last executing test programs: 29m20.772536856s ago: executing program 32 (id=425): ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f000000a440)={'\x00', 0x1000, 0x11a9, 0x1, 0x0, 0xfffe, 0x41000, 0x70000, '\x00', 0xec13}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@empty, @in=@initdev}}, {{}, 0x0, @in6=@private0}}, &(0x7f0000000480)=0xe8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) close(0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0001000000ff7f0000000080"], 0x24}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40058a1}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000008f40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f000000a600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="00042bbd7000fbdbdf250f000000db4e1240dca212520d5b5f0800060008000000080004000e00000020000280140200003fffffff0000000000000000000000000800060002000000080006000721fbe9951f44d5cd66b0561f601b784c9fc2677d6744cd5f33006ac7055c3eaabbb57576ffbfc102f0e38625580d71418c6a5ac2cd2097f52ddc0a555423cc08ced9730eb2666142545fcdc799"], 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = accept4$inet6(r0, &(0x7f0000008f80)={0xa, 0x0, 0x0, @empty}, &(0x7f0000008fc0)=0x1c, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xa, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r7, r8, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x2f, 0x0, {0x7, 0x26, 0x5, 0x202600b4, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x8, 0x10001}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0xffffffffffffffda, 0x7, {{0x3, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffdf8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0x1, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r7, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x18}}}, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000009000)={{{@in=@local, @in6=@empty, 0x4e24, 0x0, 0x4e24, 0xe, 0x2, 0x80, 0xa0, 0x0, 0x0, r7}, {0x18, 0x4, 0x10000, 0x2, 0x3, 0x10000, 0x4, 0x10001}, {0xff, 0xe0, 0x7, 0x5}, 0x80000001, 0x6e6bb1, 0x0, 0x1, 0x2, 0x2}, {{@in6=@remote, 0x4d6, 0x2b}, 0xa, @in=@multicast1, 0x3503, 0x0, 0x3, 0xf3, 0x9, 0x8, 0x8}}, 0xe8) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000030301", @ANYRESDEC=r5], 0x20}, 0x1, 0x0, 0x0, 0x4c081}, 0x4040) r9 = socket(0xa, 0x3, 0xff) connect$inet6(r9, &(0x7f00000006c0)={0xa, 0x4e1e, 0x2, @private0, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000080)=0x4904, 0x4) recvmmsg(r9, &(0x7f0000008d00)=[{{&(0x7f00000004c0)=@isdn, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000540)=""/4, 0x4}, {&(0x7f0000000580)=""/101, 0x65}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000780)=""/204, 0xcc}, {&(0x7f0000000880)=""/199, 0xc7}, {&(0x7f0000000980)=""/190, 0xbe}, {&(0x7f0000000a40)=""/237, 0xed}, {&(0x7f0000000b40)=""/173, 0xad}], 0x8, &(0x7f0000000c80)=""/206, 0xce}, 0x5}, {{&(0x7f0000000d80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000e00)=""/58, 0x3a}, {&(0x7f0000000e40)=""/245, 0xf5}, {&(0x7f0000000f40)=""/131, 0x83}, {&(0x7f0000001000)=""/144, 0x90}, {&(0x7f00000010c0)=""/158, 0x9e}, {&(0x7f0000001180)=""/187, 0xbb}, {&(0x7f0000001240)=""/17, 0x11}, {&(0x7f0000001280)=""/199, 0xc7}, {&(0x7f0000001380)=""/190, 0xbe}, {&(0x7f0000001440)=""/94, 0x5e}], 0xa, &(0x7f0000001580)=""/17, 0x11}, 0x8}, {{&(0x7f00000015c0)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000002980)=[{&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/191, 0xbf}, {&(0x7f0000002700)=""/110, 0x6e}, {&(0x7f0000002780)=""/246, 0xf6}], 0x4}, 0x9}, {{&(0x7f0000002a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000004d00)=[{&(0x7f0000002a80)=""/64, 0x40}, {&(0x7f0000002ac0)=""/69, 0x45}, {&(0x7f0000002b40)=""/165, 0xa5}, {&(0x7f0000002c00)=""/160, 0xa0}, {&(0x7f0000002cc0)=""/18, 0x12}, {&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/4096, 0x1000}], 0x7, &(0x7f0000004d80)=""/4096, 0x1000}, 0x13f6}, {{&(0x7f0000005d80)=@ax25={{}, [@null, @bcast, @bcast, @null, @remote, @rose, @netrom, @null]}, 0x80, &(0x7f0000007180)=[{&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/27, 0x1b}, {&(0x7f0000006e40)=""/49, 0x31}, {&(0x7f0000006e80)=""/249, 0xf9}, {&(0x7f0000006f80)=""/237, 0xed}, {&(0x7f0000007080)=""/253, 0xfd}], 0x6, &(0x7f0000007200)=""/149, 0x95}, 0x2}, {{&(0x7f00000072c0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000007600)=[{&(0x7f0000007340)=""/157, 0x9d}, {&(0x7f0000007400)=""/19, 0x13}, {&(0x7f0000007440)=""/194, 0xc2}, {&(0x7f0000007540)=""/129, 0x81}], 0x4, &(0x7f0000007640)=""/31, 0x1f}, 0xffffffff}, {{&(0x7f0000007680)=@hci, 0x80, &(0x7f00000077c0)=[{&(0x7f0000007700)=""/144, 0x90}], 0x1, &(0x7f0000007800)=""/199, 0xc7}, 0xfffffff7}, {{&(0x7f0000007900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000008980)=[{&(0x7f0000007980)=""/4096, 0x1000}], 0x1, &(0x7f00000089c0)=""/213, 0xd5}, 0x3}, {{&(0x7f0000008ac0)=@caif, 0x80, &(0x7f0000008c00)=[{&(0x7f0000008b40)=""/82, 0x52}, {&(0x7f0000008bc0)=""/21, 0x15}], 0x2, &(0x7f0000008c40)=""/152, 0x98}, 0x9}], 0x9, 0x10000, 0x0) sendmmsg$inet6(r9, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x20005000) getsockopt$IP6T_SO_GET_ENTRIES(r9, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000082fa941a10ffc5aa4e67e7cace88734f0000000000000038223ec4276786ae2f8900000085a6549121d7de122d43b5695b44e75051d1f03ec1ac7ea55bf24f99fc3cd4d7c89bd4b89ea95407a2df0000000000"], &(0x7f0000000180)=0x5c) 12m57.242700626s ago: executing program 33 (id=3242): r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000100)='syzkaller\x00', 0x7}, 0x94) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a0b040000000000000000020000004c000480480001800a0001006d61746368000000380002800e0001007374617469737469630000001c000300000000000000000258c2052fade1bc2c62cdeb7521cf85ee08000240000000000900010073797a30000000000900020073797a32"], 0xa0}}, 0x8040) write$nci(r0, 0x0, 0x0) write$nci(r0, 0x0, 0x0) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x0) write$nci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4004000000"], 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f091ccf68a710300f23c58140000ffffffffffffffdf00", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r4, 0x1) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000780)=[@sndrcv={0x30, 0x84, 0x1, {0x6, 0x9, 0x8, 0x8, 0x8d56, 0x2, 0x6, 0x2}}], 0x30}, 0x8050) 12m50.522704007s ago: executing program 34 (id=3262): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x482400, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x0, 0x38, 0x0, "681f52514a6f3c03514007d0f02bd7208b2f5c043d001f0f9b073f5acaaca9cb89a715322acb4feded721d5302d80f4586810ca79c1937733bfbe6ce123b9f8a0eb7f4c32931009f06039542a28836cf"}, 0xd8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = getpid() sched_setscheduler(r2, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) socket$inet(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x5) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4e02) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(r6, 0x1, 0x0, 0x0) 12m14.965011865s ago: executing program 35 (id=3364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffff02}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0xf5ff}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) 12m1.649135351s ago: executing program 5 (id=3399): socket(0x10, 0x803, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f00000000c0)=0xfa0, 0x4) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x40000001, 0x4, 0x1, 0x31237648, 0x6, 0x8002, 0x80}, {0x2, 0x1, 0x1, 0x1, 0x624, 0x7, 0x8001}]}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) r1 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004004}, 0x8080) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000037c2000040042801c0001800600060088480000100007"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000340)={0x1000000000000365, 0x0, [{0x180, 0x0, 0x4}, {0x40000020, 0x0, 0x100}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x420e, r7, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffe, 0x400, 0x3, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0x9, 0x0, 0x4, 0xffffffffffffffff, 0x7ff, 0xb3, 0x8d], 0x80a0000, 0x2010d3}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) timerfd_gettime(r8, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r9, 0x5408, &(0x7f0000000180)={0xcf43, 0x4c8, 0x2, 0x9dff, 0xe, "3d52e3ff00"}) write$binfmt_aout(r9, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r10 = syz_open_pts(r9, 0x0) dup3(r10, r9, 0x0) 12m0.387330753s ago: executing program 5 (id=3407): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) clock_gettime(0x3, &(0x7f0000000040)) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@gettclass={0x24, 0x2a, 0xb75dea63991ab59c, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1a}, {0x3, 0xb}, {0xe, 0xc}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000c4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ptrace(0x10, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102392, 0x18ff8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r4, 0x201, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x24040000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x3000000f, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 11m58.897493267s ago: executing program 36 (id=3409): sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x16, 0x0, 0x9, 0x2}, 0x10}}, 0x0) clock_gettime(0x3, &(0x7f0000000040)) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@gettclass={0x24, 0x2a, 0xb75dea63991ab59c, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1a}, {0x3, 0xb}, {0xe, 0xc}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000c4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpriority(0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ptrace(0x10, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0x201, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x24040000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x3000000f, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 11m58.883267099s ago: executing program 5 (id=3412): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000001000000440000002000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00P\x00'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000140), 0x1003, r3, 0x0, 0x2000000}, 0x38) getpeername$netlink(r1, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000 00040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) read$FUSE(r6, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r8, r9, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d00000300"], 0x50) write$FUSE_INIT(r6, &(0x7f0000000440)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/83, &(0x7f0000000080), &(0x7f0000000080), 0x6, r3}, 0x38) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x440a}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 11m58.4645425s ago: executing program 37 (id=3414): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000000000000005bd7000fedbdf250a0046ca31d1000004000b00"], 0x1c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = dup(r9) ioctl$PTP_EXTTS_REQUEST2(r10, 0xc0403d15, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0x10}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x8}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044004}, 0x40010) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x5e, "7d51a85e377ae2eb2d96fb76653c26797d851a3f74529c370fdf29d92df18a6734eae6dc799de1acfe95849adda05c6837977bbb267dfb83d55dbbc9b8ea8c3c7fe7157d8511631d664642c2fb74de06dca88a50c397562ea724a41aa68e"}, &(0x7f00000001c0)=0x66) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000002c0)={r12, 0x7, 0xb592, 0x2, 0x3, 0x4}, 0x14) ioctl$FBIOPUT_VSCREENINFO(r11, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x30, 0x32, 0x1, 0x0, 0x0, {}, {0x0, 0x0, 0x20000000}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) 11m57.929129757s ago: executing program 5 (id=3416): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000900002986038c0000004b157e80001c140000fe00ff0100000000080201000000009780f717839e979ef44f8d1804192070aee431c32e354fe323be941d72b6bc8515041ece5358d80b0f334bd034cd7a3450f7aed87c431f0c8d4166f5a8e99a534ee7aab18a37151424879e275b82a5e60fe0c9fd13577de6c39cc3e5611b373b2c6bb97be190b83003bac51fc11bdf112934db563f57ff9302a2d57197b99a3572fc6ac180c43da5a0c4b1b7"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0}]) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xffffffff}, 0x7, 0x0, &(0x7f0000000040), 0x5, 0x0}}) 11m57.853169369s ago: executing program 5 (id=3417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x1e8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x520) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000000)=0xfffffff9, 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200cd4c1960b89c40ebb373", 0x39}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x10000) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="14697f001000010000000000000000000000000a28000000000a0101000000005e1affd5024000000900010073797a300000000008000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100010000000000000000c006c7680c2660b8e46c5406ccfb437d8e1ebb718824a515cafe6de2dea8b0f7768ddf2050"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a01080000000000000000020000000900010073797a30000000000900020073797a30000000001400038008000240ffffff020800014000000000140000001100010000000000000000000400000a47979b8901ca6f695a9498fe64043542fbc6cfb5b4ad880ff6502e3dacd8caaa51422ecdacdde8e49ca6d9ab6669792cb4d0fd33a159c89dfece4b23917215582e34bf7530dee9347b28d8e1c474c9e6826c63074bce0cf19abc82da9f74de6ee92588c83cb5c107c68c209ea240fc725ef6d4e4c12291fc1c6e55860596e7e4fb48fd89c26f82c9241b30", @ANYRES16=r2, @ANYRESHEX=r3], 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x110}}, 0x24040884) 11m57.020982377s ago: executing program 5 (id=3419): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100), 0x3292aed13ee180f8}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, 0x0, 0x2b) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000003080), 0x8000, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r5, 0x80045010, &(0x7f00000030c0)) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000140)={'wg0\x00', {0x2, 0x0, @empty}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc44, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = signalfd4(r0, &(0x7f0000000180)={[0x85c]}, 0x8, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe8) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) r10 = getegid() setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x2, 0x344, [0x0, 0x200000000540, 0x2000000006f6, 0x200000000726], 0x0, &(0x7f00000001c0), &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000feffffff010000001800000024000000000664756d6d79300000000000000000000076657468305f746f5f626f6e640000006772657461703000000000000000000069703665727370616e30000000000000aaaaaaaaaa3dff00ff00ff00aaaaaaaaaa4200ffff000000e60000004e010000860100006d6163000000000000000000000000000000000000000000000000000000000010000000000000000f5314b9a170000000000000000000006f776e65720000000000000000000000000000000000000000000000000000001800000000000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="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"]}, 0x3b6) setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000940)={0x0, 0x2, 0x5, 0x7ba0}, &(0x7f0000000980)=0x10) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000ac0)={0xffff7fff, "42735fab0ad905b9ac73b1b45c60d0034bb8ac61a0d2c7a4aab7b8e3716728a3", 0x3, 0x6, 0x5, 0x400000, 0x2}) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) r14 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r13, 0x84, 0x72, &(0x7f00000002c0)={r15, 0x3}, 0xc) getsockopt$inet_sctp_SCTP_STATUS(r11, 0x84, 0xe, &(0x7f00000009c0)={r12, 0x3, 0x81, 0x0, 0x9, 0x0, 0x3c9b, 0x7, {r15, @in6={{0xa, 0x4e20, 0x0, @remote, 0xfffffc0f}}, 0x0, 0x7fffffff, 0x0, 0x7, 0xfffffffa}}, &(0x7f0000000a80)=0xb0) 11m56.610370266s ago: executing program 38 (id=3419): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100), 0x3292aed13ee180f8}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, 0x0, 0x2b) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000003080), 0x8000, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r5, 0x80045010, &(0x7f00000030c0)) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000140)={'wg0\x00', {0x2, 0x0, @empty}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc44, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = signalfd4(r0, &(0x7f0000000180)={[0x85c]}, 0x8, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe8) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) r10 = getegid() setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x2, 0x344, [0x0, 0x200000000540, 0x2000000006f6, 0x200000000726], 0x0, &(0x7f00000001c0), &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000feffffff010000001800000024000000000664756d6d79300000000000000000000076657468305f746f5f626f6e640000006772657461703000000000000000000069703665727370616e30000000000000aaaaaaaaaa3dff00ff00ff00aaaaaaaaaa4200ffff000000e60000004e010000860100006d6163000000000000000000000000000000000000000000000000000000000010000000000000000f5314b9a170000000000000000000006f776e65720000000000000000000000000000000000000000000000000000001800000000000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="030100000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000ffffffff00000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fcffffff000000006d61726b000000000000000000000000000000000000000000000000000000001000000000000000e672aa18a09b6627ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000fcffffff0100000009000000140000006000776c616e3100000000000000000000007465616d5f736c6176655f3000000000766972745f776966693000000000000069705f76746930000000000000000000aaaaaaaaaa2c00000000ffffaaaaaaaaaaaaff00ff00ffff6e000000e60000002e0100004552524f52000000000000000000000000000000000000000000000000000000200000000000000061eec56b897f159a3272b85d86479903b96e1d4c2ec97e818dd72228951d00004155444954000000000000000000000000000000000000000000000000000000080000000000000002000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a310000000000000000000000000630000000000000ffffffffffffff7f"]}, 0x3b6) setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000940)={0x0, 0x2, 0x5, 0x7ba0}, &(0x7f0000000980)=0x10) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000ac0)={0xffff7fff, "42735fab0ad905b9ac73b1b45c60d0034bb8ac61a0d2c7a4aab7b8e3716728a3", 0x3, 0x6, 0x5, 0x400000, 0x2}) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) r14 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r13, 0x84, 0x72, &(0x7f00000002c0)={r15, 0x3}, 0xc) getsockopt$inet_sctp_SCTP_STATUS(r11, 0x84, 0xe, &(0x7f00000009c0)={r12, 0x3, 0x81, 0x0, 0x9, 0x0, 0x3c9b, 0x7, {r15, @in6={{0xa, 0x4e20, 0x0, @remote, 0xfffffc0f}}, 0x0, 0x7fffffff, 0x0, 0x7, 0xfffffffa}}, &(0x7f0000000a80)=0xb0) 11m34.610893548s ago: executing program 6 (id=3461): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c0000000000000000000000840001"], 0xa0}}, 0x0) 11m34.04083893s ago: executing program 6 (id=3463): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x128, 0x268, 0x33a, 0x128, 0x268, 0x260, 0x460, 0x460, 0x260, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit1={{0x58}, {'gretap0\x00', {0x60, 0x80000001, 0x3f, 0x1, 0x5, 0x1, 0xff, 0x38, 0x70}}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) socket(0xf, 0x80000, 0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 11m31.613331975s ago: executing program 6 (id=3474): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c0000000000000000000000840001"], 0xa0}}, 0x0) 11m31.376184474s ago: executing program 6 (id=3476): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0}]) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xffffffff}, 0x7, 0x0, &(0x7f0000000040), 0x5, 0x0}}) 11m31.163658983s ago: executing program 6 (id=3477): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f00000003c0)="ef75a4cee3ba1aa9b6ab7e4f2384e4d733b6b3052d4ce6628cc58110a9153cfa2b5ef23a4a49d899ff3cee8a6d5360155ba1fceab85406664e11b9b89a144aec5f803bec20e81c52a32105e55706aac1cf23ac01436142a3a72f", 0x5a}, {&(0x7f0000000440)="9fad5410b8c939381be80e2b8e6e4a1587afff340d61c45e68cde016a897d4fcc19448456b4a236f4f1af5f72be921", 