last executing test programs: 27m0.505562273s ago: executing program 32 (id=1095): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) (async) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0xe, 0x4) (async, rerun: 64) sendmsg$can_j1939(r3, &(0x7f00000005c0)={&(0x7f0000000200)={0x1d, r4, 0x0, {0x1, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000580)={&(0x7f0000000480)="b9ab", 0x2}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000010) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="60000000100003042bbd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB], 0x60}}, 0x0) 23m24.170545824s ago: executing program 5 (id=2325): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23m24.099000944s ago: executing program 5 (id=2326): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001a40)={&(0x7f0000000580)=@l2, 0x80, &(0x7f0000001900)=[{&(0x7f0000000600)=""/80, 0x50}], 0x1, &(0x7f0000001980)=""/171, 0xab}, 0x22) syz_clone(0x40c0200, 0x0, 0x0, 0x0, 0x0, &(0x7f00000037c0)) close(r1) 23m23.865568152s ago: executing program 5 (id=2327): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 23m23.821209741s ago: executing program 5 (id=2328): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000380)={0x5, &(0x7f00000000c0)=[{0x32, '\x00', @buffer={"92c781c825f38b3bb16835ace86065fafe6b485b7f2b837c8c2f5581edd91026", 0x20}, 0x4}, {0x34, '\x00', @buffer={"f93e50a5cffe4cb5c411717218925d39827fb9c22b22990179eba6f09ce7627e", 0x20}, 0x3}, {0x37, '\x00', @buffer={"d923359a2a31b2cb8b755c44817360a4b1247195ae8d44ad4a027f8a60bdcf18", 0x20}}, {0x46, '\x00', @st={0x4, [{0x1, @uvalue=0x9}, {0xf78db96a001f70c9, @uvalue=0x28000000}, {0x3, @svalue=0x6}, {0x0, @svalue=0xc9}]}, 0x1}]}) 23m23.742355832s ago: executing program 5 (id=2329): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000006a000085000000860000008500000007000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 23m23.64527706s ago: executing program 5 (id=2330): bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x138f67536d80380e, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000001e40)) 23m11.875081989s ago: executing program 33 (id=2302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000040)={'syzkaller0\x00'}) 23m11.812819301s ago: executing program 34 (id=2306): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x18, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 23m9.907770498s ago: executing program 35 (id=2318): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r3) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 23m8.410273156s ago: executing program 36 (id=2330): bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x138f67536d80380e, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000001e40)) 18m41.437188549s ago: executing program 0 (id=2924): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x80201) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x53, 0x7c67c9a5346444f2, 0x6, 0xab, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="15b3001f0000", 0x0, 0x5, 0x0, 0xffffffff, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, &(0x7f0000000040)) r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0xf078, 0x0, 0x0, 0x7fff0000}]}) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x1, 0x5003) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x1, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) unshare(0x20040600) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0xb, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x400}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}}, 0xb8}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e24, 0xffffffff, @mcast1, 0xd}, 0x1c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000300)={r3}) fsopen(&(0x7f0000000240)='sysfs\x00', 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000) r7 = getpgid(0xffffffffffffffff) capget(&(0x7f0000000200)={0x19980330, r7}, &(0x7f0000000280)={0x9, 0x2, 0x0, 0x9, 0x8, 0x3}) 18m40.576729455s ago: executing program 0 (id=2926): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'sit0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x7, 0x0, 0x1, 0xd6, {{0x15, 0x4, 0x1, 0x39, 0x54, 0x68, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0xfd, 0x0}, {[@timestamp_prespec={0x44, 0x2c, 0x7e, 0x3, 0x2, [{@rand_addr=0x64010100, 0xb73}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@multicast2, 0x4}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x3}]}, @end, @end, @timestamp_prespec={0x44, 0x4, 0x4a, 0x3, 0x2}, @rr={0x7, 0xb, 0xd3, [@dev={0xac, 0x14, 0x14, 0xf}, @multicast2]}]}}}}}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@private2, 0x32, r8}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000040)={@private2, r8}, 0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x108, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0xc014) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x2, 0x0, r1}) r11 = socket$inet_sctp(0x2, 0x5, 0x84) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) pwrite64(r13, 0x0, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r11, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r14, 0x0, 0x2}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000100)={r14, 0xc48}, 0x8) r15 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r15, 0x4008ae48, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) 18m39.242558861s ago: executing program 0 (id=2936): sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x41) socket$inet6_tcp(0xa, 0x1, 0x0) shmget$private(0x0, 0x400000, 0x100, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r3, 0x10, 0x50bd2e, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044041}, 0x40000) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000e3c000/0x4000)=nil, &(0x7f0000d41000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000d2d000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, &(0x7f0000000080)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="e7230a"], 0x0}, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 18m35.29295996s ago: executing program 0 (id=2950): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)='%-5lx \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, 0x0, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x20008000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/69, 0x82}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) 18m31.172775751s ago: executing program 0 (id=2958): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94", 0x79}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/69, 0x82}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) 18m27.264884046s ago: executing program 0 (id=2966): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001880)={0x2020}, 0x2020) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000500)={0x30, 0x1, 0xfffff801}) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7abb) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000048040)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sysfs$1(0x1, &(0x7f0000001840)='mqueue\x00') 18m11.20069693s ago: executing program 37 (id=2966): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001880)={0x2020}, 0x2020) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000500)={0x30, 0x1, 0xfffff801}) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7abb) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000048040)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sysfs$1(0x1, &(0x7f0000001840)='mqueue\x00') 13m25.088890117s ago: executing program 6 (id=3836): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0xff, 0x8, 0xa, 0x4, 0x0, 0x6, 0x80, 0x10}, {0x8080000, 0x0, 0xc, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x4000, 0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xc3, 0x0, 0x3c}, {0xe000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, [0x0, 0xfffffffffffffffc, 0x1, 0x400000000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000001100)={0x2020}, 0x2020) ioctl$HIDIOCGDEVINFO(r6, 0x801c4803, &(0x7f00000000c0)=""/190) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_open_dev$vim2m(0x0, 0x800, 0x2) r7 = openat$tun(0xffffff9c, 0x0, 0x4000, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'user:'}, 0x1b, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000005c0)={&(0x7f000062f000/0x2000)=nil, &(0x7f00001c3000/0x3000)=nil, &(0x7f00007fa000/0x3000)=nil, &(0x7f00002b5000/0x4000)=nil, &(0x7f00002d9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f00003ef000/0x3000)=nil, &(0x7f00001e1000/0x3000)=nil, &(0x7f00006f8000/0x2000)=nil, &(0x7f000046f000/0x3000)=nil, &(0x7f0000000480)="82c2a7136078ae06d64833d088655ad4b027e21532c993b6a1c9567446058f8b5a31b4b7d7b8f21151beeead335f9509ebc2aab1896a8c345dc52476c2cb7dd3b395f0ad4ebc6b5b8b04a242b0f8d587c45b769dc5a132118b12c8eb96d8ccaea2f63f445b03ae43383b41db020ae0da126d4d054a769d834db84dae513e0e31c7a61186fc6904631ae3771f6ccc93acf71d7e884d258f84e4e38a8a92", 0x9d, r7}, 0x68) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000240), 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 13m22.160758869s ago: executing program 6 (id=3846): add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000040)='cgroup2\x00', 0x8401, 0x0, 0x2, 0x0, &(0x7f0000000340)=0xd}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001480)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000440), 0x111}}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x1d) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x60) setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, &(0x7f0000000100)='\b\x00\x00\x00', 0x4) getsockopt$sock_buf(r0, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000040)) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) inotify_init() syz_usb_control_io(r4, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x6f}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r5, @ANYBLOB="10100000000000000800002005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r5], 0x40c}}, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='comm\x00') writev(r6, &(0x7f0000000280)=[{&(0x7f0000000140)="a9", 0x1}], 0x1) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f00009c6000/0x2000)=nil, 0x2000, 0x3, 0x28012, r7, 0x0) syz_usb_control_io$uac3(r4, &(0x7f0000000340)={0x14, &(0x7f0000000080)={0x0, 0xf, 0x59, {0x59, 0x0, "0cc05ada07b3e1fed1996f49e3f0489822770dbc260694711f6e512ba204039f904fc7a6628f03cb1174d986334aa14cce38b500a270dbde2f2e8ba3155b847835ef79305c23bcf14fc13b4ad5f78149cbca4ab33da8c3"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x861}}}, &(0x7f0000000740)={0x44, &(0x7f0000000380)={0x20, 0x13, 0x45, "c83f48ae6e6684cb5832d053bcbc497e44c21fea23621d4b7effd883a1ee04428d6f4a7e0326d92a934b5ca50a7cdbedb6644ce617d5365199df6630a1a4d737de8671b781"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x4e}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000580)=ANY=[@ANYBLOB="20810300000000f1b0"], &(0x7f0000000600)={0x20, 0x82, 0x3, "53bf20"}, &(0x7f00000006c0)={0x20, 0x83, 0x3, "29f721"}, &(0x7f0000000700)={0x20, 0x84, 0x1, "fc"}, 0x0}) 13m19.625437497s ago: executing program 9 (id=3856): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3a0, 0x0, 0x0, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffffff, 0xff0000ff, 0xb, 0x1, {@empty, {[0x0, 0x2064f8bb0fa89a85, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x10, 0x4, 0x6, 0xffff, 0x40, 0x8001, 'batadv_slave_1\x00', 'ipvlan0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010031"], &(0x7f0000000f80)=""/4115, 0x31, 0x1013, 0x9}, 0x28) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x6, 0x883, 0x1, 0x3, 0x3, 0x0, [{0x3, 0x3, 0x1}, {0x0, 0x401, 0x1ff, '\x00', 0x2}, {0x47c9, 0x0, 0x1ff, '\x00', 0x200}]}) 13m18.282781934s ago: executing program 6 (id=3859): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="402201"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b00)={0x34, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000180)={0x20, 0x30}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000280)={0xc0, 0x5, 0x3, "16336c"}, &(0x7f00000002c0)={0x40, 0x5, 0x5, "fdfcf1d8cc"}}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001580)={0x44, &(0x7f00000012c0)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13m17.490575172s ago: executing program 9 (id=3865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000400)={0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x104) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0x81, 0x7, 0x63, 0x0, 0x7, 0xa, 0x0, 0x3, 0x7, 0x92, 0x3, 0x6, 0x0, 0x7f, 0x5ab, 0x2, 0xc9, 0x9, 0x1, '\x00', 0x8, 0x800}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, 0x0) 13m15.793102603s ago: executing program 9 (id=3869): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000100)={0x28, 0x1, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000000c0)}) 13m15.363431952s ago: executing program 9 (id=3871): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x24, 0x2000}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000240)=0x800000b, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)=';', 0x1, 0x24000000, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x99bcb88de02507d2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000001600)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]}) chdir(&(0x7f0000000140)='./bus\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x408, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r2, 0x0, 0x6c}, 0x38) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x2000) 13m14.920855027s ago: executing program 6 (id=3872): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) r1 = syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000b40)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4252, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x0, 0x30, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc3b9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xfc, 0x5, 0x7f, {0x7, 0x25, 0x1, 0x0, 0x9, 0x132c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0xb, 0x2, {0x7, 0x25, 0x1, 0x0, 0x77, 0x5}}}}}}}}]}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) write$binfmt_format(r2, &(0x7f0000000100)='0\x00', 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x2], 0x0, 0x0, 0x1}}, 0x40) syz_usb_control_io$uac1(r1, &(0x7f00000192c0)={0x14, &(0x7f0000019200)={0x40, 0x8, 0x7a, {0x7a, 0x1, "08aa2f0c401764d1afcd6ccf25371adb85456dc153b4d2c8df47f7a1c9f4aba553cf9abe530a73989f517c7e232dbb173692cb38daedacfe0eae897b5f2bc0742ec92c2d4699dee7558355561f3399ab034145203ded7b687dabc6d4363708de45570e7ef3727a3355f966eb2ac3e1aa1571205fb2dfdd3b"}}, &(0x7f0000019280)={0x0, 0x3, 0xd, @string={0xd, 0x3, "9c31656c608b84dc78d384"}}}, &(0x7f0000019500)={0x44, &(0x7f0000019300)={0x40, 0x31, 0x1c, "ad971b74c8fb997ea457ff69c61e02de14332ff89692961b3e5bf2dc"}, &(0x7f0000019340)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000019380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000193c0)={0x20, 0x81, 0x1, 'g'}, &(0x7f0000019400)={0x20, 0x82, 0x1, "88"}, &(0x7f0000019440)={0x20, 0x83, 0x2, "5e19"}, &(0x7f0000019480)={0x20, 0x84, 0x3, "ab6bb6"}, &(0x7f00000194c0)={0x20, 0x85, 0x3, '*bP'}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x501}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ef5000/0x2000)=nil, 0x2000}}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r6, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 13m14.362697594s ago: executing program 9 (id=3874): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB=',']) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, 0x0) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x4, 0x10000, @value=r2}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000cc0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit, @tail_call]}, &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3}, 0x94) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r2, 0x0, r4}) 13m10.98339961s ago: executing program 6 (id=3879): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) mmap(&(0x7f0000cb6000/0x1000)=nil, 0x1000, 0x1000003, 0x204031, 0xffffffffffffffff, 0xfffff000) (async) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x6, &(0x7f0000769000/0x3000)=nil, 0x4) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180400000000000000000000fbffffff00000028d00000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x8, 0x3, 0x40, 0x6, 'syz1\x00', 0x4000040}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0xc1105511, &(0x7f0000000040)) (async) recvmmsg(r3, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x40010102, 0x0) (async) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @private2, 0x2}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000300)) (async) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r6, 0x40106f52, &(0x7f0000000140)={0x3, &(0x7f0000000280)=[{0x3d, '\x00', @data=0x8001, 0x7a7ce1c2}, {0x29, '\x00', @st={0x4, [{0x1, @uvalue=0x4}, {0x1, @svalue=0x9b47}, {0x0, @svalue=0x7}, {0x2, @uvalue=0x5}]}, 0x6a23}, {0x1b, '\x00', @buffer={"fcde60e2a2bf4961913399b7296ca15b83831711bf06e5b19a08cefb7c004b18", 0xfffffffffffffee6}, 0x800}]}) (async) write(r5, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0xffffffffffffffff}) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) (async) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000125bd7000fddbdf25080000000c000f000000000000000000050014000900000006001b004e200000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x92, 0x10, 0x93, 0xffffffffffffffff}, &(0x7f0000000280)=0x18) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=r10, @ANYBLOB="45619fc9e2e61f0b4f964610c2cd3a0a7f4cd0c05fba5c38beafec3f1ad308c83aeb94712279726438c077172ece9c4b5da21000bb3a62bfa9f5cd82a9a7e18346e6a33422ec4e2890f8186bb18525d41a2d0e440b179251dcc09de3c22f3c6bdab3e325903b65e7b4f3d6edd6c317ba3a1d97433767a17f83ab0f308a162dea0a6f261e144992ed8dc0697c3a73ed9a261672716f596aff5b63948b7089b756042f0558ce9d9a881736d7c08d3677522b705c98e44afabff162075a86635d7f2524e1589322915fe89d334fec325092fb042e2ce6268961de90375038"], 0xc) 13m10.447964821s ago: executing program 9 (id=3881): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ee, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_emit_ethernet(0x46, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60c6dd0000103afffe80000000000000"], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$uac1(0x5, 0x78, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000ff6b1d0101400001020301090266000000010900000a24baa5bc48b794240f65ebb10100000000020102090401000001020000090401120101"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r2, 0x0, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/185, 0xb9, 0x0, 0x2, 0x3}}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}], 0x1, 0x45) 13m10.426037638s ago: executing program 6 (id=3883): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ee, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_emit_ethernet(0x46, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60c6dd0000103afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800"], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b0001000010000904550701"], 0x0) syz_usb_connect$uac1(0x5, 0x78, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r3, 0x0, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/185, 0xb9, 0x0, 0x2, 0x3}}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r4, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}], 0x1, 0x45) 12m55.079520945s ago: executing program 38 (id=3883): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ee, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_emit_ethernet(0x46, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60c6dd0000103afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800"], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b0001000010000904550701"], 0x0) syz_usb_connect$uac1(0x5, 0x78, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r3, 0x0, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/185, 0xb9, 0x0, 0x2, 0x3}}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r4, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}], 0x1, 0x45) 12m54.96873747s ago: executing program 39 (id=3881): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ee, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_emit_ethernet(0x46, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60c6dd0000103afffe80000000000000"], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$uac1(0x5, 0x78, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000ff6b1d0101400001020301090266000000010900000a24baa5bc48b794240f65ebb10100000000020102090401000001020000090401120101"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r2, 0x0, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/185, 0xb9, 0x0, 0x2, 0x3}}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}], 0x1, 0x45) 8m21.181905907s ago: executing program 3 (id=4591): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4a, 0xa4003) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x4006001) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000300)=[@wr_crn={0x67, 0x20, {0x8, 0x6}}, @wr_drn={0x68, 0x20, {0x4}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x508, 0x4, 0x3, 0x2}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_load_code={0x12e, 0x59, {0x1, "f040ff04a30f2150b9800000c00f3235000400000f303666400fc772c46665670f0f28a766b8a9008ec066ba420066b8000066efc4c19de4a102000000450f07f4"}}, @code={0xa, 0x7d, {"3e440fae9105000000f24c0f2aa5cce30000b96c080000b839830000ba000000000f30c4a1fe5bf1440f06c7442400d7cd0000c744240294d7f20ec7442406000000000f0114242e670fc79da1430000b9800000c00f3235010000000f3064410f019b0088000066ba4100ec"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x402, 0x1428e132, 0xf11, 0x81}}], 0x19e}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x470f}]}) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x9, 0x400007bf, 0x1, 0x810003, 0x0, 0x400600cc4, 0x1, 0x462e00000000000, 0x7fffffff, 0x801, 0x0, 0x2, 0x1, 0x9, 0x1008d], 0x58000, 0x391181}) ioctl$KVM_RUN(r9, 0xae80, 0x0) read(r6, &(0x7f0000000080)=""/1, 0x1) r10 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x1, 0x0) r12 = openat$cgroup_subtree(r11, &(0x7f0000000100), 0x2, 0x0) sendfile(r6, r6, 0x0, 0x7ff) write$cgroup_subtree(r12, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r13 = socket$inet(0x2, 0x6, 0x1) sendmsg$inet(r13, 0x0, 0x20000000) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 8m20.51924962s ago: executing program 3 (id=4593): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x40, 0xa, 0x3, "72e530"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f00000003c0)={0x14, &(0x7f0000000080)={0x20, 0x10, 0x5f, {0x5f, 0xf, "be0f1be979f49f32fe927ca8c3c7f115bcd54dbbb45506f589fa364ac2a95f3a5251a911e40eb3551954418d541acd6fa1ae118214a1d901e777a738e448228f1670424cbdea855eb75e7bb8703cf79b38a4bd7e553940ba00eabe5842"}}, &(0x7f0000000300)={0x0, 0x3, 0x84, @string={0x84, 0x3, "169eff9c85d4c9d25a719b560855a1f7ee767e3a547c3b3f46ba5e377656563494ff306181277f9450c747e38e8a456310483390b66b585e561bc86c4b5dda7eae5cdeadfd2cba4557f7271acf0e541584778ba1c45a7d12d8eea8d40c167156431164be14be946e8beee289711f84dbbf4eba319515c58c60e2e0ee39e9ebcb6f55"}}}, &(0x7f0000000800)={0x44, &(0x7f0000000540)={0x40, 0x31, 0xbb, "214fcfa4af2642156b8fc3726c154268fa22ee4306242c7a0eb4ea7c9d50a91c954d38647b20f9695bb89fc656cec6b5113e519b1da59378d21d6a04340fb9574a173d9db8b2b3a151b47350b2b75d896c8679061648754a29b5a6ab19e1573871d453b221265a90ee07e26d21403dab00ffee0577a2a7b1ea70139b68f6d2e42f88cd61ee45dcb9dfea00e857029aaae560bb8eacc6ff78fd341d021594725b5964628ea3c0f82f23478d31899f53b9656184aff3512aa5fbe21e"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000006c0)={0x20, 0x81, 0x3, "7f01a2"}, &(0x7f0000000700)={0x20, 0x82, 0x2, 'Tw'}, &(0x7f0000000740)={0x20, 0x83, 0x3, "85a7c1"}, &(0x7f0000000780)={0x20, 0x84, 0x2, 'Y%'}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "7fb352"}}) 8m17.158652315s ago: executing program 3 (id=4602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000100)) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_io_uring_setup(0x27d1, &(0x7f0000000200)={0x0, 0x2fd9, 0x200, 0x2, 0x291}, &(0x7f0000000280), &(0x7f0000000340), &(0x7f0000000380)) eventfd2(0x7, 0x80800) r2 = socket$unix(0x1, 0x1, 0x0) epoll_create1(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x1, "f07e41bdd778303aa9b9ec6617e89884"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 8m15.403068253s ago: executing program 3 (id=4609): shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000426ad70df213400000008009114110e3567e00a2f168f1d1b100300000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c040) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) fadvise64(0xffffffffffffffff, 0x2, 0xb, 0x1) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x1e2, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f00000e1000/0x1000)=nil, 0x1000, 0xb635773f06ebbeea, 0x20010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'}) r6 = creat(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x6) ioctl$SNDRV_PCM_IOCTL_DROP(r6, 