last executing test programs: 23m49.127289224s ago: executing program 32 (id=42): r0 = socket(0x10, 0x803, 0x4000000) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0}}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = accept4$x25(r0, &(0x7f0000000180), &(0x7f00000003c0)=0x12, 0x800) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r9, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) connect(r9, &(0x7f0000000540)=@isdn={0x22, 0x6, 0x2, 0x7, 0x2}, 0x80) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104030000000000000000000006", @ANYRES32=0x0, @ANYBLOB="00000000060000000a000300aaaaaaaaaa190000180012800e00010077697265677561956400000004000280"], 0x44}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 23m24.479489954s ago: executing program 33 (id=111): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="a92e81d0991808e33c2323df00000000", 0x10}, {&(0x7f00000000c0)="200d354ec1cb1eea", 0x8}], 0x2, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x20084005) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}], 0x1, 0x102, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xac, 0xa2, 0x58, 0x40, 0xdba, 0x3000, 0x26ea, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0x2, 0xaa}}]}}]}}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x582f, 0x0, 0x9}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c04"]) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15) io_setup(0x2278, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r6, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0xa7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) 18m15.597132041s ago: executing program 34 (id=1158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) 13m39.687310603s ago: executing program 35 (id=2207): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x4400, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fe00}], 0x1, 0x0, 0x0, 0x2b) syz_open_dev$dri(0x0, 0x1, 0x12300) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r3, &(0x7f0000000240)=[{0x1e, 0x0, 0x0, 0x0, @time={0x10000, 0x5}, {}, {}, @raw32}, {0x0, 0x40, 0x10, 0x0, @tick=0x3, {0x7f, 0xfc}, {0x6c, 0xf5}, @time=@tick=0x5}], 0x38) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r4 = syz_open_pts(r0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x237, 0x18d000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x408100, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000380)={0xf7, 0x80000000, 0x9, 0x50, 0xc, "b98254ec7501f28ba9626a51cbeecca68e6dc5"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 12m56.265792166s ago: executing program 36 (id=2336): syz_emit_ethernet(0x7a, &(0x7f0000000200)={@empty, @random="ad5b2fa107c4", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00\x00k', 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, @private2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x8, 0x88be, 0x1}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, 0x2, {0x8, 0x1}}}}}}}}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000ac0)) r0 = syz_open_procfs(0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000300)='./mnt\x00', 0x0, &(0x7f0000001500), 0x200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "3f69f5593d99b5b9", "ad19b9f81b7051508702a27013f65558c8a01f2ae65a25a4c4580daf90219442", "d78279e4", "ba02af61de6197b6"}, 0x38) r2 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356b, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000500)={0x9, [[0x3, 0x101, 0x8, 0x5, 0x4c, 0x3, 0x4, 0x4], [0xa, 0x81, 0xffffffff, 0x2, 0x6, 0xffffff80, 0x5, 0x1], [0x1, 0x5, 0x8517, 0x7, 0x7, 0x10001, 0xb, 0xb]], '\x00', [{0x3, 0xc, 0x1, 0x1, 0x1}, {0x5776d45a, 0x40, 0x1, 0x1, 0x1}, {0x10001, 0x0, 0x1, 0x1}, {0xfffffff7, 0x6, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0xa, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x1, 0x1}, {0x5, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x7ff, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x9, 0x0, 0x1, 0x1, 0x1}, {0xc, 0xfffffff8, 0x0, 0x0, 0x1, 0x1}], '\x00', 0x80000001}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) 12m35.359427042s ago: executing program 8 (id=2405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$alg(0x26, 0x5, 0x0) r8 = openat$zero(0xffffffffffffff9c, 0x0, 0x4200, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r8) sendto(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100", @ANYRES16=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x100, 0x9, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x67}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x8c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2d}, @IPSET_ATTR_LINENO={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x100}, 0x1, 0x0, 0x0, 0x8844}, 0x4004000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) 12m32.551662721s ago: executing program 8 (id=2416): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0xb, 0x0, 0x100, 0x10, "0062ba7d8200000000f7ffffff00000000e200"}) r4 = syz_open_pts(r3, 0x280000) ioctl$TIOCMGET(r4, 0x5415, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, &(0x7f0000000000)={0x23, 0x80, 0x2}, 0x10) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r7, &(0x7f0000000000)={0x23, 0x20}, 0x10) close(r7) openat$comedi(0xffffff9c, 0x0, 0x2000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r8, &(0x7f0000000300)="95", 0x1, 0x801, &(0x7f0000000280)={0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) 12m30.848356766s ago: executing program 8 (id=2417): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100000000000000040000d5796d61bf4fad2f1555364525465e571010000000"], 0x24, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') syz_open_procfs(0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x15, 0x1f, {0x1f, 0x22, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3027c59ccb7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) recvmmsg(r0, &(0x7f0000009a40)=[{{&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000480)=""/224, 0xe0}], 0x1, &(0x7f00000001c0)=""/75, 0x4b}}, {{&(0x7f0000000300)=@nfc, 0x80, &(0x7f0000000280)=[{&(0x7f0000000580)=""/115, 0x73}, {&(0x7f0000000600)=""/217, 0xd9}, {&(0x7f0000000700)=""/170, 0xaa}, {&(0x7f00000007c0)=""/117, 0x75}], 0x4, &(0x7f0000000380)=""/61, 0x3d}}, {{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001100)=[{&(0x7f00000008c0)=""/98, 0x62}, {&(0x7f0000000940)=""/80, 0x50}, {&(0x7f0000000a40)=""/104, 0x68}, {&(0x7f0000000ac0)=""/210, 0xd2}, {&(0x7f0000000bc0)=""/214, 0xd6}, {&(0x7f0000000cc0)=""/221, 0xdd}, {&(0x7f0000000dc0)=""/221, 0xdd}, {&(0x7f0000000ec0)=""/137, 0x89}, {&(0x7f0000000f80)=""/229, 0xe5}, {&(0x7f0000001080)=""/89, 0x59}], 0xa}, 0x8}, {{&(0x7f00000011c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000400)=""/49, 0x31}, {&(0x7f0000001240)=""/199, 0xc7}, {&(0x7f0000001340)=""/157, 0x9d}, {&(0x7f0000001400)=""/78, 0x4e}, {&(0x7f00000009c0)=""/18, 0x12}], 0x5, &(0x7f0000001500)=""/221, 0xdd}, 0x8}, {{&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002a80)=[{&(0x7f00000016c0)=""/150, 0x96}, {&(0x7f0000001780)=""/62, 0x3e}, {&(0x7f00000017c0)}, {&(0x7f0000001800)=""/129, 0x81}, {&(0x7f00000018c0)=""/64, 0x40}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/238, 0xee}], 0x7, &(0x7f0000002b00)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000003b00)=@generic, 0x80, &(0x7f0000005000)=[{&(0x7f0000003b80)=""/97, 0x61}, {&(0x7f0000003c00)=""/145, 0x91}, {&(0x7f0000003cc0)=""/136, 0x88}, {&(0x7f0000003d80)=""/78, 0x4e}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/122, 0x7a}, {&(0x7f0000004e80)=""/75, 0x4b}, {&(0x7f0000004f00)=""/205, 0xcd}], 0x8}, 0x7}, {{&(0x7f0000005080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000006400)=[{&(0x7f0000005100)=""/4096, 0x1000}, {&(0x7f0000006100)=""/176, 0xb0}, {&(0x7f00000061c0)=""/60, 0x3c}, {&(0x7f0000006200)=""/253, 0xfd}, {&(0x7f0000006300)=""/213, 0xd5}], 0x5, &(0x7f0000006480)=""/46, 0x2e}, 0x8}, {{&(0x7f00000064c0)=@isdn, 0x80, &(0x7f0000009600)=[{&(0x7f0000006540)=""/4096, 0x1000}, {&(0x7f0000007540)=""/4096, 0x1000}, {&(0x7f0000008540)=""/4096, 0x1000}, {&(0x7f0000009540)=""/166, 0xa6}], 0x4}, 0xb}, {{0x0, 0x0, &(0x7f00000097c0)=[{&(0x7f0000009640)=""/180, 0xb4}, {&(0x7f0000009700)=""/142, 0x8e}], 0x2, &(0x7f0000009800)=""/201, 0xc9}, 0x2}, {{&(0x7f0000009900)=@phonet, 0x80, &(0x7f0000009980), 0x0, &(0x7f00000099c0)=""/78, 0x4e}, 0x9}], 0xa, 0x0, &(0x7f0000009cc0)={0x0, 0x3938700}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000017c0)={0x5, r0, 0x26, {0x80000001, 0x7}, 0x13}, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000003c0)={0x1, r4}) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) unlink(&(0x7f00000002c0)='./file0\x00') 12m26.233663544s ago: executing program 8 (id=2428): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0}, 0x6400c810) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRESHEX=r2, @ANYBLOB="0000000400"/20, @ANYRESOCT=r0, @ANYRES32, @ANYRES32=0x0], 0x50) r3 = io_uring_setup(0x6835, &(0x7f0000000140)={0x0, 0xe3d6, 0x5b30, 0x41, 0xa62}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2a, 0x35fcc1) r5 = dup(r4) unshare(0x24000300) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x6af60) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x2, 0x6, 0x800000000000000}, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) mlock2(&(0x7f0000acf000/0x1000)=nil, 0x1000, 0x1) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r7 = openat$fb0(0xffffff9c, &(0x7f0000001040), 0x101242, 0x0) ioctl$FBIOPUT_CON2FBMAP(r7, 0x4610, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38011, r6, 0x5be000) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x12, 0x0) 12m24.136463271s ago: executing program 8 (id=2435): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000000000000000000000000000000000000000000000000006f503473f28e872b429743a59c83dbca8e5efefdf59ad8be7be0d0733d413ed9bfc2c1acac3eb50f318adf8abadb22eceb911289a5018a1af4825b002413b6c33bc4232d1124901df2d8b8e8de81f837d910037b907e5c286fb51f60adc497b2"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@private2}, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RAUTH(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x2208}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x17, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x200, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x15007}}, 0x20}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r4) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x40, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x404c000) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r8) sendmsg$NFC_CMD_SE_IO(r8, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 12m23.407568548s ago: executing program 8 (id=2439): shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmget(0x1, 0x2000, 0x800, &(0x7f0000695000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000776000/0x4000)=nil, 0x5000) shmctl$IPC_RMID(r0, 0x0) 12m9.581969972s ago: executing program 37 (id=2477): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 12m7.985668698s ago: executing program 38 (id=2439): shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmget(0x1, 0x2000, 0x800, &(0x7f0000695000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000776000/0x4000)=nil, 0x5000) shmctl$IPC_RMID(r0, 0x0) 12m5.801227067s ago: executing program 0 (id=2489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0x6, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000580)=ANY=[], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x14, r5, 0x719, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880) prctl$PR_GET_KEEPCAPS(0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f00000025c0)) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500f7bc6b270000f3ff0500000008000300", @ANYRES32=r6], 0x24}}, 0x0) 12m3.27259475s ago: executing program 0 (id=2495): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x10, 0x3, 0x0) ptrace(0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0xffff0000, 0x2, 0x4add}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x20004440) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x17e) getdents64(r5, &(0x7f0000000200)=""/179, 0xb3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) (fail_nth: 4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 12m1.54759027s ago: executing program 0 (id=2497): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) (fail_nth: 9) 12m1.070516341s ago: executing program 0 (id=2498): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x80000) r3 = fcntl$dupfd(r1, 0x406, r2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), 0x0, 0x1, r5}, 0x38) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xa, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000010) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x401, '\x00', r7, r3, 0x5, 0x4, 0x3}, 0x50) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) read$FUSE(r4, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x66017, 0x3, 0x0, 0x0, 0x9835}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa6a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x10000014}) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r9, 0x7, r3, &(0x7f0000000100)={r2, r3}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'rti802\x00', [0x8001, 0x5, 0x1, 0x0, 0x40000000, 0xcc7, 0x8, 0x8, 0x2000000, 0x400ff, 0x2, 0xffffffff, 0x28, 0x40000004, 0x6, 0x22, 0x101, 0x49, 0x43, 0x40000003, 0xf, 0xa, 0xf27, 0x7, 0x2, 0x8, 0x3, 0x6, 0x8, 0x2, 0xfffffff4]}) 12m0.84480945s ago: executing program 0 (id=2500): r0 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="4570eaf44ea4", 0x6}], 0x1) 12m0.108039277s ago: executing program 0 (id=2503): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x4}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m59.802173066s ago: executing program 39 (id=2503): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x4}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m35.623533299s ago: executing program 6 (id=2563): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x50) memfd_create(&(0x7f0000000980)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\x18,\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x1a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\xd0\x8f\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\xf6\xd5\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0\a\x0e!