0x2f}, {&(0x7f00000014c0)="a0e2fb58b8f37277a6c62e5296a5501dabbc55fe50fffe3ff57764937c08ec093872bcc59a331e6567540b135c2dc77d3bc82e8582a56bdcd01a5a5c125a8d635e725656a23b0e313177a59eade981b5bcd2f5ddde61d122d2e6f39bdb4ecb9986cfbd68a27263500d3d6c97099eed4b36203bea51450ae7497e4e3dde365160e30d82f60a4e02f34f631f3c76f775b6221618d4c963f0d173dff0128f80cfc630dda5895afaa76b47e02c3d6db0a8c1deed21c71f5bc814951b108dce8b9b2bf93f97e57725d4175a03704ca62832bdf10d4bff3bf7e85ea482ff0300aee86ab47bd09e8929c00467c8a3ce4e973b1d0b79d1e935ead3612c7bc43535c15344d4624307cd25cd2231f36d45867f1e03a726f9e34b4f0acb30f5f4acd0f2116009fd370420f9207783c614f5973827dd80a6a948e0ff74d4712f56008496dab3ec73fc53a87a5ccc1976f8f257284dcc44af6a48ca2298ba31cdd7f3ce411cacdb51306511cc7fae1a616e660d977c70384063a7bf58d3fe00a8db72d0173d4711be54c407b8a656b037f0cafcbfd40d6d0f9821cfc08c368f3566d7a62f6a734f52c49fd47e1e4c525a5299797965145e0683b7130116a9620c2fc8b66e1808269f66fe8cf7b6ba05f60b86329c6e5646a2f54363c74858fb323726ffab567ea3549911804ba0fe9a9fad5ef53af932424d7a0d8c139613657c2445cb38508f2472c7e2a2ee84e7ab19db447122e13c602705640db37dd3cdf2c391f187c27f464bce2965ef0d7efeb595d7db709f6671c1c7703d3ce22fa311355e0a1fe827128d086ea648cc54eb1ac62bfd462b22f858bd20c2f79451c3445f1a41d632eeae3f08233b3c993f80601f6e981e5fc76930508065100b75257ef5eb6efaa0b4e3f505fddaddbd3b530bbc389f989478103f44d76a739476710a9303248a22337fc4653b5cddf1bdad34d413c127e426464430a200a5a1f03346f52ee84412ebe31c6e2629765124e7cea43866a3ba4f296189b74497deff395334eabc83fc5263c998ff9165bb98bc1b6fae1d75627895bc286375711d14dd8ab13cdfc500290fe8d6d507337fdef391ba91f574fa2f7c4539e73d6a021a03bca6a9d00d4dda7cf80c7d8ae1cad8d73d3e69ba2345b48d914b09214e4eb200feb89586c3db53e14160509afd4149f847df83f6453df4a0e4763d5879a9f8cfaf4ffbec518bff843b5f8b45901ac5443189e6995fdad914a82353724608ca34750cf060aa7f68c5a035717a86878e3c3a738d2396d7205b8d3de6fd4eb22f6aaa0c41ce7a4b81eb0d92ed51c63fadec69fdeb2b725666e3ea0d305df598238a8527a255ddd4c07776aa416f7f53bb52a2ac03c564b54b2b47c32d7efd7552cdc240744fa3ebcb0e7e269170eaee8f372a1d30a991916a61fbea68c01d9c4acd23f315de87e8b1cb595bfce193be6f6e30242bb644d95f2f939fe9d61edde1eb225a70000e7c20cee244c6def32508100e42d8453e63947d713b6f44d239c60b0e633e1510a2e90826a3cc55c14de951ae5dadd07ff51ea05c4fec643110a6c61c8cabbc47d5616668c6182cdd605511abf4c01dce8dec278a9f6c3ec363e8b807c37b6e5bdf2025e2d289427fc5077fca4de860ff10f02a8c1172ae5cb52b9f71997eac0bbdeaae63fbe32ec9a29d4931d50988fa9c43d9a92d55e4e61803f24c833ec15e6005a6ec0d496df6351983aaf3c0c1b5a53df1c8f70f517af57939478d1bfd6518994031449e0b3c39c95d89fae00ce41cfc0b5355900404615f99cb2d42baccc4112fc7374745b2db4a7fa137b53dc2ae2ff6fbfc5ba28283f2b6645e0c70c830bc7b9eb9c9602842c4b08f5bc014bb5da681589a885ebdf35e5b44f8fe5c4291c65d1571cdd5ff6af6e27abc81b3778937a53089183d72d62a7303eb3c73d1a8050776315620e310043880ae821fb67651a7a04f03832ef86411b854c4cd6ba809e433072a4e099b3a25f7717d9fb30f6cb270ecf3d79132c605375fd3ac3c53f2328adcab70efa6ae727ff490c4e9005dce25a1545dd8c2724d992dc15a13fa217e393472e5ffac5d357c321d9e9b3875adc93f7f8f75c16a8f909a536a401d6add26397195d90931b3add5b1b1d58673267d1742ecbe6ca37369cac95a586507099e40a75743b24ec997b659b41133a8fb3cf7943dded566cfa7438c92118325a5a13d6bdbf63ed6946268237126135b033fcb38c7d57b1087f004aa64ff866c24a8e90a734c4c2b887975a28fedacf2c2487d31ea71493719d6909a099c285490012d6babfbe2445b982ea1814d30d899a7600874fec5fb2792f1ae909cd74534eb672ef7a8360972549199033000267b1fa34cfc88d0a6498936868e419d1793553c41b5247a837462e53052a25af34e817740dd81966ccbfe2bb1d7994a66c5943ecd32be2ed31d41594b90e8ff21ac1ea6723649e76464f8f7a1797ebb5d58805282ff557c4034dc78fa537a3147f7ef99e7ce4b05a9a24c2b81bd6ec034d72261460b8f5bb6d5487252c3f79b3fb136f3248d6f47a59b4dd578b71516d9940885648b72f75810c2670441384f74ed9db08ee5d06f781e227e658989bf548d48ddd775019ed99981d0118e80fb91bf7939ed0fd5ace6f6b6bb306e54fedcb9f990c3e4c6bbc9d9508bcd5db7cb1e508c5cd0ee2fed98a8b9a59e6ab109ac765371c031b7c2758b82530569ee42599dcf74c5ebea06924d6b53eddc94f75e3bedec784c677eb221060be9fd177943481d6e79b48b4fed865f9f5901fba7616a80d89724ed86ceed79804a684debf2071598c1fc2a22408c710627b739f1e354b448f47cd1840d5cd675975488ea6ecd44732a13311b827894af2437a66c64d2d49b0ad774fa772897dcf06abdcc8e597876bf1fcd01a94f020acd66bd191a78e5a9d9243acc7c21cd6a7413ef8bc4a3d38715d94cdd86e8ab16d1455fa22d9b270f4668ee022225f3d42f3b0ffde6d1a58bca95e1a51142644b2b69f488042fff219031c223757dad0f7041a1fdf918b18dcda1b92d8b701cdd1edfe0dd71c08df737c62c0582fb10dd16c57e0d0dec428c3995acc74a66902db704f05b670187d9e81238158f0bc30de3db8986b9a6b91fd7ea969f9789b1a11486266b09447688197596cfaa86b50020a632d34108ca884c95e9e9ad61de2811e73f9220de6f449069333395941d0b0957b75f6d03f700457c4c78ce97925c04d9f2a07dc40a85294f8db490e45ec401c6919abbe64914788b6de0c5765349b489b52492239745a87d4da11feaa84d9ab565dfc5381f58df220b9f3174196ee3f2cf4ce345f656876a558d116361a56a4c77a6991c350edd926d98a56f5174919efc44d40833eb9659f1987a5ab5b70e220533393b2324af007867bec25225c686587b91019d15193f99123d4dd7211f562e55cb0e701cdd0835a523a5797667a084d29b56ca1a013a348560cb37a1bb3800821ae03a75e9bdbe1e0c45c7f37c37d96540b3367c039ea65f78e8147effcc5245bc96a0467749632f78642b546bd2b0df4a947a8ab904585f7430b5e392002a9830ef5335307a70c58100e70be89d4e169a5af0704cacfbff99d4a27c5a1b5235e99b32843ab49f7b3bef84b7c5fc6ef3043bbee03965113ccd3ff79eb10174a72ca8bc5941d3a08d2d91f1d004d3a74933798113d5b1a719fb07eab1c36cdc3e1a27b92169b886d706a61285dd11b9db796db83fe5518de5c03d4c42df4e6a8a9d4c7ef20a645b9be77d65831dcc3b1fac1fe5fc49e9ccf4898c2cc639b6111d1f6589b3ee651c20fbe964a9677ef95bf1f21eb784cc0a58cb1679a9b2769d6aa440e194b0e3df46c8c517630bb0c005b21a02cba7ace1339cb95438351e34d37df141041ebdcb31cf95c6325ee0a9c305498ed80ca44fe62b88424219e9e0becb8c20b32066cba2c6045e6de8835b919ab8c93b476890ffd1440ecbe6712408bc5379c75ae24b92884a75b70380875c7960234cf9d0844902f0f0a55df8d0affccec30b76234ebf9eab680986f19495869bec4cc2740735224a9dfa27bc32144c2b7ac790212975b08e64ee8ab50c5a0224ade271f76d16bc646a144c6eab74c1c28230ca5332535b148600cb9473fcae3592276f57057b8690caff3882ab0158cb78c51f5488fe69a2fb10b90803f46216bb101e44f32e835c8ecef6de2593782601fb4af264b0c71d8b0a47aeba7273d82b78eea17b59a17e7c258511e3fa40d53fb1cb1f139ff6efdf1bbf8e99c6d51b065a44b7cf097fa6b7e5888c3574d276666be14249738ba4ffa9e29dbb7b1595a622ed55ec2c6efea619a5e8057672d42db3f905879c4499388a02bfd665bbf3d07c660141c37b9cc9748355c643f31aa79b955d00fcae2d445b770ed71a4376597d0fce83c3f0538ffb09b089c584d9d01cc7323a88360a56859876d2cd6f3c9bc7738b21c349520abe09ddebf6f534a8e7971073a806401c3010ba61b0af80a3bc96dc8f009253b33702403c9fa56b8ed3fb10e5330c7760cfd3dfcbdf7bdadf4d76c66e84055353bf7c95471e1c1b3725c9a41cf9d495e26ce0afb99e013065e74cd8d725ed145f6a59b13958bff2ca36dc493d63d7060199f2c1318f1a26d2889a97149d2c22b518d2d0abb92b5ecef5bf61d8cbf2e3501e6481e82667f02eea38ec9a148a044db11f800860bcf72a5606cc9bb4f18561b2ca66edb89074a0d45fda39235699d26da937935456fcf8ee393132115941ce27542c19cb8d81f3b33fe5432b85f0705d4558cca3a7642979e4db7149c84ec0777e6541237d4d14188557310bcd44d53cf6bc7f8f21e804f6aabf1ea90ebf0a0e3f913a64561980a2b81b5a7599f6e57a29e1695d7f738b19dfe59b2dacfb5c392897d5c33a91b751480245077ea972888c06f4170af5a1706fa03c1e126a42de7489f04942cafda91d36bbd95e3faa2eda8b247b618461303a7f2b333973152affccaee88e511a3a8de2c4c3f3a106391c9ec28a5b93ebf2dc23957e3f27326f21d5c50dcfe76fec3ab38f5b2881b246fc8a15604d68ec78dd9c9c6231150f945fdaf27c38e76f18f881263c326eabe6c3ad612e8dcf256bf4737a2f1235b491fb43fd68705d563ca6093bb2b8102757b48aa1ec41f3edd4f68958cecf849952fb01d4e1394e8616ced008e0486f68655f84dbb3f8ab010e1d0cf476a405cfd7fccd213a83f1656af7eb839a46d7348d6305d42d7efdb416ffb81708a3dd525d8800fcadd3d8f19be863a98b813bf666e9b25c599c0bae7e84828b7b11d42e0aff5fd36354a6bd15fb906386711d294cbb607fe67debb194b990dfc11a7a70bbe83c3cd4fb0440f70cca7fbe86ecab176b3c6c53531d25154a7316d13a5471d919e77d3d643ae061b94ba89bd193e6af0468f3e129070c389157ac64f10aed92f6b6291690b34f3950b4c28976918069469832b16e031d4c6236e5fd4334089ea8f53d7b546057c0030910a652c84d8661a7fc29c63f53169d7ed42d96082e8cd99cb108dc6fde25c1909ee2d31d35b9d2046190d863a58ce36a84fa66a92232cc4d3c6b28988060e857304a0f7673780f8f2178377be09f9b2afddcdb14ff89ba7cd162af72b1f4fb42e39cf9133b97b654a3a311fd52d57759ac71d941b275cb2bd6daa7b12334d6b68d58c0e61025c77eeef44c589c67d41a3971457b2c68ddf5c4d6fffe8e6ab0140678b800f4999c529abb48871d20dda7f82bb9e326d4af40ffa7e5", 0x1000}], 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="140000000000000000000000020000004f3c000000000000140000000000000000000000010000000800000000000000110000000000000000000000010000000d000000000000000800000086c16713be8e6e6f60ab48749a213c5e9405f047c4638f433eea339c6b1c488b730caa70d8b27e4ccbc6c9a49d1e055e0156fcc2693f84592324431c97e46db6045f73cd072520097dc3206ace83cd250db8a912c1ee022a1862064abd6268544d3f597a68849ff2f0c8698e9944b426378365a316636009fd01f8b856e0a1a84b3f8aa6b089477ed660178e927f13f79aaa5863", @ANYRES32=0x0, @ANYBLOB="00000000e0000002000000007400000000000000000000000700000083111a318a9af1e38ab87ce8fbfd8bbb7f4408843000000002071754ac141427ffffffff7f000001000000000000000086140000000000092cdafdae484e2a0205bbc25d00441c61936401010000000004ac1414aa000000eaac1414aa0000000300000000000000110000000000000000000000010000000b00000000000000"], 0xf8}}, {{&(0x7f0000002600)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000002940)=[{&(0x7f0000002640)="20926537988a35ddf1981321a57f3af5e141a712f9a7dfce86a8bf4141cb2c325d8fbe0df2e9b972e6b1c2945358b480497a088f6eb22343d4b4158d23c71daa560b5d7c9a98ff6e943923058386337966b04a0f870c9a9bb29489f3efa30b8b69a9b7db5db370532ff01ca6e0657bdad82e602dbbb8db2f225dbc6abb4d0e4b85145621045aee2d8edae9f054373a6fe8a9a326bba249d4de289e881e45f8332c1122870cbaa8e4d3efa10b7f8c3559e3b534", 0xb3}, {&(0x7f0000002700)="09ded31d6ebde57691cb079cdb44e13f058db1c002397084e76961784cf92ec677ef9d9594ded4f307eaeb70b038db1da9cf2a920d087ee309d80bcd4b6a16b835bed129a554057e0472bd1b8f4650c5", 0x50}, {&(0x7f0000000780)="34c208381c37e4d1564b383cfa1a0e409624f68b2a79a09e0373735f361307670609a79871153ca9d108cd9c1461f1edc6515ebe503490954903c30c3f14d2b586a911d0066416bd92a213d13e3b106be60f9a5f30f80cba1926163b5de6424cd6c860a97cfbcb7279cf7e5a4ca7bcaccc58f0c01ad7c15504973d23808fda2eb0c7", 0x82}, {&(0x7f0000002840)="c6c64b79aef2749e1636b4acfac6974c62f4530f7d5267ba4a2edf4c95b61899da72e0090f02940b43dceb7e3fa301e8473b6e55116d318886b4058347dd0a178135664064fa5f12ca9f7e944abab55880e5f51df883eeaf877a77da41c305cdcca7335995eda35bb6b70f7dc7f1a10633d85e423ca791cb8446f4fdb76f81df7bb3bb0c46a6354cc3d40e6bef85652bec30c783ebdffdbd949255bc34330032e2e1b32fe953a1da004e546c7bdc0a1fb49500b140c4da94a7377fa54efa359b05", 0xc1}], 0x4}}], 0x2, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_socket_connect_nvme_tcp() r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000002000), 0x0, 0x20441) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000002040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x5509, &(0x7f0000000500)=0x6) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 11m30.742556149s ago: executing program 6 (id=3478): sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x16, 0x0, 0x9, 0x2}, 0x10}}, 0x0) clock_gettime(0x3, &(0x7f0000000040)) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@gettclass={0x24, 0x2a, 0xb75dea63991ab59c, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1a}, {0x3, 0xb}, {0xe, 0xc}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000c4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpriority(0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ptrace(0x10, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0x201, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x24040000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x3000000f, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 11m30.336460879s ago: executing program 39 (id=3478): sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x16, 0x0, 0x9, 0x2}, 0x10}}, 0x0) clock_gettime(0x3, &(0x7f0000000040)) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@gettclass={0x24, 0x2a, 0xb75dea63991ab59c, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1a}, {0x3, 0xb}, {0xe, 0xc}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000c4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpriority(0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ptrace(0x10, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0x201, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x24040000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x3000000f, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 11m30.243741106s ago: executing program 9 (id=3481): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001080)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0x2, {0x9, 0x8, 0x9, 0x9}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000c80)={r2, 0x0, 0x7fffffff, 0x1}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000b00)={0xa, @pix_mp={0xffff, 0xa15, 0x31324d59, 0x7, 0x6, [{0x2319, 0x81}, {0xfffffffd, 0x7}, {0x4, 0xadf}, {0x6, 0x5}, {0x0, 0x8}, {0x6}, {0x0, 0x200009}, {0xaa}], 0x7f, 0x0, 0x1, 0x0, 0x1}}) 11m30.161429182s ago: executing program 9 (id=3482): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="020000000400000004000000"], 0x50) pwrite64(r3, 0x0, 0x0, 0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x13, r5, 0x2000) write$binfmt_aout(r5, 0x0, 0xffffffdb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x4f41, 0x0, 0x0, &(0x7f0000000140), 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x1, 0x3, 0xfff, 0x1000, r5, 0x6, '\x00', 0x0, r0, 0x5, 0x4, 0x1}, 0x50) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES8=r6, @ANYRESHEX=0x0], 0xa8}, 0x1, 0x0, 0x0, 0x4044}, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000280), 0x70, 0x101) ioctl$I2C_PEC(r9, 0x708, 0x2) ioctl$I2C_SMBUS(r9, 0x720, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x25, 0x3, 0xfffffffc) 11m29.386935128s ago: executing program 9 (id=3484): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r3, &(0x7f00000005c0)="f5", 0x1, 0x48800, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x9, 0xb}, 0x8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a"], 0x57) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f00000001c0)={0x5, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) setsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) getsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000280)=""/172, &(0x7f0000000340)=0xac) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000100)={0xed, 0xffff8004, 0x0, 'queue1\x00', 0xfffffffc}) syz_open_procfs(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) 11m28.392947661s ago: executing program 9 (id=3487): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0}]) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xffffffff}, 0x7, 0x0, &(0x7f0000000040), 0x5, 0x0}}) 11m28.36751278s ago: executing program 2 (id=3488): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x128, 0x268, 0x33a, 0x128, 0x268, 0x260, 0x460, 0x460, 0x260, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit1={{0x58}, {'gretap0\x00', {0x60, 0x80000001, 0x3f, 0x1, 0x5, 0x1, 0xff, 0x38, 0x70}}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_emit_ethernet(0xae, 0x0, 0x0) socket(0xf, 0x80000, 0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 11m28.091890328s ago: executing program 9 (id=3490): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f00000000c0)={0xa8da12b893d0dd58, 0x0, &(0x7f000000f000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffefffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x7f, 0x8000000000000000, 0xc595, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0xb3, 0x39da], 0x30000, 0x2410d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11m26.986973237s ago: executing program 9 (id=3492): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000340)="80fd02000040363cfe942130522af4c527e693f3d83a6df45251659f3b4a69c6d11342c7e4221b2ea34c030001000000000000656392f226f809a5657b4bc28639bc", 0x42}], 0x1, 0x80, 0x802) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, r4, 0x1, 0xfffffffe, 0x21dfdbfb, {{}, {@val={0x8, 0x1, 0x1}, @void, @val={0xc, 0x99, {0x0, 0x4f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 11m26.423826595s ago: executing program 40 (id=3492): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000340)="80fd02000040363cfe942130522af4c527e693f3d83a6df45251659f3b4a69c6d11342c7e4221b2ea34c030001000000000000656392f226f809a5657b4bc28639bc", 0x42}], 0x1, 0x80, 0x802) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, r4, 0x1, 0xfffffffe, 0x21dfdbfb, {{}, {@val={0x8, 0x1, 0x1}, @void, @val={0xc, 0x99, {0x0, 0x4f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 11m26.310148695s ago: executing program 2 (id=3495): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400", @ANYRES8], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = gettid() mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x6031, 0xffffffffffffffff, 0x5d686000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCSETS(r4, 0x5402, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) sched_setparam(r3, &(0x7f0000000240)=0x8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000003c0)={'pcl816\x00', [0x4f23, 0x2, 0x1, 0x4000, 0x1, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffe, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x6d, 0x2, 0x1, 0x8, 0x927, 0xeb96, 0x401, 0x40b, 0xe69, 0x6, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="b99d0100000f320fc76fb4360fc9bb25cc00007666ba6b416000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x33, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb']}) 11m22.961686739s ago: executing program 2 (id=3498): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c0000000000000000000000840001"], 0xa0}}, 0x0) 11m22.862501108s ago: executing program 2 (id=3499): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0}]) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xffffffff}, 0x7, 0x0, &(0x7f0000000040), 0x5, 0x0}}) 11m22.774216453s ago: executing program 2 (id=3500): socket$inet6_tcp(0xa, 0x1, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) shmat(0x0, &(0x7f0000e42000/0x4000)=nil, 0x6000) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0}], 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) ioctl$UFFDIO_POISON(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) read$FUSE(0xffffffffffffffff, &(0x7f000001b000)={0x2020}, 0x2020) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x20010, r0, 0x6a85c000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsopen(&(0x7f0000001340)='ubifs\x00', 0x0) 11m18.530371216s ago: executing program 2 (id=3504): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r1, &(0x7f0000001600)=[{&(0x7f0000001640)="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", 0xdb7}], 0x1) (async) r2 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0x652ca1a6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f0000000300), 0x4003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f0000003c40)=[{{&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f0000000180)=[{&(0x7f0000000440)=""/196, 0xc4}, {&(0x7f0000000540)=""/167, 0xa7}], 0x2, &(0x7f0000000640)=""/116, 0x74}, 0x4}, {{&(0x7f00000006c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000003400), 0x0, &(0x7f0000003440)=""/117, 0x75}, 0x3}, {{&(0x7f00000034c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003800)}, 0x1bc09290}, {{&(0x7f0000003840)=@nfc_llcp, 0x80, &(0x7f0000003940)}, 0x7}, {{&(0x7f0000003980)=@can, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003a00)=""/244, 0xf4}, {&(0x7f0000000840)=""/257, 0x101}], 0x2}, 0x1ff}], 0x5, 0x100, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r5, 0x0, 0x0, 0xc806, &(0x7f00000001c0)={0x2, 0x4e24, @multicast1}, 0x10) (async) sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000280)='.pending_reads\x00', 0x181000, 0x10) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}}) (async) fsmount(0xffffffffffffffff, 0x1, 0x1) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ec) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020000000800100000000000040002000000000010000000000000002000040000001701000000000000de62"], 0x24, 0x3) (async) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 11m18.112156804s ago: executing program 41 (id=3504): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r1, &(0x7f0000001600)=[{&(0x7f0000001640)="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", 0xdb7}], 0x1) (async) r2 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0x652ca1a6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f0000000300), 0x4003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f0000003c40)=[{{&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f0000000180)=[{&(0x7f0000000440)=""/196, 0xc4}, {&(0x7f0000000540)=""/167, 0xa7}], 0x2, &(0x7f0000000640)=""/116, 0x74}, 0x4}, {{&(0x7f00000006c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000003400), 0x0, &(0x7f0000003440)=""/117, 0x75}, 0x3}, {{&(0x7f00000034c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003800)}, 0x1bc09290}, {{&(0x7f0000003840)=@nfc_llcp, 0x80, &(0x7f0000003940)}, 0x7}, {{&(0x7f0000003980)=@can, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003a00)=""/244, 0xf4}, {&(0x7f0000000840)=""/257, 0x101}], 0x2}, 0x1ff}], 0x5, 0x100, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r5, 0x0, 0x0, 0xc806, &(0x7f00000001c0)={0x2, 0x4e24, @multicast1}, 0x10) (async) sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000280)='.pending_reads\x00', 0x181000, 0x10) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}}) (async) fsmount(0xffffffffffffffff, 0x1, 0x1) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ec) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020000000800100000000000040002000000000010000000000000002000040000001701000000000000de62"], 0x24, 0x3) (async) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 6m20.589620453s ago: executing program 7 (id=4431): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000008000000fd0900008400000005"], 0x50) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') lseek(r4, 0x1, 0x1) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) 6m16.790574495s ago: executing program 7 (id=4447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_GET_STC(r1, 0xc0106f32, &(0x7f0000000280)={0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, 0x0) 6m15.418379878s ago: executing program 7 (id=4450): syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201010200000010e4087f014000010203010902600003011448010904000000010100000a24010c000a0002010209040100000102000009040101010102000009050109ff0302e78107250104050180090402000001020020090402010101020000090582090002e4ea0a0725010407ae0d"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44f}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="ad", 0x1}], 0x1}, 0x800) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5411, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000380)={@remote, 0x800, 0x0, 0xff, 0xb, 0x0, 0xd}, 0x20) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0x10001, 0x0) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c58, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x6, 0x7, 0x5, 0x2f, 0xf, 0x312, 0x1, 0x0, 0xfffffffd, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0xcd, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0x9, 0xa, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x7, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x1, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x18, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x4, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@alu={0x7, 0x0, 0x8, 0x0, 0x0, 0x10}]}, &(0x7f0000000540)='GPL\x00', 0x7}, 0x94) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x0, 0x5, "", [{{0x9, 0x4, 0x0, 0xf2, 0x2, 0x7, 0x1, 0x1, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xc1, 0x7, 0x7f}}}}}]}}]}}, &(0x7f0000002480)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x2, 0xb7, 0x7f, 0x8, 0x2}, 0x3e, &(0x7f0000000280)={0x5, 0xf, 0x3e, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x7, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "fd5969f040135293b7d1b4e19a4aac59"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x40, 0x9, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "b4ca42daf2f0929f2adde8de5018a262"}]}, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000002380)=@lang_id={0x4, 0x3, 0x100a}}, {0x91, &(0x7f00000023c0)=@string={0x91, 0x3, "79477648673ea74de854f3bc9d1a87b83153116ac1a99668dc4b1a6057ae285e35c4db51c0a4881280d729d219f29e0e165fc34bf5dce62ce2d0bb3402cc3cb3c7c35376d09007bc29632db0461ac948d1bca18bbc324ce2631c02832adf8aa2d1906a5628ddcb337fa8d3ed152e66032a73d6194f0aeba7e9a34dbb106de37eba64514fca19c5cb5d677e9877554e"}}]}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0x144f) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r6, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) 6m12.240132348s ago: executing program 7 (id=4457): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x9730514a12869b60, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f00000161c0)={0xc000003, 0xfffffffffffffd8a, 0x0, 0x2, 0xffff7fff}) creat(&(0x7f0000000040)='./file0\x00', 0x8c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32=0x0, @ANYBLOB="00090000000000000000050000", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e23, 0x1, @local, 0x38a}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000000000000029000000"], 0x30}, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0xfffffffffffffcb5, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x6a) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='\x00', &(0x7f0000000240)='fd', 0x0) socketpair(0x27, 0xa, 0xdbe6, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000140), 0x2, 0x1) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r7, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xb0ff}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6m11.224132983s ago: executing program 7 (id=4461): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000100), 0x10) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002) socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) ioctl$BTRFS_IOC_ENCODED_READ(r8, 0x80809440, &(0x7f0000001540)={&(0x7f00000014c0)=[{&(0x7f0000000340)="48b52dd00a626c539e469520fa43c85e02aac801568b464730fbaee6cf3de9302d6815ff1cca8c8275096f3ebe842cec489c4dd5bedd6e63bd56e102316d90d4e9db59947c68e45e", 0x48}, {&(0x7f0000001140)="acc78f0021aca312390888260b1426fa2d67d5eebb2f87e4304ad038356d0b5ca672f1aa4088053542a550ff982469f188ba2602e885d110113f4b1075b616c7390929338bf20b0a7f78678b0b9e36f7795bebf80c57686f05d84f23f3fba05ab6a226aca9e908263544628d5168fd3f33b2abb37b4a1ead2a658683dc4c9b15bbdf344b7c15fd", 0x87}, {&(0x7f0000001200)="8693f24d386b7226e43654fd0cd1ff164c5da17ac8c9437807139fb3b1b85a6e5bf45706585497f6cedcd6e0d5a50a1369b08cd482b63f530c4461fefad4f7f3c268b1d3b6b077eb3308c8a1fa4ce0a62afd38d2ebf5f1d630f2512abe9945799d21fe5cb1b36216f73bcb72b21f1ab4d74dc9e8688e1b7671e844a194eb30e831cba0d9af3cfd469f9664664a6dea0376ffdb494c56dda06ecb6fc33223de880d6a933792034952888a231d61841250b6ea9318eea5a17bb823ad2cc4ee4c8bd73a202713328ced243eab29abbf36260cb3d9fcf2c06eb70f303f6bc430075dea19c82edf4c", 