [ 1101.945841][T14405] usb 7-1: config 2 has an invalid interface number: 45 but max is 0 [ 1101.956052][T14405] usb 7-1: config 2 has no interface number 0 [ 1101.962528][T14405] usb 7-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1101.975550][T14405] usb 7-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1101.991105][T14405] usb 7-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1102.046085][ T5816] usb 6-1: Using ep0 maxpacket: 32 [ 1102.094530][ T5816] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.113964][T14405] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.145083][T14405] usb 7-1: Product: syz [ 1102.149532][ T5816] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.162933][T14405] usb 7-1: Manufacturer: syz [ 1102.167725][T14405] usb 7-1: SerialNumber: syz [ 1102.180171][ T5816] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1102.204615][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.255809][T14405] kobil_sct 7-1:2.45: KOBIL USB smart card terminal converter detected [ 1102.279415][ T5816] usb 6-1: config 0 descriptor?? [ 1102.845729][T14405] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1103.006941][ T5739] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1103.194331][ T5739] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.207360][ T5739] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1103.219410][ T5739] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1103.247560][ T5816] savu 0003:1E7D:2D5A.0016: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1103.587877][ T5739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.609858][ T5739] usb 1-1: config 0 descriptor?? [ 1103.638137][ T5739] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1103.645498][ T5739] dvb-usb: bulk message failed: -22 (3/0) [ 1103.660960][ T5739] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1103.682670][ T5739] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1103.872541][ T5739] usb 1-1: media controller created [ 1103.929569][ T5739] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1103.966416][ T5739] dvb-usb: bulk message failed: -22 (6/0) [ 1103.988198][ T5739] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1104.019848][ T5739] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input64 [ 1104.044327][ T5739] dvb-usb: schedule remote query interval to 150 msecs. [ 1104.055540][ T5739] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1104.206257][ T5816] usb 1-1: USB disconnect, device number 102 [ 1104.221070][ T5739] dvb-usb: bulk message failed: -22 (1/0) [ 1104.227631][ T5739] dvb-usb: error while querying for an remote control event. [ 1104.478179][ T5739] usb 6-1: USB disconnect, device number 68 [ 1104.667436][ T5722] usb 7-1: USB disconnect, device number 76 [ 1105.200432][ T5722] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1105.213085][ T5722] kobil_sct 7-1:2.45: device disconnected [ 1105.256780][ T5816] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1106.000653][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1107.038300][ T5816] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1107.213908][ T5816] usb 3-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 1107.247345][ T5816] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1107.310301][ T5816] usb 3-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 1107.347305][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.397184][ T5816] usb 3-1: config 0 descriptor?? [ 1107.422785][ T5816] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1107.734450][T14405] usb 7-1: new full-speed USB device number 77 using dummy_hcd [ 1107.944821][T14405] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.979044][T14405] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1108.027263][T14405] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1108.063327][T14405] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.170031][T14405] usb 7-1: config 0 descriptor?? [ 1108.258386][T14405] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1108.303768][T14405] dvb-usb: bulk message failed: -22 (3/0) [ 1108.373432][T14405] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1108.402475][T14405] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1108.430014][T14405] usb 7-1: media controller created [ 1108.444528][T14405] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1108.482619][T14405] dvb-usb: bulk message failed: -22 (6/0) [ 1108.514167][T14405] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1108.550498][T14405] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input65 [ 1108.597691][T14405] dvb-usb: schedule remote query interval to 150 msecs. [ 1108.631520][T14405] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1109.296998][T14405] dvb-usb: bulk message failed: -22 (1/0) [ 1109.331714][T14405] dvb-usb: error while querying for an remote control event. [ 1109.363795][ T5816] usb 7-1: USB disconnect, device number 77 [ 1109.420530][ T5816] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1109.601828][T17690] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1109.649632][T17690] team0: Port device xfrm0 added [ 1109.683092][T17690] tipc: Started in network mode [ 1109.688001][T17690] tipc: Node identity da935d2e0d52, cluster identity 4711 [ 1109.704339][T17690] tipc: Enabled bearer , priority 0 [ 1110.809592][ T5816] tipc: Node number set to 3619773742 [ 1111.254015][ T805] usb 3-1: USB disconnect, device number 101 [ 1111.565273][ T6002] block nbd2: Possible stuck request ffff888028830000: control (read@0,1024B). Runtime 210 seconds [ 1111.576466][ T6002] block nbd2: Possible stuck request ffff8880288301c0: control (read@1024,1024B). Runtime 210 seconds [ 1111.588098][ T6002] block nbd2: Possible stuck request ffff888028830380: control (read@2048,1024B). Runtime 210 seconds [ 1114.863626][T17722] overlayfs: failed to clone upperpath [ 1115.924721][ T5722] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 1116.251875][ T5722] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.739730][ T5722] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1116.769994][ T5722] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1116.791656][ T5722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.805039][ T5722] usb 6-1: config 0 descriptor?? [ 1116.827593][ T5722] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1116.837846][ T5722] dvb-usb: bulk message failed: -22 (3/0) [ 1116.854347][ T5722] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1116.885587][ T5722] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1116.921697][ T5722] usb 6-1: media controller created [ 1116.948762][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1117.020361][ T5722] dvb-usb: bulk message failed: -22 (6/0) [ 1117.037243][ T5722] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1117.075341][ T5722] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input66 [ 1117.126903][ T5722] dvb-usb: schedule remote query interval to 150 msecs. [ 1117.160660][ T5722] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1117.336451][ T5722] dvb-usb: bulk message failed: -22 (1/0) [ 1117.351813][ T5722] dvb-usb: error while querying for an remote control event. [ 1117.374262][T17742] FAULT_INJECTION: forcing a failure. [ 1117.374262][T17742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1117.388830][T17742] CPU: 1 UID: 0 PID: 17742 Comm: syz.0.3202 Tainted: G L syzkaller #0 PREEMPT(full) [ 1117.388867][T17742] Tainted: [L]=SOFTLOCKUP [ 1117.388875][T17742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1117.388889][T17742] Call Trace: [ 1117.388896][T17742] [ 1117.388905][T17742] dump_stack_lvl+0x100/0x190 [ 1117.388937][T17742] should_fail_ex.cold+0x5/0xa [ 1117.388969][T17742] _copy_from_iter+0x1f4/0x1690 [ 1117.389004][T17742] ? __pfx__copy_from_iter+0x10/0x10 [ 1117.389030][T17742] ? rcu_is_watching+0x12/0xc0 [ 1117.389063][T17742] ? trace_kmalloc+0xe3/0x110 [ 1117.389087][T17742] ? __kasan_kmalloc+0xaa/0xb0 [ 1117.389109][T17742] ? __kmalloc_noprof+0x320/0x850 [ 1117.389148][T17742] kernfs_fop_write_iter+0x186/0x5f0 [ 1117.389187][T17742] vfs_write+0x6ac/0x1070 [ 1117.389220][T17742] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1117.389257][T17742] ? __pfx_vfs_write+0x10/0x10 [ 1117.389301][T17742] ksys_write+0x12a/0x250 [ 1117.389326][T17742] ? __pfx_ksys_write+0x10/0x10 [ 1117.389352][T17742] ? rcu_is_watching+0x12/0xc0 [ 1117.389386][T17742] do_syscall_64+0x115/0x870 [ 1117.389414][T17742] ? clear_bhb_loop+0x40/0x90 [ 1117.389441][T17742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.389463][T17742] RIP: 0033:0x7f4f9419ce59 [ 1117.389480][T17742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.389501][T17742] RSP: 002b:00007f4f923f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1117.389520][T17742] RAX: ffffffffffffffda RBX: 00007f4f94415fa0 RCX: 00007f4f9419ce59 [ 1117.389535][T17742] RDX: 0000000000000032 RSI: 0000200000000280 RDI: 0000000000000003 [ 1117.389547][T17742] RBP: 00007f4f923f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.389559][T17742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.389572][T17742] R13: 00007f4f94416038 R14: 00007f4f94415fa0 R15: 00007ffcbbd6bd38 [ 1117.389601][T17742] [ 1117.744072][ T805] usb 6-1: USB disconnect, device number 69 [ 1117.867933][ T805] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1118.981430][T17752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3205'. [ 1119.219409][T17761] netlink: 'syz.0.3207': attribute type 1 has an invalid length. [ 1119.570831][T17761] bond1: entered promiscuous mode [ 1119.611714][T17761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1120.205947][T17766] bond1: (slave bridge1): making interface the new active one [ 1120.213525][T17766] bridge1: entered promiscuous mode [ 1120.224198][T17766] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1121.951965][T14135] block nbd0: Possible stuck request ffff88802872e000: control (read@0,1024B). Runtime 330 seconds [ 1122.925536][ T5722] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 1123.092141][ T5722] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.111360][ T5722] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1123.131408][ T5722] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1123.142585][ T5722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.155365][ T5722] usb 6-1: config 0 descriptor?? [ 1123.182460][ T5722] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1123.207262][ T5722] dvb-usb: bulk message failed: -22 (3/0) [ 1123.226678][ T5722] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1123.251722][ T5722] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1123.261414][ T5816] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1123.274566][ T5722] usb 6-1: media controller created [ 1123.288548][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1123.323204][ T5722] dvb-usb: bulk message failed: -22 (6/0) [ 1123.336911][ T5722] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1123.364121][ T5722] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input67 [ 1123.403191][ T5722] dvb-usb: schedule remote query interval to 150 msecs. [ 1123.427226][ T5722] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1123.449943][ T5816] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.478131][ T5816] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1123.502571][ T5816] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1123.530990][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.539295][ T5816] usb 3-1: Product: syz [ 1123.543606][ T5816] usb 3-1: Manufacturer: syz [ 1123.548340][ T5816] usb 3-1: SerialNumber: syz [ 1123.597410][ T5722] dvb-usb: bulk message failed: -22 (1/0) [ 1123.606530][ T5722] dvb-usb: error while querying for an remote control event. [ 1123.642238][ T5816] cdc_mbim 3-1:1.0: skipping garbage [ 1123.787105][ T5722] dvb-usb: bulk message failed: -22 (1/0) [ 1123.797214][ T5722] dvb-usb: error while querying for an remote control event. [ 1123.854849][T17789] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1123.880688][ T9] usb 6-1: USB disconnect, device number 70 [ 1123.918503][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1124.153024][ T5722] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1124.326690][ T5722] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1124.340093][ T5722] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1124.350011][ T5722] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1124.365945][ T5722] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1124.376068][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1124.386786][ T5722] usb 1-1: Product: syz [ 1124.393963][ T5722] usb 1-1: Manufacturer: syz [ 1124.398600][ T5722] usb 1-1: SerialNumber: syz [ 1124.525328][T17789] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1124.546047][T17812] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3221'. [ 1124.556559][ T5816] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 1124.648022][ T5722] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 103 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1124.668961][ T5816] wwan wwan0: port wwan0mbim0 attached [ 1124.700809][ T5816] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, ae:24:92:af:a4:57 [ 1124.832671][ T9] usb 3-1: USB disconnect, device number 102 [ 1124.850888][ T9] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 1124.874775][T17801] cdc_mbim 3-1:1.0: Error submitting int urb - -19 [ 1124.883314][ T29] audit: type=1400 audit(2000000250.279:1883): avc: denied { read write } for pid=17800 comm="syz.0.3217" name="cdc-wdm0" dev="devtmpfs" ino=4081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1124.912179][ T29] audit: type=1400 audit(2000000250.279:1884): avc: denied { open } for pid=17800 comm="syz.0.3217" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1125.025143][T17801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3217'. [ 1125.045936][ T29] audit: type=1400 audit(2000000250.435:1885): avc: denied { mount } for pid=17817 comm="syz.5.3225" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1125.053228][T17823] jfs: Unknown parameter '{' [ 1125.436753][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 1125.476971][ T5722] usb 1-1: USB disconnect, device number 103 [ 1125.515179][T14135] block nbd0: Possible stuck request ffff88802872e1c0: control (read@1024,1024B). Runtime 330 seconds [ 1125.528038][T14135] block nbd0: Possible stuck request ffff88802872e380: control (read@2048,1024B). Runtime 330 seconds [ 1125.554122][T14135] block nbd0: Possible stuck request ffff88802872e540: control (read@3072,1024B). Runtime 330 seconds [ 1125.581327][ T5722] usblp1: removed [ 1125.730900][T17833] mtd partition "" doesn't have enough space: 0x20003 < 0x800000f0, disabled [ 1125.833131][T17833] ftl_cs: FTL header not found. [ 1125.933108][ T29] audit: type=1400 audit(2000000251.257:1886): avc: denied { write } for pid=17820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1126.240001][ T29] audit: type=1400 audit(2000000251.534:1887): avc: denied { write } for pid=17843 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1126.680095][ T29] audit: type=1400 audit(2000000251.930:1888): avc: denied { map } for pid=17845 comm="syz.0.3227" path="/dev/video4" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1129.032072][T14135] block nbd6: Possible stuck request ffff888028975080: control (read@0,1024B). Runtime 330 seconds [ 1129.048443][T14135] block nbd6: Possible stuck request ffff888028975240: control (read@1024,1024B). Runtime 330 seconds [ 1129.287660][ T5722] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1129.836877][ T29] audit: type=1400 audit(2000000254.855:1889): avc: denied { write } for pid=17847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1129.871151][T14135] block nbd6: Possible stuck request ffff888028975400: control (read@2048,1024B). Runtime 330 seconds [ 1129.884582][T14135] block nbd6: Possible stuck request ffff8880289755c0: control (read@3072,1024B). Runtime 330 seconds [ 1130.082088][ T29] audit: type=1400 audit(2000000255.077:1890): avc: denied { write } for pid=17881 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1130.118462][ T5722] usb 3-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 1130.189883][ T5722] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1130.218430][ T29] audit: type=1400 audit(2000000255.206:1891): avc: denied { unmount } for pid=7838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1130.222722][ T5722] usb 3-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 1130.306450][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.338252][ T5722] usb 3-1: config 0 descriptor?? [ 1130.506964][ T5722] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1131.646853][T17898] netlink: 'syz.1.3238': attribute type 6 has an invalid length. [ 1131.656973][T17898] IPv6: NLM_F_CREATE should be specified when creating new route [ 1131.736202][ T5722] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1132.166384][ T5722] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1132.177956][ T5722] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1132.188199][ T5722] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1132.203791][ T5722] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1132.213019][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1132.222272][ T5722] usb 1-1: Product: syz [ 1132.576757][ T5722] usb 1-1: Manufacturer: syz [ 1132.581497][ T5722] usb 1-1: SerialNumber: syz [ 1132.842355][ T5722] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 104 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1133.125992][ T5722] usb 3-1: USB disconnect, device number 103 [ 1133.181404][T17896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3237'. [ 1133.263942][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1133.284003][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1133.293198][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1133.313561][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1133.323456][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1133.723352][ T5722] usb 1-1: USB disconnect, device number 104 [ 1133.765683][ T5722] usblp0: removed [ 1135.637460][ T5632] Bluetooth: hci0: command tx timeout [ 1137.215214][T17913] lo speed is unknown, defaulting to 1000 [ 1138.294878][ T5632] Bluetooth: hci0: command tx timeout [ 1140.004797][ T5010] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1140.119169][T17913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.127393][T17913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.135501][T17913] bridge_slave_0: entered allmulticast mode [ 1140.149764][T17913] bridge_slave_0: entered promiscuous mode [ 1140.332417][T17913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.339801][T17913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.354288][T17913] bridge_slave_1: entered allmulticast mode [ 1140.396084][ T5010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.400627][T17913] bridge_slave_1: entered promiscuous mode [ 1140.535820][ T50] Bluetooth: hci0: command tx timeout [ 1140.561189][ T5010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.571559][ T5010] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1140.585274][ T5010] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1140.595063][ T5010] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.643439][ T5010] usb 3-1: config 0 descriptor?? [ 1140.759690][T17913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1140.776662][T17913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1140.822644][T17913] team0: Port device team_slave_0 added [ 1140.831174][T17913] team0: Port device team_slave_1 added [ 1140.869859][T17913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.881490][T17913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.912753][T17913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.929156][T17913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.936896][T17913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.980112][T17913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.114182][ T5010] plantronics 0003:047F:FFFF.0017: reserved main item tag 0xd [ 1141.158033][T17913] hsr_slave_0: entered promiscuous mode [ 1141.166866][T17913] hsr_slave_1: entered promiscuous mode [ 1141.170600][ T5010] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1141.174404][T17913] debugfs: 'hsr0' already exists in 'hsr' [ 1141.193547][T17913] Cannot create hsr debugfs directory [ 1141.245812][ T29] audit: type=1400 audit(2000000265.384:1892): avc: denied { name_bind } for pid=17982 comm="syz.0.3253" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1141.295586][ T29] audit: type=1400 audit(2000000265.393:1893): avc: denied { name_connect } for pid=17982 comm="syz.0.3253" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1141.418255][T17968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.548708][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 