\xed\x92\xc9\x03\xa5\xcc!\x83\b\xc7!\xec\xb0\x1d\xe2\xc8\xc8\x11/\x8e\xe8\xf1\xf9o\xca \x04\x98J+\xae$\xaa\x8cH\x05Iv\xfd\xb7|\xce\xdb\xe5\x1e\xdcJ$yH\x05b\xa6A,3K\x0e\xa8E\xf4%\xd2:\xc4\xd2\xd9\f\xf1\xe2F\xc9\xeb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\xfa\xc6\xcd\xc8Z\xc7p\xef$\xaa-\xbe\xf6[,`t\xdd\r\x83\xbe9\x86/n\x94\n\xd0\x04\x84k\xf8\x88\xcd\x8db\xd5A\xdb\x189O4\xa1\xa10\x95Tv\fj\x15\x96`\n\xa0\xc7\xf7\xd4\xbaa\xac\x87\x8f\xf2Z\xac\xd0\x86h', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) ptrace$ARCH_SET_CPUID(0x1e, 0xffffffffffffffff, 0x1, 0x1012) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r0}, 0x38) 11m34.948598391s ago: executing program 6 (id=2566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = syz_io_uring_setup(0x1835, &(0x7f00000000c0)={0x0, 0x7b6, 0x8, 0x1, 0x20}, &(0x7f0000000180), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) syz_open_dev$radio(&(0x7f0000000200), 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000080), 0x0, 0x0, 0x2) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000080000000000003000000"], 0x26}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000001240)=ANY=[@ANYBLOB="3a2f08c400000000010000000000450a0fc00068000005069078ac1e0301ffffffff4e204e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfce) 11m34.304896024s ago: executing program 6 (id=2569): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000010140)=0x9) 11m32.005622522s ago: executing program 6 (id=2577): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x80000) r3 = fcntl$dupfd(r1, 0x406, r2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), 0x0, 0x1, r5}, 0x38) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xa, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000010) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x401, '\x00', r6, r3, 0x5, 0x4, 0x3}, 0x50) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f0000000000)={0xc, {0x3, 0x8, 0xffffffc0, 0xfffffffb}}) read$FUSE(r4, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x66017, 0x3, 0x0, 0x0, 0x9835}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa6a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x10000014}) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r9, 0x7, r3, &(0x7f0000000100)={r2, r3}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'rti802\x00', [0x8001, 0x5, 0x1, 0x0, 0x40000000, 0xcc7, 0x8, 0x8, 0x2000000, 0x400ff, 0x2, 0xffffffff, 0x28, 0x40000004, 0x6, 0x22, 0x101, 0x49, 0x43, 0x40000003, 0xf, 0xa, 0xf27, 0x7, 0x2, 0x8, 0x3, 0x6, 0x8, 0x2, 0xfffffff4]}) 11m31.562818231s ago: executing program 6 (id=2580): socket$nl_netfilter(0x10, 0x3, 0xc) modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34101ff", 0x9, 0x20000000, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000300), &(0x7f0000000340)=r4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) 11m30.141361672s ago: executing program 6 (id=2584): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x37) fcntl$setlease(r0, 0x400, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x56, 0xc5, 0x16, 0x10, 0x830, 0x80, 0x8ff2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0xa0, 0x4, [{{0x9, 0x4, 0xe6, 0x5, 0x0, 0x23, 0x41, 0x30, 0x5}}]}}]}}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000040)) 11m29.802920268s ago: executing program 40 (id=2584): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x37) fcntl$setlease(r0, 0x400, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x56, 0xc5, 0x16, 0x10, 0x830, 0x80, 0x8ff2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0xa0, 0x4, [{{0x9, 0x4, 0xe6, 0x5, 0x0, 0x23, 0x41, 0x30, 0x5}}]}}]}}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000040)) 11m6.392759244s ago: executing program 5 (id=2645): r0 = socket$kcm(0x10, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0x3c8}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x1d, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000300)='scsi_dispatch_cmd_start\x00', r4}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="a28d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80b00, 0x0) sendmsg(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000000140)="c02228e37c1337b9c3eadad40d", 0xd}], 0x2}, 0x8104) socket$inet6(0xa, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="d80000001400810c4e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb0900073905a2b4f76c70cbc981e700001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1601000000eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e006000000000000e87fbb9ad809d5e1cace81b341139fe3cd40", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x2040) 11m4.022504034s ago: executing program 5 (id=2653): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet(0x2, 0x3, 0x9) pipe2$watch_queue(&(0x7f0000000480), 0x80) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f8ca5", 0x5e, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d09229309241efeed6eb72cf772") sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 11m1.382311689s ago: executing program 5 (id=2658): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000011c0)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x0, 0x7, 0xc, 0x7, 0x20, 0x9, 0x80}, &(0x7f0000001280)=0x9c) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 10m58.268063975s ago: executing program 5 (id=2667): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x80000) r3 = fcntl$dupfd(r1, 0x406, r2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), 0x0, 0x1}, 0x38) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xa, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000010) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x401, '\x00', r6, r3, 0x5, 0x4, 0x3}, 0x50) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f0000000000)={0xc, {0x3, 0x8, 0xffffffc0, 0xfffffffb}}) read$FUSE(r4, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x66017, 0x3, 0x0, 0x0, 0x9835}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa6a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x10000014}) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r9, 0x7, r3, &(0x7f0000000100)={r2, r3}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'rti802\x00', [0x8001, 0x5, 0x1, 0x0, 0x40000000, 0xcc7, 0x8, 0x8, 0x2000000, 0x400ff, 0x2, 0xffffffff, 0x28, 0x40000004, 0x6, 0x22, 0x101, 0x49, 0x43, 0x40000003, 0xf, 0xa, 0xf27, 0x7, 0x2, 0x8, 0x3, 0x6, 0x8, 0x2, 0xfffffff4]}) 10m57.4550256s ago: executing program 5 (id=2668): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x20, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}}, 0x20}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000011c0)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x0, 0x7, 0xc, 0x7, 0x20, 0x9, 0x80}, &(0x7f0000001280)=0x9c) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 10m56.61430976s ago: executing program 5 (id=2673): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x400000, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x1f00, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) 10m56.291103877s ago: executing program 41 (id=2673): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x400000, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x1f00, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) 9m14.519124066s ago: executing program 1 (id=2985): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e440b021005643ab9777f4bc9cedf5af17bf099ba7ecc1b11bc2944b19f289d5dd65be97522d3d80afb5dfdf6e6622ca3e3f60bd4af439407b1d2f912abec0b7e6cc16b4af3"], 0x47) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x14, 0x0, 0x1, 0xfffffffc}, 0x5a}}, 0x0) r3 = socket(0x2, 0x80805, 0x9) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xfffffff8}, &(0x7f0000000100)=0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) 9m13.357826567s ago: executing program 1 (id=2989): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x20240, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x603f) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004140)={&(0x7f0000004100)=ANY=[@ANYBLOB="180000002500050326bd7008fedbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x14) recvmsg(r5, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x102) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 9m12.56492356s ago: executing program 1 (id=2991): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f0000000340)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x11, 0x93, 0x6f, 0x20, 0x6cd, 0x107, 0xd720, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x6e, 0x1, 0x1, 0xd6, 0x10, 0x62, 0x80, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x10}}]}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0x40, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r5, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f00000001c0)) 9m10.230370362s ago: executing program 1 (id=2998): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x6b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_open_procfs(r0, &(0x7f00000000c0)='net/icmp6\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') connect$unix(r4, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r6 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800240600fc0000000000000000ffffffffffffffff8000000000000000000000000000aa00024000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9002000090780000fe10e6673fcf0b051e00000000000000"], 0x0) write$cgroup_pid(r7, &(0x7f0000000180), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getpeername$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) 9m8.845227899s ago: executing program 1 (id=3002): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000010000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 9m7.640479241s ago: executing program 1 (id=3008): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e440b021005643ab9777f4bc9cedf5af17bf099ba7ecc1b11bc2944b19f289d5dd65be97522d3d80afb5dfdf6e6622ca3e3f60bd4af439407b1d2f912abec0b7e6cc16b4af3"], 0x47) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x14, 0x0, 0x1, 0xfffffffc}, 0x5a}}, 0x0) socket(0x2, 0x80805, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) 9m6.340424563s ago: executing program 42 (id=3008): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e440b021005643ab9777f4bc9cedf5af17bf099ba7ecc1b11bc2944b19f289d5dd65be97522d3d80afb5dfdf6e6622ca3e3f60bd4af439407b1d2f912abec0b7e6cc16b4af3"], 0x47) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x14, 0x0, 0x1, 0xfffffffc}, 0x5a}}, 0x0) socket(0x2, 0x80805, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) 13.516812835s ago: executing program 9 (id=4901): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8005a21, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1, 0x0, 0x1100}, 0x10) 13.477570957s ago: executing program 9 (id=4902): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r2}, {0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2}, [@offload={0xc, 0x1c, {r2, 0x4}}]}, 0xc4}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000080)=0x3ba, 0x5, 0x2) 9.85690155s ago: executing program 9 (id=4915): landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES16], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x18, 0x3, 0x2, &(0x7f00000001c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023893) 8.484647123s ago: executing program 3 (id=4920): pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x17c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'pimreg\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xfc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'batadv0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1cc}}, 0x480d1) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x204, 0x2, 0x2, {0x7, @vbi={0x1ff, 0x0, 0xb, 0x20363159, [0x8000000, 0x8000000], [0x8008200, 0x10000001], 0x13a}}, 0x4}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000af00850000008600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000002d0000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r4}, 0xc) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcb, 0x6f, 0xcf, 0x20, 0x13d8, 0x20, 0xf731, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xe4, 0xd5}}]}}]}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r8, 0x125db5fbab78a828, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x10) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000200020101000000000000000003000003"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0xe, 0x0, &(0x7f0000000340)="14fd54ab72df97e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000040)={0x400, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {0x4}, {}, {}, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0xffffffff, 0x100000, 0x6, 0x0, 0x0, 0x2, 0x0, 0x29, 0x0, 0x3}) 8.455935945s ago: executing program 7 (id=4921): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x80000) r3 = fcntl$dupfd(r1, 0x406, r2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), 0x0, 0x1, r4}, 0x38) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xa, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000010) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x401, '\x00', r6, r3, 0x5, 0x4, 0x3}, 0x50) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f0000000000)={0xc, {0x3, 0x8, 0xffffffc0, 0xfffffffb}}) read$FUSE(0xffffffffffffffff, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x66017, 0x3, 0x0, 0x0, 0x9835}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa6a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x10000014}) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r9, 