0x4143, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtclass={0x38, 0x28, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x4, 0x2}, {0xc, 0xffe8}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x7}}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x38}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) connect$inet(r4, 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) socketpair$unix(0x1, 0xbd978ae7f17d3e41, 0x0, &(0x7f0000007400)) r7 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r7) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e20}, 0x6e, 0x0}}], 0x2, 0x40008004) 8m14.797388556s ago: executing program 3 (id=4611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') pread64(r3, 0x0, 0x0, 0x100000000000001) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000001a00)={{0x7, 0x3, 0x6, 0x0, 'syz0\x00', 0x8}, 0x0, 0x4, 0x8000, r0, 0x8, 0x3f9, 'syz1\x00', &(0x7f00000019c0)=['syz1\x00', '\xff\xff', '[)\x00', '\x00', 'syz1\x00', 'syz1\x00', '\x00', 'hash:net,net\x00'], 0x23}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r4], 0x1c}}, 0xc000) r6 = socket$kcm(0x29, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1, 0x2000402) ftruncate(0xffffffffffffffff, 0x40000d) r8 = socket$unix(0x1, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80600, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$unix(r8, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$kcm(r6, &(0x7f0000001980)={&(0x7f0000000040)=@in6={0xa, 0x4e24, 0xfffffffb, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x80, &(0x7f0000001540)=[{&(0x7f00000015c0)="609a7d34b96047dada217257a3d7de81b96ecded17e6ed766ae4fdf0443b7e0751822169b027bc66cccb729b0000000000000000000000f86619eb9b56c5af1e17f144638701b1b88f8870006e6e535d4d9ba272119777a02cfa6e5aacebc0e609714f1d6e2e85f920b51c8d6a8d7d073db87b214d709309d9b7438302cc038e6c15374261a185f791974f0e10f16ffd8730ba1488e8e8de049f46909c44f26a529d0616994116a1103fb4f0c16bb839c16a243b74432222f12dc91a5e0979046ce2aba7ecdce9c5ba7c7137", 0xcc}, {&(0x7f0000000180)="6e037e89a38b911cda6c6e9f90be5b5a08a9cb673780bfd2b8520150c3794551bc09e5be62f976", 0x27}, {&(0x7f0000000280)="bcf6724a71c4beb2e0aeb4df0620f01ec844a90cb288c99cacd733b68a555f94d107a6fe7bf2087971920606dde31f9c5672b0a8b4b4f82355c8935d9db52365296229921f4eef431ffa4fcfa1f17be5f238a4064b924375778bc8709e6ea281fdb34daf3b7543ecc8982e943a8d17a77fc59275768c282b19c5", 0x7a}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="f83ae661b0fa274b03ef63b509ccba8ea071e865b12f251ed677bb10552a59c4488ea1c30280ce215d3b68af852f37a073fb98f0362c736b17fd3b1597d4044d2356f1a316670a51c332071155480b4cd2cf3d8ea4e1e215bae5f1f8bfa2f7ae4df1d7b9613f261801fa566d61ea652ec8b628d030488c4e7842ddd4a1", 0x7d}, {&(0x7f0000001380)="0e4477b1ccc533d4af93dfc4c7cf192de75cd537fa96fb75ef59160d7aaf808a0e4f2b01b2069e5d92d86a4b5e1647da5353e1ba53fb333b321d0d7305e1aea8ca5f882898a111a0f85a4785a34673a92d7828857f3c4935888582a3cdb2427511b3562f4952da5922f297b9d1d162111773529a4fa616e4db6f8472b2", 0x7d}, {&(0x7f0000001400)="4d2e46e524b792ca9a6232c067b62d849bd354aa32a79cf0cf52185742a231f7bb58a9a6b0ec8cec765b6b4bab083ae6961e2bfe1ea5c2656e32bd47ff6339a9edb4076e1cf89e050ba2ab96748b6420c313791dfe0fc8b26a8a320c99794d3b99c72e54a4e6d435c40b66204a62ef9fbb1394571cfb17bba9eaf382a3de8fbd7aef5ad9bb22acd167fc3cbfcca6804ec59c81757a78908baf9ec991f1b48c7707aacc77b9f9fff68e05cd65d64b21881f8a61a9e6e46def327070e8b78a0d8a8a44f72cfa07a6d89b62ec9755d080dc2a7f5f4cd977bf00d9f8094f0291e79eb4c2bc631cd923f2cf9c8c43", 0xec}, {&(0x7f0000001500)="9264bbf69f647501ac389e41eed04666eaefbc306bb266e01f7da4e03946c0b38dc7", 0x22}], 0x8, &(0x7f0000001c40)=[{0xb0, 0x10f, 0xaf, "5ca4828054d51c4419b3e39d83d002c27d6d53a65b914f1659fdd4c2d6d5564cd1cf5ce017bfad9e0d6a2238e5bde3d26d20bb37124578d823ae44039e33a03b085d5ba9742918265acba1ce403ed95407eeac822de084c904abad801cbb4aa326382e5cd697d8eb1c74f6119a78b2db7f03b812e090062f8ec3cfa311d494d1f3a4a5b64098dc85c954beb7af1fd9fd015e46443870599b0eb9db7ffe8d0700"}, {0x110, 0x103, 0x3, "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"}, {0x10, 0x13f, 0x7}, {0xf0, 0x29, 0x5f, "0b82b062da34c49b8bd14a2158bd1b563804343216122ca317aba3a399fb0c5e4aae85ab93c679c602b3aff90ddd19194b805313abdbbb4339a38e12f10603f68aa12912a3aaff35fd708a0dbd3d7529236db59bd192fd4b9c8ce34a377daf53a54aa0ffd2fe1ad1e845dbe090da4156def8e33f725c9dadb73919e5d7a71a315a4cee0da34da5731a2dce46e3008db9e0f1574146864522ec423abbfcb1807c4985a7156b1c47b331a97deef831dc0224c306af0d0d69a1e779f4260e8b3ddcee22149554e79d6e190894490473c38c713c6c490c40a4ca05fad4ab53"}, {0x70, 0xff, 0x5, "2d48ec660270d8021f2d9d9da015e51d53551ca65bd87e53e2fdeaec162f9c1259a5264cda75beb7f455be5e2f659347a42c9200d8e528612c2acdd528d7bcc96c3bf4306cf757b2bc7d24ac860ad90ab1375b4ebeb2e95d17a6524e4d8325d2"}, {0x150, 0x1d, 0x1, "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"}], 0x480}, 0x40000) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000001c0)={0x1, 0x1, 0x10001}) 8m12.9742722s ago: executing program 3 (id=4616): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4a, 0xa4003) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x4006001) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000300)=[@wr_crn={0x67, 0x20, {0x8, 0x6}}, @wr_drn={0x68, 0x20, {0x4}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x508, 0x4, 0x3, 0x2}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x4c, 0x3, 0x1}}, @code={0xa, 0x7d, {"3e440fae9105000000f24c0f2aa5cce30000b96c080000b839830000ba000000000f30c4a1fe5bf1440f06c7442400d7cd0000c744240294d7f20ec7442406000000000f0114242e670fc79da1430000b9800000c00f3235010000000f3064410f019b0088000066ba4100ec"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x402, 0x1428e132, 0xf11, 0x81}}], 0x175}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x470f}]}) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x9, 0x400007bf, 0x1, 0x810003, 0x0, 0x400600cc4, 0x1, 0x462e00000000000, 0x7fffffff, 0x801, 0x0, 0x2, 0x1, 0x9, 0x1008d], 0x58000, 0x391181}) ioctl$KVM_RUN(r9, 0xae80, 0x0) read(r6, &(0x7f0000000080)=""/1, 0x1) r10 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x1, 0x0) r12 = openat$cgroup_subtree(r11, &(0x7f0000000100), 0x2, 0x0) sendfile(r6, r6, 0x0, 0x7ff) write$cgroup_subtree(r12, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r13 = socket$inet(0x2, 0x6, 0x1) sendmsg$inet(r13, 0x0, 0x20000000) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 7m57.343526582s ago: executing program 40 (id=4616): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4a, 0xa4003) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x4006001) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000300)=[@wr_crn={0x67, 0x20, {0x8, 0x6}}, @wr_drn={0x68, 0x20, {0x4}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x508, 0x4, 0x3, 0x2}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x4c, 0x3, 0x1}}, @code={0xa, 0x7d, {"3e440fae9105000000f24c0f2aa5cce30000b96c080000b839830000ba000000000f30c4a1fe5bf1440f06c7442400d7cd0000c744240294d7f20ec7442406000000000f0114242e670fc79da1430000b9800000c00f3235010000000f3064410f019b0088000066ba4100ec"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x402, 0x1428e132, 0xf11, 0x81}}], 0x175}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x470f}]}) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x9, 0x400007bf, 0x1, 0x810003, 0x0, 0x400600cc4, 0x1, 0x462e00000000000, 0x7fffffff, 0x801, 0x0, 0x2, 0x1, 0x9, 0x1008d], 0x58000, 0x391181}) ioctl$KVM_RUN(r9, 0xae80, 0x0) read(r6, &(0x7f0000000080)=""/1, 0x1) r10 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x1, 0x0) r12 = openat$cgroup_subtree(r11, &(0x7f0000000100), 0x2, 0x0) sendfile(r6, r6, 0x0, 0x7ff) write$cgroup_subtree(r12, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r13 = socket$inet(0x2, 0x6, 0x1) sendmsg$inet(r13, 0x0, 0x20000000) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 40.414627111s ago: executing program 4 (id=5779): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) r0 = open(0x0, 0x80, 0x122) fcntl$notify(r0, 0x402, 0x8000003d) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xa0) syz_io_uring_setup(0x5c7f, &(0x7f0000000300)={0x0, 0x29c1, 0x1000, 0x0, 0x209, 0x0, r0}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xb3) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0xfffffffdffffffff) read$FUSE(r2, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fanotify_init(0x0, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000000000)={0x0, 'vlan0\x00', {0x1}, 0x9}) fanotify_mark(r8, 0x401, 0x1000, r7, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) write$P9_RGETLOCK(r7, &(0x7f0000000280)={0x23, 0x37, 0x1, {0x1, 0x6, 0x7fffffff, 0x0, 0x5, 'gred\x00'}}, 0x23) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x14}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) syz_clone3(0x0, 0x0) 38.80357168s ago: executing program 4 (id=5781): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="d8000000180081064e81f782db4cb904021d0800fd00fe05e8fe55a1bc0005000000000000000e41b0940900ac00060311000000040005000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000348cc5614f7da773c20c6a6c8bd414c8da", 0xd8}], 0x1}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x2, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x6, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0xb, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x7ffffffc, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xbb8, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x11, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x9, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbf7, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x4, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0xddf9402, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) 38.148614808s ago: executing program 4 (id=5784): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="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", 0x2000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0xfffffffffffffffd, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x10000800040068], 0xd000, 0x50101}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x20) fsmount(r4, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f00000000c0)={0x2, 0x100, 0x7, 0x7, 0x7, 0x800}) 35.834988408s ago: executing program 4 (id=5790): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x48, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x10000, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x24044804) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006110080000000000730a0efd000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x2d) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r9, 0x400, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r8, 0x917, 0x70bd24, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x620b}, 0x0) 34.326701271s ago: executing program 4 (id=5796): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) write$binfmt_misc(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000340)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x10, 0x1}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r6 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r7, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x30, 0x0, 0x1fd, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r6}]) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x35, &(0x7f000000cf3d)=""/195}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x0, 0xa, 0x9, 0xa, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, r2}, 0x94) 33.885359266s ago: executing program 4 (id=5799): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x8, 0x8a, 0x1, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f00000004c0)={r6, &(0x7f0000000100)='@\x00', 0xa0000, &(0x7f00000002c0)={@_ha_fsid={[0xfac, 0x6]}, {0x67, 0x68a7, 0x3, 0x8}}, 0x5, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000480)=0x2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r10, @ANYBLOB="0c00038004"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r9, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040004}, 0x820) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x700}) 18.460105013s ago: executing program 41 (id=5799): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) syz_fuse_handle_req(r0, &(0x7f0000004200)="7f5912d07634539c3b2e15a57b311187a3eb119eb4b279cacf0b94d44882da90bb8c7bf605806fd007bddf798e1fed05db9ef39d3dff16e6eb4e5e642774588b2020a414a4574d1e0aa3474184583a655385fb5e7e632304e818af022a134095ea51f1f77a9472dabe407b36f0c47e318bfdd7c6ecb5a5bc07f28701201245abe626ab4592fac5b1544570a665a5e559eecf9505a828f5b0199a5dc33934b75bebb03744f92918f93553eb072cd2a940a5931a5907f82fc99d519f02287cac4341c4637dd8110214e9634088fc6b5a77a5065c4798538f41b263c6329df4d668d018f7ac9634910969342c836d78c7baa9893cef90deb8cbaa8cac81c262016a8dac72fa5c3d5094a8b64abbf82594b8cb1dc876e01a39fc9a26874052c47ec3ed015bc85933a98a61bbc108292a6c7932421162c82ec64518ce13f0fda30adf97b5c0d70fb0c69398e78d9dabe99d3d408bfef6e2518c820217b4a1cee43704fa5b5c4d4013bb61f631b813b8272188d403821fafe0ee4b5e09671c177e34a2566939920fcda640007845e4d19e2ce3693cea27e7ec2482ee603589260503c567e3dd320923e651d2530afe927013724b1ccc22c390c9e53a47331789172fb44c442cf558f9990badcbf377b731aa83d7b73a6675c687f16c9b96b59e0a6e262da754b1bba316a31fc262561d4628e33de9969794b879eb7ceee36abb30f5f977198bed19fbc4c4f13f32a3909fa76a3beef541a5dfff9ff8609fbfaba986e3a02b23dc0938e7e5b476f5b256a3e3333caea34de6410f75d1daedf4176f6e5a9fb915647bb65302b49895cfb699131513e1d7d937f8e452fe350a78783de31c96535c742b35edc7b117bc2fd2df6cdbef0cfa1000bade8a6c8a06019592b7dc144ffa88a01fb1f6093e82f63b05830f414a07779226b4928f5edc6d592a294c030d518f7e350b2e2536a2bae2616a574b63415c952c28cf6a82553411d305fdc33d1447b7356b8726b67d23dc0749bbb1230b18abfdb6a0fd35cc1489fcdd90aa83edcc613a77db36dd42fc5b83635df5c2acfddab054303e7c859c8bd5a21493742d8fc1adb1ae3f68f6103d65709a8d917292e648c5621691425a203de2e82e9e6bcd53a7f3e90238e89b2b05202ceafc72bb2f997a99487aa993a72d0cb44b345b3982784a78aafe5e5b6ddf2a17e4dca9a5433481fd8e60195832b704a1c186dc3317888c8c0849f1029d0df6af3a5fc93c8e643287ee38580ff450a259dc4bd45343aa453f462e92302c020ce91f26b1c2b66764cac41d2e809a46e51ac50121172759ba4c791cfc8856f7676ad8020433e00bb80e46d9d7709e196565b3a7b18270508d1e0023960e5b335bd901465dc328a581ca918dd295a110aa9f25ebb51ae5523eb619431a9db2b6e046cd94aae4b985bd663c6c6769015f49cb40d3f4b520c1022683487b170c9e47ed306097f1208a92ecf6727f7f276d19bcdfb987ca8b7f54732d0908f98ccac0ba9f6905e194da99608598ee87a6992c4dd33fad2e5e463c995babd0c7dad010499ee2cbf0f2fb63c7678d681a8b63d8a1316fcac3a107f8723dc004aaf7d9224090b6c78212172884eda7089cac24f196db5d3bd2747649e6fee4ebafb3d883df077f99bb945220161a3323aaa09a5caba3348a2d78096a18625aece41aad5cf9fc9cdb590f0cabb882839474c53a14fdbd34772f69cdd369260309a9500af55572adb7b23d4fdbfaa807242ba1130f7029fbcffde2da9b8a0814840e9b241febe92d6247419ae4cd15f5b073c7dc03e4541e24291ac5b4e29cde2649ca6cb7952e81308ae249906ca9d97d8ceb129b0b2b44a84e268b12b8a373965b877028cae0ead133c8422052a8f91d92f6695b6a3e9c36661c0cb6d03dc795490b09f62210803d88dfb3777b16e1485c9c7ce4a4becc718c9da4aaa32f5d9da57ffbfe6633a302b10c676a0e047f1b24e8dac251dffc841a2906002abdd64334a2cc50db924e196b6cee0f9261a87793dcbf8dcf1363b91b33dfcbca15798e9089cab24ed74ddacd61fa07f8797cb21f9c1f4f1d7fd8d0f2e19b99b40173853282bbe94e5c867006949b55c1a27e12fef9f264d2a14700fb5c828e21293b38502dadfd2e96dbbe866547a460a737951e55803fe5ed0b448aa1fbe65de9117d066b2f46dbe658510434d2d3fabc734fc5632fd16a3ddf04a0da7067908f3fe7d9c046ec9d528808d0f4a755a4467609386b31104db69605b78507f83995c297d049d6b028ffe981f0ecd972f23ca43096a955d437f604355e49e1d9fac491f955fae46a150555bd91173091a016aeddc51399b8dd20bb6e8e3060da97180d79a8eea89562bbe4dd19f5c36686c3ab5de9cdce1a241b407c78b2a8886b3e316f5163ec082bb1de53ac1797a633587d9319f3626ce3b052107cd55a6c44b97e27aaf9bf5fe0d4475ae2090920865b0a0f32567351c4ac9859e57cdd8254a58d2dc5d67dd16b513a02954d7c99a9544ce5d8ea8a59a06321083690cf6007bb941cafccb17a3b81c96453964cb469e07e8543407f2c03105d88bbd2073cf9fdc51c9fcf58854417f49141efb66b0f98b36b89eccfb616992286ebaa8f325eb9ca85a45d8b1dfa7a18dd46516ad40d2f46365fac4cbb044624139bb5a0bb0ed062edfa0260ea03b9268f18a7d94d83d4411ee46896ef955aada3e31d29e83414ac0a64353b6498c8f1ef37d051b38291369f6f124913d3fef14af925ab93a34d58f569f3c4f12aa458c85b2b29249e4c868e0bce4791c7f7226bf050c23ad590f6231315f1c9a087b3041ce33f6971c4d5a20f85bb103edd586184e90a34dd5c9e3eb1fea74fe413c503c5d48c70e3fc1d210985644ce5ce0b5636751947ae22e3dd6fa39dcbe1ee3def6a3097c8d9836db3b9ce1bcff91451bc46ef3000b5dc66b007ff2ace898a81631c5728c9de7710c41691332a268b18f0eec37ed7944ad0049936e9fe4df157a8eb324ef0d9954ee8da259c700b05bea37e4238c7be1ead4ca18ef228a15d9828476e899b77821f27512ad3ca27e2bdc769890e6addc2bc1ade2a5434421d627d978b72ce2fab1ee5769646881a2ecea9743ec88b48442806e946c27213bd7fe137d3979dcf477eee9ebec8fbe72fd9b6123c0523e83045dc88ef385d961cb4b48320bf6350846ebb36accdcfe95cf541347dbdd7817e3e7d91b71a1dcb23ba7156484f90f789ba880b8019cb6a248f3db56e5cf7af156c6e84f58e8ffdc322b76dcd1b4ca02cb6fdd1d210807c34febac4c49ddb8257aa18ad782efca3406f34c6500fb65cbfec98077b50ef7a21e366e0fad97c6f6ca5d69b93639f7c608dae3e6b5c282ce130a8ef23908a626ef98e38bb9255ab6db1fdb48ca0d8f2d469123acbf6a1a83ca4f08d21bbf638ffe553fb4faa83993d9fbff7a9af18e21c74ffb720f41e02912d4507aee16acd64a34d2727bed087fa30c34202b34003330c15fbde12d5ba8e7a88b23501c6b837d01b97d78ea66e323579f0ffa9cbb40ebef25deb8a88f82a4e29441fdfcdb743bf98d1ac091677fd8fd3f172116697db4b2d1586303f68b71eae90dbcbee1cbd6eb49702dbf2de4f7f247bd071446fc2edeb68df92fb4436a3773ccc865587202f13083008f1dd964fc912c29bb0072f381b9d042d0fa058faba9d68886cd9fba2f41dd084ed13fbfe9e97afca35024025a83a6c6bbd798c8dae5bffdf486e88b6c32357b20b4b0fbea04c8cef7178a05d64bfcf836cd919216accd05b99ed4390b0016accac7e0fedacefb7ef4580ba6202aa241989fba902b5502bd4d6a3fb0c62c236f78969d395c67cf1ad2f5c250d8f8076189766d6e20ae9de72be45c2d68b5733a6d1f467db1b16a55da3245160188a217306298e5a86a4c4cad1ae72d6287c6b56684ab4452d54995322eb19c15724447b39c196e2056937fb2b956684c06bda117908000000f4524ddfab9c9fa5872f9fab3a5c3e1de343cb59744978ff286e037b2b8a122c6774291d713cd5b233ea9359764c528676e092840cfd6559e01f868e4d96d68c71b8865490946df93c6c617b77ce830a1fb17b3459917ddb1797641ad2e5fa12a4ea8fdd0c914024913ea45237010d8f725c0d6ca6775a22285dab06c48432cee3faccfeda5c7756001121286c6ba8f52740a76a66632142fd84a088f5a0809d49b4cb513630a94acd1f5f246a997c85e90c7b0f9e55b3454a13cbc30518d3979789b76492afd411574ed54f0e9858693dd29b96a20aa55c6835a40c44c84d523054dcaded22718e48708958f977f94cdb360421878f67e97fe2140233f15924071c78fe5ea27b7f9e7eb0cc08fe19703df61906177cb8377c16d50ede70d62f1d8c0f8068323cd5eab2f6fba57ab3574c4742e06031d5a75f3d000b56051f43f987472a5f582a83f4c99a4366ac8c66673da6a312fe4804fb185f3fcbf6f3ffda91f5ebf6467ce6baa992a850765d37de2b3f16fd3ca44854993082e987ca1f520e0c149cdf92f727566c4c5ebe3ecf376c67a5fa7d51942784ff35236a0940a5f275a9ab8c0c5caf68421a14834edc9c29fd3adaedf4cca2802aaa33283ac811d97ef4affbba7315ce7fa5dd2783a067f223a4a8235fd67c23fa535efb4547202d171b51050d508081be9fb6467e9e7d052a7fa8fa8534c440f9f22c8f3d763d89666046951fe85f977a7ad816fc42037adbbec0352ed2b3454fa433e31a30159b9a3d5777944258f01dfe9d38f67af3e85dbdf23e5bb841401b40afeaa708f0a06a2efa2289f9ebda77c2a1390b887bf4b3dd90e418955d05431fd524b481b8b51c523fb1a3d0339bc3999c0a14d643a6ea69346f46a554bd25be3263a3c5ac0848b152d3eed833e7f2a6ce3b0d4100e49319120d4c2b520205fa2a344ab087bec0f73968768d0188007603a77428f12026cf3b296823f3138315ff0f95f3c62c060acb1a11850b46d361ab41b7ad241e45246b091ee2d0c1d444290ff6669a34f1fd0020795fe89d4b67bf07f16c88c8987e7f72480ad42109b43f37e4c753495661b0514553532364638ca8152782b99804b6f9da69fb2b5b7f93acad94ccbadf6e6d9547852088945d3d8c4c5702b1323c47fdd4fc77fcfd61c7ea8b26cfd0954be063cca429cb9915b8a937833ff4c1f2bd620b08dc00ddaab4fa5e13a5f4f2127f0b63b7140dd14b1dee95f178d2bc33cef7e820e609aaa20a733931625227529c714530574bb8cb38e6baef0cefe9a9e3277a4e1534f249abed7f06c8470ff3723c9140f5ed466ba7b79ab2ed2e61d2f5826d72a560c8cc6cf6a64fb9e70b1d15b80f22cd86bbd38b5c46741e054204476f63651f3cc9bce975600abb3133e104fe0145383d0d320367df2dd202daeb7b51b4a1e4e7d36fd1c847965efd71430b8bcef773163b1e378e1381f05083304ea41ee8d37ecd988cc671270101ad4800706cf0387bd038a7164d1586ef5e8791cd6bc3a91bdcf35982d46d841acc8342544d557d369cb4a84589082bf9503d45659791e522bec6a5f61f740ca5540787dc4a6a9f567bb6c0b13d618e80b2b348adde16fc63b2052f381eab8c120f14ab623a4110030847db00ed2d19c0101991f82a8671738b68b6e0efaa8f771de3cb6c2165298df69383b775fafb7c249fd78ad2ee46390c1b905b3853680a80a1849952a10e69fa64d680cdeaf5a451408c5b5d64e0f244ee362f21f37c66b795d73647964d12e297f7f6b760ee4e4b46ef502a54483d3838674e1767eb93f91454f1dfb629e45ed71646f139b685cdac6c73afc20bf62b3b2dcd81d9adf65b4f4a5f2a2a2fa7e079d944739546462519521e523db10cbff9489d7ce84a78ed5fa80b2d5361f4829bfa4bef5c351c984cf58a5f227687eadceb8c0cdc51825a008f8bb8ebb549864b6fba1da22da5aa0a0161464695fad60e636e45091b6dee20498f33ff9f91c1ef927c90215cbf4f5711805eb13e0e65cf326627bcfdaf0bf07d5e9c53520b884411ed632f9f5169db46d674fd660637ab8ee1ca1aefee8ea4ab3b41e6fc18842a0a254db125243e4e996db939aab80b04d70fb22f3c1cf7edb1d18cb5af99be7dd4f01e2ee265109abc51845dcb3f5c8e8477fd7fa8fe41bd83809120428ea9dfef010005964d66ef96c1648516f1b0cacebd95ab20c2a2e2647c967c57c6c9b7977441a0dfeffba2beaec54a66f863c9ef3a4e2fc77928291753648b7abf3fc26128cb4eea246468b05cac113b3464546442e14d5aa760a3d7c481d238b2a5226bfe0dfd2dd5b2a9a5ad738c6a83e21312e0e11ea3daedaa7a6e527ec166337d24b083ccf97af580edb453dc1a7b841b7266ea143b294291ac5ed5dce7dac20d14bb6e53b64eec515515ef817611d22d3a306170d4f358f0b890411454e1bdf85ccc42589ba1a1d75289523e4aae1eb46328d0dac43539eab1d3aeca3db300e605c53cccf04d3688e5db58fe283b01745dc39baea5ff49db07deb7adeac2d3df45fa72f9fccc9d1947556fd8594faa393a2854691016eeea88e96272ee1156874b9ba78a4f71022e3ec2e0776f8db400e6b967be079684d3d80645125c488f5bc0a69a3d7e12bf187a41a8acc9b2f7a610798fb6e2e438b85a9012d6f6990c7b9a557b98d32753cc1786868dc864edd3f0edd8bbf48924fd09d0d7a2334bfcbb5786752765c8f33fc8cdab048b81607b1ba098ce44e6d99d8b1b08b5d19d177f6661c32031d475381c0c804c63d2b7ae9a2198c0d6114e7bdd0e01a4cbfc5c41e858d28f157efe5a52ffd6d70f2bef2066a2d65ec68ac1ea678588f1cf0c9eb030f34a2d99138c4a6a0f85edd8a382324c2c823a7bfc3db3e6822faa0ab1801361c1f23aff0fdb8fb27cdc1db4226d62c0101561e78b704854893c6bf0de79b45f87da7a8e4f65875842230d2bfa152e96fecbe4a7465fb400cb7790102d0a89f105e84a23173141245d641051b8d614d3be26423bc0d042990c62ea3b7392e7a8117e250348d3cf79be1529c8a764da382f019b5a750ab848ad03cf53921c8548318db7aaef2be3acce1a3d9a9715ebf6a5b53da18ef20b932d5926c3cb44c1a4e6ef83f2a84f8afa382d44ea35f17bc147ae1dc792784cfd9edeb9fe09f422aca81ec59688baf429509a6b27ad0f6e21e977756a022979c8a47d983d42a913d0ea6ecfd8bc0aaf9fba62a36d542710161a088656dca539a940ec6dc79ab197eebb803988674d93c8d604a5bcdcdeba44c331c72e58ff9320f39031fe711bca2e0269b1028862c2d2a6c8871a0f92dddd30629eafc739165a070c61c12be11bf3d3cabb31decf449059c99fcc12a1684d8cb48e496df33920dc0a4fd225981c0f45b7220fd9d9189808e4bb39e5accc10fd7a8f3cf1335cb9dc31043a1e2eaf75e0ba500d5ca4497b2924725c0892033eb0ef944e2fc204e9f1e177862af3d59190e2335061a76d4d3bd922d9bb72553a339dd1672b61a91a0d0e23ddf6b08bd13cdf82451b5e8fd3842ba71eebdde40f8563124fba86c3c500f2ceb7246967f497f1dd3e5e42f14774a909199dbec4b469b8b3b6b25a95caa86f334084d38d71d93a395acb14c145298c503f7f494bb9867c564ad7e32aa1ca7bcfa2181dc712165247462db25192f7cba05cee92826c0561303bc473c9485a989793b8bfc2d0285dfbb13c11a426dff4e404435e2e47760d45b76f91b6c7bf04d4504c2502293fc7b49d24fda5b5fcfabf714087582d25a69ead80222da1d574d599b39a0c54ea7709dea1798b9eddea5cff504cc5ae40c561976c11a514f2ba359f6791830926fa13ac7f71e7614d0233305d3ec694b7d31ef320a44079af2614956ba31a66b959a11a3bfbdb683037d6ca42d0e9bbd2d83af74fd4a73dd6537e393b7026169d3c0e017a9e3392e03e8d76cc0f5f0caad4926b3169d61ea0010000805f62aba4ecab5b053d54cdf8ec5a69320094d520f702cbd218125f24e38a5934a2f5f4d74c12df05cc0c7b3c36a37db2863e918a8cbc496fa77bf6109008e20602636ddbd53aec45741384aafd05ebbac9d6ddd8aeb3d75775bae5124cbc7fb5db4ce9c8af96ad05035a8dcb64c0b02f0669c65b07f60c9cb81e99462ef8318d0ab65b97d6a9271042f4d46a5d8ee42b90783db78827d018b8d392ab3eab88e06b409878fcf74067b1a1fede92874741cfde10bdb444819fb991c36c9dd458c8794e0b4bd9e3f7cd383c485e6a60fa4238b318e14896934d97b4b7993472f4f9f246ca7523e5979c984fd16248b087cc3eafd706328a3ec47f88247357c4b759a2a1f0efde24f4129fb612f8c3742847b39996487653d6bcaf5862dc1bca501abed2d0b5a23c1d2a62eb968acb01763718b27a57e99bcd66c9910d6d0bedc7e6197bd58267cb1a8c61eeef9f19aaa6a0cab7cc268e8bec46db3fbcf4de3e8abe483bb01811087fec18bbe471628c3bc80194d3661efa6d9130a524089b07d8cdf6198018a24d23bfee4a1664e68ae7c30f77bbbcc7116d9bda8a4e6c01f047a4ee60a09ab23a63e1bcdeb3869043efe60eb3b7a6beb366d11e786002b2e3d36d44f91ed87152697e456f8ebd2b0e15df21a773b1ea876319fada12bd340314944f8d9d90ea26380cd83692a2f634c241bfa0868fd7ba52a841ad418c97e818195047d6d11ade0aafabe0d627a68721f61f3758c40dd14498521966380d59e0cb621953f0ea908fd297178899b2e60c210479a4a9ef9a8cf1d2a0c2e909043ce75d2f4fb766eb166b995b714cfb71bad7462525aa15d3fc8462808f8a0cee080502765bb9d1e9912a9ba937a94e48708b531d5ba71bdddb97fe77dfc7fcbcc0ddbef56c1f78feff399eabe15aac18b95f0c88a40dd5ebbdcb3ae45ba66dc990e9267c5290f7b357e1ae5e354c72edab117bcc394e4e8a91d99ca2f000420ff9cb32f87c663c6bb9692cab44c5c26212dad70a5426ce7eee219cdeb6bcb65d9b1f957c3e495a1105a60dcf446f4b192fa50d8c4426b8ba3ef0e06be2d04d7e142e825718828617220349408bd313df2ae8f860058b169b7ec3416f4c73fbfe509b442b8332a7049e7dd59b77d199079c187f7afb9b869ddd27864fb1bd0ba7e0ff67ceefc88f86362540a3020b9a90d07b9634358142a4b095f3becfc810b2ca5d78361403cf09e59c3b747953ff3535bb9f99bfd20da8a64082fd8552739f622e5d24d2fee438083d839402aac872f3d98f394d56bb4564c8caac19ec4873ffd2dae20a0bd8f0781fb92984755014695ba1f3a2e01ce4fa33206b53138afdacf34c2be54b56cd76a9948013538c7ed8fa60055e9b60aafde90f50b4e0cc9b3009f45823f674f23ddd6cb2439c479e20ab975139055bc8ad72315c3c466093be1e06ad27f7601b9cfbce93f172143c6523e239fed636ece9407caa423db7e64d6ee1163976dd7f19c333d02d788111de7243b7dd6dba0a1d9957e758acd4ad9ceba61d0be6c2be89b65d18f1a7f1cee89f9fee5dc682e12e78d2822f99f4b2a920c36d0650604c545b76c9e5755032a8ea94d0fb21d513a138b5a1ad86acdf0097d5f289a9629c7a3e570a96383980c067a702cdc198712adade467e0baf05595108dff0b342d1b1fe243cf8145d024b46f8008c20ded574da9f49b49163591a6cd2fcad74caad0e95dc5714a15cfa88ff11a7d30028326575217447100f4c5c97f0cc25d79960e39b94f0ab60f986fa3c919865f8e231bd77c2c759b166d8874728e9e131b9b3aa5cd166a9ae330ca439ea3ffb7581f1f4389ebf9334810d07981c5ea03b42ef5615ebc17005a0c9c02478353c08f4cca0b6a2e98de3d51d3174ee8101387f52b12b699b57a4c50452a978eb43c3a101ae69213fe93f2606fc6bf7b771e3dea5e578b85e5642791e9aa281c8f91cebde1095cbc23ce174a1ceec151703a226749176d42d72468d48f88012d18e0f2640c3018e08c8a2df197f273596ca5d48cf976b7ee051189b8081f0863e613258f267a5bcf30509c6285fc37c0d045c29c471b04f189cb3c69914ba0591cfba1c71ed909362aa8840be28e624e3a6b8393170e809231e10820326ecd03e23e11dfe29ae47adddf3d4f858d51f9ca33ee85a5077a1463caac5d434293bcacafe15b3e6cac7247a33ace000f164cf8a5243f89b89b8b11220b35a07679e7af900e540d965669fa23ca0d0d3b47d9b2cb0fa31a90c69e686d582f6c9c8c628875c002cc5e288a5e1b738a42258569fe2a4de3dfd7dfd13b1fd7c8c29dfa4f58ea8d0c7e56222fb9b0d29c68c7cb8ba3fd79b04a14366f83bbef2531311a3f385bdad440ee85e2dd947f32a349f9d1eb750ceb0f7211980b0b970c7b81f16935d4d3e764869edae7a45cb45a0445e8c8ec27fac4edd6ea269563b6f12f394782fd970cbfc2752fc9f4892c731eaac8e3a315797b0449b2a9ae3d4bd25d0e8f1a43e29630b4e2e882ece16dc542fcbc1f165b2cefc4deb40c23bf61f3e51d5acbc81135d35f0c055d8a003e03c0625e83f95ab2349c222dbc6d62d34e0119938d0b384a86dbdfd00c1226d0ff1f834c3529361c9db6d5612009bc39a0d654de2940ee2b8a96bd3c297ecad0a3df1b2a85a400fab889648315415c4ddbd0c9752146496d3769b3c9148330a8324453d4431d19727ddd12493003bd7eaeb05b2f5c333a33cba442df3dc11dc23c80292a52b040f5e707784b5d29f4c46d3ac8ae0e159517c1a196103bfd6bf6d32afd687773bf224ef00c844f1f36365e7220c57a97aa0904219a0ab84def7095b280b971b554e0142d154c5422c918b4744bb3b9e61721a983f4d63cc79fd88295b67b24fec0ec1ce8a2e80a1ca4e97cdda6d2df44a571a74b941f049886355e2bb5ed908e646850d85095d099e3a189a4298f4a25c0798b4dc25cd630695561a04f43ff009e4f49177e01c11442593fbc23657a46f918a77231b3405d4931b6f2c01f0207d6933304bb2106c5dbce23378bc7ca66ff4f57550bbc36500f6c4ce21dc22a4575c315d2f4c4fb1fb8e12ebc2c037451611718d4371c6d0a00bab9f68a1dea6bd654d49232ab3c85e07a6ec8e2b19012c31d540f81d666d0a236e9e2a4b6d85c0974efa172d13003b63e94cd7a5652f4703d88712fb63521abaf0e2a0dd4b2e457e42d4a811db6a77310b1aff1b9055c9995ce9a0fe2e0c3657c52ae562738b6c12693cb2bffd1d3c41b6a73feec4008e63562bbc38a8c56c10efdb2b67fcef74f6a6f7e35baa4685f7764977348db378b242ac5f81a8a69c666c0247d1d326faf3b7dd4f07bfb16c08bb2703f6997e1a6cf042c0ff0fea27217ac2c78328bd573e8dd86263de6ffcf3d26d45d8be7234da9f24f1a08ab16f3df9e85861fb1251933eb8982b81999234d6d56759acd528ffcaee5a300e711e0b7f0b208612caa6dfeddfe4557161933a1910ec4b35ed89760fb91de6c19f766845979e36855a11d7ba6b892a717b32e8e17b367c5fd11b940de937a975470bbf872f8a1cd637c76fe0a9aba5fb9e", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x8, 