1141.675897][T17968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.876652][ T5739] usb 3-1: USB disconnect, device number 104 [ 1142.898279][ T50] Bluetooth: hci0: command tx timeout [ 1143.462782][ T5739] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1144.526272][ T6002] block nbd2: Possible stuck request ffff888028830000: control (read@0,1024B). Runtime 240 seconds [ 1144.539942][ T6002] block nbd2: Possible stuck request ffff8880288301c0: control (read@1024,1024B). Runtime 240 seconds [ 1144.550989][ T6002] block nbd2: Possible stuck request ffff888028830380: control (read@2048,1024B). Runtime 240 seconds [ 1144.638739][T17913] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1145.776618][ T5739] usb 6-1: device descriptor read/all, error -71 [ 1146.114059][T18010] FAULT_INJECTION: forcing a failure. [ 1146.114059][T18010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1146.128424][T18010] CPU: 0 UID: 0 PID: 18010 Comm: syz.5.3258 Tainted: G L syzkaller #0 PREEMPT(full) [ 1146.128459][T18010] Tainted: [L]=SOFTLOCKUP [ 1146.128467][T18010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1146.128481][T18010] Call Trace: [ 1146.128489][T18010] [ 1146.128498][T18010] dump_stack_lvl+0x100/0x190 [ 1146.128529][T18010] should_fail_ex.cold+0x5/0xa [ 1146.128561][T18010] _copy_from_user+0x2e/0xd0 [ 1146.128590][T18010] copy_msghdr_from_user+0x9f/0x4f0 [ 1146.128620][T18010] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1146.128663][T18010] ___sys_sendmsg+0x106/0x1e0 [ 1146.128692][T18010] ? __pfx____sys_sendmsg+0x10/0x10 [ 1146.128756][T18010] __sys_sendmsg+0x170/0x220 [ 1146.128791][T18010] ? __pfx___sys_sendmsg+0x10/0x10 [ 1146.128834][T18010] ? trace_irq_enable.constprop.0+0x31/0x160 [ 1146.128866][T18010] ? rcu_is_watching+0x12/0xc0 [ 1146.128903][T18010] do_syscall_64+0x115/0x870 [ 1146.128932][T18010] ? clear_bhb_loop+0x40/0x90 [ 1146.128960][T18010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.128983][T18010] RIP: 0033:0x7ff34819ce59 [ 1146.129002][T18010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.129024][T18010] RSP: 002b:00007ff3490d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1146.129046][T18010] RAX: ffffffffffffffda RBX: 00007ff348416180 RCX: 00007ff34819ce59 [ 1146.129061][T18010] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1146.129075][T18010] RBP: 00007ff3490d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1146.129089][T18010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1146.129103][T18010] R13: 00007ff348416218 R14: 00007ff348416180 R15: 00007ffd6a7df8e8 [ 1146.129134][T18010] [ 1146.330623][T17913] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1146.338469][T17913] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1146.362230][T17913] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1146.370017][T17913] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1146.380531][T17913] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1146.388751][T17913] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1146.398300][T17913] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1146.969475][T18020] Bluetooth: MGMT ver 1.23 [ 1147.057273][T17913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.148274][T17913] 8021q: adding VLAN 0 to HW filter on device team0 [ 1147.164198][T18026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3261'. [ 1147.193132][ T9587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.201850][ T9587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1147.331447][ T6873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.338623][ T6873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1147.700519][T18028] IPVS: Scheduler module ip_vs_&p not found [ 1147.770965][T17913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1148.595493][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 1149.281378][ T5739] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 1149.450202][T17913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1149.587719][ T5739] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 1149.597873][ T5739] usb 1-1: config 0 has no interface number 0 [ 1149.604643][ T5739] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 25455, setting to 64 [ 1149.621724][ T5739] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1149.632235][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1149.641373][ T5739] usb 1-1: Manufacturer: syz [ 1149.645972][ T5739] usb 1-1: SerialNumber: syz [ 1149.655529][ T5739] usb 1-1: config 0 descriptor?? [ 1149.703126][T17913] veth0_vlan: entered promiscuous mode [ 1149.720970][T17913] veth1_vlan: entered promiscuous mode [ 1149.802834][T18058] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1149.956390][T17913] veth0_macvtap: entered promiscuous mode [ 1149.979359][T17913] veth1_macvtap: entered promiscuous mode [ 1150.004751][T17913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.049968][ T5739] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71 [ 1151.059619][ T5739] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1152.129414][ T5739] usb 1-1: USB disconnect, device number 105 [ 1152.141779][T17913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1152.222526][ T6873] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.250648][ T6873] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.284508][ T6873] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.331795][ T6873] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.454485][ T9587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1153.467627][ T9587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.528061][ T6873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1153.550500][ T6873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1154.843566][T14135] block nbd0: Possible stuck request ffff88802872e000: control (read@0,1024B). Runtime 360 seconds [ 1154.884096][ T5010] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1154.884132][ T805] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1155.060193][ T5010] usb 1-1: Using ep0 maxpacket: 16 [ 1155.067596][ T5010] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.081853][ T805] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1155.441912][ T805] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1155.454301][ T805] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1155.477912][ T5010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1155.546339][ T5010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1155.598084][ T5010] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1155.600896][ T805] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1155.640447][ T5010] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1155.679915][ T5010] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1155.698912][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1155.729483][ T805] usb 3-1: Product: syz [ 1155.735701][ T5010] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1155.739990][ T805] usb 3-1: Manufacturer: syz [ 1155.768659][ T5010] usb 1-1: Manufacturer: syz [ 1155.789761][ T805] usb 3-1: SerialNumber: syz [ 1155.792059][ T5010] usb 1-1: config 0 descriptor?? [ 1156.082693][ T805] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 105 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1156.195730][ T5010] rc_core: IR keymap rc-hauppauge not found [ 1156.202619][ T5010] Registered IR keymap rc-empty [ 1156.210589][ T5010] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1156.238819][ T5010] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1156.261657][ T5010] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1156.275160][ T5010] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input70 [ 1156.293844][ T5010] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1156.328400][ T5010] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1156.652363][ T5010] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1156.729823][ T5010] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1156.752390][ T1217] IPVS: starting estimator thread 0... [ 1156.813324][ T5010] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1156.883384][ T5010] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1156.932409][T18135] IPVS: using max 43 ests per chain, 103200 per kthread [ 1156.978621][ T5010] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1157.015652][ T5010] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1157.081954][ T5010] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1157.107420][ T5010] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1157.137229][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3275'. [ 1157.217653][ T5010] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1157.226111][ T5010] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1157.245529][ T5010] usb 1-1: USB disconnect, device number 106 [ 1157.479246][ T10] usb 3-1: USB disconnect, device number 105 [ 1157.499371][ T10] usblp0: removed [ 1157.730957][T18153] binder: 18150:18153 ioctl c0145608 200000000140 returned -22 [ 1158.196301][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 1158.275270][T14135] block nbd0: Possible stuck request ffff88802872e1c0: control (read@1024,1024B). Runtime 360 seconds [ 1158.287140][T14135] block nbd0: Possible stuck request ffff88802872e380: control (read@2048,1024B). Runtime 360 seconds [ 1158.299144][T14135] block nbd0: Possible stuck request ffff88802872e540: control (read@3072,1024B). Runtime 360 seconds [ 1158.357734][T18160] FAULT_INJECTION: forcing a failure. [ 1158.357734][T18160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1158.374089][T18160] CPU: 0 UID: 0 PID: 18160 Comm: syz.2.3292 Tainted: G L syzkaller #0 PREEMPT(full) [ 1158.374110][T18160] Tainted: [L]=SOFTLOCKUP [ 1158.374117][T18160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1158.374130][T18160] Call Trace: [ 1158.374137][T18160] [ 1158.374144][T18160] dump_stack_lvl+0x100/0x190 [ 1158.374168][T18160] should_fail_ex.cold+0x5/0xa [ 1158.374199][T18160] _copy_from_iter+0x1f4/0x1690 [ 1158.374228][T18160] ? __asan_memset+0x23/0x50 [ 1158.374247][T18160] ? __pfx__copy_from_iter+0x10/0x10 [ 1158.374261][T18160] ? __pfx___alloc_skb+0x10/0x10 [ 1158.374289][T18160] netlink_sendmsg+0x808/0xda0 [ 1158.374322][T18160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1158.374347][T18160] ? __might_fault+0xa0/0x140 [ 