0x7, r3, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'rti802\x00', [0x8001, 0x5, 0x1, 0x0, 0x40000000, 0xcc7, 0x8, 0x8, 0x2000000, 0x400ff, 0x2, 0xffffffff, 0x28, 0x40000004, 0x6, 0x22, 0x101, 0x49, 0x43, 0x40000003, 0xf, 0xa, 0xf27, 0x7, 0x2, 0x8, 0x3, 0x6, 0x8, 0x2, 0xfffffff4]}) 8.175704568s ago: executing program 7 (id=4922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4004060) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x2b, r1, &(0x7f0000000180)='./file0\x00') openat$btrfs_control(0xffffffffffffff9c, 0x0, 0xe28340, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}], 0x1}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 5.176751252s ago: executing program 3 (id=4923): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x147040, 0x190) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x7, 0x10200014}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x1ff, {0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x68801, 0x124) ioctl$KVM_SET_XCRS(r2, 0x40305829, &(0x7f0000019140)={0xa, 0x7ff, [{0x0, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0xd98, 0x0, 0x3}, {0x5, 0x0, 0x2}, {0x2, 0x0, 0xd}, {0x6, 0x0, 0x9}, {0x3d, 0x0, 0xc55}, {0x400, 0x0, 0x5}, {0x9, 0x700, 0xf}, {0x8, 0x0, 0xb}, {0xd, 0x0, 0x7fff}, {0x2, 0x0, 0x3ff}, {0x8, 0x0, 0x9}, {0x6, 0x0, 0x4}, {0x6, 0x0, 0x2}, {0x1, 0x0, 0xf}]}) 5.110425953s ago: executing program 4 (id=4925): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @loopback, 0x2}}}, 0x30) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) 5.101835822s ago: executing program 7 (id=4926): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0xcc001) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r6, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb8, r6, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 4.684719602s ago: executing program 3 (id=4927): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x200a}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "facaf7719c"}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 4.6513972s ago: executing program 4 (id=4929): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x800000007) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000001000)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0xf7}]}) socket(0x35, 0x4, 0xffffffff) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d7ebdeb75fd0d8c562c84d8c0a2bc000000000000800100000020000000040000000000000078581acb6cc5dcfa094eb3a410545b99935500ffffffff00000053", 0x48}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x3, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010100000000000000000263590a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) 4.606683213s ago: executing program 9 (id=4930): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.771594987s ago: executing program 7 (id=4931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$alg(0x26, 0x5, 0x0) r8 = openat$zero(0xffffffffffffff9c, 0x0, 0x4200, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r8) sendto(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100", @ANYRES16=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x108, 0x9, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x67}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_ADT={0x8c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2d}, @IPSET_ATTR_LINENO={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x108}, 0x1, 0x0, 0x0, 0x8844}, 0x4004000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) 3.587028151s ago: executing program 2 (id=4932): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x80000) r3 = fcntl$dupfd(r1, 0x406, r2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), 0x0, 0x1, r4}, 0x38) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xa, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000010) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x401, '\x00', r6, r3, 0x5, 0x4, 0x3}, 0x50) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f0000000000)={0xc, {0x3, 0x8, 0xffffffc0, 0xfffffffb}}) read$FUSE(0xffffffffffffffff, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x66017, 0x3, 0x0, 0x0, 0x9835}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa6a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x10000014}) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r9, 0x7, r3, &(0x7f0000000100)={r2, r3}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 3.378217712s ago: executing program 3 (id=4933): landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x107d, r1}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x107d}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000280)=@nfc_llcp, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000d00)=""/4082, 0xff2}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = memfd_create(&(0x7f0000000a00)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@deltaction={0x118, 0x31, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff4f}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff27}}]}]}, 0x118}}, 0x4000000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xd4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x9, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xa0, 0x2, [@TCA_MATCHALL_ACT={0x9c, 0x2, [@m_vlan={0x98, 0x8, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xba1}]}, {0x5b, 0x6, "8bfeef927f8d8f2fe22c68dd9b4d6dec5f431b8c4d21696a82417f9a4044cbc9a945c3f1b641d75d7b17c3cc944b6167547a1ed01f29296e07d290207fd2ca1f690d67a15da47915fd304a93ad9befcf991bd1c772eab8"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 3.276198779s ago: executing program 2 (id=4934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1, 0x0, 0x7000000}, 0x10) 3.168516342s ago: executing program 2 (id=4935): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = socket$kcm(0x10, 0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000300)=""/143, 0x8f) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) clock_adjtime(0x0, &(0x7f0000000000)={0x8003fd, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x9, 0x10, 0x7fff, 0xfffffffffffffffb, 0x0, 0x0, 0x1000, 0x8, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x0, 0x5}) syz_emit_ethernet(0x48, &(0x7f0000000100)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "fa9246", 0x12, 0x2f, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, {[@fragment={0x6, 0x0, 0x22, 0x1, 0x0, 0x15, 0x65}], "5c078ba16ac6ce782b8c"}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.536737808s ago: executing program 2 (id=4936): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0018"], 0x34}}, 0xc000) 2.473788459s ago: executing program 4 (id=4937): add_key$user(&(0x7f0000000200), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000340)=']', 0x1, 0xfffffffffffffffa) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x4, @mcast2={0xff, 0x3}}, 0x1c) (async) fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (rerun: 32) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x600402, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async, rerun: 32) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000000200)) (rerun: 32) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0) (async, rerun: 64) close_range(r3, r3, 0x0) (async, rerun: 64) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x578, 0x30, 0xf0, 0xf0, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe}, {0x200000, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x200, 0x9, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x4}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) (async, rerun: 64) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='net/fib_trie\x00') mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x2010, r0, 0x637a4000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, 0x0) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x14) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x19) (async) getpgrp(0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xac, 0x9}, 0x4, 0x2, 0xd56, 0x1, 0x0, 0x0, 0x26}) 2.386103211s ago: executing program 7 (id=4938): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000400)={0x0, @data}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0x1f000000}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x28}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x0, 0x7ee}, {}, {}, {}, {0x9, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {0x7}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x7}, {0x0, 0x2}, {}, {}, {}, {}, {0xd5a0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 2.341054908s ago: executing program 2 (id=4939): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_SET_MACPARAMS(r0, 0x0, 0x880) 2.213435837s ago: executing program 3 (id=4940): landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES16], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x18, 0x3, 0x2, &(0x7f00000001c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023893) 2.196882713s ago: executing program 4 (id=4941): syz_emit_ethernet(0x5e, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x5c, 0x0, {0xc, 0x4, 0x1, 0x1, 0x7, 0x67, 0x8, 0x1, 0x8, 0xfffd, @local, @broadcast, {[@rr={0x7, 0x1b, 0x8, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x37}, @broadcast, @remote, @private=0xa010101]}]}}, "3276ba29"}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000033c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x50) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x2, 0x70bd2b, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000080) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r6, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000020000020008000100030000000500020003000000050002000800000024"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r7}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') futimesat(r8, 0x0, 0x0) shutdown(r2, 0x1) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) write$6lowpan_control(r9, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) 1.675774994s ago: executing program 9 (id=4942): socket(0xa, 0x3, 0x3d) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) memfd_create(&(0x7f0000000000)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) r2 = socket(0x2c, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x80080) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000022c0)=ANY=[@ANYRESOCT=r5, @ANYRES32, @ANYBLOB="0600746d70667300"], 0x24) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0) 1.656815523s ago: executing program 2 (id=4943): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x200a}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "facaf7719c"}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 1.204733503s ago: executing program 7 (id=4944): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = semget(0x3, 0x2, 0x39c) semop(r1, &(0x7f00000001c0)=[{0x1, 0x1, 0x1800}], 0x1) semop(r1, &(0x7f0000000040)=[{0x1, 0x0, 0x1000}], 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)='^', 0x1, 0x0, &(0x7f0000000000)={0x2, 0x4, @private=0xa010100}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="ecf18ed5", 0x4}], 0x1) r3 = syz_open_procfs(0x0, 0x0) renameat2(r3, &(0x7f0000000380)='./mnt\x00', r3, &(0x7f00000003c0)='./mnt\x00', 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000073000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r6}, 0x10) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0xffffffff, 0x0, &(0x7f0000000000), 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001400010029a57000fcdbdf2510060000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4008) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)="ced06a5f7f0cde31dbe800eadbbe6277ef5edd3cbe5197b65ebdc5d3509b6c129ba7663da89058f2cd7ed80e57db4f811e9f15e2cf63a4c2a177c4b53247400556b24f00e9d68f9246f7831ac7f437579681889eed866d", 0x57, 0x2}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) listen(r0, 0xda90) r11 = accept(r0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @private1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r11) 1.102620353s ago: executing program 4 (id=4945): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe8c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x1, 0x8, 0x0, 'queue0\x00', 0x2}) r1 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x24c1, 0x10, 0x1, 0x310}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r1, 0xdb4, 0xd44a, 0x5, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 375.381346ms ago: executing program 3 (id=4946): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7000002, 0x8031, 0xffffffffffffffff, 0x6be38000) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') read$FUSE(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000007c0)={&(0x7f0000000600)}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000d0ff0000000002000000000000000000000000689b3d4100"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000002c0)=0x1) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)="ec76b3", 0x3}], 0x1}}], 0x1, 0x404c041) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000040200f2c8dc1b000000180001"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@nested={0x8, 0x3, 0x0, 0x1, [@typed={0x4}]}]}, 0x1c}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r4, &(0x7f0000000400), 0x0}, 0x20) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) chroot(0x0) 71.139046ms ago: executing program 9 (id=4947): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0xb, 0x2000, @fd_index=0x6, 0xb, 0x100000000000006, 0x8021, 0x7, 0x1, {0x2}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYRES8, @ANYRESOCT=r2], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb9, &(0x7f000000cf3d)=""/185, 0x41100, 0x44, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x20004041) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000480)={0xbf, 0xf8, {0x0}, {0xee00}, 0x7, 0x4959}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r4, r5, 0x17, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440), 