0xe6}, {&(0x7f0000001300)="1543b7131caceeecaca4069be6c20940ffa260ac5fdd8e061ab0eceda6420db8a552ea0b5be01685e65ee5ceb8088e6753ec9585b6d4a90706edbeb858dc442e9680bd1de6ae410e5ce42cba1ab892271559f0dcaefb130bbc4c89cf87bc5fc1e53d25895e7c74c0b1b68b47c2472bb73571a53fe9710610148e1cf4649ba5281d5dd08a12abdba31bfa801ffd266c9a0683ec876cb309fc19d86457b5d6d0a342f3a70ee88a777e51c5e4a20d3fa80fa1edefac919de6b25dcf19327c8445b66de73a4fb499e8f74b2917637e4be59f5d49008bc4416932b9", 0xd9}, {&(0x7f0000001400)="c38f7cd44ca0161122f461a9371f71aebffa1bed46eb4f3be4c7be4c18c8fff71f2843a6ca5fc74ff47bd7962087d48b85be88831a9d49ec55c2fced85d10df824a1e90c28847471be9f289f7bd1c7b327af6b4044985df58ad347a1908494dd4814f38774aa54058a8e23cdfb028d196ffb02f0d87f89e4532a10ce60c4e26ceecc6446a360779e07148197e809e89e8a66f0ab3dfa3a5e78450208b3ffeef6b9e92b620c337d77", 0xa8}], 0x5, 0x7fffffffffffffff, 0x0, 0x9, 0x0, 0x10001, 0x6, 0x86b8}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000006c0)={0x2c, &(0x7f00000002c0)={0x20, 0x22, 0x2, {0x2, 0x31}}, &(0x7f0000000440)={0x0, 0x3, 0x3b, @string={0x3b, 0x3, "b19da3bcbd96c955bca4fade89c6a808f22a35eedd78ce66650675ee06c2d6b81f913f2fe28b81f5c8899493753923fcc46b0d100788fc6869"}}, 0x0, 0x0, 0x0}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe3000000, 0xffffffffffffffff, 0x6}, 0x70) 6m9.460027042s ago: executing program 7 (id=4468): syz_io_uring_setup(0x3ec3, 0x0, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) epoll_wait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x7) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) syz_open_dev$vcsn(0x0, 0x200, 0x420400) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in=@rand_addr=0x64010102, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffc, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 6m9.096751899s ago: executing program 42 (id=4468): syz_io_uring_setup(0x3ec3, 0x0, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) epoll_wait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x7) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) syz_open_dev$vcsn(0x0, 0x200, 0x420400) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in=@rand_addr=0x64010102, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffc, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 11.704003252s ago: executing program 0 (id=5507): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x10001}, [@jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0xe1, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$kcm(0x10, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b4b, &(0x7f0000000000)={0x4, 0x0, 0x3, 0x1d, 0x100, 0x0}) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) read(r0, &(0x7f0000000340)=""/254, 0xfe) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)=',#', 0x2) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bb", 0x48}], 0x1, 0x0, 0x0, 0x24004050}], 0x1, 0x40800) recvmsg(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001514"], 0x18}}, 0x0) add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) 10.548734035s ago: executing program 0 (id=5509): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x10001}, [@jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0xe1, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$kcm(0x10, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b4b, &(0x7f0000000000)={0x4, 0x0, 0x3, 0x1d, 0x100, 0x0}) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) read(r0, &(0x7f0000000340)=""/254, 0xfe) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)=',#', 0x2) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bb", 0x48}], 0x1, 0x0, 0x0, 0x24004050}], 0x1, 0x40800) recvmsg(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001514"], 0x18}}, 0x0) add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) 9.792529628s ago: executing program 0 (id=5511): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x9, @local, 0x9}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 9.054482921s ago: executing program 8 (id=5518): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000880)={"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"}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000240)={r8, 0x1, 0x10, 0x2, 0xd000000000000}, &(0x7f0000000280)=0x18) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.44230344s ago: executing program 3 (id=5519): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x24, 0x25, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x40, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r2 = eventfd(0x7) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000019380)=""/96, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x0, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000180)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x2}) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$IPC_INFO(0x0, 0x1, 0x3, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102392, 0x18ff8) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x80000) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, r5, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0xfffffffffffffd3c, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000002e0009002abd700000000000040000007fbbd1bfb39c77f6"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) madvise(&(0x7f00001c9000/0x3000)=nil, 0x3000, 0x17) 8.15449301s ago: executing program 4 (id=5520): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_SREG={0x8}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0xa8}, 0x1, 0x0, 0x0, 0x2806c8cd}, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x58}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r2, 0x80000003) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x60, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x1}}}}}}}, 0x0) 7.763018782s ago: executing program 4 (id=5521): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x10001}, [@jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0xe1, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$kcm(0x10, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b4b, &(0x7f0000000000)={0x4, 0x0, 0x3, 0x1d, 0x100, 0x0}) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) read(r0, &(0x7f0000000340)=""/254, 0xfe) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)=',#', 0x2) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bb", 0x48}], 0x1, 0x0, 0x0, 0x24004050}], 0x1, 0x40800) recvmsg(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001514"], 0x18}}, 0x0) add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) 7.695546044s ago: executing program 8 (id=5522): r0 = socket(0x29, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x90000, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r8) socket$phonet_pipe(0x23, 0x5, 0x2) write$qrtrtun(r8, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r8, 0xc0245720, &(0x7f00000001c0)={0x1}) socket$netlink(0x10, 0x3, 0x0) 7.688913797s ago: executing program 1 (id=5523): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x40000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x3c, 0x0, 0x0) 7.309166696s ago: executing program 1 (id=5524): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.237747985s ago: executing program 0 (id=5527): syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x37140000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x740, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048041}, 0x4004080) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x105) add_key(&(0x7f0000000080)='blacklist\x00', 0x0, &(0x7f0000000400)="816a3bf9d8cc2afbb9f1f9a516204ba77825755252c0ca2f2cf64c1044a8ae428e9a7be6890b5035c7ba69d8f5300464ef3bb144db07e1dc46534c6520774b14cdb7e67c5fced4a0dde1c02ef9e68345b3f54d192db1c4d4cebe2923e886527e409c60ba5f531b46f65099509e14c6410c2b87cf24772e64dd4a61a0c7f1fb91095db301ee3a595c889c80f3df768e6e9cb6c581af95cc4f20ec573f243d18f7a7a01b47a0ea2049be00000000", 0xad, 0xffffffffffffffff) creat(&(0x7f0000000040)='./file0\x00', 0x10a) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000da020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5b0c, &(0x7f0000000380)={0x0, 0x0, 0x1000, 0x2, 0x8000359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) 7.070963517s ago: executing program 4 (id=5528): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7.009207151s ago: executing program 8 (id=5529): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) sched_rr_get_interval(r0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) unshare(0x2c020400) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000000000000000000010100020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) 6.786728975s ago: executing program 3 (id=5530): mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6313}], 0xfc, 0x200000000000000, 0x0}) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x82, &(0x7f0000000280)="1a00000002000000", 0x8) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) 5.844499944s ago: executing program 8 (id=5531): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x468fe4e8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4048000) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x334, 0x900) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x28, 0x9, 0x59}, 0x2c) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x4}, &(0x7f0000000140)=0x28) 5.455559894s ago: executing program 1 (id=5532): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000880)={"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"}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000240)={r8, 0x1, 0x10, 0x2, 0xd000000000000}, &(0x7f0000000280)=0x18) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.358908228s ago: executing program 4 (id=5533): r0 = socket(0x1a, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd27, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x8], [0x0, 0x0, 0x72c5, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffffff92}]}]}]}}]}, 0xa4}, 0x1, 0x7a00}, 0x0) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0xb96, 0x2, 0x3, 0x0, 0x5, 0x38, 0x3, 0x5}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905822fe9"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100000000000000e94900000000808500d1006d00400095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x2}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3f, 0x9, 0x0, 0x0, {0x4}, [@typed={0x4, 0x3ffd}, @typed={0x8, 0x8, 0x0, 0x0, @binary='a^&/'}]}, 0x20}}, 0x4004080) 4.246205125s ago: executing program 1 (id=5534): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xb3) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom(r1, &(0x7f0000000200)=""/132, 0x84, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x1) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@empty, @broadcast}, &(0x7f0000000080)=0xc) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000180), 0x12) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f00000000c0)={0x7, 0x3}) ioctl$sock_netdev_private(r7, 0x8914, 0x0) 3.83428815s ago: executing program 0 (id=5535): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1a000000820200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r3 = syz_socket_connect_nvme_tcp() r4 = accept(r3, 0x0, &(0x7f0000000080)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x404083) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$poke(0x1, r7, 0x0, 0xffffffffffffffbe) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b0001000010000904330001"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000005040)=0xb1d, 0x1ff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000380)={{0xa, 0x5, 0x10, 0x9, 'syz0\x00', 0xfffffff8}, 0x1, 0x200, 0x1, r7, 0x6, 0xdfc9, 'syz1\x00', &(0x7f00000000c0)=['\x00\x00\x00\x00\x00\x00\xd3\x99\xb0\f\x94\x14\x1c\xfd\x8ay\xb0', 'GPL\x00', '\x00', 'GPL\x00', '\x00', '[!,\x00'], 0x2}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f00000007c0)={{r5, &(0x7f00000005c0)='\x00', 0x40280, &(0x7f0000000640)={@align=0x9, {0x1, 0x3, 0x2, 0x5}}, 0x100, &(0x7f0000000680)={@_ha_fsid}, &(0x7f00000006c0)=0x3}, {[0x2, 0x1000003, 0x1ff, 0x9]}, 0x3, 0xa4, &(0x7f0000000700)=""/164}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x1e, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x275f043, 0x0, 0x0, 0x0, 0x100}, @generic={0x9, 0xa, 0x9, 0x2, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x259}}, @alu={0x4, 0x0, 0x4, 0xa, 0x9, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x9e, &(0x7f0000000500)=""/158, 0x0, 0xa, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000000840)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0x4, 0xd, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0), &(0x7f0000000900)=[{0x0, 0x3, 0x1, 0xb}], 0x10, 0x2b}, 0x94) 3.713659482s ago: executing program 1 (id=5536): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101401, 0x0) ustat(0x38, &(0x7f0000000080)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'dvmrp1\x00', 0x4000}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000300)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}) 3.574949652s ago: executing program 1 (id=5537): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000008000000010001000900000001000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000d075c25500000000000000000000000000a71aed012f9d795de358b179a20fb60b0fd450ae9bf1a85a21d5841d58dbb3e274e40c68be9f3dbfb6e8e0a8875061cab755d185a33ce2f7a15c39b2ae8c8d7ca2b2ad441628237b989b2a0d05249c26aa04f9ed6c4ec8fae7"], 0x50) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x108) unlinkat(r1, &(0x7f0000000100)='./file0\x00', 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x5, 0x4, 0xa932, 0x9, 0xffffffffffffffff, 0x800008}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) eventfd(0xfffffc00) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x38) 3.57440575s ago: executing program 8 (id=5538): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f00000003c0)="ef75a4cee3ba1aa9b6ab7e4f2384e4d733b6b3052d4ce6628cc58110a9153cfa2b5ef23a4a49d899ff3cee8a6d5360155ba1fceab85406664e11b9b89a144aec5f803bec20e81c52a32105e55706aac1cf23ac01436142a3a72f82a4be733384", 0x60}, {&(0x7f0000000440)="9fad5410b8c939381be80e2b8e6e4a1587afff340d61c45e68cde016a897d4fcc19448456b4a236f4f1af5f72be921", 0x2f}, {&(0x7f00000014c0)="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", 0x1000}], 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="140000000000000000000000020000004f3c000000000000140000000000000000000000010000000800000000000000110000000000000000000000010000000d000000000000000800000086c16713be8e6e6f60ab48749a213c5e9405f047c4638f433eea339c6b1c488b730caa70d8b27e4ccbc6c9a49d1e055e0156fcc2693f84592324431c97e46db6045f73cd072520097dc3206ace83cd250db8a912c1ee022a1862064abd6268544d3f597a68849ff2f0c8698e9944b426378365a316636009fd01f8b856e0a1a84b3f8aa6b089477ed660178e927f13f79aaa5863", @ANYBLOB="00000000e0000002000000007400000000000000000000000700000083111a318a9af1e38ab87ce8fbfd8bbb7f4408843000000002071754ac141427ffffffff7f000001000000000000000086140000000000092cdafdae484e2a0205bbc25d00441c61936401010000000004ac1414aa000000eaac1414aa00000003000000000000001100000000"], 0xf8}}, {{&(0x7f0000002600)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000002940)=[{&(0x7f0000002640)="20926537988a35ddf1981321a57f3af5e141a712f9a7dfce86a8bf4141cb2c325d8fbe0df2e9b972e6b1c2945358b480497a088f6eb22343d4b4158d23c71daa560b5d7c9a98ff6e943923058386337966b04a0f870c9a9bb29489f3efa30b8b69a9b7db5db370532ff01ca6e0657bdad82e602dbbb8db2f225dbc6abb4d0e4b85145621045aee2d8edae9f054373a6fe8a9a326bba249d4de289e881e45f8332c1122870cbaa8e4d3efa10b7f8c3559e3b534", 0xb3}, {&(0x7f0000002700)="09ded31d6ebde57691cb079cdb44e13f058db1c002397084e76961784cf92ec677ef9d9594ded4f307eaeb70b038db1da9cf2a920d087ee309d80bcd4b6a16b835bed129a554057e0472bd1b8f4650c5", 0x50}, {&(0x7f0000000780)="34c208381c37e4d1564b383cfa1a0e409624f68b2a79a09e0373735f361307670609a79871153ca9d108cd9c1461f1edc6515ebe503490954903c30c3f14d2b586a911d0066416bd92a213d13e3b106be60f9a5f30f80cba1926163b5de6424cd6c860a97cfbcb7279cf7e5a4ca7bcaccc58f0c01ad7c15504973d23808fda2eb0c7", 0x82}, {&(0x7f0000002840)="c6c64b79aef2749e1636b4acfac6974c62f4530f7d5267ba4a2edf4c95b61899da72e0090f02940b43dceb7e3fa301e8473b6e55116d318886b4058347dd0a178135664064fa5f12ca9f7e944abab55880e5f51df883eeaf877a77da41c305cdcca7335995eda35bb6b70f7dc7f1a10633d85e423ca791cb8446f4fdb76f81df7bb3bb0c46a6354cc3d40e6bef85652bec30c783ebdffdbd949255bc34330032e2e1b32fe953a1da004e546c7bdc0a1fb49500b140c4da94a7377fa54efa359b05", 0xc1}], 0x4}}], 0x2, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_socket_connect_nvme_tcp() r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000002000), 0x0, 0x20441) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r5, 0x0, 0x2, 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000002040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x5509, &(0x7f0000000500)=0x6) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x2a, &(0x7f0000000040)=ANY=[], 0x190) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 3.032080883s ago: executing program 4 (id=5539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x424380, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x7) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000b00)={0xa, @pix_mp={0xffff, 0xa15, 0x31324d59, 0x7, 0x6, [{0x2319, 0x81}, {0xfffffffd, 0x7}, {0x4, 0xadf}, {0x6, 0x5}, {0x0, 0x8}, {0x6}, {0x0, 0x200009}, {0xaa}], 0x7f, 0x0, 0x1, 0x0, 0x1}}) 2.719410894s ago: executing program 3 (id=5540): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x10001}, [@jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0xe1, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b4b, &(0x7f0000000000)={0x4, 0x0, 0x3, 0x1d, 0x100, 0x0}) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) read(r1, &(0x7f0000000340)=""/254, 0xfe) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)=',#', 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001514"], 0x18}}, 0x0) add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x5865}, 0x0) 1.800935715s ago: executing program 4 (id=5541): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) sched_setscheduler(r0, 0x6, &(0x7f00000000c0)=0x400) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000202505a8a4400001020301"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) setresuid(0x0, r6, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x24, 0x2c, 0x107, 0x70bd2b, 0x2ddfdbff, {0x6, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x132, 0x0, 0x0, @uid=r6}]}, @nested={0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) sendfile(r3, r4, 0x0, 0x20000023896) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000003c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r7, 0xc03064b7, &(0x7f0000000200)={r8, 0x0, r9, 0x80000003, 0x1000a2a, 0xfffffffc, 0x0, 0x200, 0xffffffff, 0xc, 0x2000000, 0x31e}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x8, &(0x7f0000000000)=ANY=[]) 950.037501ms ago: executing program 0 (id=5542): prctl$PR_MCE_KILL(0x4e, 0x0, 0x585d0e0dc0d47fb5) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, @local, @private2, 0x8, 0x6, 0x1, 0x500, 0x6, 0x20b, r5}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000800)={'sit0\x00', 0x10}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000900)={0x5, 0x88, &(0x7f0000000840)="166c164d0d2678645c718e47d2e03ad36992d6800665e970f7de766c1c3b95ec196eee91909ab9007171082ff9bd0731d5fcdf7367d958d1c6013aa352980fbb25b2266d4fa5ed16c7137efdd3030c3e417953f592f8fe1fe843a2b2cea5a53f40826f1e9a5946a9350db14906cc3463aa3f77558bf3b782f778c5156b314382a87bdb7c30412d0a"}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="12043600d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 872.025018ms ago: executing program 3 (id=5543): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0xaa, 0x8b, 0xfffa}, 0x41, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x5, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x5, 0x3, 0xd, 0x5, 0x4, 0x8, 0x4, 0x82, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x71, 0xfffffff8, 0x7, 0x401, 0x0, 0xd, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x8, 0x8, 0x0, 0x80, 0x0, 0xfffffffe, 0x6, 0x8, 0x4, 0xfffffe00, 0x40], [0x400, 0xffff, 0x131, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0x38b0, 0xf9, 0xd, 0x2bf, 0x6c9, 0x2, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x8, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x1, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x81, 0x9, 0x2, 0x5, 0x9, 0x1, 0x7, 0x10, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x5, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x17ec12b8, 0x800004, 0x5, 0x5, 0x0, 0x0, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e3, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x20000004, 0x65], [0x9, 0xffffffff, 0x3, 0xb, 0x5, 0x938, 0x2, 0x6, 0xb, 0x5, 0x2, 0x1ff, 0x2, 0xf58, 0x5, 0x0, 0x4, 0x10000, 0x6, 0x7ffe, 0x80000004, 0x200a61e, 0x2, 0xa, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc5, 0xee1, 0xfffff000, 0x0, 0x3, 0x7f, 0x100, 0x9606, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x9, 0x8, 0x30b1d693, 0xc, 0x8, 0x7, 0x1, 0x6c1f, 0x0, 0x4, 0xb0b2748, 0x1, 0x1, 0x400, 0xffbf2441, 0xffd]}, 0x45c) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x208000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) msync(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff, 0x4) unlink(&(0x7f0000000040)='./file0\x00') linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x1fa, 0x4) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) clock_gettime(0x0, &(0x7f000000abc0)={0x0, 0x0}) recvmmsg(r2, &(0x7f000000a940)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000200)=""/177, 0xb1}, {&(0x7f0000000880)=""/2, 0x2}, {0x0}], 0x3, &(0x7f0000001a00)=""/250, 0xfa}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001b00)=""/129, 0x81}], 0x1, &(0x7f0000001c00)=""/48, 0x30}}, {{&(0x7f0000001c40)=@llc, 0x80, 0x0}, 0xc5}, {{0x0, 0x0, &(0x7f00000053c0)}, 0x7}, {{&(0x7f0000005400)=@xdp, 0x80, &(0x7f0000005980), 0x0, &(0x7f0000005a00)=""/255, 0xff}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f000000a580)=""/65, 0x41}, 0x2}, {{&(0x7f000000a600)=@phonet, 0x80, &(0x7f000000a800)=[{&(0x7f000000a680)=""/106, 0x6a}, {&(0x7f000000a700)=""/192, 0xc0}, {&(0x7f000000a7c0)=""/27, 0x1b}], 0x3}, 0x8}, {{&(0x7f000000a840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f000000a900)}, 0x5}], 0x8, 0x40000002, &(0x7f000000ac00)={r5, r6+10000000}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f00000020c0)=ANY=[@ANYBLOB="1800000009000000000000000080000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000080bf91000000000000b70200000100200085000000094005dcefef26f555f7ceba9dad9bdf0000000001ffe544000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x53e5, &(0x7f0000002040)={0x0, 0x156d, 0x804, 0x2, 0x152}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='ext4\x00', 0x20c080, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r8 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x3, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) 0s ago: executing program 3 (id=5544): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000880)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1000700000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd673c1eeda4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d06c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235eaa92143ce4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05be23dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6f89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000240)={r8, 0x1, 0x10, 0x2, 