1158.374374][T18160] ____sys_sendmsg+0x9e1/0xb70 [ 1158.374393][T18160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1158.374409][T18160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1158.374430][T18160] ___sys_sendmsg+0x190/0x1e0 [ 1158.374446][T18160] ? __pfx____sys_sendmsg+0x10/0x10 [ 1158.374479][T18160] __sys_sendmsg+0x170/0x220 [ 1158.374498][T18160] ? __pfx___sys_sendmsg+0x10/0x10 [ 1158.374523][T18160] ? rcu_is_watching+0x12/0xc0 [ 1158.374543][T18160] do_syscall_64+0x115/0x870 [ 1158.374559][T18160] ? clear_bhb_loop+0x40/0x90 [ 1158.374574][T18160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.374587][T18160] RIP: 0033:0x7fcb8599ce59 [ 1158.374597][T18160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1158.374609][T18160] RSP: 002b:00007fcb868af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1158.374621][T18160] RAX: ffffffffffffffda RBX: 00007fcb85c15fa0 RCX: 00007fcb8599ce59 [ 1158.374629][T18160] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1158.374636][T18160] RBP: 00007fcb868af090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.374644][T18160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.374651][T18160] R13: 00007fcb85c16038 R14: 00007fcb85c15fa0 R15: 00007ffd3e4b6338 [ 1158.374667][T18160] [ 1158.646786][T18162] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 18162 comm: syz.2.3293) [ 1158.665714][ T29] audit: type=1800 audit(2000000281.412:1894): pid=18162 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3293" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=72151 res=0 errno=0 [ 1160.205507][T18171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3295'. [ 1162.129792][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 1162.185798][T14135] block nbd6: Possible stuck request ffff888028975080: control (read@0,1024B). Runtime 360 seconds [ 1162.185883][T18189] fuse: Bad value for 'fd' [ 1162.197489][T14135] block nbd6: Possible stuck request ffff888028975240: control (read@1024,1024B). Runtime 360 seconds [ 1162.405214][T14135] block nbd6: Possible stuck request ffff888028975400: control (read@2048,1024B). Runtime 360 seconds [ 1162.416775][T14135] block nbd6: Possible stuck request ffff8880289755c0: control (read@3072,1024B). Runtime 360 seconds [ 1162.461296][T18192] xt_connbytes: Forcing CT accounting to be enabled [ 1162.483935][T18192] Cannot find set identified by id 0 to match [ 1163.029283][T18210] netlink: 'syz.7.3305': attribute type 11 has an invalid length. [ 1163.489253][T18216] syz_tun: entered allmulticast mode [ 1163.496024][T18216] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1163.506927][T18216] mroute: pending queue full, dropping entries [ 1163.627906][T18215] syz_tun: left allmulticast mode [ 1164.052435][ T10] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1164.250000][ T29] audit: type=1400 audit(2000000286.617:1895): avc: denied { watch_mount } for pid=18228 comm="syz.1.3313" path="/120/file0" dev="tmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1164.302035][ T5715] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1164.314788][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1164.328032][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1164.341386][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1164.354945][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1164.355808][ T5632] Bluetooth: hci4: command 0xfc11 tx timeout [ 1164.367988][ T50] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1164.388650][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1164.558239][T18239] FAULT_INJECTION: forcing a failure. [ 1164.558239][T18239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1164.572632][T18239] CPU: 0 UID: 0 PID: 18239 Comm: syz.5.3317 Tainted: G L syzkaller #0 PREEMPT(full) [ 1164.572668][T18239] Tainted: [L]=SOFTLOCKUP [ 1164.572676][T18239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1164.572689][T18239] Call Trace: [ 1164.572697][T18239] [ 1164.572705][T18239] dump_stack_lvl+0x100/0x190 [ 1164.572735][T18239] should_fail_ex.cold+0x5/0xa [ 1164.572766][T18239] _copy_from_user+0x2e/0xd0 [ 1164.572793][T18239] move_addr_to_kernel+0x65/0x170 [ 1164.572822][T18239] copy_msghdr_from_user+0x417/0x4f0 [ 1164.572850][T18239] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1164.572892][T18239] ___sys_sendmsg+0x106/0x1e0 [ 1164.572921][T18239] ? __pfx____sys_sendmsg+0x10/0x10 [ 1164.572992][T18239] __sys_sendmsg+0x170/0x220 [ 1164.573024][T18239] ? __pfx___sys_sendmsg+0x10/0x10 [ 1164.573065][T18239] ? rcu_is_watching+0x12/0xc0 [ 1164.573100][T18239] do_syscall_64+0x115/0x870 [ 1164.573124][T18239] ? clear_bhb_loop+0x40/0x90 [ 1164.573151][T18239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.573174][T18239] RIP: 0033:0x7ff34819ce59 [ 1164.573204][T18239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1164.573224][T18239] RSP: 002b:00007ff349118028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1164.573246][T18239] RAX: ffffffffffffffda RBX: 00007ff348415fa0 RCX: 00007ff34819ce59 [ 1164.573260][T18239] RDX: 0000000000044000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1164.573274][T18239] RBP: 00007ff349118090 R08: 0000000000000000 R09: 0000000000000000 [ 1164.573287][T18239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1164.573301][T18239] R13: 00007ff348416038 R14: 00007ff348415fa0 R15: 00007ffd6a7df8e8 [ 1164.573331][T18239] [ 1164.914148][ T5715] usb 1-1: Using ep0 maxpacket: 32 [ 1165.129648][ T10] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1165.143076][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.152577][ T10] usb 3-1: Product: syz [ 1165.157065][ T10] usb 3-1: Manufacturer: syz [ 1165.162265][ T10] usb 3-1: SerialNumber: syz [ 1165.167355][ T5715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.178120][ T5715] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1165.192116][ T10] usb 3-1: config 0 descriptor?? [ 1165.198527][ T5715] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1165.208306][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.219380][ T10] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 1165.227962][ T5715] usb 1-1: Product: syz [ 1165.235755][ T5715] usb 1-1: Manufacturer: syz [ 1165.241194][ T5715] usb 1-1: SerialNumber: syz [ 1165.253165][ T5715] usb 1-1: config 0 descriptor?? [ 1165.451495][T18249] syz_tun: entered allmulticast mode [ 1165.457810][T18249] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1165.466377][T18249] mroute: pending queue full, dropping entries [ 1165.489045][ T29] audit: type=1400 audit(2000000287.761:1896): avc: denied { accept } for pid=18230 comm="syz.0.3314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1165.526311][ T5010] usb 1-1: USB disconnect, device number 107 [ 1165.567792][ T5722] usb 3-1: USB disconnect, device number 106 [ 1165.604121][T18248] syz_tun: left allmulticast mode [ 1166.265085][ T29] audit: type=1400 audit(2000000288.481:1897): avc: denied { getopt } for pid=18271 comm="syz.2.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1167.938876][ T29] audit: type=1400 audit(2000000290.012:1898): avc: denied { ioctl } for pid=18291 comm="syz.5.3333" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1170.560237][T18325] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 1170.576176][ T5010] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1170.743065][ T5010] usb 6-1: config 11 has an invalid interface number: 207 but max is 0 [ 1170.751386][ T5010] usb 6-1: config 11 descriptor has 1 excess byte, ignoring [ 1170.763424][ T5010] usb 6-1: config 11 has no interface number 0 [ 1170.771858][ T5010] usb 6-1: too many endpoints for config 11 interface 207 altsetting 61: 168, using maximum allowed: 30 [ 1170.784200][ T5010] usb 6-1: config 11 interface 207 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 168 [ 1170.799881][ T5010] usb 6-1: config 11 interface 207 has no altsetting 0 [ 1170.811478][ T5010] usb 6-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e [ 1170.836241][ T5010] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.845856][ T5010] usb 6-1: Product: syz [ 1170.850217][ T5010] usb 6-1: Manufacturer: syz [ 1170.854815][ T5010] usb 6-1: SerialNumber: syz [ 1171.026928][T18331] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1171.033477][T18331] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1171.042995][T18331] vhci_hcd vhci_hcd.0: Device attached [ 1171.059935][T18334] vhci_hcd: connection closed [ 1171.062050][ T6873] vhci_hcd vhci_hcd.0: stop threads [ 1171.072879][ T6873] vhci_hcd vhci_hcd.0: release socket [ 1171.078688][ T6873] vhci_hcd vhci_hcd.0: disconnect device [ 1171.083387][ T1217] usb 6-1: USB disconnect, device number 73 [ 1171.766133][T18337] lo speed is unknown, defaulting to 1000 [ 1172.607665][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1175.547296][ T29] audit: type=1400 audit(2000000297.035:1899): avc: denied { read } for pid=18367 comm="syz.7.3357" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1175.601971][T18370] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3357'. [ 1175.611954][ T29] audit: type=1400 audit(2000000297.035:1900): avc: denied { open } for pid=18367 comm="syz.7.3357" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1175.686861][ T1217] IPVS: starting estimator thread 0... [ 1175.692654][T18373] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1175.789917][T18374] IPVS: using max 70 ests per chain, 168000 per kthread [ 1175.801273][T18378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3361'. [ 1175.811715][T18378] hsr_slave_0: left promiscuous mode [ 1175.818106][T18378] hsr_slave_1: left promiscuous mode [ 1175.931857][T18368] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1175.940124][T18368] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1175.947450][T18368] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1175.953683][T18368] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1175.962920][T18368] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1175.969142][T18368] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1175.985606][T18368] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1175.991795][T18368] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1176.002195][T18368] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1176.026802][T18368] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1176.033091][T18368] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1176.042386][T18368] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1176.241082][T18386] syz_tun: entered allmulticast mode [ 1176.259314][T18386] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1176.268221][T18386] mroute: pending queue full, dropping entries [ 1176.287718][T18385] syz_tun: left allmulticast mode [ 1176.321044][ T5722] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1176.354238][T18388] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.3365'. [ 1176.482725][ T1217] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1176.635127][ T5722] usb 1-1: Using ep0 maxpacket: 8 [ 1176.649895][ T5722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1176.662102][ T5722] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1176.680375][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.689659][ T1217] usb 6-1: device descriptor read/64, error -71 [ 1176.752409][ T5722] usb 1-1: config 0 descriptor?? [ 1176.940926][ T29] audit: type=1400 audit(2000000298.327:1901): avc: denied { override_creds } for pid=18390 comm="syz.7.3366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1176.977292][ T1217] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1177.297051][ T1217] usb 6-1: device descriptor read/64, error -71 [ 1177.425025][T18395] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_virt_wifi, syncid = 3, id = 0 [ 1177.501455][ T5722] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1177.754530][T18396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3360'. [ 1177.912933][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 1178.019957][T17090] block nbd2: Possible stuck request ffff888028830000: control (read@0,1024B). Runtime 270 seconds [ 1178.031413][T17090] block nbd2: Possible stuck request ffff8880288301c0: control (read@1024,1024B). Runtime 270 seconds [ 1178.042388][T17090] block nbd2: Possible stuck request ffff888028830380: control (read@2048,1024B). Runtime 270 seconds [ 1178.075793][ T1217] usb usb6-port1: attempt power cycle [ 1178.132845][ T5632] Bluetooth: hci6: command 0x0406 tx timeout [ 1178.139262][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 1178.216425][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 1178.223790][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 1178.394184][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 1178.465652][ T1217] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1178.526306][ T1217] usb 6-1: device descriptor read/8, error -71 [ 1178.769293][ T1217] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1178.792511][ T1217] usb 6-1: device descriptor read/8, error -71 [ 1178.917016][ T1217] usb usb6-port1: unable to enumerate USB device [ 1179.220245][ T1217] usb 1-1: USB disconnect, device number 108 [ 1179.405269][T18408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3370'. [ 1180.143354][T18411] bond0: option ad_select: unable to set because the bond device is up [ 1180.422317][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 1180.470613][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 1180.477291][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 1180.646756][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 1182.032330][T14405] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1182.670648][T14405] usb 6-1: Using ep0 maxpacket: 16 [ 1182.736537][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 1182.900254][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 1183.005848][T14405] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1183.020983][T14405] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 1183.029702][T14405] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1183.071213][T14405] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1183.091233][T14405] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.109507][T14405] usb 6-1: Product: syz [ 1183.116130][T14405] usb 6-1: Manufacturer: syz [ 1183.126745][T14405] usb 6-1: SerialNumber: syz [ 1183.150956][T14405] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 1183.175173][T14405] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 1183.193552][T14405] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1183.202400][T18434] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1183.255473][T18431] syz_tun: entered allmulticast mode [ 1183.263106][T18431] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1183.272400][T18431] mroute: pending queue full, dropping entries [ 1183.308787][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1183.337713][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1183.347479][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1183.359736][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1183.374637][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1183.396274][T18415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.408851][T18415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.435917][T18415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.448946][T18415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.510558][T14405] usb 6-1: USB disconnect, device number 78 [ 1183.745528][T18430] syz_tun: left allmulticast mode [ 1184.095832][T18439] lo speed is unknown, defaulting to 1000 [ 1185.332068][ T29] audit: type=1800 audit(2000000306.068:1902): pid=18478 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.3387" name="file1" dev="tmpfs" ino=172 res=0 errno=0 [ 1185.726542][ T5010] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 1186.327093][ T5632] Bluetooth: hci4: command tx timeout [ 1186.545083][T18439] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.563121][T18439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.606176][T18439] bridge_slave_0: entered allmulticast mode [ 1186.632044][T18439] bridge_slave_0: entered promiscuous mode [ 1186.644903][T18499] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3391'. [ 1186.666537][T18497] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1186.679994][T18439] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.690649][T18439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.701480][T18497] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1186.713770][T18439] bridge_slave_1: entered allmulticast mode [ 1186.720008][T18497] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1186.733037][T18439] bridge_slave_1: entered promiscuous mode [ 1186.739997][T18497] UDF-fs: Scanning with blocksize 512 failed [ 1186.768892][T18500] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1186.799725][T18497] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1186.827798][T18502] syz_tun: entered allmulticast mode [ 1186.860772][T18497] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1186.872560][T18502] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1186.881102][T18502] mroute: pending queue full, dropping entries [ 1186.896515][T18439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1186.914864][T18497] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1186.937639][T18497] UDF-fs: Scanning with blocksize 1024 failed [ 1186.946167][T18439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1186.957787][T18497] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1186.974655][T18497] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1186.984847][T18497] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1187.009652][T18497] UDF-fs: Scanning with blocksize 2048 failed [ 1187.025048][T18497] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1187.057037][T18497] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1187.067378][T18497] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1187.084778][T18497] UDF-fs: Scanning with blocksize 4096 failed [ 1187.105545][T18497] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 1187.166314][T18439] team0: Port device team_slave_0 added [ 1187.183753][T18501] syz_tun: left allmulticast mode [ 1187.228558][T18439] team0: Port device team_slave_1 added [ 1187.330916][T18439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1187.338039][T18439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1187.441813][T18439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1187.538840][T18439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1187.565202][T18439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1187.609460][ T5010] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1187.621870][ T5010] usb 1-1: can't read configurations, error -71 [ 1187.637603][T18439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1187.808114][T18439] hsr_slave_0: entered promiscuous mode [ 1187.817782][T18439] hsr_slave_1: entered promiscuous mode [ 1187.831548][T18439] debugfs: 'hsr0' already exists in 'hsr' [ 1187.840008][T14135] block nbd0: Possible stuck request ffff88802872e000: control (read@0,1024B). Runtime 390 seconds [ 1187.852882][T18439] Cannot create hsr debugfs directory [ 1188.130445][T18512] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3395'. [ 1188.281784][T18439] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1188.318230][T18439] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1188.334119][T18439] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1188.347442][T18517] FAULT_INJECTION: forcing a failure. [ 1188.347442][T18517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1188.361276][T18439] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1188.369131][T18439] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1188.379999][T18517] CPU: 1 UID: 0 PID: 18517 Comm: syz.7.3397 Tainted: G L syzkaller #0 PREEMPT(full) [ 1188.380033][T18517] Tainted: [L]=SOFTLOCKUP [ 1188.380041][T18517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1188.380055][T18517] Call Trace: [ 1188.380063][T18517] [ 1188.380071][T18517] dump_stack_lvl+0x100/0x190 [ 1188.380103][T18517] should_fail_ex.cold+0x5/0xa [ 1188.380138][T18517] _copy_to_user+0x32/0xd0 [ 1188.380167][T18517] bpf_prog_test_run_raw_tp+0x53d/0x700 [ 1188.380201][T18517] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 1188.380231][T18517] ? fput+0x79/0x100 [ 1188.380260][T18517] ? __bpf_prog_get+0x97/0x2a0 [ 1188.380287][T18517] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 1188.380314][T18517] __sys_bpf+0x1725/0x4b90 [ 1188.380355][T18517] ? __pfx___sys_bpf+0x10/0x10 [ 1188.380385][T18517] ? proc_fail_nth_write+0x9f/0x220 [ 1188.380408][T18517] ? find_held_lock+0x2b/0x80 [ 1188.380434][T18517] ? find_held_lock+0x2b/0x80 [ 1188.380451][T18517] ? ksys_write+0x190/0x250 [ 1188.380472][T18517] ? ksys_write+0x190/0x250 [ 1188.380501][T18517] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1188.380528][T18517] ? kernel_write+0x6b3/0x6c0 [ 1188.380552][T18517] ? __fget_files+0x215/0x3d0 [ 1188.380593][T18517] ? fput+0x79/0x100 [ 1188.380621][T18517] ? ksys_write+0x1ac/0x250 [ 1188.380644][T18517] ? __pfx_ksys_write+0x10/0x10 [ 1188.380673][T18517] __x64_sys_bpf+0x7b/0xc0 [ 1188.380693][T18517] ? lockdep_hardirqs_on+0x78/0x100 [ 1188.380722][T18517] do_syscall_64+0x115/0x870 [ 1188.380749][T18517] ? clear_bhb_loop+0x40/0x90 [ 1188.380777][T18517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.380800][T18517] RIP: 0033:0x7f417c79ce59 [ 1188.380820][T18517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1188.380841][T18517] RSP: 002b:00007f417d576028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1188.380861][T18517] RAX: ffffffffffffffda RBX: 00007f417ca15fa0 RCX: 00007f417c79ce59 [ 1188.380877][T18517] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 000000000000000a [ 1188.380890][T18517] RBP: 00007f417d576090 R08: 0000000000000000 R09: 0000000000000000 [ 1188.380904][T18517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1188.380918][T18517] R13: 00007f417ca16038 R14: 00007f417ca15fa0 R15: 00007fff5d3415f8 [ 1188.380949][T18517] [ 1188.667854][T18439] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1188.679347][T18439] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1188.689341][T18439] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1188.704695][ T5632] Bluetooth: hci4: command tx timeout [ 1188.801611][T18439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1188.823340][T18439] 8021q: adding VLAN 0 to HW filter on device team0 [ 1188.848740][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.855858][ T6883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1188.872667][ T6883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.879780][ T6883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1189.392981][T18540] syz_tun: entered allmulticast mode [ 1189.643267][T18538] syz_tun: left allmulticast mode [ 1190.915016][T18571] team0: Port device wg0 added [ 1190.921210][T14135] block nbd0: Possible stuck request ffff88802872e1c0: control (read@1024,1024B). Runtime 390 seconds [ 1190.933286][T14135] block nbd0: Possible stuck request ffff88802872e380: control (read@2048,1024B). Runtime 390 seconds [ 1190.946361][T14135] block nbd0: Possible stuck request ffff88802872e540: control (read@3072,1024B). Runtime 390 seconds [ 1190.960982][ T5632] Bluetooth: hci4: command tx timeout [ 1191.151754][T18439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1191.776281][T18604] lo speed is unknown, defaulting to 1000 [ 1191.810288][T18608] IPv6: NLM_F_CREATE should be specified when creating new route [ 1191.829541][ T5632] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 1191.849352][T18439] veth0_vlan: entered promiscuous mode [ 1191.858934][T18439] veth1_vlan: entered promiscuous mode [ 1191.882270][T18439] veth0_macvtap: entered promiscuous mode [ 1191.890646][T18439] veth1_macvtap: entered promiscuous mode [ 1191.892789][ T1217] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1191.907645][T18439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1191.937969][T18439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1191.954032][ T9586] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.964047][ T9586] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.974177][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.989701][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.099860][T17999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.117385][ T1217] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1192.137426][T17999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.146034][ T1217] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1192.160670][ T1217] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1192.183591][ T1217] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1192.199975][ T1217] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1192.211404][T17999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.220132][T17999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.227451][ T1217] usb 6-1: Product: syz [ 1192.232350][ T1217] usb 6-1: Manufacturer: syz [ 1192.236966][ T1217] usb 6-1: SerialNumber: syz [ 1192.682035][ T1217] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 79 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1193.064114][T18600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3408'. [ 1193.123836][ T5739] usb 6-1: USB disconnect, device number 79 [ 1193.133909][ T5739] usblp0: removed [ 1193.285666][ T5632] Bluetooth: hci4: command tx timeout [ 1193.366705][ T1217] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1193.531924][ T1217] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.547663][ T1217] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1193.556639][ T1217] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1193.566644][ T1217] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.580720][ T1217] usb 9-1: config 0 descriptor?? [ 1193.599321][ T1217] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1193.609596][ T1217] dvb-usb: bulk message failed: -22 (3/0) [ 1193.619759][ T1217] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1193.639179][ T1217] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1193.646278][ T1217] usb 9-1: media controller created [ 1193.657197][ T1217] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1193.670149][ T1217] dvb-usb: bulk message failed: -22 (6/0) [ 1193.675958][ T1217] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1193.687655][ T1217] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input72 [ 1193.714622][ T1217] dvb-usb: schedule remote query interval to 150 msecs. [ 1193.721599][ T1217] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1193.889519][ T5722] dvb-usb: bulk message failed: -22 (1/0) [ 1193.901138][ T5722] dvb-usb: error while querying for an remote control event. [ 1194.082209][ T5010] dvb-usb: bulk message failed: -22 (1/0) [ 1194.089438][ T5010] dvb-usb: error while querying for an remote control event. [ 1194.242890][ T5722] usb 9-1: USB disconnect, device number 2 [ 1194.338025][ T5722] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1194.776451][T14135] block nbd6: Possible stuck request ffff888028975080: control (read@0,1024B). Runtime 390 seconds [ 1194.786250][ T1217] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1194.788166][T14135] block nbd6: Possible stuck request ffff888028975240: control (read@1024,1024B). Runtime 390 seconds [ 1194.959753][ T1217] usb 1-1: Using ep0 maxpacket: 16 [ 1194.959981][T14135] block nbd6: Possible stuck request ffff888028975400: control (read@2048,1024B). Runtime 390 seconds [ 1194.977611][T14135] block nbd6: Possible stuck request ffff8880289755c0: control (read@3072,1024B). Runtime 390 seconds [ 1194.989402][ T1217] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.989445][ T1217] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1194.989592][ T1217] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1194.989708][ T1217] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.334470][ T1217] usb 1-1: config 0 descriptor?? [ 1195.408874][ T29] audit: type=1400 audit(2000000315.370:1903): avc: denied { bind } for pid=18659 comm="syz.8.3420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1195.453474][ T29] audit: type=1400 audit(2000000315.398:1904): avc: denied { listen } for pid=18659 comm="syz.8.3420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1195.685211][ T1217] usbhid 1-1:0.0: can't add hid device: -71 [ 1195.713021][ T1217] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1195.790034][ T1217] usb 1-1: USB disconnect, device number 111 [ 1195.922268][T18665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3421'. [ 1196.082366][T18665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3421'. [ 1196.249407][ T5632] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1196.264642][ T5632] Bluetooth: hci1: Injecting HCI hardware error event [ 1196.277502][ T5632] Bluetooth: hci1: hardware error 0x00 [ 1197.690704][T18689] binder: 18688:18689 unknown command 0 [ 1197.704143][T18689] binder: 18688:18689 ioctl c0306201 200000000080 returned -22 [ 1198.303693][T18691] SET target dimension over the limit! [ 1198.410946][T18699] FAULT_INJECTION: forcing a failure. [ 1198.410946][T18699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1198.446983][T18699] CPU: 1 UID: 0 PID: 18699 Comm: syz.7.3433 Tainted: G L syzkaller #0 PREEMPT(full) [ 1198.447018][T18699] Tainted: [L]=SOFTLOCKUP [ 1198.447027][T18699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1198.447040][T18699] Call Trace: [ 1198.447047][T18699] [ 1198.447055][T18699] dump_stack_lvl+0x100/0x190 [ 1198.447083][T18699] should_fail_ex.cold+0x5/0xa [ 1198.447112][T18699] _copy_from_user+0x2e/0xd0 [ 1198.447139][T18699] move_addr_to_kernel+0x65/0x170 [ 1198.447161][T18699] copy_msghdr_from_user+0x417/0x4f0 [ 1198.447182][T18699] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1198.447214][T18699] ___sys_sendmsg+0x106/0x1e0 [ 1198.447237][T18699] ? __pfx____sys_sendmsg+0x10/0x10 [ 1198.447283][T18699] __sys_sendmsg+0x170/0x220 [ 1198.447307][T18699] ? __pfx___sys_sendmsg+0x10/0x10 [ 1198.447340][T18699] ? rcu_is_watching+0x12/0xc0 [ 1198.447368][T18699] do_syscall_64+0x115/0x870 [ 1198.447388][T18699] ? clear_bhb_loop+0x40/0x90 [ 1198.447409][T18699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.447425][T18699] RIP: 0033:0x7f417c79ce59 [ 1198.447439][T18699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1198.447455][T18699] RSP: 002b:00007f417d576028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1198.447474][T18699] RAX: ffffffffffffffda RBX: 00007f417ca15fa0 RCX: 00007f417c79ce59 [ 1198.447485][T18699] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003 [ 1198.447495][T18699] RBP: 00007f417d576090 R08: 0000000000000000 R09: 0000000000000000 [ 1198.447505][T18699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1198.447515][T18699] R13: 00007f417ca16038 R14: 00007f417ca15fa0 R15: 00007fff5d3415f8 [ 1198.447537][T18699] [ 1198.612251][ T5632] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1198.699384][ T5739] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1198.823176][T18704] lo speed is unknown, defaulting to 1000 [ 1198.829066][T18704] lo speed is unknown, defaulting to 