0x8a, 0x1, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f00000004c0)={r6, &(0x7f0000000100)='@\x00', 0xa0000, &(0x7f00000002c0)={@_ha_fsid={[0xfac, 0x6]}, {0x67, 0x68a7, 0x3, 0x8}}, 0x5, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000480)=0x2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r10, @ANYBLOB="0c00038004"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r9, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040004}, 0x820) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x700}) 15.461206527s ago: executing program 1 (id=5850): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000940)='fd\x00') pread64(r0, &(0x7f0000000780)=""/185, 0xb9, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000640)={{0x8, 0x5, 0xa6, 0x9, 'syz0\x00'}, 0x6, 0x1, 0x80000000, r1, 0x0, 0xa, 'syz0\x00', &(0x7f0000000600)}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x4, 0xdb3, 0x1003, 0x3, 0x2, 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24000011) mount$fuse(0x0, 0x0, 0x0, 0x308f830, &(0x7f0000000880)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=r2]) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000002c0)="4a2b5af6b9c8af77a75979705a07", 0xe) openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x101001) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000540)={@private2}, &(0x7f0000000580)=0x14) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/tty/ldiscs\x00', 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x800) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r4, @ANYRES16=r0, @ANYRESOCT=r7, @ANYBLOB="c18de58b6a29e359a15f6fcf7ed437a8589925bba85f298bc6c249c7a4617b970c6e67ffc689e6bf8cbefc1e0aa0de92633afc6caea43f7e3463fb8f9d156ef41f718b8e6648f0e8acb00a90", @ANYRES64=r7, @ANYRES8=0x0, @ANYRES8=r2], 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x20000000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff9c68d4372b1f079e2ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdf4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587304800"/77, 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000900), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYRESHEX=r0, @ANYRES16=r9, @ANYRES16=r7, @ANYRESDEC=r1, @ANYRESHEX=r8], 0x2c}}, 0x18) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r10 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r10, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 11.280067694s ago: executing program 8 (id=5858): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006c00010025bd7000ffdbdf250000009d", @ANYRES32=0x0, @ANYBLOB="90600100022a0000140003007665746830000000000000000000000018003480140035006d6163767461703000"], 0x4c}}, 0x20040004) (fail_nth: 5) 10.913397611s ago: executing program 1 (id=5859): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x16000, 0x4) 10.16134351s ago: executing program 2 (id=5860): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r0, 0x402, 0x8000003d) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xa0) syz_io_uring_setup(0x5c7f, &(0x7f0000000300)={0x0, 0x29c1, 0x1000, 0x0, 0x209, 0x0, r0}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xb3) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0xfffffffdffffffff) read$FUSE(r2, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fanotify_init(0x0, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000000000)={0x0, 'vlan0\x00', {0x1}, 0x9}) fanotify_mark(r8, 0x401, 0x1000, r7, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) write$P9_RGETLOCK(r7, &(0x7f0000000280)={0x23, 0x37, 0x1, {0x1, 0x6, 0x7fffffff, 0x0, 0x5, 'gred\x00'}}, 0x23) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x14}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) syz_clone3(0x0, 0x0) 8.722876079s ago: executing program 1 (id=5862): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000037c0)=[{{&(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="858b27dfa54a0e33612b26aa5c11edd31629db26770b97c6e3259332740dcec70318e5ab86e312adb48dff15325aa5000c03822136d95f3ece7c2da3f4a90400594197f58c6d7f96f52f51277477937ed3b0d1d5f116ec1d5a15", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)="b3f2c9f778716d56367388f60a784dda5588a8fbdbe7c97588805d6366c30bb463c0a6f50d4d13142ab190947f29c0bc603256422566870e60e02a6dff9338", 0x3f}], 0x1, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xa4, 0x0, 0x2, [0x10001, 0xffffffff, 0x4, 0xe, 0xfffffffb, 0x8000]}, @lsrr={0x83, 0x13, 0x2a, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @noop, @noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x28, 0x93, 0x0, 0x8, [0xdc, 0x4, 0x81, 0x8f3c, 0x3, 0xfffff2d5, 0x5, 0xfffffffb, 0x10]}, @lsrr={0x83, 0xb, 0xa0, [@multicast2, @rand_addr=0x64010102]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)="f3a2ae3b8c15410140756c1dead51ec57a41db06be1306f8c4ba914c2c1555adf0193652b4d76a72d50c53b39aa99a64591ff9864c28b79fcacbb6cd87013b388c5e0ea24bcfddac38750287859b5f18f63aa440c84b1501e3ab302f233fb4ec717a6bc32770bfe1", 0x68}, {&(0x7f00000006c0)="862fb8a551532ed39247334636aad463381bf1f36e27ff88cf19d313513fbfca46a0b67b60485ae011d47ec5aee759dcdf291d1fa9a3cf5f3113f573924151f044ddcc0a479add2352162aca791e61af9c7e10ccb5dc53f35236203b33d0cf5e06566dc3943cb86f531923a22d702afcd6d259831256f8db915e67f2a8551845e53206b4b17aadae7c0bad4bdcef346ed004bc3bf344ee6f6827f86c41a4769ba9b56708f0748b6992611f48b50f0f3d", 0xb0}], 0x2, &(0x7f00000007c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x84, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x8a, 0x3, 0x6, [{@remote, 0x8}]}, @lsrr={0x83, 0xf, 0xab, [@loopback, @dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0x41}]}, @cipso={0x86, 0x53, 0x2, [{0x2, 0xc, "fb763bd30c0b5bf90a85"}, {0x1, 0x9, "4ca7cd2347479b"}, {0x1, 0x11, "42e7bcf8c4dab6d49520984d483594"}, {0x1, 0x4, "50d3"}, {0x1, 0xb, "532ace0a534f8f760d"}, {0x1, 0xf, "f59e444e9ed9665aa140128f66"}, {0x5, 0x6, "a37976a9"}, {0x7, 0x3, "f8"}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0xb8}}, {{&(0x7f0000000880)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000e40)=[{&(0x7f00000008c0)="48516f09cd7e3018dd3c9123eeb0c8e97de6b66bbae58dc468", 0x19}, {&(0x7f0000000900)="b2e68f6fc8bdaacf5b33ce5ad23424f81da11253b018d97bfe88da5b6706ff4b7fe5111984e707ad814e1c7401676eed3a66b956c543286f35dff852e949d3736654a209432b7f63d8d488b19b31d8f3a9e9d66cf6c0cad0fcb4087ef9df370f", 0x60}, {&(0x7f0000000980)="17593ddf986c6d670e7c3498c69da8261fda58d8c9fdabf8b8b619a32f9afa360e8454b8bb57288e0f74988ea6d6d2650da636f5525b7c86e6505a444a93f2191f54333ba63d66374711a88623b9c5b50e7f5df60a2870ca350800978ea737d365da244a0c989cfca4feac9681a33c98ec19b86c3545b4a58c3f73af233fae004770184838f183b739f1000000000000000000", 0x93}, {&(0x7f0000000a40)="fe92258c707de213338e94f3c580938e0cfcb88ee204680f4f64a03c7d9afec2ae69ef950505f35623f87f17445492ea51a1fdfe9476294755b76a9d963dff8813ad8467a9bd86332099bf0b76bdd61eb2eba59ec53907e236585e44376f6ed341fb811ddcd64f8f", 0x68}, {&(0x7f0000000ac0)="74e73555398f1528c7afee474cc86c6398fee76b86fd012637b58602813bf8d55666df2721027ada3316357d3d47ef68adab25907146de2c5fa0afebf0f6", 0x3e}, {&(0x7f0000000b00)="02d54d100be7af5ba691509d9496f4eb3de1c2ec450a2eed2b608f34b1c3121ff7d801ca04056d8231c6a59270116029d016d6d9766430974090f8df2c30ea44da933a1d17d336976d698b6421ccec0996e5c7d6f54a0150d6e6258c2f84a8ee45a9eaddad4d30fff2ca1f2326c3f5765b8195842f2aa031048b64e91900f425d2766e2187883267437104084433d7aa688c826c6cd4642eedf08783e16fffbc0c9f0b7eb82b8ac0f8ccac37fb0916a6c1e277bcac76538ca425ebed72a5211cef06cba1a29cceb642d4f3f1a1a64f564e6233de14ea7d2ec6fb6e2c5de2f04a9fab68baa371028da5a3c1693b92be197ed515071955632406", 0xf9}, {&(0x7f0000000c00)="df5032932c0ffe65faf7795d389459d5c6621536c3d3d101198ae18e93b5ea8731acef32cad54e305454876286f2fe385bd19d6af7c0d6adc2bdbc87266161a0c87e96b4e28b6efe6786d8c925e6fc99fc4e0570186f366aef7ce0ddce63bce7e1a8b33c63da2f5ac80f695684118d63f267ccb997cccda3a3625bb05de9d54793f1f8adabf2103dbc02907a554e98fc8615a5f3d168f7125e20754b1fb0a749bde9c0161e13b3c21b6d1bd4463628790699a8f0b14b080910deb8fa3edbe0dfc590fcdc26557184b8640536910d353a52", 0xd1}, {&(0x7f0000000d00)="b7edc87a0b9132d3bc362a16e921be94aae04d858012e912a4f043c4e3c87f87889f347c6728d8ac4b2cd6e102fa9d35d654f4c7f2bff3295d0d6dd22a3e9569039ae23f607b1556338823ac7304d7fc6b190d61174151917dda01b3f39444ed19365c4b317a8b3ce988733a313127034a1fe2d9279df0d2bca49ea88f302b41da72fdb4dd94e6797911d6f2b871470845667f41529fd8876e1e01517dd593", 0x9f}, {&(0x7f0000000dc0)="c77565f7fd95b714463f260487c4929996d1a910e58d77027b4559f31bc9c381cc86a1ec9ad0", 0x26}, {&(0x7f0000000e00)="c52d715a7f860c860fe595b7e2b5ab14c816aaf256fbe5e9a90c1dbef1bb6cc258fdae88ee9a9c29b65741ddaac5", 0x2e}], 0xa}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000f40)}, {&(0x7f0000000fc0)="2b2779c553c35a255f9ff7214b956f178ceb065e95e4dee49982f0ffbd330831dfabf2aeccef4aa6d95f26fc2e8bc2f65c58767ef8c2c45751d8d7f7ac57f11f0d", 0x41}, {&(0x7f0000001040)="1b", 0x1}], 0x3, &(0x7f0000002140)=[@ip_ttl={{0x14, 0x0, 0x2, 0x85}}], 0x18}}], 0x5, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 8.356854808s ago: executing program 7 (id=5864): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000740)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000200", 0x40, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0, 0x0, {[@generic={0x8, 0x2}, @timestamp={0x8, 0xa, 0x81, 0x3}, @mss={0x2, 0x4, 0xff}, @mptcp=@remove_addr={0x1e, 0x19, 0xa, 0x0, "0f752c8bc9a62d36a13a7d9c81f36546e6c53cbb4c6a"}]}}}}}}}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.305050099s ago: executing program 2 (id=5865): syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec00000001090212"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 8.303469504s ago: executing program 1 (id=5866): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000740)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000200", 0x40, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0, 0x0, {[@generic={0x8, 0x2}, @timestamp={0x8, 0xa, 0x81, 0x3}, @mss={0x2, 0x4, 0xff}, @mptcp=@remove_addr={0x1e, 0x19, 0xa, 0x0, "0f752c8bc9a62d36a13a7d9c81f36546e6c53cbb4c6a"}]}}}}}}}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 8.221422564s ago: executing program 8 (id=5867): r0 = socket$netlink(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001) r4 = socket$netlink(0x10, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r7, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000000100)={0x28, 0x1, r8, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000000c0)}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000840)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d61637365630000180002800c0004000300000100c280", @ANYRES32=r10], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 6.773892893s ago: executing program 8 (id=5868): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x7880, 0x20, 0x8, 0x1, {{0x31, 0x4, 0x1, 0x4, 0xc4, 0x65, 0x0, 0x7, 0x4, 0x0, @multicast1, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x34, 0x36, 0x3, 0x0, [{@multicast1, 0x9}, {@private=0xa010102, 0x2}, {@multicast1, 0x60}, {@remote, 0x101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast2, 0xd}]}, @timestamp_addr={0x44, 0x24, 0xbf, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0xe}, 0x7}, {@local, 0x1}, {@local, 0x761}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0xa4, [@local, @dev={0xac, 0x14, 0x14, 0x18}, @multicast1, @dev={0xac, 0x14, 0x14, 0x23}, @empty, @broadcast]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x25, [@private=0xa010102, @multicast1, @local]}, @ssrr={0x89, 0x1b, 0x53, [@rand_addr=0x64010102, @multicast1, @private=0xa010100, @remote, @multicast1, @broadcast]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@getchain={0x74, 0x66, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6, 0x8}, {0xfff1, 0xb}, {0x6, 0xffe0}}, [{0x8, 0xb, 0x8}, {0x8}, {0x8, 0xb, 0x100}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x100}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x20}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004080}, 0x40004) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000c40)=""/3, &(0x7f0000000c80)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/address_bits', 0x800, 0x0) preadv2(r4, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/71, 0x47}], 0x1, 0x2, 0x101, 0x33) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010067bd7000fbdbdf2511"], 0x70}}, 0x20008800) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000400)=0x134, 0x4) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1) ioctl$SNDRV_TIMER_IOCTL_START(r11, 0x54a0) bind$can_raw(r9, &(0x7f00000001c0)={0x1d, r10}, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000007c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x8800) sendmsg$can_raw(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@can={{}, 0x0, 0x3, 0x0, 0x0, "f1ffff0f000300"}, 0x10}}, 0x4) 5.198956663s ago: executing program 8 (id=5869): r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x11}) 5.081340449s ago: executing program 2 (id=5870): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000600), 0x3) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000380)={0x1, 0x0, [{0x4, 0x89, &(0x7f0000001500)=""/137}]}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f00000006c0)=""/192, 0x0, 0x80e3001}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setitimer(0x1, 0x0, 0x0) getitimer(0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x7) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000072009fb300000000"], 0x18}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) gettid() fcntl$getownex(r0, 0x10, &(0x7f0000000100)) 4.626707676s ago: executing program 8 (id=5871): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) r1 = socket$inet(0x2, 0x1, 0x100) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002"], 0xfc}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r6, &(0x7f0000000100)={0x1, {&(0x7f00000007c0)=""/194, 0xc2, 0x0, 0x3, 0x2}}, 0x48) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x17cb3, 0x3303}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_pts(0xffffffffffffffff, 0xe12f945a22c1347d) setsockopt$sock_int(r2, 0x1, 0x42, &(0x7f0000000000)=0x3, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe000000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) listen(r1, 0x5) 3.58833417s ago: executing program 2 (id=5872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() fcntl$setpipe(0xffffffffffffffff, 0x407, 0x15d) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) r3 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) preadv(r3, &(0x7f0000002a40)=[{&(0x7f00000001c0)=""/240, 0xf0}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/112, 0x70}, {&(0x7f0000002540)=""/42, 0x2a}, {&(0x7f0000002580)=""/217, 0xd9}, {&(0x7f0000002680)=""/148, 0x94}, {&(0x7f0000002740)=""/185, 0xb9}, {&(0x7f0000002800)=""/199, 0xc7}, {&(0x7f0000002900)=""/221, 0xdd}, {&(0x7f0000002a00)=""/25, 0x19}], 0xa, 0x7, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="800000002000040026bd7000fbdbdf250a8080f7070000050049310014000200fc01000000000000000000000000000114000000000000000114000100fe80000000000000000000000000003414000200000000000000000000040000000000e77f0000000000000000005f8e690000000000000000001000"/131], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3.474524219s ago: executing program 7 (id=5873): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x9, 0x0, 0x6, 0x6, 0xfffffffffffffffb, 0x9, 0x6}, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000240)={0x80, 0x0, 0x800}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000340)=@ipv4_newroute={0x1c, 0x1a, 0x3, 0x8010, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x83, 0xffffffff, 0x40}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x6, 0x1a, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="a0a0722dcfb4", 0x0, 0x6, 0x2, 0x3, 0x0}) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x3c, 0x40, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) name_to_handle_at(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x54, r5, 0x1, 0x70bd2b, 0xfffffffe, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffbb, 0x3e}, {0xc, 0x8f, 0x21}, {0xc, 0x90, 0x40000000000005}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x20044010) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006c00010025bd7000ffdbdf250000009d", @ANYRES32=0x0, @ANYBLOB="90600100022a0000140003007665746830000000000000000000000018003480140035006d6163767461703000"], 0x4c}}, 0x20040004) 2.243492486s ago: executing program 2 (id=5874): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r0, 0x402, 0x8000003d) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xa0) syz_io_uring_setup(0x5c7f, &(0x7f0000000300)={0x0, 0x29c1, 0x1000, 0x0, 0x209, 0x0, r0}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xb3) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0xfffffffdffffffff) read$FUSE(r2, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fanotify_init(0x0, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000000000)={0x0, 'vlan0\x00', {0x1}, 0x9}) fanotify_mark(r8, 0x401, 0x1000, r7, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) write$P9_RGETLOCK(r7, &(0x7f0000000280)={0x23, 0x37, 0x1, {0x1, 0x6, 0x7fffffff, 0x0, 0x5, 'gred\x00'}}, 0x23) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x14}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) syz_clone3(0x0, 0x0) 1.972841995s ago: executing program 7 (id=5875): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000037c0)=[{{&(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="858b27dfa54a0e33612b26aa5c11edd31629db26770b97c6e3259332740dcec70318e5ab86e312adb48dff15325aa5000c03822136d95f3ece7c2da3f4a90400594197f58c6d7f96f52f51277477937ed3b0d1d5f116ec1d5a15", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)="b3f2c9f778716d56367388f60a784dda5588a8fbdbe7c97588805d6366c30bb463c0a6f50d4d13142ab190947f29c0bc603256422566870e60e02a6dff9338", 0x3f}], 0x1, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xa4, 0x0, 0x2, [0x10001, 0xffffffff, 0x4, 0xe, 0xfffffffb, 0x8000]}, @lsrr={0x83, 0x13, 0x2a, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @noop, @noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x28, 0x93, 0x0, 0x8, [0xdc, 0x4, 0x81, 0x8f3c, 0x3, 0xfffff2d5, 0x5, 0xfffffffb, 0x10]}, @lsrr={0x83, 0xb, 0xa0, [@multicast2, @rand_addr=0x64010102]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)="f3a2ae3b8c15410140756c1dead51ec57a41db06be1306f8c4ba914c2c1555adf0193652b4d76a72d50c53b39aa99a64591ff9864c28b79fcacbb6cd87013b388c5e0ea24bcfddac38750287859b5f18f63aa440c84b1501e3ab302f233fb4ec717a6bc32770bfe1", 0x68}, {&(0x7f00000006c0)="862fb8a551532ed39247334636aad463381bf1f36e27ff88cf19d313513fbfca46a0b67b60485ae011d47ec5aee759dcdf291d1fa9a3cf5f3113f573924151f044ddcc0a479add2352162aca791e61af9c7e10ccb5dc53f35236203b33d0cf5e06566dc3943cb86f531923a22d702afcd6d259831256f8db915e67f2a8551845e53206b4b17aadae7c0bad4bdcef346ed004bc3bf344ee6f6827f86c41a4769ba9b56708f0748b6992611f48b50f0f3d", 0xb0}], 0x2, &(0x7f00000007c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x84, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x8a, 0x3, 0x6, [{@remote, 0x8}]}, @lsrr={0x83, 0xf, 0xab, [@loopback, @dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0x41}]}, @cipso={0x86, 0x53, 0x2, [{0x2, 0xc, "fb763bd30c0b5bf90a85"}, {0x1, 0x9, "4ca7cd2347479b"}, {0x1, 0x11, "42e7bcf8c4dab6d49520984d483594"}, {0x1, 0x4, "50d3"}, {0x1, 0xb, "532ace0a534f8f760d"}, {0x1, 0xf, "f59e444e9ed9665aa140128f66"}, {0x5, 0x6, "a37976a9"}, {0x7, 0x3, "f8"}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0xb8}}, {{&(0x7f0000000880)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000e40)=[{&(0x7f00000008c0)="48516f09cd7e3018dd3c9123eeb0c8e97de6b66bbae58dc468", 0x19}, {&(0x7f0000000900)="b2e68f6fc8bdaacf5b33ce5ad23424f81da11253b018d97bfe88da5b6706ff4b7fe5111984e707ad814e1c7401676eed3a66b956c543286f35dff852e949d3736654a209432b7f63d8d488b19b31d8f3a9e9d66cf6c0cad0fcb4087ef9df370f", 0x60}, {&(0x7f0000000980)="17593ddf986c6d670e7c3498c69da8261fda58d8c9fdabf8b8b619a32f9afa360e8454b8bb57288e0f74988ea6d6d2650da636f5525b7c86e6505a444a93f2191f54333ba63d66374711a88623b9c5b50e7f5df60a2870ca350800978ea737d365da244a0c989cfca4feac9681a33c98ec19b86c3545b4a58c3f73af233fae004770184838f183b739f1000000000000000000", 0x93}, {&(0x7f0000000a40)="fe92258c707de213338e94f3c580938e0cfcb88ee204680f4f64a03c7d9afec2ae69ef950505f35623f87f17445492ea51a1fdfe9476294755b76a9d963dff8813ad8467a9bd86332099bf0b76bdd61eb2eba59ec53907e236585e44376f6ed341fb811ddcd64f8f", 0x68}, {&(0x7f0000000ac0)="74e73555398f1528c7afee474cc86c6398fee76b86fd012637b58602813bf8d55666df2721027ada3316357d3d47ef68adab25907146de2c5fa0afebf0f6", 0x3e}, {&(0x7f0000000b00)="02d54d100be7af5ba691509d9496f4eb3de1c2ec450a2eed2b608f34b1c3121ff7d801ca04056d8231c6a59270116029d016d6d9766430974090f8df2c30ea44da933a1d17d336976d698b6421ccec0996e5c7d6f54a0150d6e6258c2f84a8ee45a9eaddad4d30fff2ca1f2326c3f5765b8195842f2aa031048b64e91900f425d2766e2187883267437104084433d7aa688c826c6cd4642eedf08783e16fffbc0c9f0b7eb82b8ac0f8ccac37fb0916a6c1e277bcac76538ca425ebed72a5211cef06cba1a29cceb642d4f3f1a1a64f564e6233de14ea7d2ec6fb6e2c5de2f04a9fab68baa371028da5a3c1693b92be197ed515071955632406", 0xf9}, {&(0x7f0000000c00)="df5032932c0ffe65faf7795d389459d5c6621536c3d3d101198ae18e93b5ea8731acef32cad54e305454876286f2fe385bd19d6af7c0d6adc2bdbc87266161a0c87e96b4e28b6efe6786d8c925e6fc99fc4e0570186f366aef7ce0ddce63bce7e1a8b33c63da2f5ac80f695684118d63f267ccb997cccda3a3625bb05de9d54793f1f8adabf2103dbc02907a554e98fc8615a5f3d168f7125e20754b1fb0a749bde9c0161e13b3c21b6d1bd4463628790699a8f0b14b080910deb8fa3edbe0dfc590fcdc26557184b8640536910d353a52", 