0xd000000000000}, &(0x7f0000000280)=0x18) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): ew full-speed USB device number 83 using dummy_hcd [ 1765.839853][T17019] usb 1-1: device descriptor read/64, error -71 [ 1765.947710][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1765.961934][T17019] usb usb1-port1: attempt power cycle [ 1765.970353][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.986528][ T10] usb 4-1: Product: syz [ 1765.993385][ T10] usb 4-1: Manufacturer: syz [ 1766.015268][ T10] usb 4-1: SerialNumber: syz [ 1766.029601][ T10] usb 4-1: config 0 descriptor?? [ 1766.150737][ T30] audit: type=1400 audit(2000001209.670:1185): avc: denied { append } for pid=27968 comm="syz.4.4993" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1766.266962][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1766.321729][T27977] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4996'. [ 1766.340059][T17019] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1766.443265][T27978] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1766.707898][T23220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1766.716068][T23220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1766.716410][T17019] usb 1-1: device descriptor read/8, error -71 [ 1766.999881][T17019] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1767.032100][T17019] usb 1-1: device descriptor read/8, error -71 [ 1767.140099][T17019] usb usb1-port1: unable to enumerate USB device [ 1767.605620][T17019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1767.793274][T23218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.109408][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1768.186701][ T10] usb 4-1: USB disconnect, device number 83 [ 1768.309934][T28001] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1768.816272][T23218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.780739][T17021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.850322][T23218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.454456][ T30] audit: type=1400 audit(2000001213.970:1186): avc: denied { write } for pid=28009 comm="syz.3.5003" lport=46648 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1770.481571][ T30] audit: type=1400 audit(2000001213.970:1187): avc: denied { write } for pid=28009 comm="syz.3.5003" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1770.849987][T23218] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1770.918688][T23219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1771.089829][T23218] usb 5-1: Using ep0 maxpacket: 32 [ 1771.312344][T23218] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1771.331759][T23218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.444603][T23218] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1771.934654][T23219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1772.038530][T28046] syzkaller0: entered promiscuous mode [ 1772.044157][T28046] syzkaller0: entered allmulticast mode [ 1772.139934][T28029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5008'. [ 1772.685544][T23218] gspca_nw80x: reg_r err -110 [ 1772.690630][ T30] audit: type=1400 audit(2000001216.180:1188): avc: denied { map } for pid=28045 comm="syz.8.5014" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1772.814389][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.281879][T23220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.292677][T23219] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1773.300765][T23218] nw80x 5-1:3.0: probe with driver nw80x failed with error -110 [ 1774.086142][ T30] audit: type=1400 audit(2000001216.180:1189): avc: denied { execute } for pid=28045 comm="syz.8.5014" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1774.191964][ T10] usb 5-1: USB disconnect, device number 17 [ 1774.194436][T23219] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1774.209405][T23219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.217880][T23219] usb 1-1: Product: syz [ 1774.224249][T23219] usb 1-1: Manufacturer: syz [ 1774.249818][T23219] usb 1-1: SerialNumber: syz [ 1774.264335][T23219] usb 1-1: config 0 descriptor?? [ 1774.334719][T23218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.428455][T28058] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5017'. [ 1774.432747][ T30] audit: type=1400 audit(2000001217.940:1190): avc: denied { write } for pid=28057 comm="syz.8.5017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1774.487138][T23219] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1774.513088][T28063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5018'. [ 1774.533074][T28063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5018'. [ 1774.647391][T28066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.659157][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.668878][T28066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.762601][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.782268][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.211221][ T10] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1775.404094][ T10] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1775.425895][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.448677][ T10] usb 5-1: Product: syz [ 1775.461543][ T10] usb 5-1: Manufacturer: syz [ 1775.475497][ T10] usb 5-1: SerialNumber: syz [ 1775.735801][T28068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1775.752518][T28068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1775.831924][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1775.919703][ T10] usb 5-1: USB disconnect, device number 18 [ 1775.993961][ T10] usblp0: removed [ 1775.996514][T23219] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1776.033538][T28077] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5023'. [ 1776.042937][T23219] usb 1-1: USB disconnect, device number 5 [ 1776.410217][T23219] net_ratelimit: 4 callbacks suppressed [ 1776.410237][T23219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1776.437908][T28083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5024'. [ 1776.873897][ T30] audit: type=1400 audit(2000001220.390:1191): avc: denied { map } for pid=28089 comm="syz.0.5027" path="socket:[132173]" dev="sockfs" ino=132173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1776.993710][T28091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5026'. [ 1777.089086][T28094] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5027'. [ 1777.103611][T28094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5027'. [ 1777.427176][T17019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1777.463691][T27664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1777.713030][T28098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1777.889325][T28098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1778.134260][T28111] Sensor B: ================= START STATUS ================= [ 1778.141862][T28111] Sensor B: Test Pattern: 75% Colorbar [ 1778.147709][T28111] Sensor B: Show Information: All [ 1778.152793][T28111] Sensor B: Vertical Flip: false [ 1778.157727][T28111] Sensor B: Horizontal Flip: false [ 1778.162863][T28111] Sensor B: Brightness: 128 [ 1778.167348][T28111] Sensor B: Contrast: 128 [ 1778.172351][T28111] Sensor B: Hue: 0 [ 1778.176085][T28111] Sensor B: Saturation: 128 [ 1778.180612][T28111] Sensor B: Pixel Rate: 160000000 [ 1778.185630][T28111] Sensor B: Horizontal Blanking: 800 [ 1778.193658][T28111] Sensor B: Vertical Blanking: 3223 [ 1778.198911][T28111] Sensor B: ================== END STATUS ================== [ 1778.213311][T28111] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1778.224836][T28098] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5028'. [ 1778.491903][T27664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.356157][T17021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.393397][T28122] syzkaller0: entered promiscuous mode [ 1779.406185][T28122] syzkaller0: entered allmulticast mode [ 1779.531284][T27664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.961115][T28115] ip6t_srh: unknown srh match flags 4000 [ 1779.974776][T28136] bridge0: port 3(erspan0) entered disabled state [ 1780.009114][T28138] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5038'. [ 1780.039799][T28136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.047166][T28136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1780.079369][T28138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5038'. [ 1780.108188][T28138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5038'. [ 1780.174714][T28138] netlink: 'syz.4.5038': attribute type 15 has an invalid length. [ 1780.211059][T28136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1780.239884][T28139] netlink: 'syz.4.5038': attribute type 13 has an invalid length. [ 1780.260585][T28139] netlink: 'syz.4.5038': attribute type 17 has an invalid length. [ 1780.292664][T28136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1780.311112][T28139] netlink: 'syz.4.5038': attribute type 5 has an invalid length. [ 1780.564918][ T57] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1780.578905][T23219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.704779][ T57] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1780.714200][ T57] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1780.723784][ T57] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1780.738289][ T57] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1780.777531][ T57] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.523242][ T57] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1781.533240][ T57] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.534365][T13963] Bluetooth: hci5: Frame reassembly failed (-90) [ 1781.650336][T23218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.550028][T28159] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5042'. [ 1782.919879][T28159] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5042'. [ 1783.097644][T28159] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5042'. [ 1783.350628][T28159] netlink: 'syz.8.5042': attribute type 15 has an invalid length. [ 1783.478800][T28161] netlink: 'syz.8.5042': attribute type 13 has an invalid length. [ 1783.614945][T28161] netlink: 'syz.8.5042': attribute type 17 has an invalid length. [ 1783.663063][ T5620] Bluetooth: hci5: command 0xfc11 tx timeout [ 1783.674539][T26319] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1783.769690][T28165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5044'. [ 1783.809659][T28161] netlink: 'syz.8.5042': attribute type 5 has an invalid length. [ 1783.851654][T23218] libceph: connect (1)[c::]:6789 error -99 [ 1783.858012][T23218] libceph: mon0 (1)[c::]:6789 connect error [ 1783.956690][T28168] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1784.069863][T23218] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1784.124086][T23219] libceph: connect (1)[c::]:6789 error -99 [ 1784.137208][T23219] libceph: mon0 (1)[c::]:6789 connect error [ 1784.219945][T23218] usb 2-1: Using ep0 maxpacket: 16 [ 1784.226875][T23218] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1784.235584][T23218] usb 2-1: config 1 has no interface number 0 [ 1784.242988][T23218] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1784.255218][T23218] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1784.265899][T23218] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1784.276035][T23218] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1784.285382][T23218] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1784.297475][T23218] usb 2-1: Product: syz [ 1784.302098][T23218] usb 2-1: Manufacturer: syz [ 1784.307000][T23218] usb 2-1: SerialNumber: syz [ 1784.343204][T28167] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1784.351947][T28167] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1784.650235][T23219] libceph: connect (1)[c::]:6789 error -99 [ 1784.656369][T23219] libceph: mon0 (1)[c::]:6789 connect error [ 1784.793088][T28167] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1784.805950][T28167] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1785.031893][ T57] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1785.050347][T23218] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 1785.065702][T23218] aqc111 2-1:1.105: probe with driver aqc111 failed with error -61 [ 1785.091882][ T57] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.126648][ T57] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1785.152002][ T57] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.902036][T13963] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1785.913380][T13963] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.990398][T13963] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1786.011594][T13963] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.092732][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1786.470468][T23218] libceph: connect (1)[c::]:6789 error -99 [ 1786.499292][T23218] libceph: mon0 (1)[c::]:6789 connect error [ 1786.591551][ T30] audit: type=1400 audit(2000001230.110:1192): avc: denied { execute } for pid=28187 comm="syz.0.5049" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1786.733957][T28190] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5050'. [ 1786.744833][T28190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5050'. [ 1786.754091][T28190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5050'. [ 1786.763598][T28190] netlink: 'syz.4.5050': attribute type 15 has an invalid length. [ 1786.784743][T28190] netlink: 'syz.4.5050': attribute type 13 has an invalid length. [ 1786.793108][T28190] netlink: 'syz.4.5050': attribute type 17 has an invalid length. [ 1786.801407][T28190] netlink: 'syz.4.5050': attribute type 5 has an invalid length. [ 1786.865214][T27664] libceph: connect (1)[b::]:6789 error -99 [ 1786.884671][T27664] libceph: mon0 (1)[b::]:6789 connect error [ 1786.911357][T28195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1786.975574][T28195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1787.322323][T23218] libceph: connect (1)[b::]:6789 error -99 [ 1787.359435][T23218] libceph: mon0 (1)[b::]:6789 connect error [ 1787.808372][T27664] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1787.825448][T23220] libceph: connect (1)[c::]:6789 error -99 [ 1787.837574][T23220] libceph: mon0 (1)[c::]:6789 connect error [ 1787.999801][T27664] usb 5-1: Using ep0 maxpacket: 32 [ 1788.106583][T28191] ceph: No mds server is up or the cluster is laggy [ 1788.151094][T27664] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1788.398617][T28164] ceph: No mds server is up or the cluster is laggy [ 1788.415317][T27664] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.423920][T23220] libceph: connect (1)[c::]:6789 error -99 [ 1788.435381][T23220] libceph: mon0 (1)[c::]:6789 connect error [ 1788.442819][T23219] libceph: connect (1)[b::]:6789 error -99 [ 1788.449655][T23219] libceph: mon0 (1)[b::]:6789 connect error [ 1788.459272][T27664] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1788.734177][T17021] usb 2-1: USB disconnect, device number 22 [ 1789.166263][T28199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5052'. [ 1789.172202][T27664] gspca_nw80x: reg_r err -110 [ 1789.347382][T27664] nw80x 5-1:3.0: probe with driver nw80x failed with error -110 [ 1789.668457][T28229] /dev/nullb0: Can't open blockdev [ 1790.810135][T28237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5058'. [ 1791.069834][ T5732] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 1791.224548][ T5732] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1791.247160][T23220] usb 5-1: USB disconnect, device number 19 [ 1791.247841][ T5732] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1791.302105][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.324628][ T5732] usb 4-1: Product: syz [ 1791.351053][ T5732] usb 4-1: Manufacturer: syz [ 1791.362524][ T5732] usb 4-1: SerialNumber: syz [ 1791.389155][ T5732] usb 4-1: config 0 descriptor?? [ 1791.404529][ T5732] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1791.423740][ T5732] dvb-usb: bulk message failed: -22 (3/0) [ 1791.721173][ T5732] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1791.740201][ T5732] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1791.772688][ T5732] usb 4-1: media controller created [ 1791.800751][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1791.836014][ T5732] dvb-usb: bulk message failed: -22 (6/0) [ 1791.852058][ T5732] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1791.892704][ T5732] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input97 [ 1791.917387][ T5732] dvb-usb: schedule remote query interval to 150 msecs. [ 1791.925412][T28249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5065'. [ 1791.935505][ T5732] dvb-usb: bulk message failed: -22 (3/0) [ 1791.960016][ T5732] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1792.167946][T28252] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1792.169396][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1792.200246][ T5732] usb 4-1: USB disconnect, device number 84 [ 1792.215638][ T9] dvb-usb: error while querying for an remote control event. [ 1792.224737][T17021] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1792.386139][ T5732] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1792.402108][T17021] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1792.425640][T17021] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1792.545207][T17021] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1792.581327][T17021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.031245][T17021] usb 1-1: config 0 descriptor?? [ 1793.141698][T28255] 8021q: adding VLAN 0 to HW filter on device .` [ 1793.165005][T28255] 8021q: adding VLAN 0 to HW filter on device team0 [ 1793.184994][ T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.193829][T24314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.201953][T24314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.210047][T24314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.218397][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.227074][T28265] overlayfs: failed lookup in lower (newroot/100, name='file0', err=-40): overlapping layers [ 1793.228443][ T184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.247917][ T184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.260609][T13963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.268739][T13963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.281921][T23219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.327037][T28268] overlayfs: failed lookup in lower (newroot/100, name='file0', err=-40): overlapping layers [ 1793.384192][T28255] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1793.395710][T28255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1793.410804][T28255] veth1_vlan: left promiscuous mode [ 1793.416965][T28255] veth0_vlan: left promiscuous mode [ 1793.423308][T28255] veth0_vlan: entered promiscuous mode [ 1793.450905][T28255] veth1_vlan: entered promiscuous mode [ 1793.474743][T17021] usbhid 1-1:0.0: can't add hid device: -71 [ 1793.481248][T17021] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1793.498275][T17021] usb 1-1: USB disconnect, device number 6 [ 1793.581930][T28255] veth1_macvtap: left promiscuous mode [ 1793.589604][T28255] veth0_macvtap: left promiscuous mode [ 1793.596619][T28255] veth0_macvtap: entered promiscuous mode [ 1793.603851][T28255] veth1_macvtap: entered promiscuous mode [ 1793.618080][T28255] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1793.626643][T28255] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1793.648033][T28255] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1793.662664][T28255] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1793.814283][T28255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1794.030733][T28255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1794.109116][T13963] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1794.125352][T13963] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.138322][T28280] netlink: 'syz.1.5071': attribute type 2 has an invalid length. [ 1794.146222][T28280] netlink: 'syz.1.5071': attribute type 2 has an invalid length. [ 1794.182337][T13963] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1794.215558][T13963] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.233168][T13963] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1794.250326][T13963] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.278570][T13963] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1794.450867][T13963] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.804281][T28288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5073'. [ 1794.849486][T14175] Bluetooth: hci5: Frame reassembly failed (-90) [ 1796.612307][ T30] audit: type=1400 audit(2000001239.680:1193): avc: denied { write } for pid=28300 comm="syz.1.5077" name="wireless" dev="proc" ino=4026534684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1796.859056][ T5620] Bluetooth: hci5: command 0xfc11 tx timeout [ 1796.868493][T26319] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1796.886682][T28308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1796.896056][T28308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1798.252445][T13963] net_ratelimit: 11 callbacks suppressed [ 1798.252458][T13963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.270431][T27664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.280905][T23220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.308452][T27664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.492750][T28322] netlink: 'syz.0.5083': attribute type 2 has an invalid length. [ 1798.500564][T28322] netlink: 'syz.0.5083': attribute type 2 has an invalid length. [ 1799.441675][T24314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1799.454198][T23219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1799.462403][T23219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1799.470511][T23219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1799.479129][T17021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1799.487259][T17021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1800.639485][T28341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5081'. [ 1800.794232][T28344] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5089'. [ 1800.821368][T28343] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1803.408367][T28378] netlink: 'syz.8.5098': attribute type 7 has an invalid length. [ 1803.431406][T28378] netlink: 'syz.8.5098': attribute type 7 has an invalid length. [ 1803.569846][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1803.610499][T23218] net_ratelimit: 8 callbacks suppressed [ 1803.610520][T23218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.685184][T28382] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5099'. [ 1803.732167][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1803.766498][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1803.807991][T28383] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1803.826265][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1803.845165][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1803.866557][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1803.905685][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1803.927722][T28386] syzkaller0: entered promiscuous mode [ 1803.936131][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1803.948256][T28386] syzkaller0: entered allmulticast mode [ 1803.955740][ T9] usb 2-1: Product: syz [ 1803.967823][ T9] usb 2-1: Manufacturer: syz [ 1803.987315][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1804.006758][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 1804.020489][T14164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1804.055652][T23218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1804.067440][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1804.088055][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 1804.499173][T28393] /dev/nullb0: Can't open blockdev [ 1804.895310][T27664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1805.308695][T28396] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5101'. [ 1805.397025][T28397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1805.409127][T28397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1805.611614][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1806.010686][T23218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1806.133857][T28410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5103'. [ 1806.159347][ T12] Bluetooth: hci5: Frame reassembly failed (-90) [ 1806.256904][ T9] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1806.491077][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1806.577787][ T9] usb 4-1: config 255 has an invalid interface number: 233 but max is 0 [ 1806.669375][ T9] usb 4-1: config 255 has no interface number 0 [ 1806.712655][ T9] usb 4-1: config 255 interface 233 has no altsetting 0 [ 1806.873420][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=d012, bcdDevice=8a.8b [ 1806.938932][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.998005][ T9] usb 4-1: Product: syz [ 1807.043873][ T9] usb 4-1: Manufacturer: syz [ 1807.050184][T23218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1807.075803][ T9] usb 4-1: SerialNumber: syz [ 1807.134991][ T5732] usb 2-1: USB disconnect, device number 23 [ 1807.680851][T28409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1807.908391][T28409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1808.092230][T26319] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1808.123126][T23220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1808.300675][ T5732] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1808.394480][T28416] syzkaller0: left promiscuous mode [ 1808.415356][T28416] syzkaller0: left allmulticast mode [ 1808.453424][ T5732] usb 2-1: Using ep0 maxpacket: 8 [ 1808.463910][ T5732] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1808.481056][ T5732] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1808.515343][ T5732] usb 2-1: too many endpoints for config 1 interface 1 altsetting 0: 255, using maximum allowed: 30 [ 1808.566260][ T5732] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1808.585333][ T5732] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1808.602726][ T5732] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1808.612893][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.628448][ T5732] usb 2-1: Product: syz [ 1808.633120][ T5732] usb 2-1: Manufacturer: syz [ 1808.637838][ T5732] usb 2-1: SerialNumber: syz [ 1808.643054][T28422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5107'. [ 1808.653271][T17021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1808.778515][T28425] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1808.932776][T28428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5106'. [ 1809.184549][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.199481][T23220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.280230][ T5732] usb 2-1: unit 1 not found! [ 1809.280498][T27664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.420198][ T9] ftdi_sio 4-1:255.233: FTDI USB Serial Device converter detected [ 1809.430891][ T9] ftdi_sio ttyUSB0: unknown device type: 0x8a8b [ 1809.457774][ T9] usb 4-1: USB disconnect, device number 85 [ 1809.517542][ T9] ftdi_sio 4-1:255.233: device disconnected [ 1809.547510][ T5732] usb 2-1: USB disconnect, device number 24 [ 1809.616708][T23809] udevd[23809]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1809.636175][T28430] netlink: 'syz.3.5109': attribute type 7 has an invalid length. [ 1809.650391][T28430] netlink: 'syz.3.5109': attribute type 7 has an invalid length. [ 1809.660075][T27664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.133315][T28439] macsec1: entered promiscuous mode [ 1810.138604][T28439] bridge0: entered promiscuous mode [ 1810.456674][T13963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.465394][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.480170][T27664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.489722][T23220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1811.050074][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1811.648792][T28460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5117'. [ 1811.838196][T28468] netlink: 'syz.8.5121': attribute type 7 has an invalid length. [ 1811.857764][T28468] netlink: 'syz.8.5121': attribute type 7 has an invalid length. [ 1813.699205][T27664] net_ratelimit: 3 callbacks suppressed [ 1813.699224][T27664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1813.919994][ T5732] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1814.156984][ T5732] usb 2-1: Using ep0 maxpacket: 8 [ 1814.177030][ T5732] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1814.189338][ T5732] usb 2-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 1814.199930][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.209120][ T5732] usb 2-1: Product: syz [ 1814.214611][ T5732] usb 2-1: Manufacturer: syz [ 1814.287528][ T5732] usb 2-1: SerialNumber: syz [ 1814.520365][T28487] program syz.1.5125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1814.541389][T28487] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1814.610803][T28487] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5125'. [ 1814.730685][T23220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1814.743061][T17021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1814.756139][T28519] ip6_vti0: left promiscuous mode [ 1814.815585][T28519] bridge0: port 3(erspan0) entered blocking state [ 1814.822170][T28519] bridge0: port 3(erspan0) entered forwarding state [ 1814.863119][T28519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1814.886052][T28519] 8021q: adding VLAN 0 to HW filter on device team0 [ 1814.926362][T28519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1815.186646][T28519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1815.216522][T28519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1815.248266][T28519] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1815.268174][T28527] netlink: 'syz.1.5132': attribute type 7 has an invalid length. [ 1815.285208][T28519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1815.297254][ T5732] usb 2-1: unable to issue vendor read request (ret = -71) [ 1815.322318][ T5732] usb 2-1: unable to issue vendor read request (ret = -71) [ 1815.342522][T28519] veth0_vlan: left promiscuous mode [ 1815.358459][ T5732] usb 2-1: unable to issue vendor read request (ret = -71) [ 1815.360526][T28519] veth0_vlan: entered promiscuous mode [ 1815.646527][ T5732] usb 2-1: unable to issue vendor read request (ret = -71) [ 1815.660254][ T5732] usb 2-1: unable to issue vendor read request (ret = -71) [ 1815.667838][ T5732] usb 2-1: unable to issue vendor read request (ret = -71) [ 1815.685873][ T5732] usb 2-1: unable to issue vendor read request (ret = -71) [ 1815.712561][ T5732] usb 2-1: unable to issue vendor read request (ret = -71) [ 1815.746991][T28519] veth1_vlan: entered promiscuous mode [ 1815.773721][T27664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1815.834735][ T5732] usb 2-1: USB disconnect, device number 25 [ 1815.859687][T28519] veth1_macvtap: left promiscuous mode [ 1815.900672][T28519] veth0_macvtap: left promiscuous mode [ 1815.941124][T28519] veth0_macvtap: entered promiscuous mode [ 1815.964935][T28519] veth1_macvtap: entered promiscuous mode [ 1815.997679][T28519] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1816.016559][T28519] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1816.033290][T28519] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1816.048222][T28519] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1816.068811][T28519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1816.079850][T24314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1816.087034][T24314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1816.097802][T24314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1816.105007][T24314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1816.132228][T28527] netlink: 'syz.1.5132': attribute type 7 has an invalid length. [ 1816.140233][ T57] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1816.149074][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.176461][T28533] syzkaller0: entered promiscuous mode [ 1816.191556][T28533] syzkaller0: entered allmulticast mode [ 1816.215526][ T57] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1816.227629][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.240042][ T57] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1816.248972][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.412569][T28540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1816.493430][ T57] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1816.509116][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.511207][T28540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1816.811215][T23219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1817.773957][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1817.850290][T23219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1818.733608][T17021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1818.892229][T23220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1819.353871][T28582] syzkaller0: entered promiscuous mode [ 1819.376436][T28582] syzkaller0: entered allmulticast mode [ 1820.084544][T23220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1820.315695][T28597] digital: digital_start_poll: Unknown protocol [ 1820.852469][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1821.130531][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1821.824796][ T184] Bluetooth: hci5: Frame reassembly failed (-84) [ 1821.885261][T28612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5156'. [ 1822.176586][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1823.152354][T28622] netlink: 'syz.8.5158': attribute type 27 has an invalid length. [ 1823.162152][T28622] netlink: 'syz.8.5158': attribute type 3 has an invalid length. [ 1823.452909][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1823.849913][ T5620] Bluetooth: hci5: command 0xfc11 tx timeout [ 1823.855040][T26319] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1823.930635][T17021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1824.361529][T17021] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1824.491032][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1824.543866][T17021] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1824.553225][T17021] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1824.568839][T17021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.586244][T17021] usb 1-1: config 0 descriptor?? [ 1825.548286][T17021] video4linux radio48: keene_cmd_main failed (-71) [ 1825.555180][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1825.556595][T17021] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 1825.574473][T17021] usb 1-1: USB disconnect, device number 7 [ 1826.190435][T28637] xt_hashlimit: size too large, truncated to 1048576 [ 1826.600246][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1826.969972][T17021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1827.620214][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1827.701034][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1828.333003][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1828.672611][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.092622][T28656] tipc: Enabled bearer , priority 0 [ 1829.116827][T28656] syzkaller0: entered promiscuous mode [ 1829.133985][T28656] syzkaller0: entered allmulticast mode [ 1829.145236][T28646] netlink: 'syz.3.5164': attribute type 2 has an invalid length. [ 1829.153246][T28646] netlink: 'syz.3.5164': attribute type 2 has an invalid length. [ 1829.269607][T28656] syzkaller0: mtu less than device minimum [ 1829.398919][T28654] tipc: Resetting bearer [ 1829.445457][T28654] tipc: Disabling bearer [ 1829.474472][T28666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=28666 comm=syz.3.5169 [ 1829.652340][T28671] binder: 28668:28671 ioctl c0306201 200000000640 returned -22 [ 1829.702035][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1830.011212][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1831.031218][T23220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1831.625961][T28702] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5178'. [ 1832.103216][T27664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1833.053408][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1833.226524][T27664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1834.632432][T27664] IPVS: starting estimator thread 0... [ 1834.965405][T27664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1834.997910][T28725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5184'. [ 1835.084707][T28726] IPVS: using max 52 ests per chain, 124800 per kthread [ 1835.212771][T28729] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1835.329861][ T5732] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1835.490028][ T5732] usb 2-1: Using ep0 maxpacket: 32 [ 1835.506889][ T5732] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1835.524827][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.560583][ T5732] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1836.012238][T23220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1836.135903][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1836.216502][T28735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5186'. [ 1836.279437][ T5732] gspca_nw80x: reg_r err -110 [ 1836.291726][ T5732] nw80x 2-1:3.0: probe with driver nw80x failed with error -110 [ 1836.460621][ T5732] usb 2-1: USB disconnect, device number 26 [ 1836.559802][T28750] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5189'. [ 1836.880358][T28762] binder: 28761:28762 ioctl c0306201 200000000640 returned -22 [ 1837.062381][T23220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1837.594076][T28774] /dev/nullb0: Can't open blockdev [ 1838.036390][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1838.093154][T23220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1838.686828][T28782] netlink: 'syz.0.5195': attribute type 1 has an invalid length. [ 1838.723485][T28782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1838.762101][T28782] bond0: (slave geneve2): making interface the new active one [ 1838.777467][T28782] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 1839.131520][T27664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1839.213056][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1839.328124][T28786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5196'. [ 1840.130771][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1840.170385][T23219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1840.289908][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1840.331917][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1840.371549][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 1840.384066][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.394494][ T9] usb 1-1: Product: syz [ 1840.400736][ T9] usb 1-1: Manufacturer: syz [ 1840.406024][ T9] usb 1-1: SerialNumber: syz [ 1840.627611][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1840.635651][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1840.836213][ T9] usb 1-1: USB disconnect, device number 8 [ 1841.229685][T28814] /dev/nullb0: Can't open blockdev [ 1841.243471][T23219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1842.250413][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1842.261552][T23220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1842.880828][T28833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5213'. [ 1843.290817][T23220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1843.354687][T28835] syz.3.5214 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1843.688008][T28843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5216'. [ 1843.721775][T28846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1843.730259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1844.331818][T23219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1844.608684][T28846] netlink: 'syz.8.5208': attribute type 2 has an invalid length. [ 1844.654041][T28846] netlink: 'syz.8.5208': attribute type 2 has an invalid length. [ 1845.070396][T28863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1845.078750][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1845.239472][T28867] ip6t_rpfilter: unknown options [ 1845.421346][T23219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1845.429487][T23219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1845.615526][T28872] netlink: 'syz.3.5225': attribute type 2 has an invalid length. [ 1845.627120][T28872] netlink: 'syz.3.5225': attribute type 2 has an invalid length. [ 1845.989917][T23219] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1846.152730][T23219] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1846.164772][T28885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5230'. [ 1846.174321][T23219] usb 4-1: config 255 has an invalid interface number: 233 but max is 0 [ 1846.210089][T23219] usb 4-1: config 255 has no interface number 0 [ 1846.219134][T23219] usb 4-1: config 255 interface 233 has no altsetting 0 [ 1846.241302][T23219] usb 4-1: New USB device found, idVendor=0403, idProduct=d012, bcdDevice=8a.8b [ 1846.259119][T23219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.385940][T28889] binder: 28886:28889 ioctl c0306201 200000000640 returned -22 [ 1846.413053][T23219] usb 4-1: Product: syz [ 1846.472474][T23219] usb 4-1: Manufacturer: syz [ 1846.499572][T23220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1846.510855][T23219] usb 4-1: SerialNumber: syz [ 1846.790767][T28874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1846.819360][T28874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1847.247224][T28898] FAULT_INJECTION: forcing a failure. [ 1847.247224][T28898] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.262661][T28898] CPU: 1 UID: 0 PID: 28898 Comm: syz.1.5233 Tainted: G L syzkaller #0 PREEMPT(full) [ 1847.262692][T28898] Tainted: [L]=SOFTLOCKUP [ 1847.262699][T28898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1847.262709][T28898] Call Trace: [ 1847.262717][T28898] [ 1847.262728][T28898] dump_stack_lvl+0x100/0x190 [ 1847.262757][T28898] should_fail_ex.cold+0x5/0xa [ 1847.262783][T28898] ? tomoyo_encode2+0xfb/0x3c0 [ 1847.262812][T28898] should_failslab+0xc2/0x120 [ 1847.262833][T28898] __kmalloc_noprof+0xe0/0x850 [ 1847.262865][T28898] tomoyo_encode2+0xfb/0x3c0 [ 1847.262888][T28898] ? strlen+0x60/0xa0 [ 1847.262913][T28898] tomoyo_encode+0x29/0x50 [ 1847.262935][T28898] tomoyo_realpath_from_path+0x18c/0x690 [ 1847.262966][T28898] tomoyo_path_number_perm+0x23c/0x580 [ 1847.262986][T28898] ? tomoyo_path_number_perm+0x22e/0x580 [ 1847.263008][T28898] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1847.263053][T28898] ? irqentry_exit+0x246/0x790 [ 1847.263076][T28898] ? hook_file_ioctl_common+0x149/0x410 [ 1847.263110][T28898] ? __x64_sys_ioctl+0x94/0x210 [ 1847.263133][T28898] security_file_ioctl+0xd3/0x230 [ 1847.263157][T28898] __x64_sys_ioctl+0xb7/0x210 [ 1847.263177][T28898] do_syscall_64+0x10b/0xf80 [ 1847.263197][T28898] ? clear_bhb_loop+0x40/0x90 [ 1847.263221][T28898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.263239][T28898] RIP: 0033:0x7f9bac19cdd9 [ 1847.263255][T28898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1847.263272][T28898] RSP: 002b:00007f9bad0cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1847.263290][T28898] RAX: ffffffffffffffda RBX: 00007f9bac416180 RCX: 00007f9bac19cdd9 [ 1847.263302][T28898] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000007 [ 1847.263313][T28898] RBP: 00007f9bad0cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1847.263324][T28898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1847.263334][T28898] R13: 00007f9bac416218 R14: 00007f9bac416180 R15: 00007ffd55add4b8 [ 1847.263360][T28898] [ 1847.263470][T28898] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1847.532827][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1847.541088][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1847.541441][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1848.394480][T28917] x_tables: duplicate underflow at hook 1 [ 1848.537782][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1848.570379][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1849.521705][T23219] ftdi_sio 4-1:255.233: FTDI USB Serial Device converter detected [ 1849.566527][T23219] ftdi_sio ttyUSB0: unknown device type: 0x8a8b [ 1849.621089][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1849.643802][T23219] usb 4-1: USB disconnect, device number 86 [ 1849.678554][T23219] ftdi_sio 4-1:255.233: device disconnected [ 1849.842438][T28945] binder: 28943:28945 ioctl c0306201 200000000640 returned -22 [ 1849.890030][ T9] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 1849.990374][ T5732] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1850.160329][T28931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1850.172799][T28931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1850.192801][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1850.202251][ T9] usb 5-1: config 1 has an invalid descriptor of length 135, skipping remainder of the config [ 1850.212723][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 is Bulk; changing to Interrupt [ 1850.231850][ T9] usb 5-1: string descriptor 0 read error: -22 [ 1850.238989][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=4742, bcdDevice= 0.40 [ 1850.249197][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.265595][T28937] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1850.273024][ T5732] usb 2-1: Using ep0 maxpacket: 16 [ 1850.279912][ T5732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1850.293225][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1850.300265][ T5732] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1850.313312][ T9] usb 5-1: MIDIStreaming interface descriptor not found [ 1850.330254][ T5732] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1850.364235][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.448662][ T5732] usb 2-1: config 0 descriptor?? [ 1850.478167][ T5732] usbhid 2-1:0.0: can't add hid device: -22 [ 1850.501858][ T5732] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 1850.547093][ T5732] usb 5-1: USB disconnect, device number 20 [ 1850.650822][T23219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1850.721661][ T10] usb 2-1: USB disconnect, device number 27 [ 1850.777121][T28954] ubi: mtd0 is already attached to ubi16 [ 1850.861289][T28957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5246'. [ 