1000 [ 1198.837812][T18704] lo speed is unknown, defaulting to 1000 [ 1198.847066][T18704] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1198.861897][T18704] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1198.880567][T18704] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1198.937984][T18706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3436'. [ 1199.023889][T18704] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1199.232598][T18704] lo speed is unknown, defaulting to 1000 [ 1199.252914][T18704] lo speed is unknown, defaulting to 1000 [ 1199.267734][T18704] lo speed is unknown, defaulting to 1000 [ 1199.330265][T18704] lo speed is unknown, defaulting to 1000 [ 1199.346234][T18704] lo speed is unknown, defaulting to 1000 [ 1199.361152][T18704] lo speed is unknown, defaulting to 1000 [ 1199.378163][T18704] lo speed is unknown, defaulting to 1000 [ 1199.391281][ T5739] usb 9-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 1199.408407][T18704] lo speed is unknown, defaulting to 1000 [ 1201.505279][ T29] audit: type=1400 audit(2000000320.897:1905): avc: denied { execute } for pid=18714 comm="syz.5.3439" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=74773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1201.973576][ T5739] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1201.990019][ T5739] usb 9-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 1202.003574][ T5739] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.021044][ T5739] usb 9-1: config 0 descriptor?? [ 1202.027163][ T5739] usb 9-1: can't set config #0, error -71 [ 1202.035750][ T5739] usb 9-1: USB disconnect, device number 3 [ 1203.110569][T18733] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1316.515484][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1316.522466][ C1] rcu: 0-...!: (1 GPs behind) idle=447c/1/0x4000000000000000 softirq=112332/112333 fqs=0 [ 1316.533768][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18725/1:b..l P18716/1:b..l [ 1316.542998][ C1] rcu: (detected by 1, t=10502 jiffies, g=122341, q=5136 ncpus=2) [ 1316.550887][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1316.550927][ C0] NMI backtrace for cpu 0 [ 1316.550946][ C0] CPU: 0 UID: 0 PID: 18731 Comm: syz.7.3445 Tainted: G L syzkaller #0 PREEMPT(full) [ 1316.550974][ C0] Tainted: [L]=SOFTLOCKUP [ 1316.550981][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1316.550995][ C0] RIP: 0010:do_raw_spin_lock+0x139/0x260 [ 1316.551028][ C0] Code: 28 00 00 00 00 e8 17 bc 91 00 be 04 00 00 00 48 8d 7c 24 28 e8 08 bc 91 00 8b 44 24 28 ba 01 00 00 00 89 44 24 04 f0 0f b1 13 <0f> 85 93 00 00 00 48 89 ea 65 44 8b 35 9a b1 24 12 48 b8 00 00 00 [ 1316.551047][ C0] RSP: 0018:ffffc90000007df0 EFLAGS: 00000046 [ 1316.551062][ C0] RAX: 0000000000000000 RBX: ffff8880b84284c0 RCX: ffffffff81e4de78 [ 1316.551076][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000007e18 [ 1316.551088][ C0] RBP: ffff8880b84284c8 R08: 0000000000000001 R09: fffff52000000fc3 [ 1316.551101][ C0] R10: 0000000000000003 R11: 0000000000000001 R12: 1ffff92000000fbf [ 1316.551113][ C0] R13: ffff8880b84284d0 R14: dffffc0000000000 R15: ffff8880b8428750 [ 1316.551126][ C0] FS: 00007f417d5766c0(0000) GS:ffff888124387000(0000) knlGS:0000000000000000 [ 1316.551145][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1316.551158][ C0] CR2: 0000001b34602ff8 CR3: 000000005ded9000 CR4: 00000000003526f0 [ 1316.551171][ C0] Call Trace: [ 1316.551178][ C0] [ 1316.551188][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1316.551221][ C0] __hrtimer_run_queues+0x1bd/0xa00 [ 1316.551253][ C0] ? rcu_is_watching+0x12/0xc0 [ 1316.551283][ C0] hrtimer_interrupt+0x3e5/0x940 [ 1316.551320][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 1316.551347][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1316.551373][ C0] [ 1316.551380][ C0] [ 1316.551386][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1316.551409][ C0] RIP: 0010:finish_task_switch.isra.0+0x2d3/0x1010 [ 1316.551441][ C0] Code: 2f 0a 00 00 41 c7 87 e0 0d 00 00 00 00 00 00 e9 0f 04 00 00 49 8d 7f 48 e8 ea 2a b7 09 e8 c5 9e 3b 00 fb 48 8d bb c8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 1316.551459][ C0] RSP: 0018:ffffc90002fff4c8 EFLAGS: 00000206 [ 1316.551473][ C0] RAX: 000000000000d0e1 RBX: ffff888059a40000 RCX: 0000000000000000 [ 1316.551486][ C0] RDX: 0000000000000000 RSI: ffffffff8df0fdfe RDI: ffff888059a416c8 [ 1316.551499][ C0] RBP: ffffc90002fff520 R08: 0000000000000001 R09: 0000000000000000 [ 1316.551511][ C0] R10: 0000000000000001 R11: ffffffff81d55522 R12: ffff888032c9ca80 [ 1316.551524][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880b843b480 [ 1316.551539][ C0] ? finish_task_switch.isra.0+0x152/0x1010 [ 1316.551575][ C0] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1316.551614][ C0] __schedule+0x129d/0x67a0 [ 1316.551646][ C0] ? __pfx___schedule+0x10/0x10 [ 1316.551668][ C0] ? find_held_lock+0x2b/0x80 [ 1316.551685][ C0] ? schedule+0x2bf/0x390 [ 1316.551709][ C0] schedule+0xdd/0x390 [ 1316.551730][ C0] schedule_timeout+0x1b2/0x280 [ 1316.551750][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1316.551773][ C0] ? unix_wait_for_peer+0x260/0x2a0 [ 1316.551798][ C0] ? unix_wait_for_peer+0x260/0x2a0 [ 1316.551822][ C0] ? prepare_to_wait_exclusive+0xdc/0x2c0 [ 1316.551847][ C0] unix_wait_for_peer+0x268/0x2a0 [ 1316.551872][ C0] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 1316.551897][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1316.551919][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1316.551950][ C0] unix_dgram_sendmsg+0x1696/0x1810 [ 1316.551983][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1316.552011][ C0] ? __might_fault+0xa0/0x140 [ 1316.552044][ C0] ____sys_sendmsg+0x9e1/0xb70 [ 1316.552066][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1316.552095][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1316.552119][ C0] ? rcu_is_watching+0x12/0xc0 [ 1316.552147][ C0] ? ___sys_sendmsg+0x19d/0x1e0 [ 1316.552168][ C0] ? kfree+0x1dd/0x6c0 [ 1316.552195][ C0] ___sys_sendmsg+0x190/0x1e0 [ 1316.552220][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1316.552257][ C0] ? __pfx___might_resched+0x10/0x10 [ 1316.552286][ C0] __sys_sendmmsg+0x205/0x430 [ 1316.552318][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1316.552352][ C0] ? __pfx_do_futex+0x10/0x10 [ 1316.552386][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 1316.552417][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 1316.552446][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1316.552471][ C0] do_syscall_64+0x115/0x870 [ 1316.552496][ C0] ? clear_bhb_loop+0x40/0x90 [ 1316.552519][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.552538][ C0] RIP: 0033:0x7f417c79ce59 [ 1316.552555][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1316.552574][ C0] RSP: 002b:00007f417d576028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1316.552591][ C0] RAX: ffffffffffffffda RBX: 00007f417ca15fa0 RCX: 00007f417c79ce59 [ 1316.552609][ C0] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000004 [ 1316.552621][ C0] RBP: 00007f417c832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1316.552633][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1316.552646][ C0] R13: 00007f417ca16038 R14: 00007f417ca15fa0 R15: 00007fff5d3415f8 [ 1316.552667][ C0] [ 1316.552912][ C1] task:syz.5.3439 state:R running task stack:23816 pid:18716 tgid:18714 ppid:7838 task_flags:0x400640 flags:0x00080000 [ 1317.078296][ C1] Call Trace: [ 1317.081566][ C1] [ 1317.084492][ C1] __schedule+0x1295/0x67a0 [ 1317.089001][ C1] ? find_held_lock+0x2b/0x80 [ 1317.093673][ C1] ? find_held_lock+0x2b/0x80 [ 1317.098351][ C1] ? follow_page_pte+0x4d0/0x13f0 [ 1317.103380][ C1] ? __pfx___schedule+0x10/0x10 [ 1317.108233][ C1] ? mark_held_locks+0x40/0x70 [ 1317.113001][ C1] preempt_schedule_irq+0x50/0x90 [ 1317.118025][ C1] irqentry_exit+0x205/0x970 [ 1317.122621][ C1] ? trace_reschedule_exit.constprop.0+0x6b/0x220 [ 1317.129036][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1317.134493][ C1] RIP: 0010:lock_is_held_type+0xf5/0x140 [ 1317.140128][ C1] Code: ff ff ff ff 65 0f c1 15 f1 45 80 08 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e9 d7 3a 03 00 31 c0 [ 1317.159728][ C1] RSP: 0018:ffffc900031defe8 EFLAGS: 00000286 [ 1317.165790][ C1] RAX: 0000000000000000 RBX: ffffffff8e849b20 RCX: 0000000000000001 [ 1317.173754][ C1] RDX: 0000000000000046 RSI: ffffffff8deea8b5 RDI: ffffffff8c1c4780 [ 1317.181714][ C1] RBP: ffff888032c9ca80 R08: 0000000000000005 R09: 0000000000000000 [ 1317.189675][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff [ 1317.197634][ C1] R13: 0000000000000246 R14: ffff888032c9d660 R15: 0000000000000002 [ 1317.205618][ C1] cgroup1_freezing+0x174/0x3b0 [ 1317.210470][ C1] freezing_slow_path+0xfc/0x1a0 [ 1317.215415][ C1] dump_interrupted+0x76/0xe0 [ 1317.220100][ C1] dump_user_range+0x352/0xad0 [ 1317.224866][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 1317.230156][ C1] ? __pfx_writenote+0x10/0x10 [ 1317.234925][ C1] elf_core_dump+0x2d5f/0x3d10 [ 1317.239703][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 1317.244810][ C1] ? kasan_save_stack+0x3f/0x50 [ 1317.249652][ C1] ? kasan_save_stack+0x30/0x50 [ 1317.254494][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 1317.259251][ C1] ? __kvmalloc_node_noprof+0x360/0xa00 [ 1317.264804][ C1] ? vfs_coredump+0x22db/0x5770 [ 1317.269646][ C1] ? do_syscall_64+0x666/0x870 [ 1317.274410][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.280476][ C1] ? 