0x9, 0x0, 0x1, r6}}, 0x40) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x6, 0xa8000) gettid() timer_create(0x6, &(0x7f0000000800)={0x0, 0x12, 0x2, @thr={&(0x7f00000002c0)="083a8ff0e7b84b73c3b3cac6411f363df20522515707331c34c014a92d145f043d1ed79460cac33cbaee1d4c3839fd72abf808914a38a393ea22462b6ed1222f2bec64de1083201b8b999dfee04eff165960521f6990cbfc38126d7616418e855b5f4596c41e497c7c1c41584fe0192f7645c846510afef60eb7f80d44e857eca7abce4b32025397b05994fa2146ee227ddf24bfdd359fc936f751b5eba72476584765ea657529ba77bf", &(0x7f0000000380)="ad419c97d04cd80c16b1480783b2934a848b74ce95a930e1fb32dea67007c20ffd7d61a5274b577a095ca0d36d7a0d22c0df00212f9c22dd51f5d9cf6c580a809c8e662885c387f159331e8723aaa20f39906a0de4a4786cd49acee7cbc4178f8fe39816bcc1cd161b1eff12129ea210633e700e3eae2e6c3fc715111c6ec1ca04c0f021b28bb35e661139417c12410c66118bd1b480a32552c0e31d5f52e4f778ff4738501b4a2d2d9c1ebfe3bd071fa12bc07a4f"}}, &(0x7f0000000080)) fcntl$lock(r7, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 0s ago: executing program 4 (id=4948): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r1, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r4, 0xe503, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004100)="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", 0x2000, &(0x7f0000000e40)={&(0x7f0000000100)={0x50, 0x0, 0x7, {0x7, 0x2b, 0x6, 0x48a2040, 0x1, 0xff47, 0x8, 0x5, 0x0, 0x0, 0x80, 0x39bf}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x80, 0x30, 0x51b, 0x0, 0x1, {}, [{0x6c, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0xfffffffa, 0x10000001, 0x6, 0x1}, 0x3}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3b45}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x1}}}}]}]}, 0x80}}, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x7) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) (async) sendto$packet(r1, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) (async) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r4, 0xe503, 0x0) (async) syz_fuse_handle_req(r4, &(0x7f0000004100)="df2dbb357f9bf9dfd91bb058d06a5701dad53d991130458e0ed56e060bde1f046b19d531a5a554031cdd7b2a01c27d3c2c9df834090927975ede0c88333cf51ccc201d2e132da9806f8408029ddef7cea6876edba1f3f7c22c978a0247b437a08dfd9cc749c86aa33f176c12c830e5b0309981d59caaae28545facbc1adc6fe1f3b0e99a1bcfa32e52a8575b6d19134151bfbb6ed53a0f34bdaff16109f5ed03b7b967bdca2314c09b692112e7538b10a492b94fb53cfc6be61c44b013adebed8b10fc6ddbadfb1c91c2968c1b468a748aab321643982fc45bff069b43682cf8ca96c446ca527e6bae7eaedfc2fffea1dba95ad194b858de5b11fbdb18f56c26cd347ec5e95ed5f251cf43ae0ba3d6dec6fa39d863ba15ccf32253ab5a44e2dfde9adf35b47b25ed24e4a7bbd9d446b550eb994abae0c837f39e08de6d55d6fb76f5edeb49f3e181f01eacca24b7a01af3b3d2a5a9fce3c8a685c82b1d2b00bfc11be6938961ff232cac54dbb29597fcd67d43d90a9655fc3daa87e980cb6e3e9d85f964cf67c4ebe8119c8afc755f47ea4bf1c35418e4fb8a2f7c8e252002bd3b3f0415efa6da5b58df169dcfc031f92aaa3658ba505c7195383ff3adbaf1a18516573c239d47c25151d5a540ceba0f2278a3f733c64b1971daff1b4853c9cdac5bbd14ac3c877cb811644182751858eeafa5d26a12d38a655df86aa79b4458e91b67faf1b58ba10729d878930083d0bebba50ab086cca40246f41f1162033c82d2631423e8db3b20c4a776b2d43c1c0effb7ddd8f6e7e08b24cc1c98095b9d98bf250036c90bc34702e3ac09a9a2e36ffbcff2ce279907e86007bd25efc77f47afe85240a3dbbde356de9995752dda95feb4f7c3cfef0ef99ab260bad19a0215abafe97e5f9a72dab8d588abfe079adb96ba036ef7fe23caf599d0c7f1912c68087905f0fe9853809331196d1defa945aa1ba608e76906f3e2e15e510660bef7c672802025f49c89024b0824926b223b07ecf3e7d1c69b22fe0def81b0afadc00b13bfc7d6f59ec1c9356d355c951a8c67ca924fbc71452ca9736e366f79d011556d6ff57ed26ff48770dfbd32abe9eba26a1d37ed2071be4cdaec267eee0fe1ba2881b8aca35e6699d210669bd68ee8b5e9a6ac52ac363a2760ebdfdecd06b3d34682305762965e39048e1c96aa3746f290bab98ea767d543defba175d07017eec1b950a419ead72c0f1260fbce8e7a80884b0c566fcedf370238dd78540b7574336973e8bc14f3a0558c340087eaeeaff66aca47968e10e29742de81f97e8fc88103f65078ef4276c0bd87670b85df3aad2201d4c63fd949be4e456ddcb0c42b3da508080a96b247be94f4e903373c3b9f7d167622314610ebccd393d008a8346bbc5bacbcafacbe880a64e0f89af8b1cf67d7abd280cd3d575b8e3719d05a917db9392917c9254247432e6869a37b47ae28c052f068a7347b1d9aafd431ff42df8ebb7eaf71c393f11bbbe18d108785b25b4803c6153866b41b642f6983eaa5ca96e334cf65489f68e261f736bbb659a5b19403e2c7f357a3ac2a60ef9352aeed826f4430af91adbc71fc25468e2bbcf8723f1d481c31cc4b217564375160de94ab34e891909387adb50d1994630a2c520b605ac84739bfbdee95909e1fa913b02d33d60bde91f38fa1eb816469795fba4f2a8f5761504933e5ad4fe75235c78dedc5dd91aa95b7e254c4724871ae79230074f817033165a778658eeb18e3eb251edcb1e8fcea1b9997cadb2dac9e6238d9b359cf87a5468e4ffbf50d60a272b6bf6670ff5213fe57c5787de15f7a763886a0a3300aab06a199498e276169edc8ce4eb4ee796af33ca0b005d10f38ec36c65f821ad16fd18272cb6b8f4d1b9b447a323da188de6ed3ea77f94af6ebb4381952557afb0ebc0d9f52dac7481123c99b2f6672d64f633761ded649da36bdcc246f90b6eefb6b9ae3f0ea342749533eb01ee27bafb504dcb1bc4cf320074a8541fde11fcbb7f3728d93da20483751ae8263c2f027813e4dd9843fc8e5113acd69bbdb3de02170ef3117bcf17c573a180bf3447a2f8d5f5c94e07cdd62d3bd139a4435ab70e198efbfcc187dbde6e1e396e9300d0aa486f1dc79ec79d9c8da56ef657340f8df825d7719c459bd7520652f292c4911fd650316b6067bec9b5094b8932dafd89bd14d9c32552da58ab71b408eab39e3516a9b96824dc6639c096bde4470e5358a56bf0f33800e7a44a4a891721b31c790f8dbe753c30588ffea031b2504bd6fc536c9612191caa488686e7243691e9f3e56ff3b08bc7e4290bf4c89ed20ce1a0bca81d110b307491d154b87a31f027981ec8655c47dfabcacfbaf86b4e5f8b3156a2040e126cfddc6d1e06976cc46676b20d6d384ca95d6a1dd024286458ae47f25ea773a74d31a93febc3daeeb8bcf8edee2eb565d4a1c3950ac57283c60acfbd880d1f818cd3e4068684782d5c53ff88f4dfcd9617c87e939ed43f0b27846c96274876c180b22ed78078ac67151d1ec6e2349f97d2dd31c306f90be818e995b314ab1659e59b0b4283d5a9524d7458f7e26110e7ac7db1fadb88f38a6af6a48f9e300246e65a94fc22748902d6dd05023ed8aea602daddc7d7d5ceb41a3d70d1f47d7dd6024a8fab5aa698c2557d06e1dfb42de03f0441bc0ee0f157474caa6dff049ca2f1de730588d9a3ddc99390d476a31d7e2c33f3553dcaa09bdf1724a045e51c053cb1657f076e1c3566dd621e95497392b1cba91feeb32bef0c7552478bf29ae4c12a6fa6a7831a9f91cd947b686c94d834e0ad75f232cce64da863a28c1d2d68a8494707701cb3aa4eb15b1d88a3d1deb38d488c5a96528a1a17c326a1ce0d7faa9b3d998bc5005e1d9fa84173bf9c634fd1d5dbbe1c26603517341db9f3a05eaf9850d343b63d439b11bf8b7c62b2d43002d6dc7c2828f4195b9dd7f3ef22a8b38aebd0243a1c045b053f13ad55ced9d482d83a5b28dbbd0254d52ae9b064e441ea2cd42aca7883453a13c1035fede584dbff88f6e3e973bfdf3a2bbb92e980ba87bfc36007dba4f57c634417572969093baf19c37d20a2311238fcd579eb2e55d08e4dde54ec63b84816a26ecb215c6dcca015a0c9ce681c5330ceb4a762904cfa52200712e9cdc8f05ab23b4c7e52c8fa26546f36652781327a4c887977c55cc6b2023e7c64bd1de5c72c07e8650d14631901ffdb5b133570080d1186b63ecc9fea6692e1f326f090c9c093ea0ab6cd14b90dbdb429590c5581f6f8f756d9a4f911b19f990aef1d3df5123c7f697500732d5ba8c649f34e6adf47988bf44fb814095d60e445754808e482a7c1754a71322e7aa453453398c7ab566c14275f9c035a68b2f78fe0ca111bc76f894847c173ad23dd36b2916ceaed287c29b9c370901e736e903636e818d72c8cdc7a960e7c729b5c6392369ba9fbf17429ae1fc3ae27d18e4c7ff78f362477d5742fedf923a85613ad090691292a0b2fdc913396ed680acc498c13e523450082e29791949ea65110f87a210a635e59b6d7ef70314c0faf3e03142ebb1216e0ffa5e7a3f9502bffccdf1843d432861d1123fda1be89d220601c10c1e0979ead468529680a65bfd919cec10fac42d855c32ecedbe13cbb5090d843cb1690d0fa538ddf9bca427f03e46c8f489770d0812f69d801ce477aad686c7088b4a97857fb6a5aa7dd00a063f3c37e6f9d1b3f8650b5312fd5aecbaa3fb4b162d331192f160887772171df1884e957c507fe3ed5cb0fd7f7e01256f0ea0a7a5db32c66699b2efdf9d6577c8aab87844f9275e0cb0bbf852e10ea4ca6c56867fd4bdabda94743038292abe882fa59f9825c54610e284a5861d825f7d3109c205e40a4fa2d6b1db2260f96765efeb5bd4bf32f5f00936c63522954521668ecad7fad7db765b0e030f8abe055c32c6eb54540f41eec6adac44d74879e0a54a942c09bfae4f4d842805b6e6e9f82ea2e742d2511665344b92566625c95b6fc038c99fff7051392418197c617912a96f5ffc4fd90ed6963db532c628c54ad8059299d2e5e9ce8698466ec74e7497a78c37fa608cca689eea1a92747c7673345f6ea7ef056ebc3706b7c0e349ebc795e591dbdc8652802167ce23c6033237ea18fc864f2fd007b452484e86b1d6e0fc7240dc8b88273fee58f7eb60defb4dd7ef10cdc487708988c80f9f6603f54f10a1aac00c4e73129bd7e929f85fd049b8a7a4ac3a3781bc087709219d57549c509d33d9d392ddd665724e132b62e09d4ff24fc9554ca4bdbdd0e0261deabefbe7a0b234919996f2b9f5f0004a6c3b1e40f9c56448b656bf4508ac8bd612cddb1a76dbfd3f9b60614c169761748d6796bcc663269506a11f935ec4ab9f518bdb6bf663496fd5e50cbeb81b1b2d3c5c6cf2dab24aae71471dd0f5b7f5c8c8e7c118c989cfddfb46bbe1c672625765707a9869985604da769fd1f1819b39cf79080f216f686b1c8acbef23f375d3aefef5d419214345ea95f8b8fe618ac8edf4717db30c85fe5c38e3fe52d36432fe5bad67c37bcb26220ea6f6940374bb6be43a8a0fd5099f7880d594dcda0dfa52be984b5bb8d7f41de06572234e5c40155058974e23f42b1d24dd6c06f68822c3c7623df7420e0c9af976895451eb78a22a8b56c73648f1b3595479b523c134c1b42a516e2086f23d732b67e92e192a08f56ac3e091eb2a8ec73944eb8ec90d368fffe4dc7bbf088e3e36122838f85adbf35682179a22588af6aa565993e740e572f16935cd5d204b4c401bc2c8a5da33988e33de2f075aef600ecb7c3a8f3d41a88c0cacf6938e8c4a943f09cb2949415d9e1d80ac6ba71a3fabea6348e8c0032ae9c848ea0f68dc6ec4ef083d70d64cc0a8643316711c53c02c366e3127b28d38cc77104cdf6be72bbf7c44c19ab3a795033a9ebedb58f18bad91102777f032df189af8b6c40f0d35b7dc4b9cbd56e51a537edc37945d469e02cd4047155f734d3b7094d57224fc25d930b5547c39f9a3c4d57ed3cd9633dae8ce8040b2c974f0027a6695fbd0623ce21d895589c52a11c4ccfc2f2cd5654f0f0251122679fa52ad11688ccb22ac4bd0b04d0c2c2162d3df9c17b64f52e665a3a8603b645a3b794249d1e1ef6ffc48b47b3680b0d1fee05a911c695ff6b73e05360bc212121551d987f84278beb1aea516770810a10a1cc202e7aa352eeeed97aad66b40b6b1d71a6480a64171493ad209af0fe8394cde95e02b925ae44de82c7c0b236aac32b9b383177ec4e364719121ee63f9f09a4e509500df2adab2a30c85efa7180023222d6cd3f5c2b5ce915c9e13ab61466a3aef3a096121e199d924dbcfc16f6c55dbee6da01f7d7ef33f57012ecb0f0353e5cbef7d1ad3cf5ce0232b0319877a95a70a88504afaf0a5dad07cd2f5fb1dadae7a114f6f34745138d1bef7974fdc83c25c2084d3234ab6cbc23351ad533cca53eafb355cb8e9468ab8d7a6d52fefe9c510d7df25c2ea4b5ceff8fa4bb40685c6cf0a7f1ad3a3c851c16a9ef8b472862932c9b1a35b9c6ae2a5ee6425ec1b077f15ba19e46c0685eaf291a5411647310a019f7ea7b3c46c25ffbfe3cec51ca9075932ffa3ffcb68f3902c9d9650cdac3e48cbad88b2a5318e03ef44b0fd9e45c0ec91b21ed9b443723d0e5b7da03b99275bfd8b936eb62546e2155018f1595ec13fad183e9cddf4797cc0e6fb6c64715303372419cafd4f5ec82c183f97bc2dfd402283123bd13f1f75c533567e9c3b205cdb3b5c85bbfa1b5c68ed9ecc2e0f98e2a9462ba2eb7b526ce1a449e52efcc64973c7137e42a908141d5ab5ed34f6d7403858193169e8b898037a660cc78a05c37ed1a880b50e20ba6d2b230f2993ad9a8eabacbcf6c4332b6f38ac1528f78741369f7beb35e0aa6e4bbf28bedf834af62ef8de78c1ec7ae5f6018b9ee76db5917d46e5061852569b409dd262781a10a61956cef9992910ce5ffa47290195eb502b13ef13fb131d6fc6ac4e684eae07cf64340d7f6ae336c50fb157c313ef1f48e5d42adc8a63e988b5176c1faa575c2a42a7c1c25da3bcf1b88091cea2317826c0545ab0e517c7832bcfce35b84207332eca7efe18e67cdbd35083ecca76e08057a148f5a043d14164282c4619eb8cb65dbb6537385e07a04b0f059ef0513d05b69e09e1717cd7f0808c05904f68eb0153d5e9f5181bcde4e4deca214310e544e158d69724a93fbac6cf896960ad55f44198a477dd95324cbe87b39ea4d09d36ebd9a59d61d194b0fd6534c9c3d7729990a5d4ef3c6eb16966e20e0442a1df6b7a021b282e8caead36a455c7683a57b1c6d9ffcf4da30a2d4215cdc24c3e2be8853e19b845f61808c8aaaf4eafc865f5d045e792db4dd5880ebf61c0ee78e1d0810790aaea4c892529349e72ca9305d962c940316275567a2ef62db450b459fba8ea5a852f82a27cd58746ad78aa8aab2563532518d9a7f320c21f9ce1f68ad2e1b77c242fa6e96b1f844e21318b627133767afc391280df9ce1c868df40468942f1291c5c7f401cf164005ffcb190ea1ef43ae6d5eaf897d77cf96901a26b23256c9fe64577e4fafc2375864e415008c8f394a7d7431f04ed1c4d25a5810930309d1e5f72f8f29a395c54e2ae3db3467c177b9118b33e7555474a62c68920e560a42416984482cfc31bd043fa19e218c494338510e725b2279db11d516efdd6826e5ab4de6d5d77596525f655f9d8ba9332fb0f7c7921884075c0d74537099c954c301d7286bc2047367d4044396f10c86080529664328026b5d285df7f24821f48cf5984b81196180059a6ce615b725276e4f3af3f5101771cb1484364fbb6bf15764f3936496e9f6e2b6e4be8c6ef07ee37e708666bf91d7647611151d448465d52055f229b35f7090173bf3b6a883103b386bf1970f99d8233a39075d8503f78a520fe9c6d2467a5b1b1ac08d69aeda46ab7cdc152b84b801040fc2fc1a7a911e834eaa884832d1a636710313766eb96d556bd7a993eaa3ffa4433eb4369e586f8ec0ef0a3bf025ad79acab28a73ba49993d32662866ad8d3d1353e05ec3709a2b582e50a1ec81b10611caa7633f6e26e6374a10b91bff0c03c9c7f230c49338cf5ce1112a1fed743e83afb7d09a42693c6c8b24ef2203563abfe224a5ea12e388afdf451268247c7d3bbf3730eb5c1f171cfc8ee653ace5c2a5e4fa4ae1b16b2e29eac74719ac266b6011a85accfba6a7529c0ebe572e002f19e72db948f798982233928b952dbbe812f4162a3711868fb57ab69dc92b25bd5228193713738b88e20962964581e42fab4d1b20feb4929ebdfaa68f8ee7864293a836dbb7526ac89a5eb62d723d99a142cb5fa1f51e230d22476a882165f58242a756bb795714b232d6fe968aa2ab9ef7f5c4d6625e1f6cced706877b3bfbc4d83d36d6b0e05a30deb41761258a23148c55a4e827b70542029c4e558e09cfd7ac93d3d793dc8d8559303daaf27853efb1077a39addb0fcae81020877f6638d7050dcf9d313e6680d5b10df3b33ed39a35d9c43c697e4668999604f73a05d699cfa9bd0db35ab6d4f58a5a063fb8d1dc179fbdb5dd14ac7aaba30b50888e6cfeb0971a44ef182cc31ad9582f058dab417352563d81a977ea2f876612b14a0041c89219984a7fe1e0136d8b4cb6ca85cb8cb4838b898a577f38215a640d62322c720f48d1df132be1d7f343142ffc12f58e7c6f26e3a68a51d000caaf4be884fbb3939fa7e75370286d44e29f7f2b6669427e12dfec7c0b9b724b46f7340dd54e2f6dce1515da03406b6a452bef21edad70e113d1c4544b12fda006cfaca59a6311bb174c91389f392cab21d282a96c36e8deca3ac22ab1e443d3c97b55317397229d4ae41e33d3fbd8d8b4df89d93dd2a2b89843587ad8a4b23cda74a1417be7ee153888ad04a99e97ea38f079eb0ce863760cfc7cd941ee1e064376054cbc9ba30acf814816e3095cbccd2a3efdcdf0ad6868b4865955994e3fc97a325cc76b2397f84050643127c97499ce372dc73b01ffc305f56997fedda253def99c8c2aaf87fe653cf5b98169ff69741034cd933d1b6914cd86bb7e7de6b29a42302b2cdcbb35b81d7b3fac85628b5fdd06d197f0c9bdd6b96ee226a323e2accba4e9b9915bb626537805eea5d4e28c79183c819c4a8eccc9a779c13a11fad31375638056a7bccb242e1ce571b4cd780c4647dc2f705c0c6ab545c28097334237782bafde3f994492d7dde4ba416a541e00d06a8de773ac423ea0a1d2de602f1a859d150fd88e4824b3abb658c99dfffec456073c92fe5f3fb246ac3ae53fc7f948c2b87b374da0d9095f9a1e5cb135ee583b6ea21d437c5c57e0cc1a7c434d9176d4d3fd7d0699f3edd92a4a5c