1851.254145][T28964] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5248'. [ 1851.278645][T28964] netlink: 'syz.4.5248': attribute type 13 has an invalid length. [ 1851.295016][T28962] bridge0: port 3(erspan0) entered disabled state [ 1851.295280][T28964] netlink: 'syz.4.5248': attribute type 17 has an invalid length. [ 1851.311233][T28964] netlink: 'syz.4.5248': attribute type 5 has an invalid length. [ 1851.436121][T28962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1851.443631][T28962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1851.610019][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1851.696712][T27664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1852.355798][T28962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1852.382740][T28962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1852.739678][T27664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1852.821876][T26319] Bluetooth: hci1: unexpected event 0x30 length: 255 > 3 [ 1853.007839][T13963] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1853.086758][T13963] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1853.099581][T13963] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1853.154517][T13963] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1853.272458][T13963] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1853.296865][T13963] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1853.307779][T13963] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1853.717198][T13963] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1853.779313][T23219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1854.074693][T29002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.122688][T29002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.320134][T23219] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1854.650151][T17021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1854.710618][T29018] binder: 29017:29018 ioctl c0306201 200000000640 returned -22 [ 1854.816592][T23220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1854.830345][T27664] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1854.989884][T23219] usb 4-1: device descriptor read/64, error -71 [ 1855.151506][T27664] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1855.164604][T27664] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.207232][T27664] usb 1-1: config 0 descriptor?? [ 1855.230403][T29027] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1855.240347][T23219] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1855.242813][T29027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1855.259184][T29027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1855.274662][T29027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1855.288815][T29027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1855.403137][T23219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1855.419864][T23219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1855.435851][T23219] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1855.451792][T23219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.472007][T23219] usb 4-1: config 0 descriptor?? [ 1855.485196][T29033] netlink: 'syz.0.5263': attribute type 1 has an invalid length. [ 1855.850981][T23220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1855.887774][T29035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1855.907140][T23219] hid-steam 0003:28DE:1142.0021: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1855.933049][T29035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1855.974873][T29035] xt_hashlimit: size too large, truncated to 1048576 [ 1855.990014][T23219] hid-steam 0003:28DE:1142.0021: Steam wireless receiver connected [ 1856.052041][T23219] hid-steam 0003:28DE:1142.0022: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1856.235139][ T30] audit: type=1326 audit(2000001299.740:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29036 comm="syz.1.5269" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bac19cdd9 code=0x7ffc0000 [ 1856.642403][T23219] usb 4-1: USB disconnect, device number 88 [ 1856.654530][T23219] hid-steam 0003:28DE:1142.0021: Steam wireless receiver disconnected [ 1856.708394][ T30] audit: type=1326 audit(2000001299.740:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29036 comm="syz.1.5269" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bac19cdd9 code=0x7ffc0000 [ 1856.748422][T29040] fido_id[29040]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1856.782642][ T30] audit: type=1326 audit(2000001299.740:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29036 comm="syz.1.5269" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9bac19cdd9 code=0x7ffc0000 [ 1856.849597][ T30] audit: type=1326 audit(2000001299.740:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29036 comm="syz.1.5269" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bac19cdd9 code=0x7ffc0000 [ 1856.892173][ T30] audit: type=1326 audit(2000001299.740:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29036 comm="syz.1.5269" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bac19cdd9 code=0x7ffc0000 [ 1856.895598][T23219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1856.921290][T17021] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1856.947870][ T30] audit: type=1326 audit(2000001299.740:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29036 comm="syz.1.5269" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9bac19cdd9 code=0x7ffc0000 [ 1856.975583][ T30] audit: type=1326 audit(2000001299.750:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29036 comm="syz.1.5269" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bac19cdd9 code=0x7ffc0000 [ 1857.003246][ T30] audit: type=1326 audit(2000001299.750:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29036 comm="syz.1.5269" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bac19cdd9 code=0x7ffc0000 [ 1857.030383][ T30] audit: type=1326 audit(2000001299.750:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29036 comm="syz.1.5269" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9bac19cdd9 code=0x7ffc0000 [ 1857.057941][ T30] audit: type=1326 audit(2000001299.750:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29036 comm="syz.1.5269" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bac19cdd9 code=0x7ffc0000 [ 1857.141073][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1857.151337][T17021] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1857.164189][T17021] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1857.187980][T17021] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.221506][T17021] usb 2-1: Product: syz [ 1857.230202][T17021] usb 2-1: Manufacturer: syz [ 1857.237111][T17021] usb 2-1: SerialNumber: syz [ 1857.253413][T17021] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1857.261977][T17021] dvb-usb: bulk message failed: -22 (3/0) [ 1857.292557][T17021] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1857.306854][T17021] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 1857.316043][T17021] dvb_usb_umt_010 2-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 1857.464490][T29047] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1857.818561][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1857.866510][T27664] usb 1-1: Cannot read MAC address [ 1857.874743][T27664] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1857.879804][T17021] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 1857.899693][T27664] usb 1-1: USB disconnect, device number 9 [ 1857.932367][T17636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1858.049184][T29054] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5273'. [ 1858.056639][T29052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5271'. [ 1858.143165][T17021] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1858.241447][T17021] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1858.246566][T29054] netlink: 'syz.0.5273': attribute type 13 has an invalid length. [ 1858.251360][T17021] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1858.308974][T29054] netlink: 'syz.0.5273': attribute type 17 has an invalid length. [ 1858.326564][T29054] netlink: 'syz.0.5273': attribute type 5 has an invalid length. [ 1858.397541][T17021] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.408393][T29056] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1858.568328][T17021] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 1858.588690][T29050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1858.596879][T29050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1858.707990][T17021] usb 4-1: no configuration chosen from 1 choice [ 1858.978449][T23219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.049997][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.088845][T29061] usb 2-1: USB disconnect, device number 28 [ 1859.433835][T29050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1859.668545][T29077] netlink: 'syz.1.5277': attribute type 2 has an invalid length. [ 1859.676419][T29077] netlink: 'syz.1.5277': attribute type 2 has an invalid length. [ 1859.884158][T29083] netlink: 'syz.1.5278': attribute type 2 has an invalid length. [ 1859.892138][T29083] netlink: 'syz.1.5278': attribute type 2 has an invalid length. [ 1860.064023][T17636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1860.314842][T23219] usb 4-1: USB disconnect, device number 89 [ 1860.490788][T29088] binder: 29086:29088 ioctl c0306201 200000000640 returned -22 [ 1861.131815][T23220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1861.139986][T23220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1861.596243][T29099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1861.609357][T29099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1861.631988][T29099] xt_hashlimit: size too large, truncated to 1048576 [ 1861.634421][ T9] ±ÿ speed is unknown, defaulting to 1000 [ 1861.649462][T14176] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1861.662142][ T9] syz0: Port: 1 Link DOWN [ 1861.666614][T14176] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.676945][ T5997] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1861.704638][ T5997] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.738733][ T5997] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1861.767098][ T5997] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.840878][ T5997] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1861.872549][ T5997] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.930152][T23220] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1862.184861][T23220] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1862.202660][T23219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1862.212071][T23220] usb 5-1: config 255 has an invalid interface number: 233 but max is 0 [ 1862.222276][T23220] usb 5-1: config 255 has no interface number 0 [ 1862.228603][T23220] usb 5-1: config 255 interface 233 has no altsetting 0 [ 1862.238770][T23220] usb 5-1: New USB device found, idVendor=0403, idProduct=d012, bcdDevice=8a.8b [ 1862.256718][T23220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.268181][T23220] usb 5-1: Product: syz [ 1862.272998][T23220] usb 5-1: Manufacturer: syz [ 1862.277974][T23220] usb 5-1: SerialNumber: syz [ 1862.616450][T29102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1862.631806][T29102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1862.708476][T29111] 8021q: adding VLAN 0 to HW filter on device .` [ 1862.728333][T29111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1862.802430][T29111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1862.821372][T29111] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1862.881021][T29118] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5288'. [ 1862.962143][T29111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1863.005109][T29111] veth1_vlan: left promiscuous mode [ 1863.033975][T29111] veth0_vlan: left promiscuous mode [ 1863.082003][T29122] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1863.082210][T29111] veth0_vlan: entered promiscuous mode [ 1863.403487][T17636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1863.447762][T29111] veth1_vlan: entered promiscuous mode [ 1863.487305][T29111] veth1_macvtap: left promiscuous mode [ 1863.514506][T29111] veth0_macvtap: left promiscuous mode [ 1863.525587][T29111] veth0_macvtap: entered promiscuous mode [ 1863.542114][T29111] veth1_macvtap: entered promiscuous mode [ 1863.701962][T29111] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1863.727119][T29111] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1863.740313][T29111] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1863.750584][T29111] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1863.768127][T29111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1863.780066][ T10] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1863.805285][T29111] syzkaller0: left promiscuous mode [ 1863.811121][T29111] syzkaller0: left allmulticast mode [ 1863.827941][T29111] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1863.852653][T29111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1863.863881][T23219] ±ÿ speed is unknown, defaulting to 1000 [ 1863.887947][T23219] syz0: Port: 1 Link ACTIVE [ 1863.896413][T14176] bridge0: port 1(bridge_slave_0) entered blocking state [ 1863.903590][T14176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1863.960398][T14176] bridge0: port 2(bridge_slave_1) entered blocking state [ 1863.967542][T14176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1863.969874][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1864.008539][ T10] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1864.027102][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1864.051102][ T10] usb 4-1: config 0 descriptor?? [ 1864.063885][T14164] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1864.082002][ T10] as10x_usb: device has been detected [ 1864.090206][T14164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.103013][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1864.113593][T14164] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1864.131377][T14164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.146674][ T10] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1864.171446][T29061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1864.191160][T14164] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1864.215716][T14164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.236759][T14164] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1864.253016][T14164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.324658][ T10] as10x_usb: error during firmware upload part1 [ 1864.342911][ T10] Registered device nBox DVB-T Dongle [ 1864.354359][ T10] usb 4-1: USB disconnect, device number 90 [ 1864.410764][T23219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1864.547149][ T10] Unregistered device nBox DVB-T Dongle [ 1864.554869][ T10] as10x_usb: device has been disconnected [ 1865.155350][T23220] ftdi_sio 5-1:255.233: FTDI USB Serial Device converter detected [ 1865.182572][T23220] ftdi_sio ttyUSB0: unknown device type: 0x8a8b [ 1865.205476][T23220] usb 5-1: USB disconnect, device number 21 [ 1865.227416][T23220] ftdi_sio 5-1:255.233: device disconnected [ 1865.851220][T17636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1866.636009][T29174] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5295'. [ 1866.760686][T29175] FAULT_INJECTION: forcing a failure. [ 1866.760686][T29175] name failslab, interval 1, probability 0, space 0, times 0 [ 1866.773418][T29175] CPU: 0 UID: 0 PID: 29175 Comm: syz.1.5297 Tainted: G L syzkaller #0 PREEMPT(full) [ 1866.773445][T29175] Tainted: [L]=SOFTLOCKUP [ 1866.773451][T29175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1866.773461][T29175] Call Trace: [ 1866.773468][T29175] [ 1866.773475][T29175] dump_stack_lvl+0x100/0x190 [ 1866.773504][T29175] should_fail_ex.cold+0x5/0xa [ 1866.773529][T29175] should_failslab+0xc2/0x120 [ 1866.773556][T29175] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1866.773579][T29175] ? fuse_get_tree+0x72/0x490 [ 1866.773605][T29175] ? cap_capable+0x10b/0x440 [ 1866.773628][T29175] fuse_get_tree+0x72/0x490 [ 1866.773655][T29175] vfs_get_tree+0x92/0x320 [ 1866.773673][T29175] path_mount+0x7d0/0x23d0 [ 1866.773704][T29175] ? __pfx_path_mount+0x10/0x10 [ 1866.773728][T29175] ? lockdep_hardirqs_on+0x78/0x100 [ 1866.773753][T29175] ? putname+0xb1/0x110 [ 1866.773776][T29175] ? kmem_cache_free+0x127/0x6c0 [ 1866.773809][T29175] ? __x64_sys_mount+0x293/0x310 [ 1866.773833][T29175] __x64_sys_mount+0x293/0x310 [ 1866.773860][T29175] ? __pfx___x64_sys_mount+0x10/0x10 [ 1866.773888][T29175] ? rcu_is_watching+0x12/0xc0 [ 1866.773926][T29175] do_syscall_64+0x10b/0xf80 [ 1866.773947][T29175] ? clear_bhb_loop+0x40/0x90 [ 1866.773969][T29175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1866.773987][T29175] RIP: 0033:0x7f9bac19cdd9 [ 1866.774003][T29175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1866.774020][T29175] RSP: 002b:00007f9bad0cb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1866.774039][T29175] RAX: ffffffffffffffda RBX: 00007f9bac416180 RCX: 00007f9bac19cdd9 [ 1866.774051][T29175] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 1866.774062][T29175] RBP: 00007f9bad0cb090 R08: 0000200000002400 R09: 0000000000000000 [ 1866.774073][T29175] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1866.774083][T29175] R13: 00007f9bac416218 R14: 00007f9bac416180 R15: 00007ffd55add4b8 [ 1866.774108][T29175] [ 1867.356339][T29174] netlink: 'syz.8.5295': attribute type 13 has an invalid length. [ 1867.429190][T29180] xt_hashlimit: size too large, truncated to 1048576 [ 1867.446368][T29174] netlink: 'syz.8.5295': attribute type 17 has an invalid length. [ 1867.467224][T29178] binder: 29177:29178 ioctl c0306201 200000000640 returned -22 [ 1867.788575][T29174] netlink: 'syz.8.5295': attribute type 5 has an invalid length. [ 1868.340671][T29210] binder: 29208:29210 ioctl c00c620f 200000000100 returned -22 [ 1868.550881][T29200] syzkaller0: entered promiscuous mode [ 1868.564747][T29200] syzkaller0: entered allmulticast mode [ 1868.577298][ T57] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1868.612221][ T57] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1868.629170][ T57] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1868.638411][ T57] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1868.648507][ T57] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1868.661943][ T57] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1868.692838][ T57] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1868.719041][ T57] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1868.819666][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1868.941844][T29222] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5308'. [ 1869.290785][T29220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1869.300744][T29220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1869.346733][T29220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1869.357801][T29220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1869.360011][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1869.369341][T29220] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1869.382035][T29220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1869.383078][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1869.403310][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1869.407054][T29220] veth1_vlan: left promiscuous mode [ 1869.414654][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1869.423470][T29220] veth0_vlan: left promiscuous mode [ 1869.429495][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1869.446877][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1869.448164][T29220] veth0_vlan: entered promiscuous mode [ 1869.460969][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1869.475966][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1869.484384][ T9] usb 5-1: Manufacturer: syz [ 1869.508174][ T9] usb 5-1: config 0 descriptor?? [ 1869.513559][T29220] veth1_vlan: entered promiscuous mode [ 1869.558206][T29220] veth1_macvtap: left promiscuous mode [ 1869.579699][T29220] veth0_macvtap: left promiscuous mode [ 1869.600560][T29226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1869.612208][T29220] veth0_macvtap: entered promiscuous mode [ 1869.612767][T29226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1869.629148][T29220] veth1_macvtap: entered promiscuous mode [ 1869.642748][T29220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1869.666969][T29220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1869.675436][T29220] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1869.683583][T29220] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1869.695286][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1869.695301][ T30] audit: type=1400 audit(2000001313.210:1208): avc: denied { read } for pid=29225 comm="syz.8.5309" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1869.696521][T29220] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1869.734428][ T30] audit: type=1400 audit(2000001313.210:1209): avc: denied { open } for pid=29225 comm="syz.8.5309" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1869.734988][T29220] batman_adv: batadv0: Interface activated: gretap1 [ 1869.784690][T29220] macsec1: left promiscuous mode [ 1869.795077][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1869.802207][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1869.814756][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1869.821950][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1869.829778][ T9] rc_core: IR keymap rc-hauppauge not found [ 1869.836469][ T9] Registered IR keymap rc-empty [ 1869.842151][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1869.860644][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1869.873685][ T138] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1869.884591][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1869.896822][ T138] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1869.907633][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input98 [ 1869.920017][ T138] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1869.928778][ T138] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1869.945367][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1869.954987][ T138] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1869.964572][ T138] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1869.983726][ T138] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1869.995296][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1870.005846][ T138] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.030604][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1870.059993][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1870.091527][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1870.123433][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1870.161894][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1870.190947][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1870.210750][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1870.234421][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1870.543827][ T9] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1870.567066][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1870.629428][ T9] usb 5-1: USB disconnect, device number 22 [ 1871.005884][T29236] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5311'. [ 1871.288005][T29252] xt_hashlimit: size too large, truncated to 1048576 [ 1872.112487][T29270] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5317'. [ 1872.144656][T29266] bridge0: port 2(bridge_slave_1) entered disabled state [ 1872.151977][T29266] bridge0: port 1(bridge_slave_0) entered disabled state [ 1872.191942][T29270] netlink: 'syz.1.5317': attribute type 13 has an invalid length. [ 1872.235050][T29270] netlink: 'syz.1.5317': attribute type 17 has an invalid length. [ 1872.274347][T29270] netlink: 'syz.1.5317': attribute type 5 has an invalid length. [ 1872.401407][T29266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1872.429378][T29266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1872.469851][ T10] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1872.632031][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1872.657120][T29266] batman_adv: batadv0: Interface deactivated: gretap1 [ 1872.668382][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1872.712109][T13963] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1872.737902][T13963] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1872.761876][T13963] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1872.782389][T13963] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1872.794869][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1872.828534][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.828791][T13963] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1872.847775][T23218] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 1872.995004][ T10] usb 5-1: config 0 descriptor?? [ 1873.004286][T13963] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1873.020724][T13963] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1873.030209][T13963] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1873.121244][T29285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5322'. [ 1873.174518][T23218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1873.519634][T23218] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1873.550699][T23218] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1873.569599][T23218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1873.651461][T23218] usb 4-1: config 0 descriptor?? [ 1874.049853][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 1874.063074][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1874.104139][ T10] usb 5-1: USB disconnect, device number 23 [ 1874.451667][T23218] usbhid 4-1:0.0: can't add hid device: -71 [ 1874.475327][T23218] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1874.496802][T23218] usb 4-1: USB disconnect, device number 91 [ 1874.510215][T29065] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1874.584210][T29298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5327'. [ 1874.680248][T29065] usb 1-1: Using ep0 maxpacket: 32 [ 1874.691547][T29065] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1874.714339][T29065] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1874.727013][T29304] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1874.747033][T29065] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1874.759296][T29065] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 1874.781920][T29065] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1874.791791][T29065] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.800227][T29065] usb 1-1: Product: syz [ 1874.808568][T29065] usb 1-1: Manufacturer: syz [ 1874.817704][T29065] usb 1-1: SerialNumber: syz [ 1874.857495][T29308] syzkaller0: entered promiscuous mode [ 1874.864197][T29308] syzkaller0: entered allmulticast mode [ 1875.205995][T29293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29293 comm=syz.0.5325 [ 1875.351782][T29293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29293 comm=syz.0.5325 [ 1875.720038][T29319] xt_hashlimit: size too large, truncated to 1048576 [ 1875.728421][T29293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5325'. [ 1875.892653][T29065] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1875.908494][T29065] usb 1-1: MIDIStreaming interface descriptor not found [ 1875.967499][T29327] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5332'. [ 1876.012639][T29327] netlink: 'syz.8.5332': attribute type 13 has an invalid length. [ 1876.039070][T29065] usb 1-1: USB disconnect, device number 10 [ 1876.045514][T29327] netlink: 'syz.8.5332': attribute type 17 has an invalid length. [ 1876.055037][T29327] netlink: 'syz.8.5332': attribute type 5 has an invalid length. [ 1876.230095][T23218] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1876.401763][T23218] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1876.418027][T23218] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1876.431703][T23218] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1876.443351][T23218] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1876.458919][T23218] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1876.468636][T23218] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1876.477143][T23218] usb 5-1: Product: syz [ 1876.481954][T23218] usb 5-1: Manufacturer: syz [ 1876.529966][T23218] cdc_wdm 5-1:1.0: skipping garbage [ 1876.552348][T23218] cdc_wdm 5-1:1.0: skipping garbage [ 1876.568928][T23218] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1876.807059][T29329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1876.833571][T29329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1876.846550][T29339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1876.981309][T29339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1877.974264][T29329] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5333'. [ 1878.042369][T29339] overlayfs: failed to resolve './file2': -2 [ 1878.534862][T29359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5341'. [ 1878.583663][T17636] usb 5-1: USB disconnect, device number 24 [ 1878.678773][T29357] netlink: 'syz.1.5340': attribute type 2 has an invalid length. [ 1878.686560][T29357] netlink: 'syz.1.5340': attribute type 2 has an invalid length. [ 1879.058277][T29364] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1880.261800][T23218] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1880.640113][T23218] usb 5-1: Using ep0 maxpacket: 32 [ 1881.186210][T23218] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1881.222293][T29065] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1881.233277][T23218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.271593][T23218] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1881.410270][T29065] usb 2-1: Using ep0 maxpacket: 32 [ 1881.438605][T29065] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1881.479331][T29065] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.518001][T29065] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1881.670604][T23218] gspca_nw80x: reg_r err -71 [ 1881.689964][T23218] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 1881.750908][T23218] usb 5-1: USB disconnect, device number 25 [ 1882.039148][T29383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5347'. [ 1882.123274][T29065] gspca_nw80x: reg_r err -71 [ 1882.133878][T29065] nw80x 2-1:3.0: probe with driver nw80x failed with error -71 [ 1882.161865][T29065] usb 2-1: USB disconnect, device number 29 [ 1882.788315][T29415] can0: slcan on ttyS3. [ 1883.799927][T27664] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1884.273890][T27664] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1884.295587][T29435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5356'. [ 1884.526234][ T138] Bluetooth: hci5: Frame reassembly failed (-90) [ 1884.795006][T27664] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1884.907243][T27664] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1884.982826][T27664] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.084648][T27664] usb 5-1: Product: syz [ 1885.145137][T27664] usb 5-1: Manufacturer: syz [ 1885.205385][T27664] usb 5-1: SerialNumber: syz [ 1886.651804][ T5620] Bluetooth: hci5: command 0xfc11 tx timeout [ 1886.665942][T26319] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1886.729019][T27664] usb 5-1: can't set config #3, error -71 [ 1886.740793][T27664] usb 5-1: USB disconnect, device number 26 [ 1886.802665][T29417] can0 (unregistered): slcan off ttyS3. [ 1887.018452][ T138] Bluetooth: hci5: Frame reassembly failed (-84) [ 1887.785419][ T30] audit: type=1400 audit(2000001331.300:1210): avc: denied { write } for pid=29422 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1887.821788][T29456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5361'. [ 1888.336601][ T30] audit: type=1400 audit(2000001331.850:1211): avc: denied { write } for pid=29468 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1889.257461][ T5620] Bluetooth: hci5: command 0xfc11 tx timeout [ 1889.291407][T26319] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1889.879265][ T30] audit: type=1400 audit(2000001333.390:1212): avc: denied { write } for pid=29473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1890.128477][ T30] audit: type=1400 audit(2000001333.640:1213): avc: denied { write } for pid=29494 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1891.988918][T29499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5368'. [ 1892.033517][T29528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1892.043067][T29528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1892.244538][T29534] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5374'. [ 1894.161419][T14175] Bluetooth: hci5: Frame reassembly failed (-90) [ 1894.181314][T29549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5378'. [ 1894.967623][T29565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5380'. [ 1894.980408][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1895.150623][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1895.200705][ T9] usb 2-1: config 2 has an invalid interface number: 255 but max is 0 [ 1895.211022][ T9] usb 2-1: config 2 has an invalid descriptor of length 192, skipping remainder of the config [ 1895.231144][ T9] usb 2-1: config 2 has no interface number 0 [ 1895.256734][ T9] usb 2-1: too many endpoints for config 2 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1895.407882][ T9] usb 2-1: config 2 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1895.493695][ T9] usb 2-1: config 2 interface 255 has no altsetting 0 [ 1895.503274][ T9] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 1895.512601][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.525068][ T9] usb 2-1: Product: syz [ 1895.531058][ T9] usb 2-1: Manufacturer: syz [ 1895.535758][ T9] usb 2-1: SerialNumber: syz [ 1895.583396][T29568] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5382'. [ 1895.751623][ T9] usb 2-1: USB disconnect, device number 30 [ 1895.875566][T29573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5384'. [ 1896.180113][T17636] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1896.185036][T26319] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1896.338563][T29584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5388'. [ 1896.991723][T29588] bridge0: port 2(bridge_slave_1) entered disabled state [ 1896.999069][T29588] bridge0: port 1(bridge_slave_0) entered disabled state [ 1897.210344][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1897.300121][T17636] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1897.301796][T29588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1897.315739][T17636] usb 1-1: too many configurations: 244, using maximum allowed: 8 [ 1897.324970][T17636] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1897.333174][T17636] usb 1-1: can't read configurations, error -71 [ 1897.360166][ T10] usb 2-1: device descriptor read/64, error -71 [ 1897.374512][T29588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1897.639633][ T5620] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 1898.292454][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1898.449810][ T10] usb 2-1: device descriptor read/64, error -71 [ 1898.570527][ T10] usb usb2-port1: attempt power cycle [ 1898.819061][ T184] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.845749][ T184] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.875137][ T184] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.901385][ T184] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.929834][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1898.960801][ T10] usb 2-1: device descriptor read/8, error -71 [ 1899.022189][T29620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5391'. [ 1899.034013][T29622] raw_sendmsg: syz.8.5393 forgot to set AF_INET. Fix it! [ 1899.207686][T29626] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1899.254971][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1899.285344][T29628] FAULT_INJECTION: forcing a failure. [ 1899.285344][T29628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1899.310592][ T10] usb 2-1: device descriptor read/8, error -71 [ 1899.328519][T29628] CPU: 1 UID: 0 PID: 29628 Comm: syz.8.5397 Tainted: G L syzkaller #0 PREEMPT(full) [ 1899.328552][T29628] Tainted: [L]=SOFTLOCKUP [ 1899.328559][T29628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1899.328572][T29628] Call Trace: [ 1899.328579][T29628] [ 1899.328588][T29628] dump_stack_lvl+0x100/0x190 [ 1899.328617][T29628] should_fail_ex.cold+0x5/0xa [ 1899.328641][T29628] _copy_from_iter+0x1f4/0x1690 [ 1899.328671][T29628] ? _copy_from_iter+0x270/0x1690 [ 1899.328695][T29628] ? __pfx__copy_from_iter+0x10/0x10 [ 1899.328724][T29628] ? __pfx__copy_from_iter+0x10/0x10 [ 1899.328748][T29628] ? _copy_from_iter+0x270/0x1690 [ 1899.328778][T29628] copy_page_from_iter+0x238/0x300 [ 1899.328807][T29628] skb_copy_datagram_from_iter+0x399/0x720 [ 1899.328842][T29628] tun_get_user+0x1889/0x3c20 [ 1899.328877][T29628] ? __pfx_tun_get_user+0x10/0x10 [ 1899.328901][T29628] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1899.328928][T29628] ? find_held_lock+0x2b/0x80 [ 1899.328946][T29628] ? tun_get+0x191/0x370 [ 1899.328965][T29628] ? tun_get+0x191/0x370 [ 1899.328992][T29628] tun_chr_write_iter+0xdc/0x200 [ 1899.329017][T29628] vfs_write+0x6ac/0x1070 [ 1899.329039][T29628] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1899.329063][T29628] ? __pfx_vfs_write+0x10/0x10 [ 1899.329078][T29628] ? find_held_lock+0x2b/0x80 [ 1899.329111][T29628] ksys_write+0x12a/0x250 [ 1899.329130][T29628] ? __pfx_ksys_write+0x10/0x10 [ 1899.329151][T29628] ? rcu_is_watching+0x12/0xc0 [ 1899.329181][T29628] do_syscall_64+0x10b/0xf80 [ 1899.329203][T29628] ? clear_bhb_loop+0x40/0x90 [ 1899.329226][T29628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1899.329251][T29628] RIP: 0033:0x7f252559cdd9 [ 1899.329268][T29628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1899.329284][T29628] RSP: 002b:00007f25264a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1899.329303][T29628] RAX: ffffffffffffffda RBX: 00007f2525815fa0 RCX: 00007f252559cdd9 [ 1899.329315][T29628] RDX: 000000000000ff04 RSI: 00002000000024c0 RDI: 0000000000000004 [ 1899.329325][T29628] RBP: 00007f25264a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1899.329335][T29628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1899.329345][T29628] R13: 00007f2525816038 R14: 00007f2525815fa0 R15: 00007fff36629fb8 [ 1899.329370][T29628] [ 1899.564821][ T10] usb usb2-port1: unable to enumerate USB device [ 1899.913570][T29633] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5398'. [ 1900.014349][ T184] Bluetooth: hci5: Frame reassembly failed (-90) [ 1900.392714][T29643] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1902.011680][T16640] Bluetooth: hci5: command 0xfc11 tx timeout [ 1902.020638][T26319] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1902.339111][ T30] audit: type=1400 audit(2000001345.850:1214): avc: denied { module_load } for pid=29667 comm="syz.0.5407" path="/435/bus" dev="tmpfs" ino=2365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 1902.422044][T29670] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1902.457868][T29668] Invalid ELF header magic: != ELF [ 1902.486099][T29664] netlink: 'syz.3.5405': attribute type 1 has an invalid length. [ 1902.562287][T29664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1902.674206][T29670] bond1: (slave geneve2): making interface the new active one [ 1902.714734][T29670] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1902.758783][T14176] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.784476][T14176] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.814492][T14176] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1902.852260][T14176] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1903.161682][T27665] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1903.292270][T29694] /dev/nullb0: Can't open blockdev [ 1903.840110][T27665] usb 1-1: Using ep0 maxpacket: 16 [ 1903.861809][T27665] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1903.874557][T27665] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1903.927681][T27665] usb 1-1: Product: syz [ 1903.958917][T27665] usb 1-1: Manufacturer: syz [ 1903.971833][T27665] usb 1-1: SerialNumber: syz [ 1904.028752][T27665] usb 1-1: config 0 descriptor?? [ 1904.500451][T29701] syzkaller0: entered promiscuous mode [ 1904.509417][T29701] syzkaller0: entered allmulticast mode [ 1905.394193][T29712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5418'. [ 1905.468548][ T184] Bluetooth: hci5: Frame reassembly failed (-90) [ 1905.627234][T27665] usb 1-1: USB disconnect, device number 13 [ 1905.765724][T29722] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1906.278140][T29732] /dev/nullb0: Can't open blockdev [ 1907.087675][ T30] audit: type=1326 audit(2000001350.590:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29733 comm="syz.8.5426" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252559cdd9 code=0x7ffc0000 [ 1907.380791][ T30] audit: type=1326 audit(2000001350.590:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29733 comm="syz.8.5426" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252559cdd9 code=0x7ffc0000 [ 1907.421032][ T30] audit: type=1326 audit(2000001350.590:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29733 comm="syz.8.5426" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f252559cdd9 code=0x7ffc0000 [ 1907.448753][ T30] audit: type=1326 audit(2000001350.600:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29733 comm="syz.8.5426" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252559cdd9 code=0x7ffc0000 [ 1907.481417][ T30] audit: type=1326 audit(2000001350.600:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29733 comm="syz.8.5426" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252559cdd9 code=0x7ffc0000 [ 1907.510249][ T30] audit: type=1326 audit(2000001350.600:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29733 comm="syz.8.5426" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f252559cdd9 code=0x7ffc0000 [ 1907.538005][T16640] Bluetooth: hci5: command 0xfc11 tx timeout [ 1907.550877][T26319] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1907.833225][ T30] audit: type=1326 audit(2000001350.600:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29733 comm="syz.8.5426" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252559cdd9 code=0x7ffc0000 [ 1908.277966][ T30] audit: type=1326 audit(2000001350.600:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29733 comm="syz.8.5426" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252559cdd9 code=0x7ffc0000 [ 1908.436211][ T30] audit: type=1326 audit(2000001350.600:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29733 comm="syz.8.5426" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f252559cdd9 code=0x7ffc0000 [ 1908.634845][ T30] audit: type=1326 audit(2000001350.600:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29733 comm="syz.8.5426" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252559cdd9 code=0x7ffc0000 [ 1908.686402][ T30] audit: type=1326 audit(2000001350.600:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29733 comm="syz.8.5426" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252559cdd9 code=0x7ffc0000 [ 1908.917227][T29761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1908.950709][T29761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1908.971522][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1909.233549][T29771] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5434'. [ 1909.244075][T29770] binder: 29769:29770 ioctl c0306201 200000000640 returned -22 [ 1909.814613][T29778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5436'. [ 1910.705004][T29791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5440'. [ 1910.782298][ T5997] Bluetooth: hci5: Frame reassembly failed (-90) [ 1910.862561][T29793] netlink: 'syz.3.5441': attribute type 2 has an invalid length. [ 1910.870845][T29793] netlink: 'syz.3.5441': attribute type 2 has an invalid length. [ 1912.151190][T29821] netlink: 'syz.3.5448': attribute type 4 has an invalid length. [ 1912.715003][T29829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5451'. [ 1912.810056][T26319] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1912.820404][T16640] Bluetooth: hci5: command 0xfc11 tx timeout [ 1913.390184][T29835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5452'. [ 1913.401164][T29835] netlink: 'syz.0.5452': attribute type 13 has an invalid length. [ 1913.428647][T29835] netlink: 'syz.0.5452': attribute type 17 has an invalid length. [ 1913.450742][T29835] netlink: 'syz.0.5452': attribute type 5 has an invalid length. [ 1913.528724][T29837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5452'. [ 1913.663868][T29828] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3739920483 (478709821824 ns) > initial count (167705171968 ns). Using initial count to start timer. [ 1913.903202][T29845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5454'. [ 1914.348643][T29850] openvswitch: netlink: Message has 4 unknown bytes. [ 1914.372731][T29850] openvswitch: netlink: Actions may not be safe on all matching packets [ 1914.444815][T29836] block device autoloading is deprecated and will be removed. [ 1914.716802][T29865] input: syz1 as /devices/virtual/input/input99 [ 1915.199084][T29875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5464'. [ 1915.632826][T29878] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5463'. [ 1916.154886][T29888] ±ÿ speed is unknown, defaulting to 1000 [ 1916.260737][T29893] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5467'. [ 1916.862770][T29880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5462'. [ 1917.256047][T29911] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 1917.305747][T29914] ip6gre1: entered promiscuous mode [ 1917.330880][T29914] ip6gre1: entered allmulticast mode [ 1917.803717][ T184] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1917.999308][T27665] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1918.007524][ T184] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1918.112115][ T30] audit: type=1400 audit(2000001361.630:1226): avc: denied { map } for pid=29924 comm="syz.0.5475" path="/proc/1561" dev="proc" ino=141446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1918.465209][T29931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5474'. [ 1918.821433][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1918.858332][ T30] audit: type=1400 audit(2000001361.650:1227): avc: denied { execute } for pid=29924 comm="syz.0.5475" path="/proc/1561" dev="proc" ino=141446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1918.902857][ T30] audit: type=1800 audit(2000001362.170:1228): pid=29929 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.5475" name="file0" dev="overlay" ino=2426 res=0 errno=0 [ 1918.946241][T29933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5477'. [ 1918.970064][T27665] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1921.395443][T29957] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5485'. [ 1921.741191][T29963] ±ÿ speed is unknown, defaulting to 1000 [ 1922.009939][ T9] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 1922.184088][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 1922.238742][T29979] 9pnet_fd: Insufficient options for proto=fd [ 1922.329879][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1922.331082][ T9] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 1922.418883][T29990] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5482'. [ 1922.437410][T29990] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5482'. [ 1922.451821][T29990] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5482'. [ 1922.461649][T29990] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5482'. [ 1922.471009][T29990] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5482'. [ 1922.500766][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 1922.512707][ T9] usb usb1-port1: attempt power cycle [ 1922.655931][T29991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5483'. [ 1922.876785][ T9] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 1922.990368][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 1923.439831][ T9] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 1923.460376][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 1923.466123][ T9] usb usb1-port1: unable to enumerate USB device [ 1923.710447][T27665] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1923.860090][T27665] usb 5-1: Using ep0 maxpacket: 16 [ 1923.866768][T27665] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1923.878824][T27665] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1923.885495][T27665] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1923.894665][T27665] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.905600][T27665] usb 5-1: config 0 descriptor?? [ 1924.323033][T27665] nzxt-smart2 0003:1E71:2009.0023: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1924.966960][T29969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1925.262422][T27665] usb 5-1: USB disconnect, device number 27 [ 1925.315742][T30012] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5493'. [ 1925.424213][T30012] bond2: (slave vlan0): Opening slave failed [ 1926.606746][T27665] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1926.738696][T30036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1926.787688][T30036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1926.862003][T27665] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1926.882376][T27665] usb 1-1: config 255 has an invalid interface number: 233 but max is 0 [ 1926.916997][T27665] usb 1-1: config 255 has no interface number 0 [ 1926.939859][T27665] usb 1-1: config 255 interface 233 has no altsetting 0 [ 1926.968636][T27665] usb 1-1: New USB device found, idVendor=0403, idProduct=d012, bcdDevice=8a.8b [ 1927.006365][T27665] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.143685][T27665] usb 1-1: Product: syz [ 1927.147957][T27665] usb 1-1: Manufacturer: syz [ 1927.152671][T27665] usb 1-1: SerialNumber: syz [ 1927.556336][T30029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1927.589947][T30029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1927.611095][T27665] ftdi_sio 1-1:255.233: FTDI USB Serial Device converter detected [ 1927.625096][T27665] ftdi_sio ttyUSB0: unknown device type: 0x8a8b [ 1927.639602][T27665] usb 1-1: USB disconnect, device number 18 [ 1927.666557][T27665] ftdi_sio 1-1:255.233: device disconnected [ 1927.973702][T30054] netlink: 'syz.3.5497': attribute type 1 has an invalid length. [ 1928.062799][T30054] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1929.275343][T30063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5507'. [ 1929.748579][T30070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5509'. [ 1930.246653][T30081] netlink: 'syz.8.5512': attribute type 1 has an invalid length. [ 1930.697258][T30088] syzkaller0: entered promiscuous mode [ 1930.703190][T30088] syzkaller0: entered allmulticast mode [ 1930.888116][T30094] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5518'. [ 1931.099165][T30098] siw: device registration error -23 [ 1931.108414][T30098] FAULT_INJECTION: forcing a failure. [ 1931.108414][T30098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1931.121561][T30098] CPU: 1 UID: 0 PID: 30098 Comm: syz.4.5517 Tainted: G L syzkaller #0 PREEMPT(full) [ 1931.121589][T30098] Tainted: [L]=SOFTLOCKUP [ 1931.121596][T30098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1931.121607][T30098] Call Trace: [ 1931.121613][T30098] [ 1931.121621][T30098] dump_stack_lvl+0x100/0x190 [ 1931.121649][T30098] should_fail_ex.cold+0x5/0xa [ 1931.121675][T30098] _copy_from_user+0x2e/0xd0 [ 1931.121702][T30098] __sys_bpf+0x243/0x4b90 [ 1931.121718][T30098] ? irqentry_exit+0x246/0x790 [ 1931.121744][T30098] ? __pfx___sys_bpf+0x10/0x10 [ 1931.121761][T30098] ? find_held_lock+0x2b/0x80 [ 1931.121784][T30098] ? find_held_lock+0x2b/0x80 [ 1931.121801][T30098] ? ksys_write+0x190/0x250 [ 1931.121820][T30098] ? ksys_write+0x190/0x250 [ 1931.121844][T30098] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1931.121865][T30098] ? kernel_write+0x613/0x6c0 [ 1931.121884][T30098] ? __fget_files+0x215/0x3d0 [ 1931.121924][T30098] ? fput+0x79/0x100 [ 1931.121948][T30098] ? ksys_write+0x1ac/0x250 [ 1931.121966][T30098] ? __pfx_ksys_write+0x10/0x10 [ 1931.121990][T30098] __x64_sys_bpf+0x7b/0xc0 [ 1931.122007][T30098] ? lockdep_hardirqs_on+0x78/0x100 [ 1931.122027][T30098] do_syscall_64+0x10b/0xf80 [ 1931.122048][T30098] ? clear_bhb_loop+0x40/0x90 [ 1931.122070][T30098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.122089][T30098] RIP: 0033:0x7f2353b9cdd9 [ 1931.122104][T30098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1931.122121][T30098] RSP: 002b:00007f235497e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1931.122139][T30098] RAX: ffffffffffffffda RBX: 00007f2353e16180 RCX: 00007f2353b9cdd9 [ 1931.122150][T30098] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 1931.122161][T30098] RBP: 00007f235497e090 R08: 0000000000000000 R09: 0000000000000000 [ 1931.122171][T30098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1931.122181][T30098] R13: 00007f2353e16218 R14: 00007f2353e16180 R15: 00007ffc6b4d5748 [ 1931.122206][T30098] [ 1931.337226][T30095] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1931.369850][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1931.436594][T30090] netlink: 'syz.1.5516': attribute type 2 has an invalid length. [ 1931.444400][T30090] netlink: 'syz.1.5516': attribute type 2 has an invalid length. [ 1932.166893][T30100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5519'. [ 1932.733633][T30110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5521'. [ 1932.775330][T30122] syzkaller0: entered promiscuous mode [ 1932.801445][T30122] syzkaller0: entered allmulticast mode [ 1933.195186][T30133] NILFS (nullb0): couldn't find nilfs on the device [ 1934.092029][T30138] binder: 30137:30138 ioctl c0306201 200000000640 returned -22 [ 1934.492317][T30142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5532'. [ 1934.772793][T30142] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1934.957144][T17636] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1935.309880][T17636] usb 5-1: Using ep0 maxpacket: 16 [ 1935.496852][T17636] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1935.524905][T17636] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1935.542426][T17636] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.559113][T17636] usb 5-1: Product: syz [ 1935.563629][T17636] usb 5-1: Manufacturer: syz [ 1935.568265][T17636] usb 5-1: SerialNumber: syz [ 1935.577904][T17636] usb 5-1: config 0 descriptor?? [ 1935.600454][T17636] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1936.088576][ T184] usb 5-1: Failed to submit usb control message: -71 [ 1936.089374][ T10] usb 5-1: USB disconnect, device number 28 [ 1936.108339][ T184] usb 5-1: unable to send the bmi data to the device: -71 [ 1936.126300][ T184] usb 5-1: unable to get target info from device [ 1936.145075][ T184] usb 5-1: could not get target info (-71) [ 1936.168330][ T184] usb 5-1: could not probe fw (-71) [ 1936.245884][T30162] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1936.248941][T23217] IPVS: starting estimator thread 0... [ 1936.407854][T30166] IPVS: using max 42 ests per chain, 100800 per kthread [ 1936.416755][T29061] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1936.656783][T29061] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1936.669149][T29061] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1936.681327][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1936.695800][T29061] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1936.745659][T29061] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1936.781778][T29061] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1936.848203][T29061] usb 1-1: config 0 descriptor?? [ 1936.900884][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1936.946086][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1937.032052][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1937.152366][ T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1937.205912][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.287764][ T9] usb 2-1: Product: syz [ 1937.349987][ T9] usb 2-1: Manufacturer: syz [ 1937.388865][ T9] usb 2-1: SerialNumber: syz [ 1937.562050][ T9] usb 2-1: config 0 descriptor?? [ 1938.219104][T30174] 8021q: adding VLAN 0 to HW filter on device .` [ 1938.280535][T29061] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1938.294619][T30174] 8021q: adding VLAN 0 to HW filter on device team0 [ 1938.354024][T30177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1938.378382][T30177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1938.408097][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.418224][T29061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.426758][T23217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.442097][ T184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.450368][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.488875][T29061] usb 1-1: USB disconnect, device number 19 [ 1938.509230][ T184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.520683][T23217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.529020][T17636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.542985][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.587682][T30174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1938.598248][T30174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1938.608897][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1938.621926][T30174] veth1_macvtap: left promiscuous mode [ 1938.628345][T30174] veth0_macvtap: left promiscuous mode [ 1938.635306][T30174] veth0_macvtap: entered promiscuous mode [ 1938.642473][T30174] veth1_macvtap: entered promiscuous mode [ 1938.657452][T30174] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1938.666620][T30174] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1938.675277][T30174] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1938.684150][T30174] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1938.730982][T30174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1938.741609][T30174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1938.750993][T30174] syzkaller0: left promiscuous mode [ 1938.756728][T30174] syzkaller0: left allmulticast mode [ 1938.766951][T30174] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1938.775076][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1938.782367][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1938.793782][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1938.806896][ T9] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1938.820979][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.843956][ T184] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1938.853543][ T9] usb 5-1: Product: syz [ 1938.857781][ T9] usb 5-1: Manufacturer: syz [ 1938.864903][ T9] usb 5-1: SerialNumber: syz [ 1938.873766][ T184] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1938.884932][ T9] usb 5-1: config 0 descriptor?? [ 1938.893520][ T184] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1938.902463][ T184] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1938.915099][ T184] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1938.945470][ T184] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1938.966526][ T184] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1938.986859][ T184] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1939.099256][T30186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1939.310211][T30186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1939.963394][T29065] usb 2-1: USB disconnect, device number 35 [ 2044.989656][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2044.996640][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P25649/1:b..l [ 2045.005232][ C0] rcu: (detected by 0, t=10502 jiffies, g=242909, q=652 ncpus=2) [ 2045.013020][ C0] task:syz-executor state:R running task stack:23528 pid:25649 tgid:25649 ppid:25636 task_flags:0x400140 flags:0x00080000 [ 2045.027282][ C0] Call Trace: [ 2045.030569][ C0] [ 2045.033498][ C0] __schedule+0x10e9/0x6820 [ 2045.038010][ C0] ? __pfx___schedule+0x10/0x10 [ 2045.042852][ C0] ? mark_held_locks+0x40/0x70 [ 2045.047627][ C0] preempt_schedule_irq+0x50/0x90 [ 2045.052641][ C0] irqentry_exit+0x1fe/0x790 [ 2045.057218][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2045.063179][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 2045.068361][ C0] Code: 05 7b 2f 26 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 86 28 f3 0e 0f 82 a4 02 00 00 8b 35 0e 5c f3 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 1d 2f 26 12 0f 85 ed 02 00 00 48 83 c4 [ 2045.087949][ C0] RSP: 0018:ffffc9000543f2a0 EFLAGS: 00000206 [ 2045.093995][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 2045.101944][ C0] RDX: 0000000000000000 RSI: ffffffff8defa95c RDI: ffffffff8c1c3600 [ 2045.109892][ C0] RBP: ffffffff8e7e54e0 R08: 00000000b99d6e47 R09: 0000000000000007 [ 2045.117842][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 2045.125790][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2045.133751][ C0] ? unwind_next_frame+0x3be/0x2090 [ 2045.138939][ C0] ? unwind_next_frame+0x3be/0x2090 [ 2045.144123][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2045.150257][ C0] unwind_next_frame+0xd1/0x2090 [ 2045.155177][ C0] ? unwind_next_frame+0xbd/0x2090 [ 2045.160272][ C0] ? __reset_page_owner+0x84/0x190 [ 2045.165367][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2045.171499][ C0] arch_stack_walk+0x94/0xf0 [ 2045.176076][ C0] ? __reset_page_owner+0x84/0x190 [ 2045.181168][ C0] stack_trace_save+0x8e/0xc0 [ 2045.185824][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2045.191176][ C0] ? __lock_acquire+0x4a5/0x2630 [ 2045.196098][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2045.201884][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 2045.207063][ C0] save_stack+0x162/0x1e0 [ 2045.211370][ C0] ? __pfx_save_stack+0x10/0x10 [ 2045.216205][ C0] ? page_ext_put+0x3e/0xd0 [ 2045.220698][ C0] __reset_page_owner+0x84/0x190 [ 2045.225617][ C0] free_unref_folios+0xa0d/0x16f0 [ 2045.230629][ C0] ? print_kernel_ident+0x10/0x40 [ 2045.235632][ C0] ? folios_put_refs+0x50a/0xa90 [ 2045.240558][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2045.246344][ C0] folios_put_refs+0x571/0xa90 [ 2045.251095][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 2045.256369][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 2045.262679][ C0] shmem_undo_range+0x5e5/0x1570 [ 2045.267609][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 2045.272980][ C0] ? unwind_get_return_address+0x59/0xa0 [ 2045.278609][ C0] ? arch_stack_walk+0xa6/0xf0 [ 2045.283388][ C0] ? kasan_save_stack+0x3f/0x50 [ 2045.288235][ C0] ? kasan_save_stack+0x30/0x50 [ 2045.293084][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 2045.298451][ C0] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 2045.304505][ C0] ? dentry_free+0xbc/0x170 [ 2045.308997][ C0] ? __dentry_kill+0x4c6/0x690 [ 2045.313746][ C0] ? dput.part.0+0x456/0x570 [ 2045.318319][ C0] shmem_evict_inode+0x3f3/0xc40 [ 2045.323247][ C0] ? inode_wait_for_writeback+0x171/0x390 [ 2045.328949][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2045.334393][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 2045.340444][ C0] ? find_held_lock+0x2b/0x80 [ 2045.345097][ C0] ? evict+0x37e/0xad0 [ 2045.349149][ C0] ? evict+0x37e/0xad0 [ 2045.353215][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2045.358674][ C0] evict+0x3c2/0xad0 [ 2045.362575][ C0] ? __pfx_evict+0x10/0x10 [ 2045.366995][ C0] ? iput.part.0+0x5fd/0xf50 [ 2045.371591][ C0] iput.part.0+0x605/0xf50 [ 2045.375999][ C0] ? __pfx_inode_just_drop+0x10/0x10 [ 2045.381275][ C0] iput+0x35/0x40 [ 2045.384898][ C0] filename_unlinkat+0x466/0x730 [ 2045.389823][ C0] ? __pfx_filename_unlinkat+0x10/0x10 [ 2045.395287][ C0] ? do_getname+0x191/0x390 [ 2045.399798][ C0] __x64_sys_unlink+0x46/0x70 [ 2045.404480][ C0] do_syscall_64+0x10b/0xf80 [ 2045.409064][ C0] ? clear_bhb_loop+0x40/0x90 [ 2045.413730][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2045.419602][ C0] RIP: 0033:0x7eff5359bec7 [ 2045.423997][ C0] RSP: 002b:00007ffe99a6dce8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 2045.432388][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007eff5359bec7 [ 2045.440337][ C0] RDX: 00007ffe99a6dd10 RSI: 00007ffe99a6dda0 RDI: 00007ffe99a6dda0 [ 2045.448286][ C0] RBP: 00007ffe99a6dda0 R08: 00007ffe99a6eda0 R09: 00000000ffffffff [ 2045.456235][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe99a6ee30 [ 2045.464185][ C0] R13: 00007eff53632120 R14: 00000000001d986e R15: 00007ffe99a6ee70 [ 2045.472145][ C0] [ 2045.475143][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g242909 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 2045.487532][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=157229 [ 2045.495485][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g242909 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 2045.506913][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2045.516857][ C0] rcu: RCU grace-period kthread stack dump: [ 2045.522720][ C0] task:rcu_preempt state:I stack:28216 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 2045.534613][ C0] Call Trace: [ 2045.537873][ C0] [ 2045.540788][ C0] __schedule+0x10e9/0x6820 [ 2045.545284][ C0] ? __pfx___schedule+0x10/0x10 [ 2045.550112][ C0] ? find_held_lock+0x2b/0x80 [ 2045.554769][ C0] ? schedule+0x2bf/0x390 [ 2045.559080][ C0] schedule+0xdd/0x390 [ 2045.563127][ C0] schedule_timeout+0x127/0x280 [ 2045.567962][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2045.573318][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2045.578586][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2045.584369][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 2045.589815][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 2045.594560][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2045.599845][ C0] ? prepare_to_swait_event+0xae/0x4a0 [ 2045.605287][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 2045.610208][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 2045.615386][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2045.621194][ C0] rcu_gp_kthread+0x179/0x230 [ 2045.625853][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2045.631031][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2045.636818][ C0] ? __kthread_parkme+0x18c/0x230 [ 2045.641822][ C0] ? kthread+0x13a/0x450 [ 2045.646044][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2045.651222][ C0] kthread+0x370/0x450 [ 2045.655271][ C0] ? __pfx_kthread+0x10/0x10 [ 2045.659843][ C0] ret_from_fork+0x72b/0xd50 [ 2045.664416][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2045.669509][ C0] ? __switch_to+0x800/0x1100 [ 2045.674169][ C0] ? __pfx_kthread+0x10/0x10 [ 2045.678743][ C0] ret_from_fork_asm+0x1a/0x30 [ 2045.683501][ C0] [ 2045.686500][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2045.692806][ C0] Sending NMI from CPU 0 to CPUs 1: [ 2045.697994][ C1] NMI backtrace for cpu 1 [ 2045.698008][ C1] CPU: 1 UID: 0 PID: 30191 Comm: syz.0.5542 Tainted: G L syzkaller #0 PREEMPT(full) [ 2045.698028][ C1] Tainted: [L]=SOFTLOCKUP [ 2045.698033][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2045.698041][ C1] RIP: 0010:_find_first_zero_bit+0x48/0x80 [ 2045.698064][ C1] Code: eb 0d 48 83 c3 40 48 83 c7 08 48 39 c3 73 25 48 89 fa 48 c1 ea 03 80 3c 2a 00 75 28 48 8b 17 48 83 f2 ff 74 dd f3 48 0f bc d2 <48> 01 d3 48 39 d8 48 0f 47 c3 48 83 c4 10 5b 5d e9 13 13 95 06 e9 [ 2045.698078][ C1] RSP: 0018:ffffc90007d4fc28 EFLAGS: 00000002 [ 2045.698089][ C1] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 0000000000000001 [ 2045.698098][ C1] RDX: 0000000000000002 RSI: 0000000000000002 RDI: ffff8880236e97d0 [ 2045.698106][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: fffff52000fa9f7c [ 2045.698115][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000002 [ 2045.698123][ C1] R13: 0000000000000002 R14: 0000000000000007 R15: ffff8880a8474a00 [ 2045.698132][ C1] FS: 00007f93640d06c0(0000) GS:ffff888124476000(0000) knlGS:0000000000000000 [ 2045.698145][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2045.698155][ C1] CR2: 00007f93631ea4c0 CR3: 00000000abf6f000 CR4: 00000000003526f0 [ 2045.698164][ C1] Call Trace: [ 2045.698169][ C1] [ 2045.698176][ C1] sched_mm_cid_fork+0x506/0xef0 [ 2045.698192][ C1] ? find_held_lock+0x2b/0x80 [ 2045.698205][ C1] ? load_misc_binary+0x95e/0xd20 [ 2045.698219][ C1] ? __pfx_sched_mm_cid_fork+0x10/0x10 [ 2045.698234][ C1] ? lock_acquire+0x1b1/0x370 [ 2045.698251][ C1] ? find_held_lock+0x2b/0x80 [ 2045.698264][ C1] ? bprm_execve+0x99a/0x1650 [ 2045.698277][ C1] ? bprm_execve+0x99a/0x1650 [ 2045.698293][ C1] bprm_execve+0x53f/0x1650 [ 2045.698309][ C1] ? __pfx_bprm_execve+0x10/0x10 [ 2045.698323][ C1] ? copy_string_kernel+0x339/0x3f0 [ 2045.698339][ C1] do_execveat_common.isra.0+0x4a5/0x580 [ 2045.698356][ C1] __x64_sys_execveat+0xdf/0x130 [ 2045.698372][ C1] do_syscall_64+0x10b/0xf80 [ 2045.698387][ C1] ? clear_bhb_loop+0x40/0x90 [ 2045.698403][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2045.698416][ C1] RIP: 0033:0x7f936319cdd9 [ 2045.698428][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2045.698441][ C1] RSP: 002b:00007f93640d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2045.698454][ C1] RAX: ffffffffffffffda RBX: 00007f9363415fa0 RCX: 00007f936319cdd9 [ 2045.698462][ C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2045.698470][ C1] RBP: 00007f9363232d69 R08: 0000000000001000 R09: 0000000000000000 [ 2045.698479][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2045.698488][ C1] R13: 00007f9363416038 R14: 00007f9363415fa0 R15: 00007ffe6ca1e3e8 [ 2045.698503][ C1]