0xffffffffff600000 [ 1317.284673][ C1] ? vfs_coredump+0x2980/0x5770 [ 1317.289515][ C1] vfs_coredump+0x2980/0x5770 [ 1317.294205][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 1317.299222][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1317.304168][ C1] ? lock_acquire+0x1b1/0x370 [ 1317.308857][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 1317.314055][ C1] ? bpf_ksym_find+0x128/0x1c0 [ 1317.318827][ C1] ? __kernel_text_address+0xd/0x30 [ 1317.324024][ C1] ? unwind_get_return_address+0x59/0xa0 [ 1317.329661][ C1] ? arch_stack_walk+0xa6/0xf0 [ 1317.334437][ C1] ? __sigqueue_free+0xbe/0x2a0 [ 1317.339284][ C1] ? stack_trace_save+0x8e/0xc0 [ 1317.344127][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1317.349494][ C1] ? stack_depot_save_flags+0x27/0x9d0 [ 1317.354960][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1317.359906][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.366007][ C1] ? proc_coredump_connector+0x2d3/0x4f0 [ 1317.371638][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1317.377622][ C1] ? rcu_is_watching+0x12/0xc0 [ 1317.382393][ C1] get_signal+0x2162/0x2210 [ 1317.386913][ C1] ? __pfx_get_signal+0x10/0x10 [ 1317.391768][ C1] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 1317.397575][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1317.403385][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 1317.408940][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1317.415110][ C1] ? rcu_is_watching+0x12/0xc0 [ 1317.419882][ C1] exit_to_user_mode_loop+0x98/0x670 [ 1317.425165][ C1] ? rcu_is_watching+0x12/0xc0 [ 1317.429940][ C1] do_syscall_64+0x666/0x870 [ 1317.434532][ C1] ? clear_bhb_loop+0x40/0x90 [ 1317.439211][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.445097][ C1] RIP: 0033:0x7ff34819ce59 [ 1317.449503][ C1] RSP: 002b:00007ff3490f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1317.457923][ C1] RAX: ffffffffffffffda RBX: 00007ff348416098 RCX: 00007ff34819ce59 [ 1317.465898][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff34841609c [ 1317.473865][ C1] RBP: 00007ff348416090 R08: 0000000000000001 R09: 0000000000000000 [ 1317.481832][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1317.489794][ C1] R13: 00007ff348416128 R14: 00007ffd6a7df800 R15: 00007ffd6a7df8e8 [ 1317.497784][ C1] [ 1317.500802][ C1] task:syz.0.3442 state:R running task stack:23640 pid:18725 tgid:18724 ppid:16654 task_flags:0x400140 flags:0x00080004 [ 1317.514296][ C1] Call Trace: [ 1317.517566][ C1] [ 1317.520490][ C1] __schedule+0x1295/0x67a0 [ 1317.525003][ C1] ? clockevents_program_event+0x23e/0x820 [ 1317.530820][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1317.536198][ C1] ? lapic_next_event+0x10/0x20 [ 1317.541048][ C1] ? clockevents_program_event+0x1ef/0x820 [ 1317.546875][ C1] ? __pfx___schedule+0x10/0x10 [ 1317.551744][ C1] ? mark_held_locks+0x40/0x70 [ 1317.556523][ C1] preempt_schedule_irq+0x50/0x90 [ 1317.561551][ C1] irqentry_exit+0x205/0x970 [ 1317.566149][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1317.572130][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 1317.577336][ C1] Code: 05 fb 03 25 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 06 8d f2 0e 0f 82 a4 02 00 00 8b 35 8e c0 f2 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 03 25 12 0f 85 ed 02 00 00 48 83 c4 [ 1317.596942][ C1] RSP: 0018:ffffc90005ed76f0 EFLAGS: 00000206 [ 1317.603011][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 1317.610978][ C1] RDX: 0000000000000000 RSI: ffffffff8deea8b5 RDI: ffffffff8c1c4780 [ 1317.618944][ C1] RBP: ffffffff8e7e5560 R08: 000000002de9239f R09: 0000000000000007 [ 1317.626912][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 1317.634878][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1317.642866][ C1] ? unwind_next_frame+0x3be/0x2090 [ 1317.648083][ C1] ? unwind_next_frame+0x3be/0x2090 [ 1317.653289][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1317.659444][ C1] unwind_next_frame+0xd1/0x2090 [ 1317.664387][ C1] ? unwind_next_frame+0xbd/0x2090 [ 1317.669504][ C1] ? kmem_cache_free+0x44a/0x6c0 [ 1317.674454][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1317.680610][ C1] arch_stack_walk+0x94/0xf0 [ 1317.685211][ C1] ? kmem_cache_free+0x44a/0x6c0 [ 1317.690156][ C1] ? __io_req_caches_free+0x1a6/0x220 [ 1317.695539][ C1] stack_trace_save+0x8e/0xc0 [ 1317.700217][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1317.705590][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1317.710530][ C1] kasan_save_stack+0x30/0x50 [ 1317.715199][ C1] ? kasan_save_stack+0x30/0x50 [ 1317.720044][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 1317.725418][ C1] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 1317.731483][ C1] ? kmem_cache_free+0x44a/0x6c0 [ 1317.736474][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 1317.741677][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1317.747835][ C1] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 1317.753734][ C1] ? __io_req_caches_free+0x1a6/0x220 [ 1317.759115][ C1] kmem_cache_free+0x44a/0x6c0 [ 1317.763891][ C1] __io_req_caches_free+0x1a6/0x220 [ 1317.769101][ C1] io_queue_deferred+0x9c/0x2fe [ 1317.773972][ C1] io_queue_sqe_fallback.cold+0x333/0x3cc [ 1317.779693][ C1] io_submit_sqes+0x15a8/0x24b0 [ 1317.784563][ C1] __do_sys_io_uring_enter+0xa88/0x1b50 [ 1317.790119][ C1] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1317.796109][ C1] ? xfd_validate_state+0x129/0x190 [ 1317.801313][ C1] ? rcu_is_watching+0x12/0xc0 [ 1317.806087][ C1] do_syscall_64+0x115/0x870 [ 1317.810680][ C1] ? clear_bhb_loop+0x40/0x90 [ 1317.815356][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.821244][ C1] RIP: 0033:0x7f4f9419ce59 [ 1317.825651][ C1] RSP: 002b:00007f4f923f5f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1317.834059][ C1] RAX: ffffffffffffffda RBX: 0000200000001540 RCX: 00007f4f9419ce59 [ 1317.842024][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000006 [ 1317.849986][ C1] RBP: 00000000000001f0 R08: 0000000000000000 R09: 0000000000000008 [ 1317.857948][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000d40 [ 1317.865909][ C1] R13: 0000200000000d48 R14: 0000000000000f14 R15: 0000000000000000 [ 1317.873887][ C1] [ 1317.876910][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g122341 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1317.888184][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1317.898139][ C1] rcu: RCU grace-period kthread stack dump: [ 1317.904009][ C1] task:rcu_preempt state:R running task stack:27848 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1317.917505][ C1] Call Trace: [ 1317.920772][ C1] [ 1317.923696][ C1] __schedule+0x1295/0x67a0 [ 1317.928218][ C1] ? __pfx___schedule+0x10/0x10 [ 1317.933063][ C1] ? find_held_lock+0x2b/0x80 [ 1317.937732][ C1] ? schedule+0x2bf/0x390 [ 1317.942065][ C1] schedule+0xdd/0x390 [ 1317.946135][ C1] schedule_timeout+0x127/0x280 [ 1317.950979][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1317.956348][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1317.961633][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1317.967436][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1317.972900][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 1317.977661][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1317.982945][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 1317.988406][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1317.993342][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1317.998538][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1318.004347][ C1] rcu_gp_kthread+0x179/0x230 [ 1318.009020][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1318.014216][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1318.020027][ C1] ? __kthread_parkme+0x18c/0x230 [ 1318.025061][ C1] ? kthread+0x13a/0x450 [ 1318.029301][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1318.034499][ C1] kthread+0x370/0x450 [ 1318.038562][ C1] ? __pfx_kthread+0x10/0x10 [ 1318.043150][ C1] ret_from_fork+0x72b/0xd50 [ 1318.047739][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1318.052852][ C1] ? __switch_to+0x800/0x1100 [ 1318.057533][ C1] ? __pfx_kthread+0x10/0x10 [ 1318.062121][ C1] ret_from_fork_asm+0x1a/0x30 [ 1318.066905][ C1] [ 1318.069914][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1318.076229][ C1] CPU: 1 UID: 0 PID: 18000 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1318.087331][ C1] Tainted: [L]=SOFTLOCKUP [ 1318.091640][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1318.101700][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1318.108198][ C1] RIP: 0010:smp_call_function_many_cond+0x58e/0x1700 [ 1318.114871][ C1] Code: 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 a9 83 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31 ff 83 e0 01 41 [ 1318.134469][ C1] RSP: 0000:ffffc90004c5f870 EFLAGS: 00000293 [ 1318.140539][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fc2dfd [ 1318.148499][ C1] RDX: ffff88807ce18000 RSI: ffffffff81fc2dd7 RDI: ffff88807ce18000 [ 1318.156461][ C1] RBP: ffff8880b8443560 R08: 0000000000000005 R09: 0000000000000000 [ 1318.164428][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1318.172388][ C1] R13: ffffed10170886ad R14: 0000000000000001 R15: ffff8880b853c800 [ 1318.180351][ C1] FS: 0000000000000000(0000) GS:ffff888124487000(0000) knlGS:0000000000000000 [ 1318.189272][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1318.195848][ C1] CR2: 00007f417a9f5ff8 CR3: 000000000e596000 CR4: 00000000003526f0 [ 1318.203814][ C1] Call Trace: [ 1318.207083][ C1] [ 1318.210007][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1318.215045][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1318.221373][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1318.226757][ C1] ? __pfx___text_poke+0x10/0x10 [ 1318.231699][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1318.236725][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1318.241837][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190 [ 1318.248333][ C1] smp_text_poke_batch_finish+0x337/0xc60 [ 1318.254066][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1318.260318][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1318.266552][ C1] ? find_held_lock+0x2b/0x80 [ 1318.271227][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1318.277200][ C1] jump_label_update+0x37a/0x550 [ 1318.282137][ C1] static_key_enable_cpuslocked+0x1bc/0x270 [ 1318.288029][ C1] static_key_enable+0x1a/0x20 [ 1318.292790][ C1] toggle_allocation_gate+0xfe/0x2d0 [ 1318.298069][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1318.303961][ C1] ? rcu_is_watching+0x12/0xc0 [ 1318.308736][ C1] process_one_work+0xa0e/0x1980 [ 1318.313685][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1318.319063][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1318.324954][ C1] worker_thread+0x5ef/0xe50 [ 1318.329552][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1318.334663][ C1] ? kthread+0x13a/0x450 [ 1318.338901][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1318.344013][ C1] kthread+0x370/0x450 [ 1318.348079][ C1] ? __pfx_kthread+0x10/0x10 [ 1318.352667][ C1] ret_from_fork+0x72b/0xd50 [ 1318.357270][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1318.362396][ C1] ? __switch_to+0x800/0x1100 [ 1318.367081][ C1] ? __pfx_kthread+0x10/0x10 [ 1318.371674][ C1] ret_from_fork_asm+0x1a/0x30 [ 1318.376464][ C1]