337db806f6fd45e7d461be96cdcbbece6cd4d40dc796e4bf0c765fab3d8c8838a89397ca78a4ca6d3cdc79e97064257550f1037d327e2b5860592df949d557d615b727ee719f7f33f9b66195666e34eb753daadd489a290a6207569a4ef6932f7099775070766d15e640b0aaf83d0f0038efefac45af91e41c6ee0f58950b57d252ad0256bf2fcc5cda072ae80ede53b6418619141fa6fcf18445fdbdeb3076337b36e9ee16d2df11f86c19d734f3001399e61f44fffd85bfc8987457e0b0c180a4f5008330ef722aa539d6fc5a9575e9949a5992867c353de9097dfec73575bb7c270667fab96467110ca8beda36de7d7066761f05e0bec0162af2f53b8a4ce5ccd27ce48768c95c15e14cb918c6625d0d4be34eee5127d708266683465b5f6bfe6bfe0f52a0cf1bc884fa09a5c92ccaeaedf53651baf99ee84f25df2cc20f2a08eefd16ddfe7930de7b28292981520504814ef5a94377773491b92bc30e3cebaad6b71184999ec0f5771ed992c98e70d6935047b20fd6c7b2335692c623d79744923bd3f83cbfbf9e9f49b7306366718685afc5147ae327deb1bb15b0650709b411f332832c32da6d1b2420182d7e9100258575773c8e41772fec68b1823128db3b79e75eb4a6628c6310006b91c07eb1dc5b48889b5b4eece81ba54365d25d7a690ec7657d820604946dda16d0a8b9eef3a9b155dea308a03e8a76fa7e5d83cf60738cc7d457f9944a050d1269704fe7753c4e4584f1adde511c082ea560425cf99143c2a7711dcb035ac156f4bf5beb92e829971615a929592af3bb8b844029d071bc10739f3164adcd2290d4964403104c3a46b5ded2d01d58cacddf4489d094e0bec9f7c0bd932dfe95e7aff4fa28ebb3208fd08a6626e03ae7a2264417ba534ada8458d3948f40ca5ce51d88d6b77c7563b6bdb2c5427e33e70cadc4b1f3f57cc9bd17aa7e8de8082208ff2c6ae451e68cd513c2534fc6c013895b147828753c8cec588af25c81df7049b185b027d5ffd4d06d067d408bbba50bc364231bc4330a6854e8254607d02a73a71c13d3837d1e6e626f164bf242491a8d0413e0d8d1c09434e09b64ba15cf79fa91e779dea5637a4d9420820891f5bdd3ea1534e7f86d3dc7bf96d7a54d669d948ef4dca69c27cff7e56a1748f211f6dcb03b72e1fae2d30b7d36b5d217f52a9a0904a69fff879ccf43b55c67a2f8bcddba53267004d3930001e4b41cc67181302c51d5c3d3cf0ff1ced8d3f9b144e1471be35626fb15c14efc42fb20f9d0b0dee13ef5af899c858de7bbe3a52ff72ef44781c5a49353623fee91307a976d686eb2d93332eb160d248eef104713db2035eac7319b637b1673e4b7da5ea052dd17dbfb1b88bcfe8cb3103d25a32495a42158da4253a9f801901ca51c9a32fc187234faa8cb8957854b7cc6e7012d908f8aa0c035d6c6003aa13ccc2170125a66892e1449665e48fd227667cb5112d741ab136d22f3b5f42820b0208392090d877e429bf1802080f889069c8ef34a90dc6fe2096ddb7df195520de9fe751318e2af86af2f2ca350b186041d6530590273781dc8651a1cb75bf4c8d7ff6164b5522d2d91d862ce5a5884bdd035d014f516f172894b77179676710f99dc2ecb08499092f7864e40922be6f815ac2614a55c451f0b0f776baa1024bf5c69a0d7c0cbc5484aa211deda093102ceae9935653cace8937e23e1b50ddde2121d1edd0b7b153003b2e4bbf35ba0ea0ba805465289212f864e5653414750479f8df00009b32cf80056b7c760a5c4556f1340714fa9dd3428e02585466f3fca0aaeef23269fabe585222c539b140d047c92f183aba57af1568985e33a918814c2f99ac16c88d76b3b4312c896613e9e00ac4f3714d0fb916e60249a98d5e0be5ca46f2dce37f883c59ceaf9ec54047859ec30ce2da5f6b3777800ed4785a22168c78affc30d056f87971a8d9704f0154ae0915712893c425289c0cffc12082b95858346b299a5f65f2fe79ee79e5beb26d2de40b1d509dc05e97121239d991dadf7b41b3f3f6559c5aafefef87963da0bb40c99949e86286ebab6f571ea0b15c6db750ac695690ece6741e2e1a6dca6c61bce53ce429708862abe0a8d4257f3e53c91d607216a502535c7e2e8cf3f1c2b44bde73f0dfabecdb4ea0b2990845595d9aaadd9ae6cb6776bdb3b927aee1eda51c2ba535c7a73172085a77a1ef8b4dedb435460b371660cdf46747fedb1c54a761e30658de1a1ad9eed0aca268dd3aa9aef4b5f8705e64a29f98c1fe452a7955dc1ffbd48e8b8b9ac52eb348d80d099ca0e9b24b6c41b0cddc659ea6a0c19ecb9ea52416e2072827b5d1eb5c7b510a8ece9aeee90dbd843e2aa41c87528a4aa98d01413128baf543aadd924499c45d99bf5f733515ba8fb329cd1e2a9a1b682de40c69eb75d3dbedfc7b65afd324bc97d18c1fbc1cc17f0c179114df6a7eb5b96f06a11b807e25a357ee85962b66682f4d6c6ad6ed59e8ed47b5026643a6da00b4147324c40755fac9172030d7e8b75cc2c7eb2f4463560df83c4145aa353042f1f1fea869700249b4d8049706d003be92ece35788c7e360bdc88f32af9046ce41195dd81e307b4632287bbd02541533a7627e39285e20865664da09e8becf6fb0c2ee52ccb3ed67fbf4feb5fbe5d568480e88f592e7ddae60fee0f31820d739b4daa40afa82a9482c0f0eb728ecf03778b56eb18d96bb59543e37fe465b5ccf8240e7fea324a38787d4327b933754909b69e4c0ba6513c3f248a3d38b1e6221a5a239d2a14c310fc2fd45794cb1a7e1dde13c3a416d4d4d96d6ebb5b127d2c6ad43b4b38041e91c191653356224d60deeda2f3b7ae671231c45686b55ddd495135989ba73aeb8800059eedcf81d86564268076a7a606105e9b99eb76d78a3f8265b10d391ca4f017c505ae1f707a2e7939d5a543955567768e3f371627231bfa4cfd10dc7112a8e40659cb4b2ede30feba18c747d2183d7c560b56faec50960121a525ee414396e2708fee34f411c6a1a8e5dd41e3329aa1ab41bad97e88af294ee434f9dc459e608d89fd07f660d8b6efae6dc215b4f9eaf740dead47d94521b7f0d4ccca870aa2a01e0a0dc81050ac33739585c07c6431f49d277a60c8d30b0", 0x2000, &(0x7f0000000e40)={&(0x7f0000000100)={0x50, 0x0, 0x7, {0x7, 0x2b, 0x6, 0x48a2040, 0x1, 0xff47, 0x8, 0x5, 0x0, 0x0, 0x80, 0x39bf}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x80, 0x30, 0x51b, 0x0, 0x1, {}, [{0x6c, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0xfffffffa, 0x10000001, 0x6, 0x1}, 0x3}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3b45}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x1}}}}]}]}, 0x80}}, 0x0) (async) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x7) (async) kernel console output (not intermixed with test programs): { write } for pid=23708 comm="syz.4.4084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1301.775169][ T30] audit: type=1400 audit(1764718612.601:1528): avc: denied { map } for pid=23708 comm="syz.4.4084" path="socket:[81670]" dev="sockfs" ino=81670 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1301.823054][T23715] netlink: 'syz.2.4085': attribute type 2 has an invalid length. [ 1301.831850][T23715] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4085'. [ 1301.866778][T23712] nvme_fabrics: missing parameter 'transport=%s' [ 1301.873166][T23712] nvme_fabrics: missing parameter 'nqn=%s' [ 1303.417910][ T5899] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 1303.848560][T23746] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1303.855100][T23746] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1303.899058][ T5899] usb 5-1: config 0 has an invalid interface number: 33 but max is 0 [ 1303.930171][T23746] vhci_hcd vhci_hcd.0: Device attached [ 1303.941089][ T5899] usb 5-1: config 0 has no interface number 0 [ 1303.960470][ T5899] usb 5-1: New USB device found, idVendor=4113, idProduct=0211, bcdDevice=21.ef [ 1303.975599][T23750] fuse: Bad value for 'fd' [ 1303.980215][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.998037][ T5899] usb 5-1: Product: syz [ 1304.004884][ T5899] usb 5-1: Manufacturer: syz [ 1304.009499][ T5899] usb 5-1: SerialNumber: syz [ 1304.020017][ T5899] usb 5-1: config 0 descriptor?? [ 1304.051217][T23756] netlink: 'syz.7.4097': attribute type 2 has an invalid length. [ 1304.059019][T23756] netlink: 108 bytes leftover after parsing attributes in process `syz.7.4097'. [ 1304.126480][T23754] nvme_fabrics: missing parameter 'transport=%s' [ 1304.133396][T23754] nvme_fabrics: missing parameter 'nqn=%s' [ 1304.179569][ T9] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 1304.225488][T18417] usb 51-1: new low-speed USB device number 3 using vhci_hcd [ 1304.590804][ T9] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1304.598713][ T9] usb 10-1: can't read configurations, error -61 [ 1304.717042][ T5899] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1304.754374][ T9] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1304.792937][T23770] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1304.802086][T23768] vivid-008: disconnect [ 1305.229582][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 1305.232678][ T9] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1305.232710][ T9] usb 10-1: can't read configurations, error -61 [ 1305.232949][ T9] usb usb10-port1: attempt power cycle [ 1305.240458][ T5899] usb 3-1: config 0 has an invalid interface number: 240 but max is 0 [ 1305.240484][ T5899] usb 3-1: config 0 has no interface number 0 [ 1305.252673][ T5899] usb 3-1: New USB device found, idVendor=0bda, idProduct=818c, bcdDevice=4e.0a [ 1305.252850][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.252870][ T5899] usb 3-1: Product: syz [ 1305.252885][ T5899] usb 3-1: Manufacturer: syz [ 1305.252900][ T5899] usb 3-1: SerialNumber: syz [ 1305.268817][ T5899] usb 3-1: config 0 descriptor?? [ 1305.494144][T18997] usb 3-1: USB disconnect, device number 99 [ 1305.593993][ T9] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1305.619202][ T9] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1305.637133][ T9] usb 10-1: can't read configurations, error -61 [ 1305.775451][ T9] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1305.799618][ T9] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1305.807670][ T9] usb 10-1: can't read configurations, error -61 [ 1305.814602][ T9] usb usb10-port1: unable to enumerate USB device [ 1306.294498][T23784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4106'. [ 1306.365683][T23768] vivid-008: reconnect [ 1306.373648][T18997] usb 5-1: USB disconnect, device number 62 [ 1306.426787][T23787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1306.906469][T23790] netlink: 'syz.4.4109': attribute type 2 has an invalid length. [ 1306.914255][T23790] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4109'. [ 1307.121475][T23796] FAULT_INJECTION: forcing a failure. [ 1307.121475][T23796] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.135022][T23796] CPU: 1 UID: 0 PID: 23796 Comm: syz.7.4110 Not tainted syzkaller #0 PREEMPT(full) [ 1307.135046][T23796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1307.135057][T23796] Call Trace: [ 1307.135064][T23796] [ 1307.135071][T23796] dump_stack_lvl+0x16c/0x1f0 [ 1307.135094][T23796] should_fail_ex+0x512/0x640 [ 1307.135119][T23796] ? __kmalloc_cache_noprof+0x5f/0x770 [ 1307.135147][T23796] should_failslab+0xc2/0x120 [ 1307.135167][T23796] __kmalloc_cache_noprof+0x72/0x770 [ 1307.135190][T23796] ? irqentry_exit+0x3b/0x90 [ 1307.135212][T23796] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 1307.135241][T23796] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 1307.135262][T23796] snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 1307.135285][T23796] ? calc_src_frames.isra.0+0x59/0x1d0 [ 1307.135306][T23796] ? rate_src_frames+0x221/0x2c0 [ 1307.135331][T23796] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1307.135355][T23796] ? calc_src_frames.isra.0+0x187/0x1d0 [ 1307.135376][T23796] ? calc_dst_frames.constprop.0.isra.0+0x103/0x130 [ 1307.135404][T23796] snd_pcm_oss_change_params_locked+0x1398/0x3a30 [ 1307.135438][T23796] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1307.135459][T23796] ? __pfx___mutex_lock+0x10/0x10 [ 1307.135476][T23796] ? snd_pcm_oss_ioctl+0x30cf/0x37c0 [ 1307.135516][T23796] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1307.135542][T23796] snd_pcm_oss_ioctl+0x31d3/0x37c0 [ 1307.135568][T23796] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1307.135593][T23796] ? security_file_ioctl+0xfc/0x240 [ 1307.135617][T23796] ? security_file_ioctl+0x79/0x240 [ 1307.135640][T23796] ? __sanitizer_cov_trace_pc+0x41/0x70 [ 1307.135659][T23796] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1307.135683][T23796] __x64_sys_ioctl+0x18e/0x210 [ 1307.135703][T23796] do_syscall_64+0xcd/0xf80 [ 1307.135722][T23796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.135740][T23796] RIP: 0033:0x7f2f88b8f749 [ 1307.135754][T23796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1307.135771][T23796] RSP: 002b:00007f2f89a34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1307.135789][T23796] RAX: ffffffffffffffda RBX: 00007f2f88de6180 RCX: 00007f2f88b8f749 [ 1307.135801][T23796] RDX: 0000200000000640 RSI: 00000000c0045005 RDI: 0000000000000005 [ 1307.135812][T23796] RBP: 00007f2f89a34090 R08: 0000000000000000 R09: 0000000000000000 [ 1307.135822][T23796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1307.135832][T23796] R13: 00007f2f88de6218 R14: 00007f2f88de6180 R15: 00007ffd986ff138 [ 1307.135858][T23796] [ 1307.390160][ C1] vkms_vblank_simulate: vblank timer overrun [ 1307.423192][T23798] fuse: Bad value for 'fd' [ 1307.426335][T23790] nvme_fabrics: missing parameter 'transport=%s' [ 1307.434236][T23790] nvme_fabrics: missing parameter 'nqn=%s' [ 1307.470613][T23748] vhci_hcd: connection reset by peer [ 1307.484425][ T13] vhci_hcd: stop threads [ 1307.490209][ T13] vhci_hcd: release socket [ 1307.495234][ T13] vhci_hcd: disconnect device [ 1307.504675][ T30] audit: type=1400 audit(1764718617.961:1529): avc: denied { ioctl } for pid=23797 comm="syz.2.4111" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1307.838964][T23810] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4114'. [ 1308.206524][T23818] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1308.255795][ T888] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 1308.440731][ T888] usb 5-1: not running at top speed; connect to a high speed hub [ 1308.477145][ T888] usb 5-1: config 8 has an invalid interface number: 253 but max is 0 [ 1308.490152][ T888] usb 5-1: config 8 has no interface number 0 [ 1308.506483][ T888] usb 5-1: config 8 interface 253 has no altsetting 0 [ 1308.517806][ T888] usb 5-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=26.63 [ 1308.527496][ T888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.537649][ T888] usb 5-1: Product: syz [ 1308.542228][ T888] usb 5-1: Manufacturer: syz [ 1308.548084][ T888] usb 5-1: SerialNumber: syz [ 1308.549477][T23826] fuse: Unknown parameter 'eroupd' [ 1308.634697][T23826] binder: 23825:23826 ioctl c0306201 200000000240 returned -11 [ 1309.257000][T23832] fuse: Bad value for 'fd' [ 1309.467482][T23830] syz.4.4116 (23830): drop_caches: 2 [ 1309.479274][T23830] syz.4.4116 (23830): drop_caches: 2 [ 1309.515358][T23837] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1309.521899][T23837] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1309.691796][T23837] vhci_hcd vhci_hcd.0: Device attached [ 1309.758818][T18417] vhci_hcd: vhci_device speed not set [ 