0xd1}, {&(0x7f0000000d00)="b7edc87a0b9132d3bc362a16e921be94aae04d858012e912a4f043c4e3c87f87889f347c6728d8ac4b2cd6e102fa9d35d654f4c7f2bff3295d0d6dd22a3e9569039ae23f607b1556338823ac7304d7fc6b190d61174151917dda01b3f39444ed19365c4b317a8b3ce988733a313127034a1fe2d9279df0d2bca49ea88f302b41da72fdb4dd94e6797911d6f2b871470845667f41529fd8876e1e01517dd593", 0x9f}, {&(0x7f0000000dc0)="c77565f7fd95b714463f260487c4929996d1a910e58d77027b4559f31bc9c381cc86a1ec9ad0", 0x26}, {&(0x7f0000000e00)="c52d715a7f860c860fe595b7e2b5ab14c816aaf256fbe5e9a90c1dbef1bb6cc258fdae88ee9a9c29b65741ddaac5", 0x2e}], 0xa}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000f40)}, {&(0x7f0000000fc0)="2b2779c553c35a255f9ff7214b956f178ceb065e95e4dee49982f0ffbd330831dfabf2aeccef4aa6d95f26fc2e8bc2f65c58767ef8c2c45751d8d7f7ac57f11f0d", 0x41}, {&(0x7f0000001040)="1b", 0x1}], 0x3, &(0x7f0000002140)=[@ip_ttl={{0x14, 0x0, 0x2, 0x85}}], 0x18}}], 0x5, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 1.816268233s ago: executing program 1 (id=5876): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000640), 0x2d00, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x9) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000500)=0x42268597) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x3, 0x32a, 0x100, 0xe, 0xe, 0x1, 0x3}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$dsp(r0, &(0x7f0000000200), 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000045000900000000000000000003000000080002"], 0x1c}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x7) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32, @ANYBLOB="080002"], 0x40}}, 0x8080) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f00000003c0)={0xb, 0x9, 0xffffffff}, 0xc) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x80984120, &(0x7f0000000080)) 1.775519649s ago: executing program 7 (id=5877): r0 = socket$netlink(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001) r4 = socket$netlink(0x10, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r7, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000000100)={0x28, 0x1, r8, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000000c0)}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000840)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d61637365630000180002800c0004000300000100c280", @ANYRES32=r10], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 1.681679161s ago: executing program 8 (id=5878): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x286, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0xff, "340b7832c1efd131b8e6498c25f54a2700"}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYRES16=r1], 0x44}, 0x1, 0x2, 0x0, 0x40088}, 0x40000) 1.654517373s ago: executing program 2 (id=5879): syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec00000001090212"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, 0x0, &(0x7f00000002c0), 0xb, r0}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 240.870663ms ago: executing program 7 (id=5880): r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x11}) 26.896271ms ago: executing program 7 (id=5881): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000600), 0x3) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000380)={0x1, 0x0, [{0x4, 0x89, &(0x7f0000001500)=""/137}]}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f00000006c0)=""/192, 0x0, 0x80e3001}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setitimer(0x1, 0x0, 0x0) getitimer(0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x7) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000072009fb300000000"], 0x18}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) gettid() fcntl$getownex(r0, 0x10, &(0x7f0000000100)) 0s ago: executing program 1 (id=5882): get_mempolicy(0x0, &(0x7f0000002000), 0x400, &(0x7f0000ffb000/0x2000)=nil, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20940, 0x1e2) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x5, 0x4, "6fa715e63fee9cb07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e19b47b6669f6bdb9c400", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x8, 0xa, 0x7, 0x8, "b01eb45b7b42d1b78db69e4ddcbe602aceee5ab4c7351181a15d8f7a28bf04c5a4ee342b6847cb70588f8f84cf676d0afca0f2e6f4d82e4208ca4c5f7365d431", "b31f22c9080873366b499607be231200bc798b00", [0x2, 0x2000005e8]}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)={0x28, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x7, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid}]}, @nested={0x8, 0x3, 0x0, 0x1, [@generic="1640744d"]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c004) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x7e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) map_shadow_stack(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) kernel console output (not intermixed with test programs): "syz-executor" name="170" dev="tmpfs" ino=900 [ 1947.730929][ T37] audit: type=1400 audit(1775344569.461:1687283): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=24989 comm="syz-executor" name="170" dev="tmpfs" ino=900 [ 1947.731305][ T37] audit: type=1400 audit(1775344569.461:1687284): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=24989 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1947.731453][ T37] audit: type=1400 audit(1775344569.461:1687285): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=24989 comm="syz-executor" name="/" dev="proc" ino=1 [ 1947.731621][ T37] audit: type=1400 audit(1775344569.461:1687286): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=24989 comm="syz-executor" name="/" dev="proc" ino=1 [ 1947.752536][T23421] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1948.037787][T23421] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1948.038745][T23421] usb 5-1: not running at top speed; connect to a high speed hub [ 1948.040964][T23421] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1948.040990][T23421] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1948.081825][T23421] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1948.081862][T23421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1948.081885][T23421] usb 5-1: Product: syz [ 1948.081901][T23421] usb 5-1: Manufacturer: syz [ 1948.081918][T23421] usb 5-1: SerialNumber: syz [ 1948.202600][ T5945] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 1948.369491][ T5945] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1948.370733][ T5945] usb 2-1: not running at top speed; connect to a high speed hub [ 1948.378617][ T5945] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1948.378647][ T5945] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1948.411583][ T5945] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1948.411618][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1948.411640][ T5945] usb 2-1: Product: syz [ 1948.411656][ T5945] usb 2-1: Manufacturer: syz [ 1948.411672][ T5945] usb 2-1: SerialNumber: syz [ 1948.501625][T23421] usb 5-1: 3:0: cannot get min/max values for control 2 (id 3) [ 1948.511916][T23421] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 1948.521102][T23421] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 1948.643384][T23421] usb 5-1: USB disconnect, device number 21 [ 1948.766008][ T5945] usb 2-1: 3:0: cannot get min/max values for control 2 (id 3) [ 1948.767181][ T5945] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 1948.775208][ T5945] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 1948.967979][ T5945] usb 2-1: USB disconnect, device number 93 [ 1951.078046][T23519] udevd[23519]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1951.088993][ T5814] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1951.089267][ T5814] Bluetooth: hci0: Injecting HCI hardware error event [ 1951.095258][T23730] Bluetooth: hci0: hardware error 0x00 [ 1952.458564][ T5945] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1952.652658][ T5945] usb 5-1: Using ep0 maxpacket: 16 [ 1952.661044][ T5945] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1952.661084][ T5945] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1952.661123][ T5945] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1952.661148][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1952.708148][T22879] udevd[22879]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1952.731183][ T5945] usb 5-1: config 0 descriptor?? [ 1952.737318][ T37] kauditd_printk_skb: 6541 callbacks suppressed [ 1952.737337][ T37] audit: type=1400 audit(1775344574.441:1691741): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5165 comm="udevd" name="platform" dev="sysfs" ino=36 [ 1952.737379][ T37] audit: type=1400 audit(1775344574.461:1691808): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5165 comm="udevd" name="dummy_udc.8" dev="sysfs" ino=31138 [ 1952.737472][ T37] audit: type=1400 audit(1775344574.461:1691809): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5165 comm="udevd" name="gadget.8" dev="sysfs" ino=31176 [ 1952.737512][ T37] audit: type=1400 audit(1775344574.461:1691810): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5165 comm="udevd" name="uevent" dev="sysfs" ino=31177 [ 1952.737554][ T37] audit: type=1400 audit(1775344574.461:1691812): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5165 comm="udevd" path="/sys/devices/platform/dummy_udc.8/gadget.8/uevent" dev="sysfs" ino=31177 [ 1952.737665][ T37] audit: type=1400 audit(1775344574.471:1691813): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5165 comm="udevd" path="/sys/devices/platform/dummy_udc.8/gadget.8/uevent" dev="sysfs" ino=31177 [ 1952.737709][ T37] audit: type=1400 audit(1775344574.451:1691777): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=22912 comm="udevd" path="/sys/devices/platform/dummy_udc.8/udc/dummy_udc.8/uevent" dev="sysfs" ino=31154 [ 1952.737811][ T37] audit: type=1400 audit(1775344574.471:1691814): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22912 comm="udevd" name="/" dev="sda1" ino=2 [ 1952.737851][ T37] audit: type=1400 audit(1775344574.471:1691815): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22912 comm="udevd" name="/" dev="tmpfs" ino=1 [ 1952.737889][ T37] audit: type=1400 audit(1775344574.471:1691816): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22912 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 1953.167370][T23730] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1953.302058][T25021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1953.372251][ T5945] nzxt-smart2 0003:1E71:2009.004B: unknown main item tag 0x4 [ 1953.372276][ T5945] nzxt-smart2 0003:1E71:2009.004B: item fetching failed at offset 1/5 [ 1953.390643][ T5945] nzxt-smart2 0003:1E71:2009.004B: probe with driver nzxt-smart2 failed with error -22 [ 1953.574484][T25012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1953.575129][T25012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1953.843097][ T5945] usb 5-1: USB disconnect, device number 22 [ 1955.147297][T25038] sctp: [Deprecated]: syz.4.5605 (pid 25038) Use of int in max_burst socket option deprecated. [ 1955.147297][T25038] Use struct sctp_assoc_value instead [ 1958.232221][T17258] audit_log_start: 8769 callbacks suppressed [ 1958.232241][T17258] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1958.232257][T17258] audit: audit_lost=373590 audit_rate_limit=0 audit_backlog_limit=64 [ 1958.232274][T17258] audit: backlog limit exceeded [ 1958.261543][ T37] audit: type=1400 audit(1775344579.081:1696712): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=17258 comm="syz-executor" name="511" dev="tmpfs" ino=2662 [ 1958.262475][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1958.262497][ C1] audit: audit_lost=373591 audit_rate_limit=0 audit_backlog_limit=64 [ 1958.262515][ C1] audit: backlog limit exceeded [ 1958.268782][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1958.268805][ C1] audit: audit_lost=373592 audit_rate_limit=0 audit_backlog_limit=64 [ 1958.268822][ C1] audit: backlog limit exceeded [ 1958.592005][T25069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5615'. [ 1960.054539][T25088] FAULT_INJECTION: forcing a failure. [ 1960.054539][T25088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1960.054581][T25088] CPU: 1 UID: 0 PID: 25088 Comm: syz.7.5622 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1960.054612][T25088] Tainted: [L]=SOFTLOCKUP [ 1960.054621][T25088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1960.054645][T25088] Call Trace: [ 1960.054654][T25088] [ 1960.054664][T25088] dump_stack_lvl+0xe8/0x150 [ 1960.054703][T25088] should_fail_ex+0x46b/0x600 [ 1960.054740][T25088] _copy_from_iter+0x3b0/0x1670 [ 1960.054791][T25088] ? __alloc_skb+0x27d/0x7d0 [ 1960.054813][T25088] ? __pfx__copy_from_iter+0x10/0x10 [ 1960.054843][T25088] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1960.054878][T25088] ? __alloc_skb+0x27d/0x7d0 [ 1960.054906][T25088] ? netlink_sendmsg+0x650/0xb40 [ 1960.054939][T25088] ? skb_put+0x11b/0x210 [ 1960.054966][T25088] netlink_sendmsg+0x6c0/0xb40 [ 1960.055008][T25088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1960.055043][T25088] ? unwind_get_return_address+0x4d/0x90 [ 1960.055072][T25088] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1960.055109][T25088] ____sys_sendmsg+0x94c/0x9c0 [ 1960.055141][T25088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1960.055177][T25088] ? import_iovec+0x73/0xa0 [ 1960.055203][T25088] ___sys_sendmsg+0x2a5/0x360 [ 1960.055244][T25088] ? __pfx____sys_sendmsg+0x10/0x10 [ 1960.055310][T25088] ? __fget_files+0x2a/0x420 [ 1960.055339][T25088] ? __fget_files+0x3a6/0x420 [ 1960.055379][T25088] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1960.055407][T25088] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1960.055442][T25088] ? __pfx_ksys_write+0x10/0x10 [ 1960.055486][T25088] do_syscall_64+0x14d/0xf80 [ 1960.055509][T25088] ? trace_irq_disable+0x3b/0x150 [ 1960.055536][T25088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.055560][T25088] ? clear_bhb_loop+0x40/0x90 [ 1960.055588][T25088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.055611][T25088] RIP: 0033:0x7f9b4f75c819 [ 1960.055632][T25088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1960.055653][T25088] RSP: 002b:00007f9b4d9b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1960.055676][T25088] RAX: ffffffffffffffda RBX: 00007f9b4f9d5fa0 RCX: 00007f9b4f75c819 [ 1960.055693][T25088] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000000000000004 [ 1960.055707][T25088] RBP: 00007f9b4d9b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1960.055721][T25088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1960.055734][T25088] R13: 00007f9b4f9d6038 R14: 00007f9b4f9d5fa0 R15: 00007ffcfd57ca08 [ 1960.055777][T25088] [ 1960.417570][T25096] FAULT_INJECTION: forcing a failure. [ 1960.417570][T25096] name failslab, interval 1, probability 0, space 0, times 0 [ 1960.417611][T25096] CPU: 0 UID: 0 PID: 25096 Comm: syz.2.5626 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1960.417641][T25096] Tainted: [L]=SOFTLOCKUP [ 1960.417649][T25096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1960.417663][T25096] Call Trace: [ 1960.417672][T25096] [ 1960.417683][T25096] dump_stack_lvl+0xe8/0x150 [ 1960.417722][T25096] should_fail_ex+0x46b/0x600 [ 1960.417759][T25096] should_failslab+0xa8/0x100 [ 1960.417786][T25096] __kmalloc_noprof+0xdf/0x7b0 [ 1960.417807][T25096] ? mutex_rt_init_lockdep+0x66/0x80 [ 1960.417837][T25096] ? security_task_alloc+0x4d/0x330 [ 1960.417871][T25096] security_task_alloc+0x4d/0x330 [ 1960.417901][T25096] copy_process+0x16e7/0x3cd0 [ 1960.417948][T25096] ? copy_process+0x921/0x3cd0 [ 1960.418006][T25096] ? __pfx_copy_process+0x10/0x10 [ 1960.418055][T25096] vhost_task_create+0x1f9/0x380 [ 1960.418081][T25096] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1960.418106][T25096] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1960.418133][T25096] ? __pfx_vhost_task_create+0x10/0x10 [ 1960.418169][T25096] ? __pfx_vhost_task_fn+0x10/0x10 [ 1960.418199][T25096] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1960.418231][T25096] ? lockdep_hardirqs_on+0x7a/0x110 [ 1960.418256][T25096] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1960.418281][T25096] ? mutex_lock_nested+0x152/0x1d0 [ 1960.418311][T25096] ? kvm_mmu_post_init_vm+0x91/0x300 [ 1960.418342][T25096] kvm_mmu_post_init_vm+0x14c/0x300 [ 1960.418373][T25096] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 1960.418401][T25096] ? __lock_acquire+0x6b5/0x2cf0 [ 1960.418441][T25096] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1960.418477][T25096] ? do_raw_spin_lock+0x12b/0x2f0 [ 1960.418524][T25096] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1960.418549][T25096] ? lockdep_hardirqs_on+0x7a/0x110 [ 1960.418573][T25096] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1960.418598][T25096] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1960.418639][T25096] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1960.418673][T25096] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1960.418698][T25096] ? lockdep_hardirqs_on+0x7a/0x110 [ 1960.418723][T25096] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1960.418746][T25096] ? rt_write_unlock+0x190/0x230 [ 1960.418783][T25096] kvm_vcpu_ioctl+0xa65/0xfe0 [ 1960.418815][T25096] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1960.418846][T25096] ? __asan_memset+0x22/0x50 [ 1960.418876][T25096] ? smack_file_ioctl+0x331/0x360 [ 1960.418926][T25096] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1960.418974][T25096] ? __fget_files+0x2a/0x420 [ 1960.419029][T25096] ? __fget_files+0x3a6/0x420 [ 1960.419057][T25096] ? __fget_files+0x2a/0x420 [ 1960.419090][T25096] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1960.419115][T25096] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1960.419138][T25096] __se_sys_ioctl+0xff/0x170 [ 1960.419166][T25096] do_syscall_64+0x14d/0xf80 [ 1960.419190][T25096] ? trace_irq_disable+0x3b/0x150 [ 1960.419217][T25096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.419240][T25096] ? clear_bhb_loop+0x40/0x90 [ 1960.419268][T25096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.419291][T25096] RIP: 0033:0x7f2c55f9c819 [ 1960.419313][T25096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1960.419332][T25096] RSP: 002b:00007f2c541ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1960.419355][T25096] RAX: ffffffffffffffda RBX: 00007f2c56215fa0 RCX: 00007f2c55f9c819 [ 1960.419372][T25096] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1960.419386][T25096] RBP: 00007f2c541ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1960.419400][T25096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1960.419414][T25096] R13: 00007f2c56216038 R14: 00007f2c56215fa0 R15: 00007ffe887a0788 [ 1960.419452][T25096] [ 1961.610366][T25108] FAULT_INJECTION: forcing a failure. [ 1961.610366][T25108] name failslab, interval 1, probability 0, space 0, times 0 [ 1961.610409][T25108] CPU: 1 UID: 0 PID: 25108 Comm: syz.8.5630 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1961.610440][T25108] Tainted: [L]=SOFTLOCKUP [ 1961.610449][T25108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1961.610463][T25108] Call Trace: [ 1961.610473][T25108] [ 1961.610482][T25108] dump_stack_lvl+0xe8/0x150 [ 1961.610523][T25108] should_fail_ex+0x46b/0x600 [ 1961.610561][T25108] should_failslab+0xa8/0x100 [ 1961.610586][T25108] kmem_cache_alloc_noprof+0x87/0x680 [ 1961.610621][T25108] ? skb_clone+0x212/0x3a0 [ 1961.610653][T25108] skb_clone+0x212/0x3a0 [ 1961.610685][T25108] __netlink_deliver_tap+0x404/0x850 [ 1961.610744][T25108] ? netlink_deliver_tap+0x2e/0x1b0 [ 1961.610779][T25108] netlink_deliver_tap+0x19c/0x1b0 [ 1961.610815][T25108] netlink_unicast+0x805/0x9f0 [ 1961.610856][T25108] ? __pfx_netlink_unicast+0x10/0x10 [ 1961.610889][T25108] ? netlink_sendmsg+0x650/0xb40 [ 1961.610921][T25108] ? skb_put+0x11b/0x210 [ 1961.610948][T25108] netlink_sendmsg+0x813/0xb40 [ 1961.610993][T25108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1961.611029][T25108] ? unwind_get_return_address+0x4d/0x90 [ 1961.611057][T25108] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1961.611095][T25108] ____sys_sendmsg+0x94c/0x9c0 [ 1961.611129][T25108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1961.611173][T25108] ? import_iovec+0x73/0xa0 [ 1961.611200][T25108] ___sys_sendmsg+0x2a5/0x360 [ 1961.611232][T25108] ? __pfx____sys_sendmsg+0x10/0x10 [ 1961.611301][T25108] ? __fget_files+0x2a/0x420 [ 1961.611330][T25108] ? __fget_files+0x3a6/0x420 [ 1961.611372][T25108] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1961.611402][T25108] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1961.611441][T25108] ? __pfx_ksys_write+0x10/0x10 [ 1961.611490][T25108] do_syscall_64+0x14d/0xf80 [ 1961.611514][T25108] ? trace_irq_disable+0x3b/0x150 [ 1961.611541][T25108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1961.611564][T25108] ? clear_bhb_loop+0x40/0x90 [ 1961.611592][T25108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1961.611615][T25108] RIP: 0033:0x7f28b2a1c819 [ 1961.611637][T25108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1961.611655][T25108] RSP: 002b:00007f28b0c76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1961.611680][T25108] RAX: ffffffffffffffda RBX: 00007f28b2c95fa0 RCX: 00007f28b2a1c819 [ 1961.611705][T25108] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 1961.611720][T25108] RBP: 00007f28b0c76090 R08: 0000000000000000 R09: 0000000000000000 [ 1961.611734][T25108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1961.611748][T25108] R13: 00007f28b2c96038 R14: 00007f28b2c95fa0 R15: 00007ffeea304e98 [ 1961.611786][T25108] [ 1961.729532][T25108] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5630'. [ 1962.493393][T13271] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1962.873733][T13271] usb 3-1: Using ep0 maxpacket: 8 [ 1963.026442][T13271] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 1963.026475][T13271] usb 3-1: config 0 has no interface number 0 [ 1963.026524][T13271] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1963.026550][T13271] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 1963.083231][T13271] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1963.083265][T13271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.083287][T13271] usb 3-1: Product: syz [ 1963.083304][T13271] usb 3-1: Manufacturer: syz [ 1963.083319][T13271] usb 3-1: SerialNumber: syz [ 1963.129666][T13271] usb 3-1: config 0 descriptor?? [ 1963.148619][T13271] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 1963.232731][ T37] kauditd_printk_skb: 5135 callbacks suppressed [ 1963.232754][ T37] audit: type=1400 audit(1775344584.961:1701305): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="/" dev="sda1" ino=2 [ 1963.232806][ T37] audit: type=1400 audit(1775344584.961:1701306): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="/" dev="tmpfs" ino=1 [ 1963.232852][ T37] audit: type=1400 audit(1775344584.961:1701307): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 1963.232897][ T37] audit: type=1400 audit(1775344584.961:1701308): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="data" dev="tmpfs" ino=13 [ 1963.232951][ T37] audit: type=1400 audit(1775344584.961:1701309): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="/" dev="sda1" ino=2 [ 1963.232996][ T37] audit: type=1400 audit(1775344584.961:1701310): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="/" dev="tmpfs" ino=1 [ 1963.233041][ T37] audit: type=1400 audit(1775344584.961:1701311): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 1963.233086][ T37] audit: type=1400 audit(1775344584.961:1701312): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=23519 comm="udevd" path="/run/udev/data" dev="tmpfs" ino=13 [ 1963.233134][ T37] audit: type=1400 audit(1775344584.961:1701313): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="/" dev="sda1" ino=2 [ 1963.233179][ T37] audit: type=1400 audit(1775344584.961:1701314): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="/" dev="tmpfs" ino=1 [ 1963.519164][T25128] FAULT_INJECTION: forcing a failure. [ 1963.519164][T25128] name failslab, interval 1, probability 0, space 0, times 0 [ 1963.519204][T25128] CPU: 0 UID: 0 PID: 25128 Comm: syz.7.5638 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1963.519233][T25128] Tainted: [L]=SOFTLOCKUP [ 1963.519242][T25128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1963.519256][T25128] Call Trace: [ 1963.519265][T25128] [ 1963.519275][T25128] dump_stack_lvl+0xe8/0x150 [ 1963.519315][T25128] should_fail_ex+0x46b/0x600 [ 1963.519352][T25128] should_failslab+0xa8/0x100 [ 1963.519378][T25128] kmem_cache_alloc_noprof+0x87/0x680 [ 1963.519413][T25128] ? skb_clone+0x212/0x3a0 [ 1963.519446][T25128] skb_clone+0x212/0x3a0 [ 1963.519476][T25128] __netlink_deliver_tap+0x404/0x850 [ 1963.519525][T25128] ? netlink_deliver_tap+0x2e/0x1b0 [ 1963.519560][T25128] netlink_deliver_tap+0x19c/0x1b0 [ 1963.519594][T25128] netlink_unicast+0x805/0x9f0 [ 1963.519635][T25128] ? __pfx_netlink_unicast+0x10/0x10 [ 1963.519667][T25128] ? netlink_sendmsg+0x650/0xb40 [ 1963.519698][T25128] ? skb_put+0x11b/0x210 [ 1963.519726][T25128] netlink_sendmsg+0x813/0xb40 [ 1963.519781][T25128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1963.519827][T25128] ? unwind_get_return_address+0x4d/0x90 [ 1963.519855][T25128] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1963.519892][T25128] ____sys_sendmsg+0x94c/0x9c0 [ 1963.519926][T25128] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1963.519964][T25128] ? import_iovec+0x73/0xa0 [ 1963.519990][T25128] ___sys_sendmsg+0x2a5/0x360 [ 1963.520022][T25128] ? __pfx____sys_sendmsg+0x10/0x10 [ 1963.520091][T25128] ? __fget_files+0x2a/0x420 [ 1963.520121][T25128] ? __fget_files+0x3a6/0x420 [ 1963.520163][T25128] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1963.520192][T25128] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1963.520238][T25128] ? __pfx_ksys_write+0x10/0x10 [ 1963.520286][T25128] do_syscall_64+0x14d/0xf80 [ 1963.520310][T25128] ? trace_irq_disable+0x3b/0x150 [ 1963.520336][T25128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1963.520359][T25128] ? clear_bhb_loop+0x40/0x90 [ 1963.520388][T25128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1963.520410][T25128] RIP: 0033:0x7f9b4f75c819 [ 1963.520432][T25128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1963.520450][T25128] RSP: 002b:00007f9b4d9b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1963.520477][T25128] RAX: ffffffffffffffda RBX: 00007f9b4f9d5fa0 RCX: 00007f9b4f75c819 [ 1963.520493][T25128] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 000000000000001e [ 1963.520509][T25128] RBP: 00007f9b4d9b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1963.520523][T25128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1963.520537][T25128] R13: 00007f9b4f9d6038 R14: 00007f9b4f9d5fa0 R15: 00007ffcfd57ca08 [ 1963.520574][T25128] [ 1963.520618][T25128] netlink: 'syz.7.5638': attribute type 30 has an invalid length. [ 1963.520634][T25128] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5638'. [ 1963.520662][T25128] bond0: option arp_missed_max: invalid value (0) [ 1963.520679][T25128] bond0: option arp_missed_max: allowed values 1 - 255 [ 1965.243607][ T993] usb 3-1: USB disconnect, device number 97 [ 1966.935159][T25164] loop5: detected capacity change from 0 to 7 [ 1966.985950][ T6003] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1966.986151][ T6003] Buffer I/O error on dev loop5, logical block 0, async page read [ 1966.989494][T25164] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1966.989534][T25164] Buffer I/O error on dev loop5, logical block 0, async page read [ 1966.989689][T25164] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1966.989720][T25164] Buffer I/O error on dev loop5, logical block 0, async page read [ 1966.989764][T25164] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1966.989791][T25164] Buffer I/O error on dev loop5, logical block 0, async page read [ 1966.989857][T25164] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1966.989884][T25164] Buffer I/O error on dev loop5, logical block 0, async page read [ 1966.989943][T25164] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1966.989970][T25164] Buffer I/O error on dev loop5, logical block 0, async page read [ 1966.990013][T25164] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1966.990039][T25164] Buffer I/O error on dev loop5, logical block 0, async page read [ 1966.990062][T25164] ldm_validate_partition_table(): Disk read failed. [ 1966.990098][T25164] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1966.990126][T25164] Buffer I/O error on dev loop5, logical block 0, async page read [ 1966.990169][T25164] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1966.990194][T25164] Buffer I/O error on dev loop5, logical block 0, async page read [ 1966.990236][T25164] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1966.990263][T25164] Buffer I/O error on dev loop5, logical block 0, async page read [ 1966.990315][T25164] Dev loop5: unable to read RDB block 0 [ 1966.995447][T25164] loop5: unable to read partition table [ 1966.995695][T25164] loop5: partition table beyond EOD, truncated [ 1966.998598][T25164] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 1968.100922][T25183] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1968.506801][T23519] audit_log_start: 4185 callbacks suppressed [ 1968.506822][T23519] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1968.506837][T23519] audit: audit_lost=373853 audit_rate_limit=0 audit_backlog_limit=64 [ 1968.506853][T23519] audit: backlog limit exceeded [ 1968.506885][T23519] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1968.506898][T23519] audit: audit_lost=373854 audit_rate_limit=0 audit_backlog_limit=64 [ 1968.506914][T23519] audit: backlog limit exceeded [ 1968.507000][T23519] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1968.507014][T23519] audit: audit_lost=373855 audit_rate_limit=0 audit_backlog_limit=64 [ 1968.507029][T23519] audit: backlog limit exceeded [ 1968.507064][T23519] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1969.162707][ T5945] usb 2-1: new low-speed USB device number 94 using dummy_hcd [ 1969.202712][T19950] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1969.382471][ T5945] usb 2-1: Invalid ep0 maxpacket: 32 [ 1969.382850][T19950] usb 3-1: Using ep0 maxpacket: 16 [ 1969.459429][T19950] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1969.459466][T19950] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1969.459504][T19950] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1969.459526][T19950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1969.522519][ T5945] usb 2-1: new low-speed USB device number 95 using dummy_hcd [ 1969.624843][T19950] usb 3-1: config 0 descriptor?? [ 1969.762531][ T5945] usb 2-1: Invalid ep0 maxpacket: 32 [ 1969.764200][ T5945] usb usb2-port1: attempt power cycle [ 1970.086752][T19950] nzxt-smart2 0003:1E71:2009.004C: unknown main item tag 0x4 [ 1970.086777][T19950] nzxt-smart2 0003:1E71:2009.004C: item fetching failed at offset 1/5 [ 1970.087280][T19950] nzxt-smart2 0003:1E71:2009.004C: probe with driver nzxt-smart2 failed with error -22 [ 1970.122512][ T5945] usb 2-1: new low-speed USB device number 96 using dummy_hcd [ 1970.143899][ T5945] usb 2-1: Invalid ep0 maxpacket: 32 [ 1970.274053][ T5945] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 1970.294584][ T5945] usb 2-1: Invalid ep0 maxpacket: 32 [ 1970.294976][ T5945] usb usb2-port1: unable to enumerate USB device [ 1970.302003][T25195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1970.322686][T25195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1970.565264][T19887] usb 3-1: USB disconnect, device number 98 [ 1971.239927][T25212] netlink: 'syz.2.5662': attribute type 9 has an invalid length. [ 1971.542013][T25219] loop5: detected capacity change from 0 to 7 [ 1971.554064][T25219] Dev loop5: unable to read RDB block 7 [ 1971.554122][T25219] loop5: unable to read partition table [ 1971.554379][T25219] loop5: partition table beyond EOD, truncated [ 1971.554416][T25219] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1971.843694][T25221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1972.784416][T25229] 9p: Bad value for 'rfdno' [ 1973.512750][ T37] kauditd_printk_skb: 8783 callbacks suppressed [ 1973.512772][ T37] audit: type=1400 audit(1775344595.251:1711495): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5165 comm="udevd" name="/" dev="sda1" ino=2 [ 1973.512824][ T37] audit: type=1400 audit(1775344595.251:1711496): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5165 comm="udevd" name="/" dev="tmpfs" ino=1 [ 1973.512922][ T37] audit: type=1400 audit(1775344595.251:1711497): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5165 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 1973.513146][ T37] audit: type=1400 audit(1775344595.241:1711494): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="kvm" dev="sysfs" ino=4875 [ 1973.513201][ T37] audit: type=1400 audit(1775344595.251:1711498): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5165 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 1973.513552][ T37] audit: type=1400 audit(1775344595.251:1711499): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=23519 comm="udevd" name="uevent" dev="sysfs" ino=4876 [ 1973.513711][ T37] audit: type=1400 audit(1775344595.251:1711500): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5165 comm="udevd" path="/run/udev/queue" dev="tmpfs" ino=14596 [ 1973.513899][ T37] audit: type=1400 audit(1775344595.251:1711501): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=5165 comm="udevd" name="queue" dev="tmpfs" ino=14596 [ 1973.514089][ T37] audit: type=1400 audit(1775344595.251:1711502): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=23519 comm="udevd" path="/sys/devices/virtual/misc/kvm/uevent" dev="sysfs" ino=4876 [ 1973.514615][ T37] audit: type=1400 audit(1775344595.251:1711503): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=23519 comm="udevd" path="/sys/devices/virtual/misc/kvm/uevent" dev="sysfs" ino=4876 [ 1973.959887][T25253] loop5: detected capacity change from 0 to 7 [ 1973.970061][T25253] Dev loop5: unable to read RDB block 7 [ 1973.970110][T25253] loop5: unable to read partition table [ 1973.970381][T25253] loop5: partition table beyond EOD, truncated [ 1973.970403][T25253] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1974.665247][T25261] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1976.182764][T19950] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1976.286110][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.339664][T19950] usb 5-1: config 255 has an invalid interface number: 0 but max is -1 [ 1976.339696][T19950] usb 5-1: config 255 has an invalid interface number: 0 but max is -1 [ 1976.339718][T19950] usb 5-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 1976.339776][T19950] usb 5-1: config 255 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1976.339803][T19950] usb 5-1: config 255 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1976.339833][T19950] usb 5-1: Duplicate descriptor for config 255 interface 0 altsetting 0, skipping [ 1976.350217][T19950] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1976.350247][T19950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1976.350267][T19950] usb 5-1: Product: syz [ 1976.350281][T19950] usb 5-1: Manufacturer: syz [ 1976.350295][T19950] usb 5-1: SerialNumber: syz [ 1976.664107][T25271] netlink: 'syz.4.5682': attribute type 1 has an invalid length. [ 1976.970218][T19950] usb 5-1: USB disconnect, device number 23 [ 1977.071042][T25280] loop5: detected capacity change from 0 to 7 [ 1977.087274][T25280] Dev loop5: unable to read RDB block 7 [ 1977.087324][T25280] loop5: unable to read partition table [ 1977.087565][T25280] loop5: partition table beyond EOD, truncated [ 1977.087602][T25280] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1977.649438][T23033] udevd[23033]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:255.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1978.533861][ T37] kauditd_printk_skb: 8112 callbacks suppressed [ 1978.533887][ T37] audit: type=1400 audit(1775344600.241:1717408): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=22912 comm="udevd" name="c14:48" dev="tmpfs" ino=14633 [ 1978.533942][ T37] audit: type=1400 audit(1775344600.251:1717409): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=22912 comm="udevd" name="data" dev="tmpfs" ino=13 [ 1978.533989][ T37] audit: type=1400 audit(1775344600.251:1717410): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22912 comm="udevd" name="/" dev="sda1" ino=2 [ 1978.534035][ T37] audit: type=1400 audit(1775344600.251:1717411): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22912 comm="udevd" name="/" dev="devtmpfs" ino=1 [ 1978.534083][ T37] audit: type=1400 audit(1775344600.251:1717412): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22912 comm="udevd" name="char" dev="devtmpfs" ino=1325 [ 1978.534131][ T37] audit: type=1400 audit(1775344600.251:1717413): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22912 comm="udevd" name="/" dev="sda1" ino=2 [ 1978.534179][ T37] audit: type=1400 audit(1775344600.251:1717414): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22912 comm="udevd" name="/" dev="sysfs" ino=1 [ 1978.534221][ T37] audit: type=1400 audit(1775344600.251:1717415): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22912 comm="udevd" name="devices" dev="sysfs" ino=7 [ 1978.534265][ T37] audit: type=1400 audit(1775344600.251:1717416): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22912 comm="udevd" name="platform" dev="sysfs" ino=36 [ 1978.534307][ T37] audit: type=1400 audit(1775344600.251:1717417): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22912 comm="udevd" name="dummy_hcd.4" dev="sysfs" ino=26398 [ 1979.163094][ T5945] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1979.341064][ T5945] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1979.341083][ T5945] usb 2-1: config 0 has no interfaces? [ 1979.341103][ T5945] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1979.341117][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1979.377570][ T5945] usb 2-1: config 0 descriptor?? [ 1979.746242][ T5945] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1980.070963][ T993] usb 2-1: USB disconnect, device number 98 [ 1980.123442][ T5945] usb 5-1: Using ep0 maxpacket: 16 [ 1980.132844][ T5945] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1980.132888][ T5945] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1980.132924][ T5945] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1980.132947][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1980.142113][ T5945] usb 5-1: config 0 descriptor?? [ 1980.710616][ T5945] nzxt-smart2 0003:1E71:2009.004D: unknown main item tag 0x4 [ 1980.710654][ T5945] nzxt-smart2 0003:1E71:2009.004D: item fetching failed at offset 1/5 [ 1980.724577][ T5945] nzxt-smart2 0003:1E71:2009.004D: probe with driver nzxt-smart2 failed with error -22 [ 1980.948626][T25301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1980.949263][T25301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1981.142748][ T5945] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1981.172461][T19950] usb 5-1: USB disconnect, device number 24 [ 1981.292478][ T5945] usb 2-1: Using ep0 maxpacket: 8 [ 1981.299043][ T5945] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 1981.299074][ T5945] usb 2-1: config 0 has no interface number 0 [ 1981.299125][ T5945] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1981.299151][ T5945] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 1981.348933][ T5945] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1981.348969][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.348991][ T5945] usb 2-1: Product: syz [ 1981.349007][ T5945] usb 2-1: Manufacturer: syz [ 1981.349023][ T5945] usb 2-1: SerialNumber: syz [ 1981.428500][ T5945] usb 2-1: config 0 descriptor?? [ 1981.438761][T25316] loop5: detected capacity change from 0 to 7 [ 1981.448012][T25316] Dev loop5: unable to read RDB block 7 [ 1981.448058][T25316] loop5: unable to read partition table [ 1981.448284][T25316] loop5: partition table beyond EOD, truncated [ 1981.448325][T25316] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1981.496353][ T5945] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 1982.235514][T25320] FAULT_INJECTION: forcing a failure. [ 1982.235514][T25320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1982.235555][T25320] CPU: 0 UID: 0 PID: 25320 Comm: syz.4.5700 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1982.235586][T25320] Tainted: [L]=SOFTLOCKUP [ 1982.235594][T25320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1982.235607][T25320] Call Trace: [ 1982.235616][T25320] [ 1982.235627][T25320] dump_stack_lvl+0xe8/0x150 [ 1982.235667][T25320] should_fail_ex+0x46b/0x600 [ 1982.235705][T25320] _copy_from_user+0x2d/0xb0 [ 1982.235729][T25320] input_event_from_user+0xb1/0x290 [ 1982.235755][T25320] ? __pfx_input_event_from_user+0x10/0x10 [ 1982.235793][T25320] ? evdev_write+0x1b1/0x4c0 [ 1982.235820][T25320] evdev_write+0x2ca/0x4c0 [ 1982.235849][T25320] ? __pfx_evdev_write+0x10/0x10 [ 1982.235879][T25320] ? rw_verify_area+0x25b/0x4e0 [ 1982.235912][T25320] ? __pfx_evdev_write+0x10/0x10 [ 1982.235936][T25320] vfs_write+0x2a3/0xba0 [ 1982.235979][T25320] ? __pfx_vfs_write+0x10/0x10 [ 1982.236013][T25320] ? __fget_files+0x2a/0x420 [ 1982.236045][T25320] ? __fget_files+0x2a/0x420 [ 1982.236071][T25320] ? __fget_files+0x3a6/0x420 [ 1982.236098][T25320] ? __fget_files+0x2a/0x420 [ 1982.236135][T25320] ksys_write+0x156/0x270 [ 1982.236170][T25320] ? __pfx_ksys_write+0x10/0x10 [ 1982.236218][T25320] do_syscall_64+0x14d/0xf80 [ 1982.236243][T25320] ? trace_irq_disable+0x3b/0x150 [ 1982.236271][T25320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1982.236295][T25320] ? clear_bhb_loop+0x40/0x90 [ 1982.236324][T25320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1982.236346][T25320] RIP: 0033:0x7fca022ac819 [ 1982.236368][T25320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1982.236387][T25320] RSP: 002b:00007fca004fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1982.236412][T25320] RAX: ffffffffffffffda RBX: 00007fca02525fa0 RCX: 00007fca022ac819 [ 1982.236429][T25320] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000005 [ 1982.236444][T25320] RBP: 00007fca004fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1982.236458][T25320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1982.236473][T25320] R13: 00007fca02526038 R14: 00007fca02525fa0 R15: 00007ffe2cfef708 [ 1982.236510][T25320] [ 1983.542484][ T37] kauditd_printk_skb: 7928 callbacks suppressed [ 1983.542507][ T37] audit: type=1400 audit(1775344605.271:1723957): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22912 comm="udevd" name="/" dev="sda1" ino=2 [ 1983.542797][ T37] audit: type=1400 audit(1775344605.281:1723958): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22912 comm="udevd" name="/" dev="tmpfs" ino=1 [ 1983.543047][ T37] audit: type=1400 audit(1775344605.281:1723959): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22912 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 1983.543436][ T37] audit: type=1400 audit(1775344605.281:1723960): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22912 comm="udevd" name="data" dev="tmpfs" ino=13 [ 1983.543901][ T37] audit: type=1400 audit(1775344605.281:1723961): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22912 comm="udevd" name="/" dev="sda1" ino=2 [ 1983.544163][ T37] audit: type=1400 audit(1775344605.281:1723962): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22912 comm="udevd" name="/" dev="tmpfs" ino=1 [ 1983.547526][ T37] audit: type=1400 audit(1775344605.281:1723963): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22912 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 1983.547641][ T37] audit: type=1400 audit(1775344605.281:1723964): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22912 comm="udevd" name="data" dev="tmpfs" ino=13 [ 1983.547690][ T37] audit: type=1400 audit(1775344605.281:1723965): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22912 comm="udevd" name="/" dev="sda1" ino=2 [ 1983.547736][ T37] audit: type=1400 audit(1775344605.281:1723966): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22912 comm="udevd" name="/" dev="sysfs" ino=1 [ 1983.772567][ T993] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1983.898240][T25343] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1984.970381][ T993] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1984.970410][ T993] usb 5-1: config 0 has no interfaces? [ 1984.970444][ T993] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1984.970470][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1985.268135][ T993] usb 5-1: config 0 descriptor?? [ 1985.418001][T19887] usb 2-1: USB disconnect, device number 99 [ 1985.555343][ T993] usb 5-1: USB disconnect, device number 25 [ 1986.034971][T19887] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1986.052617][T19950] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1986.182567][T19887] usb 2-1: Using ep0 maxpacket: 16 [ 1986.202466][T19950] usb 3-1: Using ep0 maxpacket: 32 [ 1986.220198][T19887] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1986.220237][T19887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1986.220275][T19887] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1986.220300][T19887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1986.253169][T25368] netlink: 'syz.4.5714': attribute type 5 has an invalid length. [ 1986.268645][T19950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1986.268673][T19950] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1986.321849][T19950] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1986.321883][T19950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.321906][T19950] usb 3-1: Product: syz [ 1986.321922][T19950] usb 3-1: Manufacturer: syz [ 1986.321939][T19950] usb 3-1: SerialNumber: syz [ 1986.323432][T19887] usb 2-1: config 0 descriptor?? [ 1986.408440][T19950] usb 3-1: config 0 descriptor?? [ 1986.877595][T19887] nzxt-smart2 0003:1E71:2009.004E: unknown main item tag 0x4 [ 1986.877620][T19887] nzxt-smart2 0003:1E71:2009.004E: item fetching failed at offset 1/5 [ 1986.878141][T19887] nzxt-smart2 0003:1E71:2009.004E: probe with driver nzxt-smart2 failed with error -22 [ 1987.084931][T19950] usb 3-1: USB disconnect, device number 99 [ 1987.141070][T25356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1987.141689][T25356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1987.380074][T19950] usb 2-1: USB disconnect, device number 100 [ 1988.792506][ T37] kauditd_printk_skb: 6366 callbacks suppressed [ 1988.792539][ T37] audit: type=1400 audit(1775344610.041:1728605): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1190 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.239 dest=43026 netif=eth0 [ 1988.835750][ T37] audit: type=1400 audit(1775344610.571:1728606): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=19411 comm="syz-executor" opid=25351 ocomm="syz.2.5709" [ 1988.835809][ T37] audit: type=1400 audit(1775344610.571:1728607): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=19411 comm="syz-executor" opid=25351 ocomm="syz.2.5709" [ 1989.072701][ T37] audit: type=1400 audit(1775344610.811:1728608): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=23118 comm="syz-executor" opid=25360 ocomm="syz.8.5713" [ 1989.075016][ T37] audit: type=1400 audit(1775344610.811:1728609): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=23118 comm="syz-executor" opid=25360 ocomm="syz.8.5713" [ 1989.075054][ T37] audit: type=1400 audit(1775344610.811:1728610): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22628 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1989.075081][ T37] audit: type=1400 audit(1775344610.811:1728611): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22628 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1989.075106][ T37] audit: type=1400 audit(1775344610.811:1728612): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22628 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1989.075608][ T37] audit: type=1400 audit(1775344610.811:1728613): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22628 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1989.075660][ T37] audit: type=1400 audit(1775344610.811:1728614): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=22628 comm="syz-executor" name="162" dev="tmpfs" ino=850 [ 1989.716883][T25386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1992.312591][T23421] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1992.467600][T23421] usb 2-1: Using ep0 maxpacket: 32 [ 1992.488230][T23421] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1992.488251][T23421] usb 2-1: config 0 has no interface number 0 [ 1992.514746][T23421] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1992.514787][T23421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1992.514801][T23421] usb 2-1: Product: syz [ 1992.514810][T23421] usb 2-1: Manufacturer: syz [ 1992.514819][T23421] usb 2-1: SerialNumber: syz [ 1992.594295][T23421] usb 2-1: config 0 descriptor?? [ 1992.612251][T23421] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1992.612282][T23421] usb 2-1: selecting invalid altsetting 1 [ 1992.612301][T23421] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1992.641649][T23421] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1992.642079][T23421] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1992.642139][T23421] usb 2-1: media controller created [ 1992.688224][T23421] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1992.736764][T25406] sctp: [Deprecated]: syz.8.5726 (pid 25406) Use of int in max_burst socket option deprecated. [ 1992.736764][T25406] Use struct sctp_assoc_value instead [ 1993.055040][T23421] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1993.055107][T23421] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1993.056165][T23421] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1993.159751][T25398] FAULT_INJECTION: forcing a failure. [ 1993.159751][T25398] name failslab, interval 1, probability 0, space 0, times 0 [ 1993.159779][T25398] CPU: 0 UID: 0 PID: 25398 Comm: syz.4.5723 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1993.159799][T25398] Tainted: [L]=SOFTLOCKUP [ 1993.159804][T25398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1993.159812][T25398] Call Trace: [ 1993.159817][T25398] [ 1993.159823][T25398] dump_stack_lvl+0xe8/0x150 [ 1993.159847][T25398] should_fail_ex+0x46b/0x600 [ 1993.159868][T25398] should_failslab+0xa8/0x100 [ 1993.159883][T25398] __kmalloc_cache_noprof+0x84/0x690 [ 1993.159896][T25398] ? dst_cow_metrics_generic+0x56/0x1c0 [ 1993.159916][T25398] dst_cow_metrics_generic+0x56/0x1c0 [ 1993.159933][T25398] ip6_blackhole_route+0x1f2/0x340 [ 1993.159949][T25398] xfrm_lookup_route+0xd7/0x1c0 [ 1993.159969][T25398] ip6_sk_dst_lookup_flow+0x791/0x9c0 [ 1993.159986][T25398] ? udpv6_sendmsg+0x180e/0x2560 [ 1993.160003][T25398] udpv6_sendmsg+0x19f0/0x2560 [ 1993.160021][T25398] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1993.160040][T25398] ? __lock_acquire+0x6b5/0x2cf0 [ 1993.160055][T25398] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1993.160072][T25398] ? lockdep_hardirqs_on+0x7a/0x110 [ 1993.160088][T25398] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1993.160118][T25398] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1993.160140][T25398] ? inet_send_prepare+0x1b9/0x270 [ 1993.160152][T25398] ? __pfx_inet6_sendmsg+0x10/0x10 [ 1993.160171][T25398] ? inet6_sendmsg+0xe4/0x120 [ 1993.160188][T25398] ? __pfx_inet6_sendmsg+0x10/0x10 [ 1993.160206][T25398] __sys_sendto+0x4b8/0x710 [ 1993.160222][T25398] ? __pfx___sys_sendto+0x10/0x10 [ 1993.160250][T25398] ? ksys_write+0x248/0x270 [ 1993.160270][T25398] ? __pfx_ksys_write+0x10/0x10 [ 1993.160292][T25398] __x64_sys_sendto+0xde/0x100 [ 1993.160307][T25398] do_syscall_64+0x14d/0xf80 [ 1993.160320][T25398] ? trace_irq_disable+0x3b/0x150 [ 1993.160335][T25398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.160348][T25398] ? clear_bhb_loop+0x40/0x90 [ 1993.160363][T25398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.160375][T25398] RIP: 0033:0x7fca022ac819 [ 1993.160388][T25398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1993.160399][T25398] RSP: 002b:00007fca004fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1993.160413][T25398] RAX: ffffffffffffffda RBX: 00007fca02525fa0 RCX: 00007fca022ac819 [ 1993.160423][T25398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1993.160430][T25398] RBP: 00007fca004fe090 R08: 0000200000000300 R09: 000000000000001c [ 1993.160438][T25398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1993.160446][T25398] R13: 00007fca02526038 R14: 00007fca02525fa0 R15: 00007ffe2cfef708 [ 1993.160465][T25398] [ 1993.456376][T23421] usb 2-1: USB disconnect, device number 101 [ 1993.596004][T25414] FAULT_INJECTION: forcing a failure. [ 1993.596004][T25414] name failslab, interval 1, probability 0, space 0, times 0 [ 1993.596045][T25414] CPU: 1 UID: 0 PID: 25414 Comm: syz.2.5729 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1993.596075][T25414] Tainted: [L]=SOFTLOCKUP [ 1993.596084][T25414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1993.596097][T25414] Call Trace: [ 1993.596107][T25414] [ 1993.596127][T25414] dump_stack_lvl+0xe8/0x150 [ 1993.596167][T25414] should_fail_ex+0x46b/0x600 [ 1993.596214][T25414] should_failslab+0xa8/0x100 [ 1993.596242][T25414] __kmalloc_noprof+0xdf/0x7b0 [ 1993.596263][T25414] ? mutex_rt_init_lockdep+0x66/0x80 [ 1993.596293][T25414] ? security_task_alloc+0x4d/0x330 [ 1993.596327][T25414] security_task_alloc+0x4d/0x330 [ 1993.596355][T25414] copy_process+0x16e7/0x3cd0 [ 1993.596403][T25414] ? copy_process+0x921/0x3cd0 [ 1993.596463][T25414] ? __pfx_copy_process+0x10/0x10 [ 1993.596513][T25414] vhost_task_create+0x1f9/0x380 [ 1993.596540][T25414] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1993.596566][T25414] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1993.596593][T25414] ? __pfx_vhost_task_create+0x10/0x10 [ 1993.596629][T25414] ? __pfx_vhost_task_fn+0x10/0x10 [ 1993.596660][T25414] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1993.596685][T25414] ? lockdep_hardirqs_on+0x7a/0x110 [ 1993.596708][T25414] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1993.596808][T25414] ? mutex_lock_nested+0x152/0x1d0 [ 1993.596835][T25414] ? kvm_mmu_post_init_vm+0x91/0x300 [ 1993.596867][T25414] kvm_mmu_post_init_vm+0x14c/0x300 [ 1993.596897][T25414] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 1993.596926][T25414] ? __lock_acquire+0x6b5/0x2cf0 [ 1993.596966][T25414] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1993.597000][T25414] ? do_raw_spin_lock+0x12b/0x2f0 [ 1993.597045][T25414] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1993.597072][T25414] ? lockdep_hardirqs_on+0x7a/0x110 [ 1993.597098][T25414] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1993.597123][T25414] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1993.597194][T25414] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1993.597239][T25414] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1993.597265][T25414] ? lockdep_hardirqs_on+0x7a/0x110 [ 1993.597287][T25414] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1993.597325][T25414] ? rt_write_unlock+0x190/0x230 [ 1993.597360][T25414] kvm_vcpu_ioctl+0xa65/0xfe0 [ 1993.597392][T25414] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1993.597420][T25414] ? __asan_memset+0x22/0x50 [ 1993.597447][T25414] ? smack_file_ioctl+0x331/0x360 [ 1993.597482][T25414] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1993.597525][T25414] ? __fget_files+0x2a/0x420 [ 1993.597551][T25414] ? __fget_files+0x3a6/0x420 [ 1993.597577][T25414] ? __fget_files+0x2a/0x420 [ 1993.597606][T25414] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1993.597629][T25414] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1993.597652][T25414] __se_sys_ioctl+0xff/0x170 [ 1993.597677][T25414] do_syscall_64+0x14d/0xf80 [ 1993.597698][T25414] ? trace_irq_disable+0x3b/0x150 [ 1993.597721][T25414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.597742][T25414] ? clear_bhb_loop+0x40/0x90 [ 1993.597780][T25414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.597801][T25414] RIP: 0033:0x7f2c55f9c819 [ 1993.597822][T25414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1993.597842][T25414] RSP: 002b:00007f2c541cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1993.597866][T25414] RAX: ffffffffffffffda RBX: 00007f2c56216090 RCX: 00007f2c55f9c819 [ 1993.597882][T25414] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1993.597896][T25414] RBP: 00007f2c541cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1993.597909][T25414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1993.597923][T25414] R13: 00007f2c56216128 R14: 00007f2c56216090 R15: 00007ffe887a0788 [ 1993.597959][T25414] [ 1993.872542][ T37] kauditd_printk_skb: 3811 callbacks suppressed [ 1993.872561][ T37] audit: type=1400 audit(1775344615.601:1731706): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=23519 comm="udevd" path="/sys/devices/platform/dummy_hcd.1/usb2/uevent" dev="sysfs" ino=25963 [ 1993.872610][ T37] audit: type=1400 audit(1775344615.601:1731707): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="/" dev="sda1" ino=2 [ 1993.872649][ T37] audit: type=1400 audit(1775344615.601:1731708): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="/" dev="sysfs" ino=1 [ 1993.872688][ T37] audit: type=1400 audit(1775344615.601:1731709): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="devices" dev="sysfs" ino=7 [ 1993.872803][ T37] audit: type=1400 audit(1775344615.601:1731710): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="platform" dev="sysfs" ino=36 [ 1993.872845][ T37] audit: type=1400 audit(1775344615.601:1731711): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="dummy_hcd.1" dev="sysfs" ino=25933 [ 1993.872887][ T37] audit: type=1400 audit(1775344615.601:1731712): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="usb2" dev="sysfs" ino=25962 [ 1993.872926][ T37] audit: type=1400 audit(1775344615.601:1731713): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="/" dev="sda1" ino=2 [ 1993.872964][ T37] audit: type=1400 audit(1775344615.601:1731714): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="/" dev="sysfs" ino=1 [ 1993.873002][ T37] audit: type=1400 audit(1775344615.601:1731715): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="devices" dev="sysfs" ino=7 [ 1994.390821][T25418] loop5: detected capacity change from 0 to 7 [ 1994.395438][T25418] Dev loop5: unable to read RDB block 7 [ 1994.395483][T25418] loop5: unable to read partition table [ 1994.395960][T25418] loop5: partition table beyond EOD, truncated [ 1994.395985][T25418] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1995.158262][T25427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1995.265493][T25427] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5732'. [ 1997.015558][T25433] syz.2.5734 (25433): drop_caches: 2 [ 1999.670021][ T37] kauditd_printk_skb: 3153 callbacks suppressed [ 1999.670046][ T37] audit: type=1400 audit(1775344621.221:1734581): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5539 comm="crond" name="/" dev="sda1" ino=2 [ 1999.670099][ T37] audit: type=1400 audit(1775344621.221:1734582): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5539 comm="crond" name="etc" dev="sda1" ino=116 [ 1999.670145][ T37] audit: type=1400 audit(1775344621.221:1734583): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5539 comm="crond" name="cron" dev="sda1" ino=120 [ 1999.670188][ T37] audit: type=1400 audit(1775344621.221:1734584): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5539 comm="crond" path="/etc/cron/crontabs" dev="sda1" ino=121 [ 1999.670231][ T37] audit: type=1400 audit(1775344621.221:1734585): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5539 comm="crond" name="crontabs" dev="sda1" ino=121 [ 1999.670273][ T37] audit: type=1400 audit(1775344621.231:1734586): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5539 comm="crond" name="/" dev="sda1" ino=2 [ 1999.670316][ T37] audit: type=1400 audit(1775344621.231:1734587): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5539 comm="crond" name="etc" dev="sda1" ino=116 [ 1999.930758][ T37] audit: type=1400 audit(1775344621.661:1734588): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17258 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1999.930795][ T37] audit: type=1400 audit(1775344621.661:1734589): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17258 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1999.930822][ T37] audit: type=1400 audit(1775344621.661:1734590): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17258 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2000.810754][T25475] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2000.916412][T25475] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5746'. [ 2001.689329][T25480] FAULT_INJECTION: forcing a failure. [ 2001.689329][T25480] name failslab, interval 1, probability 0, space 0, times 0 [ 2001.689369][T25480] CPU: 1 UID: 0 PID: 25480 Comm: syz.2.5749 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2001.689400][T25480] Tainted: [L]=SOFTLOCKUP [ 2001.689408][T25480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2001.689421][T25480] Call Trace: [ 2001.689430][T25480] [ 2001.689440][T25480] dump_stack_lvl+0xe8/0x150 [ 2001.689480][T25480] should_fail_ex+0x46b/0x600 [ 2001.689511][T25480] should_failslab+0xa8/0x100 [ 2001.689537][T25480] kmem_cache_alloc_noprof+0x87/0x680 [ 2001.689572][T25480] ? skb_clone+0x212/0x3a0 [ 2001.689604][T25480] skb_clone+0x212/0x3a0 [ 2001.689634][T25480] __netlink_deliver_tap+0x404/0x850 [ 2001.689682][T25480] ? netlink_deliver_tap+0x2e/0x1b0 [ 2001.689717][T25480] netlink_deliver_tap+0x19c/0x1b0 [ 2001.689761][T25480] netlink_unicast+0x805/0x9f0 [ 2001.689802][T25480] ? __pfx_netlink_unicast+0x10/0x10 [ 2001.689834][T25480] ? netlink_sendmsg+0x650/0xb40 [ 2001.689865][T25480] ? skb_put+0x11b/0x210 [ 2001.689893][T25480] netlink_sendmsg+0x813/0xb40 [ 2001.689936][T25480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2001.689973][T25480] ? unwind_get_return_address+0x4d/0x90 [ 2001.690001][T25480] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2001.690039][T25480] ____sys_sendmsg+0x94c/0x9c0 [ 2001.690074][T25480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2001.690112][T25480] ? import_iovec+0x73/0xa0 [ 2001.690139][T25480] ___sys_sendmsg+0x2a5/0x360 [ 2001.690173][T25480] ? __pfx____sys_sendmsg+0x10/0x10 [ 2001.690243][T25480] ? __fget_files+0x2a/0x420 [ 2001.690272][T25480] ? __fget_files+0x3a6/0x420 [ 2001.690315][T25480] __x64_sys_sendmsg+0x1c3/0x2a0 [ 2001.690345][T25480] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2001.690384][T25480] ? __pfx_ksys_write+0x10/0x10 [ 2001.690432][T25480] do_syscall_64+0x14d/0xf80 [ 2001.690456][T25480] ? trace_irq_disable+0x3b/0x150 [ 2001.690483][T25480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2001.690505][T25480] ? clear_bhb_loop+0x40/0x90 [ 2001.690533][T25480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2001.690556][T25480] RIP: 0033:0x7f2c55f9c819 [ 2001.690577][T25480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2001.690597][T25480] RSP: 002b:00007f2c541ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2001.690622][T25480] RAX: ffffffffffffffda RBX: 00007f2c56215fa0 RCX: 00007f2c55f9c819 [ 2001.690639][T25480] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 2001.690654][T25480] RBP: 00007f2c541ee090 R08: 0000000000000000 R09: 0000000000000000 [ 2001.690668][T25480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2001.690682][T25480] R13: 00007f2c56216038 R14: 00007f2c56215fa0 R15: 00007ffe887a0788 [ 2001.690720][T25480] [ 2001.892528][T22906] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2002.628171][T22906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2002.628202][T22906] usb 2-1: config 0 has no interfaces? [ 2002.628237][T22906] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2002.628263][T22906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2002.681511][T22906] usb 2-1: config 0 descriptor?? [ 2002.931413][ T5786] usb 2-1: USB disconnect, device number 102 [ 2004.407165][T25499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2004.679565][T21861] audit_log_start: 3532 callbacks suppressed [ 2004.679571][T17258] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2004.679584][T21861] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2004.679588][T17258] audit: audit_lost=376884 audit_rate_limit=0 audit_backlog_limit=64 [ 2004.679599][T21861] audit: audit_lost=376885 audit_rate_limit=0 audit_backlog_limit=64 [ 2004.679605][T17258] audit: backlog limit exceeded [ 2004.679615][T21861] audit: backlog limit exceeded [ 2004.679624][T17258] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2004.679638][T17258] audit: audit_lost=376886 audit_rate_limit=0 audit_backlog_limit=64 [ 2004.679653][T17258] audit: backlog limit exceeded [ 2004.679685][T17258] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2005.356852][T25517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2005.365586][T25517] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5760'. [ 2006.343245][T25524] loop5: detected capacity change from 0 to 7 [ 2006.406847][T25524] Dev loop5: unable to read RDB block 7 [ 2006.407046][T25524] loop5: unable to read partition table [ 2006.407296][T25524] loop5: partition table beyond EOD, truncated [ 2006.407334][T25524] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2007.960596][T25541] FAULT_INJECTION: forcing a failure. [ 2007.960596][T25541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2007.960637][T25541] CPU: 1 UID: 0 PID: 25541 Comm: syz.1.5769 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2007.960668][T25541] Tainted: [L]=SOFTLOCKUP [ 2007.960676][T25541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2007.960690][T25541] Call Trace: [ 2007.960699][T25541] [ 2007.960717][T25541] dump_stack_lvl+0xe8/0x150 [ 2007.960756][T25541] should_fail_ex+0x46b/0x600 [ 2007.960793][T25541] _copy_from_user+0x2d/0xb0 [ 2007.960816][T25541] __keyctl_dh_compute+0x1c3/0xd10 [ 2007.960848][T25541] ? arch_stack_walk+0xfb/0x150 [ 2007.960885][T25541] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 2007.960959][T25541] keyctl_dh_compute+0x124/0x180 [ 2007.960996][T25541] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 2007.961037][T25541] ? do_raw_spin_lock+0x12b/0x2f0 [ 2007.961077][T25541] __se_sys_keyctl+0x44c/0x9e0 [ 2007.961106][T25541] ? __pfx___se_sys_keyctl+0x10/0x10 [ 2007.961131][T25541] ? lockdep_hardirqs_on+0x7a/0x110 [ 2007.961157][T25541] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2007.961183][T25541] ? rt_mutex_slowunlock+0x1cb/0x300 [ 2007.961215][T25541] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2007.961258][T25541] ? fput+0xa0/0xd0 [ 2007.961288][T25541] ? ksys_write+0x248/0x270 [ 2007.961323][T25541] ? __pfx_ksys_write+0x10/0x10 [ 2007.961363][T25541] ? __x64_sys_keyctl+0x20/0xc0 [ 2007.961391][T25541] do_syscall_64+0x14d/0xf80 [ 2007.961415][T25541] ? trace_irq_disable+0x3b/0x150 [ 2007.961441][T25541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2007.961463][T25541] ? clear_bhb_loop+0x40/0x90 [ 2007.961492][T25541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2007.961515][T25541] RIP: 0033:0x7f333ff2c819 [ 2007.961537][T25541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2007.961557][T25541] RSP: 002b:00007f333e17e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 2007.961581][T25541] RAX: ffffffffffffffda RBX: 00007f33401a5fa0 RCX: 00007f333ff2c819 [ 2007.961598][T25541] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 0000000000000017 [ 2007.961613][T25541] RBP: 00007f333e17e090 R08: 0000000000000000 R09: 0000000000000000 [ 2007.961628][T25541] R10: 0000000000000053 R11: 0000000000000246 R12: 0000000000000001 [ 2007.961642][T25541] R13: 00007f33401a6038 R14: 00007f33401a5fa0 R15: 00007fff366551d8 [ 2007.961677][T25541] [ 2008.808507][T25557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2008.917170][T25557] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5775'. [ 2009.697169][ T37] kauditd_printk_skb: 4545 callbacks suppressed [ 2009.697191][ T37] audit: type=1400 audit(1775344631.421:1740956): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21861 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2009.697269][ T37] audit: type=1400 audit(1775344631.421:1740957): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21861 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2009.697315][ T37] audit: type=1400 audit(1775344631.431:1740958): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21861 comm="syz-executor" name="205" dev="tmpfs" ino=1081 [ 2009.697362][ T37] audit: type=1400 audit(1775344631.431:1740959): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21861 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2009.697408][ T37] audit: type=1400 audit(1775344631.431:1740960): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21861 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2009.697454][ T37] audit: type=1400 audit(1775344631.431:1740961): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21861 comm="syz-executor" name="205" dev="tmpfs" ino=1081 [ 2009.697500][ T37] audit: type=1400 audit(1775344631.431:1740962): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=21861 comm="syz-executor" path="/205/cgroup.net" dev="tmpfs" ino=1084 [ 2009.697546][ T37] audit: type=1400 audit(1775344631.431:1740963): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21861 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2009.697593][ T37] audit: type=1400 audit(1775344631.431:1740964): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21861 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2009.697639][ T37] audit: type=1400 audit(1775344631.431:1740965): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21861 comm="syz-executor" name="205" dev="tmpfs" ino=1081 [ 2011.851687][T25576] netlink: 'syz.8.5780': attribute type 5 has an invalid length. [ 2011.974205][T25579] netlink: 'syz.4.5781': attribute type 5 has an invalid length. [ 2012.440254][T25583] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5783'. [ 2013.454895][T25596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2013.676504][T25596] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5787'. [ 2014.702646][ T37] kauditd_printk_skb: 2802 callbacks suppressed [ 2014.702668][ T37] audit: type=1400 audit(1775344636.431:1743657): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23118 comm="syz-executor" name="152" dev="tmpfs" ino=811 [ 2014.702717][ T37] audit: type=1400 audit(1775344636.431:1743658): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23118 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2014.702763][ T37] audit: type=1400 audit(1775344636.431:1743659): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23118 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2014.702808][ T37] audit: type=1400 audit(1775344636.431:1743660): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23118 comm="syz-executor" name="152" dev="tmpfs" ino=811 [ 2014.702854][ T37] audit: type=1400 audit(1775344636.431:1743661): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=23118 comm="syz-executor" path="/152/binderfs" dev="tmpfs" ino=815 [ 2014.702899][ T37] audit: type=1400 audit(1775344636.431:1743662): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23118 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2014.702948][ T37] audit: type=1400 audit(1775344636.431:1743663): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23118 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2014.702994][ T37] audit: type=1400 audit(1775344636.431:1743664): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23118 comm="syz-executor" name="152" dev="tmpfs" ino=811 [ 2014.703040][ T37] audit: type=1400 audit(1775344636.431:1743665): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=23118 comm="syz-executor" name="152" dev="tmpfs" ino=811 [ 2014.703086][ T37] audit: type=1400 audit(1775344636.431:1743666): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=23118 comm="syz-executor" name="binderfs" dev="tmpfs" ino=815 [ 2016.669924][T25622] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 2016.905271][T19950] IPVS: starting estimator thread 0... [ 2017.002795][T25634] IPVS: using max 7 ests per chain, 16800 per kthread [ 2019.623002][T25646] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5803'. [ 2019.634200][T25643] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2019.643929][T25649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2019.644670][T25649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2019.731711][ T37] kauditd_printk_skb: 2691 callbacks suppressed [ 2019.731735][ T37] audit: type=1400 audit(1775344641.411:1746110): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5165 comm="udevd" name="/" dev="sda1" ino=2 [ 2019.731794][ T37] audit: type=1400 audit(1775344641.411:1746111): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5165 comm="udevd" name="etc" dev="sda1" ino=116 [ 2019.731838][ T37] audit: type=1400 audit(1775344641.411:1746112): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5165 comm="udevd" name="udev" dev="sda1" ino=259 [ 2019.731877][ T37] audit: type=1400 audit(1775344641.411:1746113): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5165 comm="udevd" path="/etc/udev/rules.d" dev="sda1" ino=261 [ 2019.731924][ T37] audit: type=1400 audit(1775344641.411:1746114): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5165 comm="udevd" name="/" dev="sda1" ino=2 [ 2019.731968][ T37] audit: type=1400 audit(1775344641.411:1746115): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5165 comm="udevd" name="lib" dev="sda1" ino=264 [ 2019.732010][ T37] audit: type=1400 audit(1775344641.411:1746116): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5165 comm="udevd" name="udev" dev="sda1" ino=1222 [ 2019.732054][ T37] audit: type=1400 audit(1775344641.411:1746117): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5165 comm="udevd" path="/lib/udev/rules.d" dev="sda1" ino=1229 [ 2019.732098][ T37] audit: type=1400 audit(1775344641.411:1746118): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5165 comm="udevd" name="/" dev="sda1" ino=2 [ 2019.732143][ T37] audit: type=1400 audit(1775344641.411:1746119): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5165 comm="udevd" name="/" dev="tmpfs" ino=1 [ 2019.942466][ T993] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 2020.092744][ T993] usb 3-1: Using ep0 maxpacket: 16 [ 2020.109197][ T993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2020.109232][ T993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2020.109253][ T993] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2020.109295][ T993] usb 3-1: New USB device found, idVendor=044f, idProduct=b651, bcdDevice= 0.00 [ 2020.109317][ T993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2020.237309][ T993] usb 3-1: config 0 descriptor?? [ 2021.704333][T25673] FAULT_INJECTION: forcing a failure. [ 2021.704333][T25673] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.704608][T25673] CPU: 0 UID: 0 PID: 25673 Comm: syz.8.5811 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2021.704640][T25673] Tainted: [L]=SOFTLOCKUP [ 2021.704649][T25673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2021.704663][T25673] Call Trace: [ 2021.704672][T25673] [ 2021.704681][T25673] dump_stack_lvl+0xe8/0x150 [ 2021.704724][T25673] should_fail_ex+0x46b/0x600 [ 2021.704761][T25673] should_failslab+0xa8/0x100 [ 2021.704787][T25673] kmem_cache_alloc_noprof+0x87/0x680 [ 2021.704821][T25673] ? skb_clone+0x212/0x3a0 [ 2021.704853][T25673] skb_clone+0x212/0x3a0 [ 2021.704884][T25673] __netlink_deliver_tap+0x404/0x850 [ 2021.704932][T25673] ? netlink_deliver_tap+0x2e/0x1b0 [ 2021.704965][T25673] netlink_deliver_tap+0x19c/0x1b0 [ 2021.704997][T25673] netlink_unicast+0x805/0x9f0 [ 2021.705036][T25673] ? __pfx_netlink_unicast+0x10/0x10 [ 2021.705067][T25673] ? netlink_sendmsg+0x650/0xb40 [ 2021.705095][T25673] ? skb_put+0x11b/0x210 [ 2021.705120][T25673] netlink_sendmsg+0x813/0xb40 [ 2021.705159][T25673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2021.705195][T25673] ? unwind_get_return_address+0x4d/0x90 [ 2021.705230][T25673] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2021.705272][T25673] ____sys_sendmsg+0x94c/0x9c0 [ 2021.705305][T25673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2021.705347][T25673] ? import_iovec+0x73/0xa0 [ 2021.705372][T25673] ___sys_sendmsg+0x2a5/0x360 [ 2021.705405][T25673] ? __pfx____sys_sendmsg+0x10/0x10 [ 2021.705470][T25673] ? __fget_files+0x2a/0x420 [ 2021.705497][T25673] ? __fget_files+0x3a6/0x420 [ 2021.705534][T25673] __x64_sys_sendmsg+0x1c3/0x2a0 [ 2021.705563][T25673] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2021.705599][T25673] ? __pfx_ksys_write+0x10/0x10 [ 2021.705644][T25673] do_syscall_64+0x14d/0xf80 [ 2021.705670][T25673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2021.705693][T25673] ? clear_bhb_loop+0x40/0x90 [ 2021.705719][T25673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2021.705742][T25673] RIP: 0033:0x7f28b2a1c819 [ 2021.705763][T25673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2021.705781][T25673] RSP: 002b:00007f28b0c55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2021.705807][T25673] RAX: ffffffffffffffda RBX: 00007f28b2c96090 RCX: 00007f28b2a1c819 [ 2021.705823][T25673] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000007 [ 2021.705838][T25673] RBP: 00007f28b0c55090 R08: 0000000000000000 R09: 0000000000000000 [ 2021.705851][T25673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2021.705864][T25673] R13: 00007f28b2c96128 R14: 00007f28b2c96090 R15: 00007ffeea304e98 [ 2021.705900][T25673] [ 2022.044294][ T993] usbhid 3-1:0.0: can't add hid device: -71 [ 2022.044443][ T993] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2022.072277][ T993] usb 3-1: USB disconnect, device number 100 [ 2022.637535][T25685] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5814'. [ 2023.695161][T25695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2023.790606][T25695] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5817'. [ 2024.732460][ T37] kauditd_printk_skb: 4743 callbacks suppressed [ 2024.732482][ T37] audit: type=1400 audit(1775344646.461:1750497): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=19411 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 [ 2024.732531][ T37] audit: type=1400 audit(1775344646.461:1750496): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22628 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2024.732576][ T37] audit: type=1400 audit(1775344646.461:1750498): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22628 comm="syz-executor" name="178" dev="tmpfs" ino=932 [ 2024.732620][ T37] audit: type=1400 audit(1775344646.461:1750499): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22628 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2024.732666][ T37] audit: type=1400 audit(1775344646.461:1750500): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22628 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2024.732710][ T37] audit: type=1400 audit(1775344646.461:1750501): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22628 comm="syz-executor" name="178" dev="tmpfs" ino=932 [ 2024.732752][ T37] audit: type=1400 audit(1775344646.461:1750502): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=22628 comm="syz-executor" path="/178/cgroup" dev="tmpfs" ino=933 [ 2024.732797][ T37] audit: type=1400 audit(1775344646.461:1750503): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22628 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2024.732845][ T37] audit: type=1400 audit(1775344646.461:1750504): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22628 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2024.732892][ T37] audit: type=1400 audit(1775344646.461:1750505): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22628 comm="syz-executor" name="178" dev="tmpfs" ino=932 [ 2025.474317][T19950] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 2025.752703][T19950] usb 3-1: Using ep0 maxpacket: 8 [ 2025.755533][T19950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 2025.755571][T19950] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2025.755618][T19950] usb 3-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 2025.755644][T19950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2025.818911][T19950] usb 3-1: config 0 descriptor?? [ 2027.336816][T19950] input: HID 0458:5014 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5014.004F/input/input84 [ 2028.022071][T19950] kye 0003:0458:5014.004F: input,hiddev0,hidraw0: USB HID ve.5b Device [HID 0458:5014] on usb-dummy_hcd.2-1/input0 [ 2028.243711][T25732] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2028.339475][T25732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5829'. [ 2028.988404][T25738] loop5: detected capacity change from 0 to 7 [ 2028.989542][T25738] Dev loop5: unable to read RDB block 7 [ 2028.989586][T25738] loop5: unable to read partition table [ 2028.989829][T25738] loop5: partition table beyond EOD, truncated [ 2028.989850][T25738] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2029.749225][ T37] kauditd_printk_skb: 4193 callbacks suppressed [ 2029.749246][ T37] audit: type=1400 audit(1775344651.471:1754216): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=25744 comm="syz-executor" name="164" dev="tmpfs" ino=873 [ 2029.749370][ T37] audit: type=1400 audit(1775344651.471:1754217): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23033 comm="udevd" name="/" dev="sda1" ino=2 [ 2029.749416][ T37] audit: type=1400 audit(1775344651.481:1754218): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="usb3" dev="sysfs" ino=26117 [ 2029.749461][ T37] audit: type=1400 audit(1775344651.481:1754219): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25744 comm="syz-executor" name="164" dev="tmpfs" ino=873 [ 2029.749517][ T37] audit: type=1400 audit(1775344651.481:1754220): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25744 comm="syz-executor" name="164" dev="tmpfs" ino=873 [ 2029.749565][ T37] audit: type=1400 audit(1775344651.481:1754221): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=25744 comm="syz-executor" name="164" dev="tmpfs" ino=873 [ 2029.749609][ T37] audit: type=1400 audit(1775344651.481:1754222): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="3-1" dev="sysfs" ino=336154 [ 2029.749653][ T37] audit: type=1400 audit(1775344651.481:1754223): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25744 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2029.749702][ T37] audit: type=1400 audit(1775344651.481:1754224): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25744 comm="syz-executor" name="/" dev="proc" ino=1 [ 2029.749753][ T37] audit: type=1400 audit(1775344651.481:1754225): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25744 comm="syz-executor" name="/" dev="proc" ino=1 [ 2029.941302][T22906] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 2030.097839][ T5786] usb 3-1: USB disconnect, device number 101 [ 2030.143246][T22906] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 2030.143276][T22906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2030.143296][T22906] usb 2-1: config 0 has no interface number 0 [ 2030.143344][T22906] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 2030.143374][T22906] usb 2-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2030.143404][T22906] usb 2-1: config 0 interface 2 has no altsetting 0 [ 2030.192050][T25746] fido_id[25746]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 2030.226093][T22906] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 2030.226127][T22906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.226147][T22906] usb 2-1: Product: syz [ 2030.226161][T22906] usb 2-1: Manufacturer: syz [ 2030.226177][T22906] usb 2-1: SerialNumber: syz [ 2030.273610][T22906] usb 2-1: config 0 descriptor?? [ 2030.283135][T25743] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2030.570859][T25743] program syz.1.5834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2030.600571][T22906] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2030.626821][T22906] usb 2-1: invalid MIDI in EP 0 [ 2031.094325][T22906] snd-usb-audio 2-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 2031.124505][T22906] usb 2-1: USB disconnect, device number 103 [ 2031.215278][T22915] udevd[22915]: setting mode of /dev/bus/usb/002/103 to 020664 failed: No such file or directory [ 2031.215700][T22915] udevd[22915]: setting owner of /dev/bus/usb/002/103 to uid=0, gid=0 failed: No such file or directory [ 2031.897189][T25759] udevd[25759]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2032.502532][T22906] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 2032.524905][T25770] loop5: detected capacity change from 0 to 7 [ 2032.547485][T25770] Dev loop5: unable to read RDB block 7 [ 2032.547536][T25770] loop5: unable to read partition table [ 2032.547784][T25770] loop5: partition table beyond EOD, truncated [ 2032.547805][T25770] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2032.692014][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2032.741969][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2032.744370][T22906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2032.744405][T22906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2032.744443][T22906] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 2032.744468][T22906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2032.768444][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2032.777884][T22906] usb 2-1: config 0 descriptor?? [ 2032.814672][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2032.815477][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2033.563831][T25777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2033.656302][T25777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5844'. [ 2034.424235][T22906] hid-led 0003:1D34:000A.0050: probe with driver hid-led failed with error -71 [ 2034.466586][T22906] usb 2-1: USB disconnect, device number 104 [ 2034.757418][ T37] kauditd_printk_skb: 11587 callbacks suppressed [ 2034.757440][ T37] audit: type=1400 audit(1775344656.481:1761298): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=25785 comm="syz-executor" name="166" dev="tmpfs" ino=884 [ 2034.757502][ T37] audit: type=1400 audit(1775344656.481:1761299): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25785 comm="syz-executor" name="166" dev="tmpfs" ino=884 [ 2034.757549][ T37] audit: type=1400 audit(1775344656.481:1761300): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25785 comm="syz-executor" name="166" dev="tmpfs" ino=884 [ 2034.757595][ T37] audit: type=1400 audit(1775344656.481:1761301): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=25785 comm="syz-executor" name="166" dev="tmpfs" ino=884 [ 2034.757644][ T37] audit: type=1400 audit(1775344656.481:1761302): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25785 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2034.757690][ T37] audit: type=1400 audit(1775344656.481:1761303): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25785 comm="syz-executor" name="/" dev="proc" ino=1 [ 2034.757737][ T37] audit: type=1400 audit(1775344656.481:1761304): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25785 comm="syz-executor" name="/" dev="proc" ino=1 [ 2034.757782][ T37] audit: type=1400 audit(1775344656.481:1761305): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25785 comm="syz-executor" name="452" dev="proc" ino=107805 [ 2034.757828][ T37] audit: type=1400 audit(1775344656.481:1761306): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=25785 comm="syz-executor" name="oom_score_adj" dev="proc" ino=107806 [ 2034.757875][ T37] audit: type=1400 audit(1775344656.481:1761307): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=25785 comm="syz-executor" path="/proc/452/oom_score_adj" dev="proc" ino=107806 [ 2034.849674][ T5814] Bluetooth: hci1: command tx timeout [ 2034.866787][ T5945] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 2035.054695][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 2035.072231][ T5945] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 2035.072264][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2035.072287][ T5945] usb 3-1: Product: syz [ 2035.072506][ T5945] usb 3-1: Manufacturer: syz [ 2035.072521][ T5945] usb 3-1: SerialNumber: syz [ 2035.100660][ T5945] usb 3-1: config 0 descriptor?? [ 2035.350727][T25782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5846'. [ 2035.369910][T25782] netlink: 'syz.2.5846': attribute type 4 has an invalid length. [ 2035.470912][ T5945] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 2035.470940][ T5945] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2035.550989][T25771] chnl_net:caif_netlink_parms(): no params data found [ 2036.522895][ T5786] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2036.742482][ T5786] usb 2-1: Using ep0 maxpacket: 16 [ 2036.746581][ T5786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2036.746639][ T5786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2036.746669][ T5786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2036.746692][ T5786] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2036.746716][ T5786] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2036.822593][ T5786] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2036.822628][ T5786] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2036.822651][ T5786] usb 2-1: Manufacturer: syz [ 2036.870217][ T5786] usb 2-1: config 0 descriptor?? [ 2036.875358][ T5945] usb 3-1: USB disconnect, device number 102 [ 2036.922527][ T5814] Bluetooth: hci1: command tx timeout [ 2037.090742][T25771] bridge0: port 1(bridge_slave_0) entered blocking state [ 2037.119321][T25771] bridge0: port 1(bridge_slave_0) entered disabled state [ 2037.119631][T25771] bridge_slave_0: entered allmulticast mode [ 2037.130655][T25771] bridge_slave_0: entered promiscuous mode [ 2037.136569][T25771] bridge0: port 2(bridge_slave_1) entered blocking state [ 2037.136777][T25771] bridge0: port 2(bridge_slave_1) entered disabled state [ 2037.137082][T25771] bridge_slave_1: entered allmulticast mode [ 2037.139936][T25771] bridge_slave_1: entered promiscuous mode [ 2037.235744][T25771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2037.241529][T25771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2037.262603][ T5786] rc_core: IR keymap rc-hauppauge not found [ 2037.262628][ T5786] Registered IR keymap rc-empty [ 2037.262808][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2037.282575][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2037.282762][T25771] team0: Port device team_slave_0 added [ 2037.286298][T25771] team0: Port device team_slave_1 added [ 2037.321226][ T5786] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2037.338935][ T5786] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input85 [ 2037.358745][T25771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2037.358765][T25771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2037.358794][T25771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2037.361891][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2037.368014][T25771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2037.368034][T25771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2037.368064][T25771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2037.460720][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2037.472677][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2037.492868][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2037.504272][T25771] hsr_slave_0: entered promiscuous mode [ 2037.505766][T25771] hsr_slave_1: entered promiscuous mode [ 2037.506807][T25771] debugfs: 'hsr0' already exists in 'hsr' [ 2037.506834][T25771] Cannot create hsr debugfs directory [ 2037.512854][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2037.532617][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2037.552665][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2037.572750][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2037.592808][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2037.613558][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2037.659079][ T5786] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2037.659109][ T5786] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2037.686313][ T5786] usb 2-1: USB disconnect, device number 105 [ 2037.728543][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.811260][T25811] netlink: 'syz.2.5854': attribute type 21 has an invalid length. [ 2038.088672][T25817] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5854'. [ 2038.431296][T25821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2038.527097][T25821] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5855'. [ 2039.170999][T23730] Bluetooth: hci1: command tx timeout [ 2039.213456][T25811] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5854'. [ 2039.438866][T25825] FAULT_INJECTION: forcing a failure. [ 2039.438866][T25825] name failslab, interval 1, probability 0, space 0, times 0 [ 2039.438907][T25825] CPU: 1 UID: 0 PID: 25825 Comm: syz.8.5858 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2039.438938][T25825] Tainted: [L]=SOFTLOCKUP [ 2039.438947][T25825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2039.438960][T25825] Call Trace: [ 2039.438969][T25825] [ 2039.438980][T25825] dump_stack_lvl+0xe8/0x150 [ 2039.439019][T25825] should_fail_ex+0x46b/0x600 [ 2039.439053][T25825] should_failslab+0xa8/0x100 [ 2039.439077][T25825] kmem_cache_alloc_noprof+0x87/0x680 [ 2039.439108][T25825] ? skb_clone+0x212/0x3a0 [ 2039.439137][T25825] skb_clone+0x212/0x3a0 [ 2039.439173][T25825] __netlink_deliver_tap+0x404/0x850 [ 2039.439217][T25825] ? netlink_deliver_tap+0x2e/0x1b0 [ 2039.439249][T25825] netlink_deliver_tap+0x19c/0x1b0 [ 2039.439284][T25825] netlink_unicast+0x805/0x9f0 [ 2039.439325][T25825] ? __pfx_netlink_unicast+0x10/0x10 [ 2039.439357][T25825] ? netlink_sendmsg+0x650/0xb40 [ 2039.439388][T25825] ? skb_put+0x11b/0x210 [ 2039.439415][T25825] netlink_sendmsg+0x813/0xb40 [ 2039.439458][T25825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2039.439494][T25825] ? unwind_get_return_address+0x4d/0x90 [ 2039.439523][T25825] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2039.439561][T25825] ____sys_sendmsg+0x94c/0x9c0 [ 2039.439595][T25825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2039.439633][T25825] ? import_iovec+0x73/0xa0 [ 2039.439659][T25825] ___sys_sendmsg+0x2a5/0x360 [ 2039.439693][T25825] ? __pfx____sys_sendmsg+0x10/0x10 [ 2039.439761][T25825] ? __fget_files+0x2a/0x420 [ 2039.439791][T25825] ? __fget_files+0x3a6/0x420 [ 2039.439832][T25825] __x64_sys_sendmsg+0x1c3/0x2a0 [ 2039.439862][T25825] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2039.439901][T25825] ? __pfx_ksys_write+0x10/0x10 [ 2039.439950][T25825] do_syscall_64+0x14d/0xf80 [ 2039.439975][T25825] ? trace_irq_disable+0x3b/0x150 [ 2039.440002][T25825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2039.440025][T25825] ? clear_bhb_loop+0x40/0x90 [ 2039.440053][T25825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2039.440076][T25825] RIP: 0033:0x7f28b2a1c819 [ 2039.440097][T25825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2039.440117][T25825] RSP: 002b:00007f28b0c76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2039.440142][T25825] RAX: ffffffffffffffda RBX: 00007f28b2c95fa0 RCX: 00007f28b2a1c819 [ 2039.440158][T25825] RDX: 0000000020040004 RSI: 0000200000000200 RDI: 0000000000000003 [ 2039.440181][T25825] RBP: 00007f28b0c76090 R08: 0000000000000000 R09: 0000000000000000 [ 2039.440196][T25825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2039.440210][T25825] R13: 00007f28b2c96038 R14: 00007f28b2c95fa0 R15: 00007ffeea304e98 [ 2039.440247][T25825] [ 2039.784333][ T37] kauditd_printk_skb: 5920 callbacks suppressed [ 2039.784381][ T37] audit: type=1400 audit(1775344661.511:1765719): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21861 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2039.792169][ T37] audit: type=1400 audit(1775344661.521:1765720): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21861 comm="syz-executor" name="224" dev="tmpfs" ino=1176 [ 2039.806384][ T37] audit: type=1400 audit(1775344661.541:1765721): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21861 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2039.818453][ T37] audit: type=1400 audit(1775344661.541:1765722): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21861 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2039.839051][ T37] audit: type=1400 audit(1775344661.561:1765723): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21861 comm="syz-executor" name="224" dev="tmpfs" ino=1176 [ 2039.857693][ T37] audit: type=1400 audit(1775344661.591:1765724): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=21861 comm="syz-executor" path="/224/cgroup" dev="tmpfs" ino=1177 [ 2039.878578][ T37] audit: type=1400 audit(1775344661.601:1765725): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21861 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2039.888932][ T37] audit: type=1400 audit(1775344661.621:1765726): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21861 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2039.899249][ T37] audit: type=1400 audit(1775344661.631:1765727): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21861 comm="syz-executor" name="224" dev="tmpfs" ino=1176 [ 2039.915909][ T37] audit: type=1400 audit(1775344661.641:1765728): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=21861 comm="syz-executor" name="224" dev="tmpfs" ino=1176 [ 2041.427524][ T5814] Bluetooth: hci1: command tx timeout [ 2042.922126][T25860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2043.039778][T25860] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5867'. [ 2043.355881][ T5786] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 2043.785252][ T5786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2043.785284][ T5786] usb 3-1: config 0 has no interfaces? [ 2043.785317][ T5786] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2043.785344][ T5786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2043.849852][ T5786] usb 3-1: config 0 descriptor?? [ 2044.325724][T23766] usb 3-1: USB disconnect, device number 103 [ 2044.563888][T25872] netlink: 92 bytes leftover after parsing attributes in process `syz.8.5868'. [ 2045.002421][ T37] kauditd_printk_skb: 5116 callbacks suppressed [ 2045.002445][ T37] audit: type=1400 audit(1775344666.231:1768467): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25868 comm="sed" name="/" dev="sda1" ino=2 [ 2045.002499][ T37] audit: type=1400 audit(1775344666.231:1768468): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25868 comm="sed" name="/" dev="sda1" ino=2 [ 