1309.829864][T15443] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1310.287010][T18997] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 1310.395902][T15443] usb 3-1: config index 0 descriptor too short (expected 8192, got 18) [ 1310.406162][T15443] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.423286][T15443] usb 3-1: config 0 has no interfaces? [ 1310.488013][T15443] usb 3-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 1310.504238][T15443] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.513384][ T30] audit: type=1400 audit(1764718620.786:1530): avc: denied { setopt } for pid=23841 comm="syz.7.4124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1310.536524][T15443] usb 3-1: config 0 descriptor?? [ 1310.780159][T15443] usb 3-1: string descriptor 0 read error: -71 [ 1310.791756][T23839] vhci_hcd: connection reset by peer [ 1311.133786][T15443] usb 3-1: USB disconnect, device number 100 [ 1311.144424][T14167] vhci_hcd: stop threads [ 1311.148710][T14167] vhci_hcd: release socket [ 1311.161097][T14167] vhci_hcd: disconnect device [ 1311.223133][T23866] lo speed is unknown, defaulting to 1000 [ 1311.233848][ T30] audit: type=1326 audit(1764718621.450:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23865 comm="syz.9.4129" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb1218f749 code=0x0 [ 1311.258294][T23866] ip6_vti0 speed is unknown, defaulting to 1000 [ 1311.651440][ T888] ushc 5-1:8.253: probe with driver ushc failed with error -71 [ 1312.044284][ T888] usb 5-1: USB disconnect, device number 63 [ 1313.867354][T23888] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4134'. [ 1314.292723][T23897] netlink: 204 bytes leftover after parsing attributes in process `syz.7.4137'. [ 1314.443870][T23897] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4137'. [ 1314.658901][T23897] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4137'. [ 1314.838186][T23903] netlink: 'syz.4.4136': attribute type 10 has an invalid length. [ 1317.353356][T18997] vhci_hcd: vhci_device speed not set [ 1318.743084][T18997] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1318.832952][T23931] netlink: 'syz.9.4147': attribute type 2 has an invalid length. [ 1318.841250][T23931] netlink: 'syz.9.4147': attribute type 1 has an invalid length. [ 1318.848965][T23931] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4147'. [ 1318.857939][T23931] nbd: illegal input index 65544 [ 1318.928013][T18997] usb 3-1: Using ep0 maxpacket: 32 [ 1318.936528][T18997] usb 3-1: config 2 has an invalid interface number: 139 but max is 0 [ 1318.944811][T18997] usb 3-1: config 2 has no interface number 0 [ 1318.955605][T18997] usb 3-1: config 2 interface 139 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1318.985789][T18997] usb 3-1: config 2 interface 139 altsetting 2 endpoint 0x9 has an invalid bInterval 70, changing to 7 [ 1319.011339][T18997] usb 3-1: config 2 interface 139 has no altsetting 0 [ 1319.033869][T18997] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0203, bcdDevice=36.c4 [ 1319.043351][T18997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.060793][T18997] usb 3-1: Product: á [ 1319.070415][T18997] usb 3-1: Manufacturer: У [ 1319.085181][T18997] usb 3-1: SerialNumber: 掿鿗쬭䮆깧넟⿤ê¢ç¥ºè†“ï†ì¹„䵒ಘ椂釄都ç¬î¶Žê•ˆè´Šâ¨¦â³¥Òšé à­¼áŒºæŽšæ—€Ñ½î—«ï¥¼ë¾©î•¦ëŸ’䌋뱷閴繳匴턅￮翻㪣ä¤ä«µê“‘蔪ä«ë‚”ꢥ풗칟洭互ỿ낯繺㼛㿂줣炒迠ㄌ愀ꌆ嫻æšç èœ°æª¢ë­‚隴ꆊ곰Ṯ鳌钆⦣ [ 1319.347964][T23940] random: crng reseeded on system resumption [ 1319.490472][T18997] option 3-1:2.139: GSM modem (1-port) converter detected [ 1319.508702][T18997] usb 3-1: USB disconnect, device number 101 [ 1319.516641][T18997] option 3-1:2.139: device disconnected [ 1320.545505][T23956] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1321.285735][T23965] netlink: 'syz.2.4158': attribute type 2 has an invalid length. [ 1321.293591][T23965] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4158'. [ 1321.363074][T23974] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4160'. [ 1321.414716][T23974] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4160'. [ 1321.427240][T23974] netlink: 'syz.4.4160': attribute type 6 has an invalid length. [ 1321.436242][T23974] netlink: 'syz.4.4160': attribute type 5 has an invalid length. [ 1321.497224][T23974] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4160'. [ 1321.547599][T23965] nvme_fabrics: missing parameter 'transport=%s' [ 1321.553918][T23965] nvme_fabrics: missing parameter 'nqn=%s' [ 1323.114054][T24000] mkiss: ax0: crc mode is auto. [ 1324.039982][T24007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4169'. [ 1324.304321][T24014] random: crng reseeded on system resumption [ 1324.590565][ T30] audit: type=1400 audit(1764718633.938:1532): avc: denied { getopt } for pid=24019 comm="syz.7.4173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1325.923288][T18997] usb 10-1: new full-speed USB device number 61 using dummy_hcd [ 1326.099836][T18997] usb 10-1: config 0 has an invalid interface number: 128 but max is 0 [ 1326.108338][T18997] usb 10-1: config 0 has no interface number 0 [ 1326.117613][T18997] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1326.127055][T18997] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.135571][T18997] usb 10-1: Product: syz [ 1326.144602][T18997] usb 10-1: Manufacturer: syz [ 1326.156080][T18997] usb 10-1: SerialNumber: syz [ 1326.169354][T18997] usb 10-1: config 0 descriptor?? [ 1327.164820][T24050] kvm: pic: level sensitive irq not supported [ 1327.165201][T24050] kvm: pic: non byte write [ 1327.211514][T18997] usb 10-1: Firmware: major: 0, minor: 107, hardware type: UNKNOWN (8) [ 1327.363372][T24057] tmpfs: Bad value for 'mpol' [ 1327.377422][T24058] lo speed is unknown, defaulting to 1000 [ 1327.378853][ T30] audit: type=1326 audit(1764718636.548:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm="syz.3.4182" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6b538f749 code=0x0 [ 1327.424195][ T30] audit: type=1400 audit(1764718636.604:1534): avc: denied { setopt } for pid=24055 comm="syz.4.4183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1327.426768][T24058] ip6_vti0 speed is unknown, defaulting to 1000 [ 1327.445913][ T30] audit: type=1400 audit(1764718636.622:1535): avc: denied { connect } for pid=24055 comm="syz.4.4183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1327.541281][T18997] usb 10-1: failed to fetch extended address, random address set [ 1327.556123][T24061] netlink: 'syz.4.4183': attribute type 10 has an invalid length. [ 1327.564211][T18997] usb 10-1: atusb_probe: initialization failed, error = -524 [ 1327.577354][T24061] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1327.586557][T18997] atusb 10-1:0.128: probe with driver atusb failed with error -524 [ 1327.615881][T18997] usb 10-1: USB disconnect, device number 61 [ 1328.333985][T24074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4188'. [ 1328.380082][T24079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25372 sclass=netlink_route_socket pid=24079 comm=syz.3.4189 [ 1330.046611][T24101] team0: Port device team_slave_0 removed [ 1330.684528][T18997] usb 10-1: new full-speed USB device number 62 using dummy_hcd [ 1331.246623][T18997] usb 10-1: config 254 has an invalid interface number: 3 but max is 0 [ 1331.261797][T18997] usb 10-1: config 254 contains an unexpected descriptor of type 0x2, skipping [ 1331.408111][T18997] usb 10-1: config 254 contains an unexpected descriptor of type 0x2, skipping [ 1331.459845][T18997] usb 10-1: config 254 has no interface number 0 [ 1331.473220][T18997] usb 10-1: config 254 interface 3 altsetting 2 endpoint 0x3 has an invalid bInterval 163, changing to 4 [ 1331.512781][T18997] usb 10-1: config 254 interface 3 altsetting 2 endpoint 0x8A has invalid maxpacket 1023, setting to 64 [ 1331.537108][T18997] usb 10-1: config 254 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1331.561688][T18997] usb 10-1: config 254 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1331.597184][T18997] usb 10-1: config 254 interface 3 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 1331.626925][T18997] usb 10-1: config 254 interface 3 altsetting 2 has an endpoint descriptor with address 0x25, changing to 0x5 [ 1331.675291][T18997] usb 10-1: config 254 interface 3 altsetting 2 endpoint 0x5 has an invalid bInterval 44, changing to 4 [ 1331.718382][T18997] usb 10-1: config 254 interface 3 altsetting 2 endpoint 0x5 has invalid maxpacket 34620, setting to 1023 [ 1331.751872][T18997] usb 10-1: config 254 interface 3 altsetting 2 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1331.778257][T18997] usb 10-1: config 254 interface 3 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 1331.791060][T18997] usb 10-1: config 254 interface 3 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 1331.849793][T18997] usb 10-1: config 254 interface 3 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 1331.874421][T18997] usb 10-1: config 254 interface 3 altsetting 2 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 1331.931874][T18997] usb 10-1: config 254 interface 3 has no altsetting 0 [ 1331.963553][T18997] usb 10-1: New USB device found, idVendor=05c6, idProduct=9036, bcdDevice=d3.26 [ 1331.999499][T18997] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.018374][T18997] usb 10-1: Product: syz [ 1332.352859][T18997] usb 10-1: Manufacturer: syz [ 1332.357575][T18997] usb 10-1: SerialNumber: syz [ 1332.365328][T24111] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1332.386063][T24111] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1332.763352][T18997] usb 10-1: USB disconnect, device number 62 [ 1333.056958][T24135] nvme_fabrics: missing parameter 'transport=%s' [ 1333.063383][T24135] nvme_fabrics: missing parameter 'nqn=%s' [ 1333.607441][T24170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=24170 comm=syz.9.4217 [ 1335.360273][T24191] random: crng reseeded on system resumption [ 1335.751897][T18997] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 1335.783337][T24197] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4224'. [ 1335.947530][T18997] usb 10-1: device descriptor read/64, error -71 [ 1336.339900][T18997] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 1336.511695][T18997] usb 10-1: device descriptor read/64, error -71 [ 1336.628858][T18997] usb usb10-port1: attempt power cycle [ 1337.313293][T18997] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 1337.361689][T18997] usb 10-1: device descriptor read/8, error -71 [ 1337.622715][T18997] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 1337.657620][T18997] usb 10-1: device descriptor read/8, error -71 [ 1337.863174][T24215] random: crng reseeded on system resumption [ 1338.114013][T18997] usb usb10-port1: unable to enumerate USB device [ 1338.610277][T24234] random: crng reseeded on system resumption [ 1339.040096][T24232] fuse: Bad value for 'fd' [ 1339.153107][T24244] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1339.199311][T24238] input: syz1 as /devices/virtual/input/input70 [ 1340.864967][T24264] nvme_fabrics: missing parameter 'transport=%s' [ 1340.871320][T24264] nvme_fabrics: missing parameter 'nqn=%s' [ 1341.228951][T24275] Bluetooth: hci5: Frame reassembly failed (-84) [ 1341.352561][ T50] Bluetooth: hci5: Frame reassembly failed (-84) [ 1341.379157][ T50] Bluetooth: hci5: Frame reassembly failed (-84) [ 1342.111143][T24286] Bluetooth: hci7: Frame reassembly failed (-84) [ 1342.181744][T17921] Bluetooth: hci6: unexpected event for opcode 0x2028 [ 1342.200764][ T2989] Bluetooth: hci7: Frame reassembly failed (-84) [ 1342.218368][T24287] fuse: Bad value for 'fd' [ 1342.425253][T24292] 9pnet_fd: Insufficient options for proto=fd [ 1342.432859][T24292] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4252'. [ 1342.442714][T24292] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4252'. [ 1342.979107][T24299] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4255'. [ 1343.556064][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1343.879446][T24304] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1343.885978][T24304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1343.919583][T24304] vhci_hcd vhci_hcd.0: Device attached [ 1344.165355][T18997] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1344.176080][ T5979] usb 37-1: new low-speed USB device number 6 using vhci_hcd [ 1344.186745][ T7006] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1344.215194][T24313] nvme_fabrics: missing parameter 'transport=%s' [ 1344.221705][T24313] nvme_fabrics: missing parameter 'nqn=%s' [ 1344.335703][T14396] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1344.391444][T18997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.401568][T18997] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1344.410875][T18997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.853050][T18997] usb 5-1: config 0 descriptor?? [ 1344.882370][ T7006] usb 3-1: config index 0 descriptor too short (expected 8192, got 18) [ 1344.890652][ T7006] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.914607][ T7006] usb 3-1: config 0 has no interfaces? [ 1344.920111][ T7006] usb 3-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 1344.929255][ T7006] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.949055][ T7006] usb 3-1: config 0 descriptor?? [ 1344.968849][T24324] netlink: 'syz.7.4262': attribute type 1 has an invalid length. [ 1344.998491][T24324] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1345.009587][T24322] fuse: Bad value for 'fd' [ 1345.019096][T24324] bond1: (slave geneve2): making interface the new active one [ 1345.028029][T24324] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1345.037675][T13073] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.052544][T13073] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.069020][T13073] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.092352][T13073] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.242790][T24305] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 