2045.002547][ T37] audit: type=1400 audit(1775344666.231:1768469): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25868 comm="sed" name="/" dev="proc" ino=1 [ 2045.002593][ T37] audit: type=1400 audit(1775344666.231:1768470): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=25868 comm="sed" name="filesystems" dev="proc" ino=4026532110 [ 2045.002641][ T37] audit: type=1400 audit(1775344666.231:1768471): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=25868 comm="sed" path="/proc/filesystems" dev="proc" ino=4026532110 [ 2045.002683][ T37] audit: type=1400 audit(1775344666.231:1768472): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=25868 comm="sed" path="/proc/filesystems" dev="proc" ino=4026532110 [ 2045.002731][ T37] audit: type=1400 audit(1775344666.291:1768473): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=25866 comm="syz.8.5868" opid=25866 ocomm="syz.8.5868" [ 2045.002779][ T37] audit: type=1400 audit(1775344666.311:1768474): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25866 comm="syz.8.5868" name="newroot" dev="tmpfs" ino=2 [ 2045.002826][ T37] audit: type=1400 audit(1775344666.311:1768475): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25866 comm="syz.8.5868" name="/" dev="devtmpfs" ino=1 [ 2045.002873][ T37] audit: type=1400 audit(1775344666.321:1768476): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25866 comm="syz.8.5868" name="snd" dev="devtmpfs" ino=1283 [ 2049.341320][T25908] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2049.439773][T25908] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5877'. [ 2050.012512][T25911] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5878'. [ 2050.014942][ T37] kauditd_printk_skb: 2400 callbacks suppressed [ 2050.014961][ T37] audit: type=1400 audit(1775344671.751:1770819): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="/" dev="sda1" ino=2 [ 2050.015011][ T37] audit: type=1400 audit(1775344671.751:1770820): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="/" dev="tmpfs" ino=1 [ 2050.015056][ T37] audit: type=1400 audit(1775344671.751:1770821): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 2050.015103][ T37] audit: type=1400 audit(1775344671.751:1770822): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="data" dev="tmpfs" ino=13 [ 2050.015148][ T37] audit: type=1400 audit(1775344671.751:1770823): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="/" dev="sda1" ino=2 [ 2050.015199][ T37] audit: type=1400 audit(1775344671.751:1770824): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="/" dev="tmpfs" ino=1 [ 2050.015245][ T37] audit: type=1400 audit(1775344671.751:1770825): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 2050.015292][ T37] audit: type=1400 audit(1775344671.751:1770826): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="data" dev="tmpfs" ino=13 [ 2050.015339][ T37] audit: type=1400 audit(1775344671.751:1770827): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="/" dev="sda1" ino=2 [ 2050.015392][ T37] audit: type=1400 audit(1775344671.751:1770828): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23519 comm="udevd" name="/" dev="sysfs" ino=1 [ 2050.392548][T23421] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 2050.555677][T23421] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2050.555709][T23421] usb 3-1: config 0 has no interfaces? [ 2050.555745][T23421] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2050.555770][T23421] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2050.606879][T23421] usb 3-1: config 0 descriptor?? [ 2050.669525][T25917] loop6: detected capacity change from 0 to 8 [ 2050.731144][T25918] netlink: 'syz.1.5882': attribute type 1 has an invalid length. [ 2050.731172][T25918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5882'. [ 2050.932486][ T5786] usb 3-1: USB disconnect, device number 104 [ 2051.585750][T25917] loop6: detected capacity change from 8 to 7 [ 2051.619600][ C0] blk_print_req_error: 5 callbacks suppressed [ 2051.619626][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2051.619662][ C0] buffer_io_error: 5 callbacks suppressed [ 2051.619675][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2051.621981][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2051.622019][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2051.622450][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2051.622481][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2051.710801][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2051.710841][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2051.711957][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2051.711988][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2051.712246][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2051.712274][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2051.730602][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2051.730638][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2051.730732][T22912] ldm_validate_partition_table(): Disk read failed. [ 2051.732538][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2051.732567][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2051.743934][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2051.743967][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2051.762640][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2051.762680][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2051.812245][T22912] Dev loop6: unable to read RDB block 0 [ 2051.898973][T22912] loop6: unable to read partition table [ 2051.899254][T22912] loop6: partition table beyond EOD, truncated [ 2052.039189][T25917] ldm_validate_partition_table(): Disk read failed. [ 2052.089270][T25917] Dev loop6: unable to read RDB block 0 [ 2052.112962][T25917] loop6: unable to read partition table [ 2052.113233][T25917] loop6: partition table beyond EOD, truncated [ 2052.113275][T25917] loop_reread_partitions: partition scan of loop6 ([{BѷMܾ`*Z5]z(Ť4+hGpXgm [ 2052.113275][T25917] .BL_se) failed (rc=-5) [ 2053.422840][T25771] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2053.491368][T25771] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2053.542464][T25771] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2053.623240][T25771] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2054.296664][T25771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2054.438743][T25771] 8021q: adding VLAN 0 to HW filter on device team0 [ 2054.468051][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 2054.468224][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2054.513415][ T118] bridge0: port 2(bridge_slave_1) entered blocking state [ 2054.513572][ T118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2055.037496][ T37] kauditd_printk_skb: 7346 callbacks suppressed [ 2055.037517][ T37] audit: type=1400 audit(1775344676.771:1775448): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23118 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2055.037770][ T37] audit: type=1400 audit(1775344676.771:1775449): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23118 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2055.037963][ T37] audit: type=1400 audit(1775344676.771:1775450): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25969 comm="rm" name="/" dev="sda1" ino=2 [ 2055.038110][ T37] audit: type=1400 audit(1775344676.771:1775451): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25969 comm="rm" name="/" dev="sda1" ino=2 [ 2055.038350][ T37] audit: type=1400 audit(1775344676.771:1775452): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23118 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2055.038400][ T37] audit: type=1400 audit(1775344676.771:1775453): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25969 comm="rm" name="lib" dev="sda1" ino=264 [ 2055.038451][ T37] audit: type=1400 audit(1775344676.771:1775454): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25969 comm="rm" name="lib" dev="sda1" ino=264 [ 2055.038593][ T37] audit: type=1400 audit(1775344676.771:1775455): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=25969 comm="rm" name="libatomic.so.1.2.0" dev="sda1" ino=1108 [ 2055.038763][ T37] audit: type=1400 audit(1775344676.771:1775456): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23118 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 2055.039011][ T37] audit: type=1400 audit(1775344676.771:1775458): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=23118 comm="syz-executor" name="175" dev="tmpfs" ino=930 [ 2055.599013][T25771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2056.589108][T25771] veth0_vlan: entered promiscuous mode [ 2056.611124][T25771] veth1_vlan: entered promiscuous mode [ 2056.707962][T25771] veth0_macvtap: entered promiscuous mode [ 2056.726913][T25771] veth1_macvtap: entered promiscuous mode [ 2056.799516][T25771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2056.879380][T25771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2056.908881][T17782] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2056.910251][T17782] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2056.910827][T17782] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2056.911094][T17782] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2057.301847][ T6386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2057.301870][ T6386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2057.397125][T13732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2057.397148][T13732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2058.137222][T26009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2060.054254][ T37] kauditd_printk_skb: 11624 callbacks suppressed [ 2060.054282][ T37] audit: type=1400 audit(1775344681.791:1785087): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26026 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 2060.054400][ T37] audit: type=1400 audit(1775344681.791:1785088): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26026 comm="dhcpcd-run-hook" name="var" dev="sda1" ino=2001 [ 2060.054531][ T37] audit: type=1400 audit(1775344681.791:1785089): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26026 comm="dhcpcd-run-hook" name="var" dev="sda1" ino=2001 [ 2060.054659][ T37] audit: type=1400 audit(1775344681.791:1785090): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26026 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 2060.054805][ T37] audit: type=1400 audit(1775344681.791:1785091): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26026 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 [ 2060.054928][ T37] audit: type=1400 audit(1775344681.791:1785092): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26026 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1838 [ 2060.055085][ T37] audit: type=1400 audit(1775344681.791:1785093): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26026 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 [ 2060.055300][ T37] audit: type=1400 audit(1775344681.791:1785094): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26026 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 2060.055417][ T37] audit: type=1400 audit(1775344681.791:1785095): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26026 comm="dhcpcd-run-hook" name="var" dev="sda1" ino=2001 [ 2060.055546][ T37] audit: type=1400 audit(1775344681.791:1785096): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26026 comm="dhcpcd-run-hook" name="var" dev="sda1" ino=2001 [ 2065.062902][ T37] kauditd_printk_skb: 12216 callbacks suppressed [ 2065.062924][ T37] audit: type=1400 audit(1775344686.801:1797247): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=26125 comm="sed" path="/lib/libatomic.so.1.2.0" dev="sda1" ino=1108 [ 2065.063138][ T37] audit: type=1400 audit(1775344686.801:1797248): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=26125 comm="sed" path="/lib/libatomic.so.1.2.0" dev="sda1" ino=1108 [ 2065.064649][ T37] audit: type=1400 audit(1775344686.801:1797249): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26125 comm="sed" name="/" dev="sda1" ino=2 [ 2065.064767][ T37] audit: type=1400 audit(1775344686.801:1797250): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26125 comm="sed" name="/" dev="sda1" ino=2 [ 2065.064902][ T37] audit: type=1400 audit(1775344686.801:1797251): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26125 comm="sed" name="lib" dev="sda1" ino=264 [ 2065.065120][ T37] audit: type=1400 audit(1775344686.801:1797252): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26125 comm="sed" name="/" dev="sda1" ino=2 [ 2065.065240][ T37] audit: type=1400 audit(1775344686.801:1797253): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26125 comm="sed" name="usr" dev="sda1" ino=1480 [ 2065.065368][ T37] audit: type=1400 audit(1775344686.801:1797254): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26125 comm="sed" name="usr" dev="sda1" ino=1480 [ 2065.065515][ T37] audit: type=1400 audit(1775344686.801:1797255): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26125 comm="sed" name="lib" dev="sda1" ino=1642 [ 2065.065632][ T37] audit: type=1400 audit(1775344686.801:1797256): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26125 comm="sed" name="lib" dev="sda1" ino=1642 [ 2081.603504][ T37] kauditd_printk_skb: 685 callbacks suppressed [ 2081.603527][ T37] audit: type=1400 audit(1775344703.341:1797942): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1190 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.239 dest=43026 netif=eth0 [ 2099.170973][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 2111.559279][ T37] audit: type=1400 audit(1775344733.291:1797943): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1190 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.239 dest=43026 netif=eth0 [ 2118.497234][ T37] audit: type=1400 audit(1775344740.231:1797944): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5539 comm="crond" name="/" dev="sda1" ino=2 [ 2118.497507][ T37] audit: type=1400 audit(1775344740.231:1797945): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5539 comm="crond" name="etc" dev="sda1" ino=116 [ 2118.497640][ T37] audit: type=1400 audit(1775344740.231:1797946): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5539 comm="crond" name="cron" dev="sda1" ino=120 [ 2118.501116][ T37] audit: type=1400 audit(1775344740.231:1797947): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5539 comm="crond" path="/etc/cron/crontabs" dev="sda1" ino=121 [ 2118.532469][ T37] audit: type=1400 audit(1775344740.241:1797948): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5539 comm="crond" name="crontabs" dev="sda1" ino=121 [ 2118.532539][ T37] audit: type=1400 audit(1775344740.241:1797949): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5539 comm="crond" name="/" dev="sda1" ino=2 [ 2118.532585][ T37] audit: type=1400 audit(1775344740.241:1797950): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5539 comm="crond" name="etc" dev="sda1" ino=116 [ 2157.562641][T23730] Bluetooth: hci1: command 0x0406 tx timeout [ 2157.638293][ T37] audit: type=1400 audit(1775344779.371:1797951): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5165 comm="udevd" name="/" dev="sda1" ino=2 [ 2157.638354][ T37] audit: type=1400 audit(1775344779.371:1797952): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5165 comm="udevd" name="etc" dev="sda1" ino=116 [ 2157.638400][ T37] audit: type=1400 audit(1775344779.371:1797953): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5165 comm="udevd" name="udev" dev="sda1" ino=259 [ 2157.638445][ T37] audit: type=1400 audit(1775344779.371:1797954): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5165 comm="udevd" path="/etc/udev/rules.d" dev="sda1" ino=261 [ 2157.638491][ T37] audit: type=1400 audit(1775344779.371:1797955): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5165 comm="udevd" name="/" dev="sda1" ino=2 [ 2157.638537][ T37] audit: type=1400 audit(1775344779.371:1797956): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5165 comm="udevd" name="lib" dev="sda1" ino=264 [ 2157.638585][ T37] audit: type=1400 audit(1775344779.371:1797957): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5165 comm="udevd" name="udev" dev="sda1" ino=1222 [ 2157.638632][ T37] audit: type=1400 audit(1775344779.371:1797958): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5165 comm="udevd" path="/lib/udev/rules.d" dev="sda1" ino=1229 [ 2157.638678][ T37] audit: type=1400 audit(1775344779.371:1797959): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5165 comm="udevd" name="/" dev="sda1" ino=2 [ 2157.638734][ T37] audit: type=1400 audit(1775344779.371:1797960): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5165 comm="udevd" name="/" dev="tmpfs" ino=1 [ 2160.608215][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 2170.946880][ T37] kauditd_printk_skb: 83 callbacks suppressed [ 2170.946902][ T37] audit: type=1400 audit(1775344792.681:1798044): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1190 comm="irq/33-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.0.239 dest=43026 netif=eth0 [ 2172.762869][ T38] INFO: task syz.4.5799:25627 blocked for more than 143 seconds. [ 2172.762901][ T38] Tainted: G L syzkaller #0 [ 2172.762914][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2172.762924][ T38] task:syz.4.5799 state:D stack:24832 pid:25627 tgid:25627 ppid:17258 task_flags:0x400040 flags:0x00080003 [ 2172.762988][ T38] Call Trace: [ 2172.762997][ T38] [ 2172.763012][ T38] __schedule+0x1553/0x5240 [ 2172.763049][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 2172.763079][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2172.763116][ T38] ? rt_spin_lock+0x1e0/0x400 [ 2172.763151][ T38] ? __pfx___schedule+0x10/0x10 [ 2172.763186][ T38] ? schedule+0x90/0x360 [ 2172.763213][ T38] schedule+0x164/0x360 [ 2172.763239][ T38] __fuse_simple_request+0x121f/0x1c60 [ 2172.763293][ T38] ? __pfx___fuse_simple_request+0x10/0x10 [ 2172.763327][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2172.763370][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2172.763412][ T38] fuse_flush+0x673/0x8b0 [ 2172.763445][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 2172.763469][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 2172.763495][ T38] ? __pfx_fuse_flush+0x10/0x10 [ 2172.763545][ T38] ? rt_spin_lock+0x1e0/0x400 [ 2172.763590][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2172.763624][ T38] ? rt_spin_unlock+0x14f/0x200 [ 2172.763659][ T38] ? __pfx_fuse_flush+0x10/0x10 [ 2172.763692][ T38] filp_flush+0xc0/0x190 [ 2172.763725][ T38] filp_close+0x1d/0x40 [ 2172.763754][ T38] __se_sys_close_range+0x3d7/0x900 [ 2172.763795][ T38] ? __pfx___se_sys_close_range+0x10/0x10 [ 2172.763840][ T38] do_syscall_64+0x14d/0xf80 [ 2172.763863][ T38] ? trace_irq_disable+0x3b/0x150 [ 2172.763890][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2172.763912][ T38] ? clear_bhb_loop+0x40/0x90 [ 2172.763939][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2172.763960][ T38] RIP: 0033:0x7fca022ac819 [ 2172.763981][ T38] RSP: 002b:00007ffe2cfef868 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2172.764004][ T38] RAX: ffffffffffffffda RBX: 00007ffe2cfef950 RCX: 00007fca022ac819 [ 2172.764021][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2172.764035][ T38] RBP: 00000000001ec452 R08: 0000000000000001 R09: 0000000000000000 [ 2172.764049][ T38] R10: 0000001b32720000 R11: 0000000000000246 R12: 00007ffe2cfef990 [ 2172.764064][ T38] R13: 00007fca0252609c R14: 00000000001ec565 R15: 00007fca02526090 [ 2172.764101][ T38] [ 2172.764118][ T38] [ 2172.764118][ T38] Showing all locks held in the system: [ 2172.764129][ T38] 1 lock held by khungtaskd/38: [ 2172.764142][ T38] #0: ffffffff8ddcb9c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2172.764218][ T38] 2 locks held by getty/5554: [ 2172.764231][ T38] #0: ffff8880332620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2172.764291][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 2172.764347][ T38] 3 locks held by kworker/u8:9/13732: [ 2172.764373][ T38] [ 2172.764379][ T38] ============================================= [ 2172.764379][ T38] [ 2172.764389][ T38] NMI backtrace for cpu 1 [ 2172.764406][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2172.764433][ T38] Tainted: [L]=SOFTLOCKUP [ 2172.764442][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2172.764454][ T38] Call Trace: [ 2172.764461][ T38] [ 2172.764471][ T38] dump_stack_lvl+0xe8/0x150 [ 2172.764504][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 2172.764535][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2172.764568][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2172.764612][ T38] sys_info+0x135/0x170 [ 2172.764639][ T38] watchdog+0xfd9/0x1030 [ 2172.764673][ T38] ? watchdog+0x21a/0x1030 [ 2172.764709][ T38] kthread+0x388/0x470 [ 2172.764733][ T38] ? __pfx_watchdog+0x10/0x10 [ 2172.764758][ T38] ? __pfx_kthread+0x10/0x10 [ 2172.764784][ T38] ret_from_fork+0x51e/0xb90 [ 2172.764819][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2172.764849][ T38] ? __switch_to+0xc7d/0x1450 [ 2172.764881][ T38] ? __pfx_kthread+0x10/0x10 [ 2172.764907][ T38] ret_from_fork_asm+0x1a/0x30 [ 2172.764947][ T38] [ 2172.764956][ T38] Sending NMI from CPU 1 to CPUs 0: [ 2172.764985][ C0] NMI backtrace for cpu 0 [ 2172.765002][ C0] CPU: 0 UID: 0 PID: 13732 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2172.765027][ C0] Tainted: [L]=SOFTLOCKUP [ 2172.765033][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2172.765044][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 2172.765072][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x0/0x40 [ 2172.765093][ C0] Code: 48 8d 3d 93 73 49 04 48 c7 c6 f4 e8 54 8d 67 48 0f b9 3a 90 eb ca cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 31 c0 83 3d a3 4a 46 04 00 74 1d 83 3d ba 5c 46 04 00 [ 2172.765108][ C0] RSP: 0018:ffffc90004317948 EFLAGS: 00000296 [ 2172.765122][ C0] RAX: a759f153a6187200 RBX: ffffffff8187ebbc RCX: 0000000000000046 [ 2172.765135][ C0] RDX: 000000004d11b029 RSI: ffffffff8d7c1916 RDI: ffffffff8ba67a00 [ 2172.765148][ C0] RBP: 0000000000000200 R08: ffffffff8187ebbc R09: ffffffff8ddcb9c0 [ 2172.765159][ C0] R10: dffffc0000000000 R11: fffffbfff1ed4e37 R12: ffff888026868ba4 [ 2172.765172][ C0] R13: dffffc0000000000 R14: 1ffff11004d0d174 R15: ffff8880268684c0 [ 2172.765184][ C0] FS: 0000000000000000(0000) GS:ffff888126335000(0000) knlGS:0000000000000000 [ 2172.765199][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2172.765211][ C0] CR2: 0000564012dc9088 CR3: 000000000dbba000 CR4: 00000000003526f0 [ 2172.765229][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2172.765240][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2172.765251][ C0] Call Trace: [ 2172.765257][ C0] [ 2172.765264][ C0] __local_bh_disable_ip+0x20e/0x420 [ 2172.765290][ C0] ? __alloc_skb+0x186/0x7d0 [ 2172.765306][ C0] ? __alloc_skb+0x186/0x7d0 [ 2172.765321][ C0] __alloc_skb+0x193/0x7d0 [ 2172.765353][ C0] nsim_dev_trap_report_work+0x29f/0xbc0 [ 2172.765385][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 2172.765409][ C0] process_scheduled_works+0xb6e/0x18c0 [ 2172.765445][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2172.765471][ C0] ? assign_work+0x3d5/0x5e0 [ 2172.765495][ C0] worker_thread+0xa53/0xfc0 [ 2172.765530][ C0] kthread+0x388/0x470 [ 2172.765547][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2172.765569][ C0] ? __pfx_kthread+0x10/0x10 [ 2172.765587][ C0] ret_from_fork+0x51e/0xb90 [ 2172.765611][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2172.765633][ C0] ? __switch_to+0xc7d/0x1450 [ 2172.765655][ C0] ? __pfx_kthread+0x10/0x10 [ 2172.765673][ C0] ret_from_fork_asm+0x1a/0x30 [ 2172.765706][ C0] [ 2172.765982][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 2172.766001][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2172.766029][ T38] Tainted: [L]=SOFTLOCKUP [ 2172.766037][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2172.766050][ T38] Call Trace: [ 2172.766058][ T38] [ 2172.766067][ T38] vpanic+0x56c/0xa60 [ 2172.766104][ T38] ? __pfx_vpanic+0x10/0x10 [ 2172.766148][ T38] panic+0xc5/0xd0 [ 2172.766178][ T38] ? __pfx_panic+0x10/0x10 [ 2172.766208][ T38] ? printk_trigger_flush+0x117/0x180 [ 2172.766240][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 2172.766273][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 2172.766310][ T38] watchdog+0x1023/0x1030 [ 2172.766342][ T38] ? watchdog+0x21a/0x1030 [ 2172.766379][ T38] kthread+0x388/0x470 [ 2172.766403][ T38] ? __pfx_watchdog+0x10/0x10 [ 2172.766428][ T38] ? __pfx_kthread+0x10/0x10 [ 2172.766454][ T38] ret_from_fork+0x51e/0xb90 [ 2172.766488][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2172.766519][ T38] ? __switch_to+0xc7d/0x1450 [ 2172.766550][ T38] ? __pfx_kthread+0x10/0x10 [ 2172.766574][ T38] ret_from_fork_asm+0x1a/0x30 [ 2172.766616][ T38] [ 2172.766977][ T38] Kernel Offset: disabled