1345.256799][ T7006] usb 3-1: string descriptor 0 read error: -71 [ 1345.264160][T14167] vhci_hcd: stop threads [ 1345.264889][ T7006] usb 3-1: USB disconnect, device number 102 [ 1345.283092][T14167] vhci_hcd: release socket [ 1345.293730][T18997] lenovo 0003:17EF:6047.001E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 1345.322262][T14167] vhci_hcd: disconnect device [ 1345.697408][T24340] Bluetooth: hci5: Frame reassembly failed (-84) [ 1345.718516][T14396] Bluetooth: hci6: unexpected event for opcode 0x2028 [ 1345.739733][ T2989] Bluetooth: hci5: Frame reassembly failed (-84) [ 1346.041941][ T888] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 1346.049724][T18997] lenovo 0003:17EF:6047.001E: Failed to switch middle button: -71 [ 1346.062643][T18997] lenovo 0003:17EF:6047.001E: Fn-lock setting failed: -71 [ 1346.070638][T18997] lenovo 0003:17EF:6047.001E: Sensitivity setting failed: -71 [ 1346.081553][T18997] usb 5-1: USB disconnect, device number 64 [ 1346.482176][ T888] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 1346.500067][ T888] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 59391, setting to 1024 [ 1346.520591][ T888] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1346.538037][ T888] usb 10-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 1346.549495][ T888] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.558203][ T888] usb 10-1: Product: syz [ 1346.570724][ T888] usb 10-1: Manufacturer: syz [ 1346.578084][ T888] usb 10-1: SerialNumber: syz [ 1346.599085][ T888] usb 10-1: config 0 descriptor?? [ 1346.606118][T24335] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1346.837510][T24335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.846268][T24335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.929858][T19282] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1348.264300][T24362] fuse: Bad value for 'fd' [ 1348.644811][T15443] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1348.757111][T24373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.705476][T15443] usb 3-1: Using ep0 maxpacket: 8 [ 1349.720130][T15443] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.740727][T15443] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1349.750147][T15443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.758243][T15443] usb 3-1: Product: syz [ 1349.764865][T24373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.772719][T15443] usb 3-1: Manufacturer: syz [ 1349.782441][T15443] usb 3-1: SerialNumber: syz [ 1349.788780][ T5979] vhci_hcd: vhci_device speed not set [ 1349.798335][T15443] usb 3-1: config 0 descriptor?? [ 1351.229527][ T888] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1351.316540][ T888] usb 10-1: USB disconnect, device number 67 [ 1351.366187][T10600] udevd[10600]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1351.409802][ T5979] usb 3-1: USB disconnect, device number 103 [ 1352.756070][T24389] fuse: Bad value for 'fd' [ 1354.452154][T24413] Process accounting resumed [ 1356.813999][T24438] nvme_fabrics: missing parameter 'transport=%s' [ 1356.820354][T24438] nvme_fabrics: missing parameter 'nqn=%s' [ 1359.778856][T24482] Bluetooth: hci5: Frame reassembly failed (-84) [ 1360.235848][T14396] Bluetooth: hci5: sending frame failed (-49) [ 1360.242452][T19282] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 1362.078981][ T30] audit: type=1400 audit(1764718668.997:1536): avc: denied { create } for pid=24496 comm="syz.9.4313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1362.373997][T24508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.457576][T24508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.626707][T24516] input: syz0 as /devices/virtual/input/input71 [ 1362.818792][T24520] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1362.825329][T24520] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1362.884028][T24520] vhci_hcd vhci_hcd.0: Device attached [ 1363.068158][T24526] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1363.122808][T15443] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1363.154968][ T6247] usb 41-1: new low-speed USB device number 6 using vhci_hcd [ 1363.304993][T15443] usb 5-1: config index 0 descriptor too short (expected 8192, got 18) [ 1363.319701][T15443] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.692639][T24533] Bluetooth: hci5: Frame reassembly failed (-84) [ 1363.739854][T19282] Bluetooth: hci6: unexpected event for opcode 0x2028 [ 1363.770018][ T3901] Bluetooth: hci5: Frame reassembly failed (-84) [ 1363.776549][T15443] usb 5-1: config 0 has no interfaces? [ 1363.782023][T15443] usb 5-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 1363.791557][T15443] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.803506][T15443] usb 5-1: config 0 descriptor?? [ 1364.351457][T15443] usb 5-1: string descriptor 0 read error: -71 [ 1364.361384][T24521] usbip_core: unknown command [ 1364.683573][T24521] vhci_hcd: unknown pdu 2164260864 [ 1364.690127][T15443] usb 5-1: USB disconnect, device number 65 [ 1364.699684][T24521] usbip_core: unknown command [ 1364.712975][ T2989] vhci_hcd: stop threads [ 1364.719907][ T2989] vhci_hcd: release socket [ 1364.734856][ T2989] vhci_hcd: disconnect device [ 1364.897862][ T888] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 1365.215726][T15443] hid_parser_main: 5 callbacks suppressed [ 1365.215738][T15443] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1365.230894][T15443] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1365.300700][ T888] usb 10-1: Using ep0 maxpacket: 8 [ 1365.307155][ T888] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.328243][ T888] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1365.349343][ T888] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.391520][ T888] usb 10-1: Product: syz [ 1365.395757][ T888] usb 10-1: Manufacturer: syz [ 1365.411633][ T888] usb 10-1: SerialNumber: syz [ 1365.427373][ T888] usb 10-1: config 0 descriptor?? [ 1365.690945][T15443] usb 10-1: USB disconnect, device number 68 [ 1365.717704][ T888] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1365.879224][T24554] input: syz0 as /devices/virtual/input/input72 [ 1365.893194][ T888] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1365.905652][ T888] usb 5-1: can't read configurations, error -61 [ 1365.975041][T14396] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1365.981455][T19282] Bluetooth: hci5: command 0x1003 tx timeout [ 1366.071341][ T888] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1366.170378][T24561] Sensor B: ================= START STATUS ================= [ 1366.177989][T24561] Sensor B: Test Pattern: 75% Colorbar [ 1366.183883][T24561] Sensor B: Show Information: All [ 1366.189536][T24561] Sensor B: Vertical Flip: false [ 1366.194880][T24561] Sensor B: Horizontal Flip: false [ 1366.200763][T24561] Sensor B: Brightness: 128 [ 1366.205305][T24561] Sensor B: Contrast: 128 [ 1366.211786][T24561] Sensor B: Hue: 0 [ 1366.215539][T24561] Sensor B: Saturation: 128 [ 1366.221028][T24561] Sensor B: ================== END STATUS ================== [ 1366.245179][ T888] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1366.253799][ T888] usb 5-1: can't read configurations, error -61 [ 1366.260541][ T888] usb usb5-port1: attempt power cycle [ 1366.658498][ T888] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1366.684069][ T888] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1366.693328][ T888] usb 5-1: can't read configurations, error -61 [ 1366.829722][ T888] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1366.860242][ T888] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1366.871567][ T888] usb 5-1: can't read configurations, error -61 [ 1366.880217][ T888] usb usb5-port1: unable to enumerate USB device [ 1367.065923][T24557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1367.490342][T14396] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 1367.568557][T24578] netlink: 212916 bytes leftover after parsing attributes in process `syz.9.4334'. [ 1367.714357][T14396] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 1368.672706][ T6247] vhci_hcd: vhci_device speed not set [ 1369.125581][T24598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24598 comm=syz.2.4339 [ 1369.362561][ T24] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1369.375560][ T24] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1369.468905][T24609] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1369.476584][T24609] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1370.947192][T15443] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1371.016101][T24604] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1371.106051][T15443] usb 5-1: Using ep0 maxpacket: 8 [ 1371.112466][T15443] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.127542][T15443] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1371.140173][T15443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.156679][T15443] usb 5-1: Product: syz [ 1371.167055][T15443] usb 5-1: Manufacturer: syz [ 1371.182392][T15443] usb 5-1: SerialNumber: syz [ 1371.209960][T15443] usb 5-1: config 0 descriptor?? [ 1371.263033][T14167] Bluetooth: hci7: Frame reassembly failed (-84) [ 1371.273387][T14167] Bluetooth: hci7: Frame reassembly failed (-84) [ 1371.453660][ T888] usb 5-1: USB disconnect, device number 70 [ 1371.533498][T15443] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1371.696851][T15443] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1371.714707][T15443] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1371.732254][T15443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.776456][T15443] usb 3-1: Product: syz [ 1371.781957][T15443] usb 3-1: Manufacturer: syz [ 1371.786934][T15443] usb 3-1: SerialNumber: syz [ 1371.795066][T15443] usb 3-1: config 0 descriptor?? [ 1371.857549][T15443] rc_core: IR keymap rc-streamzap not found [ 1371.863652][T15443] Registered IR keymap rc-empty [ 1371.871331][T15443] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1371.886721][T15443] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input74 [ 1372.290211][ T6247] usb 3-1: USB disconnect, device number 104 [ 1372.296390][ T5837] Bluetooth: hci5: command 0x1003 tx timeout [ 1372.303005][T14396] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1373.152121][T24650] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4355'. [ 1373.640738][T14396] Bluetooth: hci7: command 0x1003 tx timeout [ 1373.675083][T19282] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1373.782092][T24650] bond2 (unregistering): Released all slaves [ 1374.304689][T24661] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1374.350931][T24667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.365837][T24667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.403713][ T30] audit: type=1400 audit(1764718680.539:1537): avc: denied { mounton } for pid=24668 comm="syz.2.4359" path="/273/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 1375.458278][T24682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.467001][T24682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.511648][ T30] audit: type=1800 audit(1764718681.578:1538): pid=24681 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.4361" name="bus" dev="overlay" ino=1910 res=0 errno=0 [ 1375.538490][ T888] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1375.809831][ T888] usb 3-1: Using ep0 maxpacket: 8 [ 1376.167661][ T888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.188135][ T888] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1376.200179][ T888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.211091][ T888] usb 3-1: Product: syz [ 1376.215342][ T888] usb 3-1: Manufacturer: syz [ 1376.221967][ T888] usb 3-1: SerialNumber: syz [ 1376.575379][ T888] usb 3-1: config 0 descriptor?? [ 1376.593181][T24693] binder: 24684:24693 ioctl c018620c 2000000002c0 returned -1 [ 1377.053104][ T888] usb 3-1: USB disconnect, device number 105 [ 1377.090711][ T30] audit: type=1400 audit(1764718683.056:1539): avc: denied { ioctl } for pid=24696 comm="syz.7.4366" path="socket:[86949]" dev="sockfs" ino=86949 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1380.627657][T24747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.639830][T24747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.219616][T14167] Bluetooth: hci5: Frame reassembly failed (-84) [ 1382.244181][T24760] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1382.815621][T24767] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4382'. [ 1384.362580][T14396] Bluetooth: hci5: command 0x1003 tx timeout [ 1384.370626][T19282] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1384.607044][T24788] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5 sclass=netlink_xfrm_socket pid=24788 comm=syz.2.4385 [ 1385.030149][T24785] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4387'. [ 1385.055477][T24785] netlink: 'syz.7.4387': attribute type 2 has an invalid length. [ 1385.817071][ T24] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 1386.061876][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 1386.069877][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1386.100461][ T24] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1386.121693][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.343734][ T24] usb 10-1: Product: syz [ 1386.348017][ T24] usb 10-1: Manufacturer: syz [ 1386.355183][ T24] usb 10-1: SerialNumber: syz [ 1387.036580][ T24] usb 10-1: config 0 descriptor?? [ 1387.391339][T18997] usb 10-1: USB disconnect, device number 69 [ 1387.660862][T24819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1387.758728][T24823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4398'. [ 1387.807343][T24823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1387.832116][T24823] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1389.080558][T24837] xt_cgroup: invalid path, errno=-2 [ 1389.472531][ T888] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1389.566373][T24840] GUP no longer grows the stack in syz.2.4404 (24840): 200000004000-20000000a000 (200000002000) [ 1389.582824][T24840] CPU: 1 UID: 0 PID: 24840 Comm: syz.2.4404 Not tainted syzkaller #0 PREEMPT(full) [ 1389.582849][T24840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1389.582859][T24840] Call Trace: [ 1389.582865][T24840] [ 1389.582873][T24840] dump_stack_lvl+0x16c/0x1f0 [ 1389.582897][T24840] gup_vma_lookup+0x1d2/0x220 [ 1389.582928][T24840] __get_user_pages+0x241/0x33c0 [ 1389.582955][T24840] ? find_held_lock+0x2b/0x80 [ 1389.582974][T24840] ? __pfx___get_user_pages+0x10/0x10 [ 1389.583000][T24840] get_user_pages_remote+0x243/0xab0 [ 1389.583020][T24840] ? mast_spanning_rebalance.isra.0+0x1fa0/0x2060 [ 1389.583043][T24840] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1389.583064][T24840] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1389.583090][T24840] __access_remote_vm+0x24d/0x850 [ 1389.583121][T24840] ? do_raw_spin_lock+0x12c/0x2b0 [ 1389.583148][T24840] ? __pfx___access_remote_vm+0x10/0x10 [ 1389.583176][T24840] ? set_page_refcounted+0xbd/0x230 [ 1389.583199][T24840] proc_pid_cmdline_read+0x4de/0x8e0 [ 1389.583231][T24840] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1389.583262][T24840] ? rw_verify_area+0xcf/0x6c0 [ 1389.583302][T24840] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1389.583330][T24840] vfs_readv+0x5c1/0x8b0 [ 1389.583352][T24840] ? __pfx_vfs_readv+0x10/0x10 [ 1389.583392][T24840] ? __fget_files+0x20e/0x3c0 [ 1389.583422][T24840] ? do_preadv+0x1a6/0x270 [ 1389.583437][T24840] do_preadv+0x1a6/0x270 [ 1389.583455][T24840] ? __pfx_do_preadv+0x10/0x10 [ 1389.583481][T24840] do_syscall_64+0xcd/0xf80 [ 1389.583499][T24840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.583518][T24840] RIP: 0033:0x7f4f6c78f749 [ 1389.583532][T24840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1389.583548][T24840] RSP: 002b:00007f4f6d608038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1389.583566][T24840] RAX: ffffffffffffffda RBX: 00007f4f6c9e5fa0 RCX: 00007f4f6c78f749 [ 1389.583578][T24840] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000007 [ 1389.583589][T24840] RBP: 00007f4f6c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1389.583600][T24840] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 1389.583611][T24840] R13: 00007f4f6c9e6038 R14: 00007f4f6c9e5fa0 R15: 00007fffa9d93828 [ 1389.583637][T24840] [ 1389.814398][ T888] usb 5-1: config 1 has an invalid interface number: 35 but max is 0 [ 1389.833395][ T888] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1389.843708][T24842] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1389.874049][ T888] usb 5-1: config 1 has no interface number 0 [ 1389.897124][ T888] usb 5-1: config 1 interface 35 altsetting 0 endpoint 0x6 has invalid maxpacket 1007, setting to 64 [ 1390.149600][ T888] usb 5-1: config 1 interface 35 altsetting 0 has an endpoint descriptor with address 0x16, changing to 0x6 [ 1390.236886][ T888] usb 5-1: config 1 interface 35 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1390.269166][ T888] usb 5-1: config 1 interface 35 altsetting 0 endpoint 0x1 has invalid maxpacket 1040, setting to 64 [ 1390.291309][ T888] usb 5-1: config 1 interface 35 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1390.302642][ T888] usb 5-1: config 1 interface 35 altsetting 0 endpoint 0x5 has invalid maxpacket 33229, setting to 64 [ 1390.314307][ T888] usb 5-1: config 1 interface 35 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8 [ 1390.326442][ T888] usb 5-1: config 1 interface 35 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 1390.427633][ T888] usb 5-1: config 1 interface 35 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1390.438906][ T888] usb 5-1: config 1 interface 35 altsetting 0 has a duplicate endpoint with address 0x8E, skipping [ 1390.449959][ T888] usb 5-1: config 1 interface 35 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1390.461058][ T888] usb 5-1: config 1 interface 35 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 1390.935851][ T888] usb 5-1: New USB device found, idVendor=0403, idProduct=f458, bcdDevice=9e.09 [ 1390.952156][ T888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.966209][T24833] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1390.980026][ T888] ftdi_sio 5-1:1.35: FTDI USB Serial Device converter detected [ 1390.990296][ T888] ftdi_sio ttyUSB0: unknown device type: 0x9e09 [ 1391.167920][T24853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.182221][T24853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.716623][ T30] audit: type=1400 audit(1764718696.731:1540): avc: denied { checkpoint_restore } for pid=24832 comm="syz.4.4402" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1392.103213][T18997] usb 5-1: USB disconnect, device number 71 [ 1392.111877][T18997] ftdi_sio 5-1:1.35: device disconnected [ 1392.117619][ T888] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1392.284006][ T888] usb 3-1: Using ep0 maxpacket: 8 [ 1392.293226][ T888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1392.313765][ T888] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1392.323782][ T888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.337004][ T888] usb 3-1: Product: syz [ 1392.342119][ T888] usb 3-1: Manufacturer: syz [ 1392.349617][ T888] usb 3-1: SerialNumber: syz [ 1392.360413][ T888] usb 3-1: config 0 descriptor?? [ 1392.591731][ T888] usb 3-1: USB disconnect, device number 106 [ 1392.988991][T24874] Bluetooth: hci5: Frame reassembly failed (-84) [ 1393.007471][T19282] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 1393.147142][ T6188] Bluetooth: hci5: Frame reassembly failed (-84) [ 1393.947666][ T30] audit: type=1400 audit(1764718698.817:1541): avc: denied { read } for pid=24882 comm="syz.7.4419" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1394.014439][ T30] audit: type=1400 audit(1764718698.845:1542): avc: denied { open } for pid=24882 comm="syz.7.4419" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1394.038700][ T30] audit: type=1326 audit(1764718698.855:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24882 comm="syz.7.4419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f88b8f749 code=0x0 [ 1394.066604][ T30] audit: type=1326 audit(1764718698.855:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24882 comm="syz.7.4419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f88b8f749 code=0x0 [ 1394.255982][T24894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=24894 comm=syz.2.4421 [ 1395.215753][T19282] Bluetooth: hci5: command 0x1003 tx timeout [ 1395.222748][T14396] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1395.530462][T24904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4424'. [ 1396.676525][T24918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.688024][T24918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1397.824333][T24929] FAULT_INJECTION: forcing a failure. [ 1397.824333][T24929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1397.863485][T24929] CPU: 0 UID: 0 PID: 24929 Comm: syz.3.4431 Not tainted syzkaller #0 PREEMPT(full) [ 1397.863501][T24929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1397.863507][T24929] Call Trace: [ 1397.863511][T24929] [ 1397.863516][T24929] dump_stack_lvl+0x16c/0x1f0 [ 1397.863530][T24929] should_fail_ex+0x512/0x640 [ 1397.863548][T24929] _copy_from_user+0x2e/0xd0 [ 1397.863565][T24929] copy_msghdr_from_user+0x98/0x160 [ 1397.863582][T24929] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1397.863597][T24929] ? __lock_acquire+0x433/0x22f0 [ 1397.863617][T24929] ___sys_sendmsg+0xfe/0x1d0 [ 1397.863634][T24929] ? __pfx____sys_sendmsg+0x10/0x10 [ 1397.863649][T24929] ? __lock_acquire+0x433/0x22f0 [ 1397.863677][T24929] __sys_sendmsg+0x16d/0x220 [ 1397.863694][T24929] ? __pfx___sys_sendmsg+0x10/0x10 [ 1397.863718][T24929] do_syscall_64+0xcd/0xf80 [ 1397.863730][T24929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.863741][T24929] RIP: 0033:0x7fb6b538f749 [ 1397.863749][T24929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1397.863759][T24929] RSP: 002b:00007fb6b35ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1397.863770][T24929] RAX: ffffffffffffffda RBX: 00007fb6b55e5fa0 RCX: 00007fb6b538f749 [ 1397.863777][T24929] RDX: 0000000004000804 RSI: 0000200000000180 RDI: 0000000000000004 [ 1397.863784][T24929] RBP: 00007fb6b35ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1397.863790][T24929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1397.863796][T24929] R13: 00007fb6b55e6038 R14: 00007fb6b55e5fa0 R15: 00007ffde6afb578 [ 1397.863810][T24929] [ 1398.028817][ C0] vkms_vblank_simulate: vblank timer overrun [ 1399.287550][T24938] fuse: Unknown parameter '0xffffffffffffffff' [ 1400.045346][T18417] usb 10-1: new full-speed USB device number 70 using dummy_hcd [ 1400.528401][T18417] usb 10-1: config 0 has an invalid interface number: 17 but max is 0 [ 1400.662611][T18417] usb 10-1: config 0 has no interface number 0 [ 1400.678290][T18417] usb 10-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=b4.dd [ 1400.705901][T24960] netlink: 'syz.7.4440': attribute type 1 has an invalid length. [ 1400.709799][T18417] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.732710][T18417] usb 10-1: Product: syz [ 1400.744609][T18417] usb 10-1: Manufacturer: syz [ 1400.769235][T18417] usb 10-1: SerialNumber: syz [ 1400.865760][T24968] netlink: 91 bytes leftover after parsing attributes in process `syz.3.4442'. [ 1400.866820][T18417] usb 10-1: config 0 descriptor?? [ 1401.224009][ T30] audit: type=1400 audit(1764718705.627:1545): avc: denied { ioctl } for pid=24969 comm="syz.2.4443" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x5639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1401.252988][T24970] tmpfs: Bad value for 'mpol' [ 1401.286462][ T30] audit: type=1400 audit(1764718705.655:1546): avc: denied { bind } for pid=24969 comm="syz.2.4443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1401.344386][T24941] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4436'. [ 1401.364497][T18417] snd_usb_podhd 10-1:0.17: Line 6 POD HD300 found [ 1401.377308][T18417] usb 10-1: selecting invalid altsetting 5 [ 1401.383887][T18417] snd_usb_podhd 10-1:0.17: set_interface failed [ 1401.390412][T18417] snd_usb_podhd 10-1:0.17: Line 6 POD HD300 now disconnected [ 1401.398006][T18417] snd_usb_podhd 10-1:0.17: probe with driver snd_usb_podhd failed with error -22 [ 1401.520344][T18417] usb 10-1: USB disconnect, device number 70 [ 1402.036612][T24982] fuse: Unknown parameter '0xffffffffffffffff' [ 1402.570047][T24999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.816362][T24999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1403.054336][T25008] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1403.423475][T18997] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 1403.498356][ T24] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1403.562437][T18997] usb 10-1: device descriptor read/64, error -71 [ 1403.658611][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1403.665172][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1403.676851][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1403.685959][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.694008][ T24] usb 3-1: Product: syz [ 1403.698162][ T24] usb 3-1: Manufacturer: syz [ 1403.702767][ T24] usb 3-1: SerialNumber: syz [ 1403.708844][ T24] usb 3-1: config 0 descriptor?? [ 1403.716852][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1403.726232][ T24] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1403.779315][T25011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.790022][T25011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1403.818993][T18997] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 1403.958985][T18997] usb 10-1: device descriptor read/64, error -71 [ 1404.076012][T18997] usb usb10-port1: attempt power cycle [ 1404.380707][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1404.475146][T18997] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 1404.548449][T18997] usb 10-1: device descriptor read/8, error -71 [ 1404.836070][T18997] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 1404.951809][T18997] usb 10-1: device descriptor read/8, error -71 [ 1405.100207][T18997] usb usb10-port1: unable to enumerate USB device [ 1405.334844][ T24] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1405.370976][ T24] em28xx 3-1:0.0: board has no eeprom [ 1405.688907][T25029] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4464'. [ 1405.761694][T25004] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1406.026098][T25004] Error validating options; rc = [-22] [ 1406.565252][T25015] em28xx 3-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 1406.619899][ T24] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1406.627745][ T24] em28xx 3-1:0.0: dvb set to bulk mode. [ 1406.633383][ T6247] em28xx 3-1:0.0: Binding DVB extension [ 1407.005424][T15443] usb 3-1: USB disconnect, device number 107 [ 1407.144843][T15443] em28xx 3-1:0.0: Disconnecting em28xx [ 1407.214009][ T6247] em28xx 3-1:0.0: Registering input extension [ 1407.314109][T25041] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4466'. [ 1407.556392][T15443] em28xx 3-1:0.0: Closing input extension [ 1407.583990][T15443] em28xx 3-1:0.0: Freeing device [ 1407.678375][ T24] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1407.804199][T25047] FAULT_INJECTION: forcing a failure. [ 1407.804199][T25047] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.035377][T25049] lo speed is unknown, defaulting to 1000 [ 1408.039339][T25047] CPU: 1 UID: 0 PID: 25047 Comm: syz.9.4469 Not tainted syzkaller #0 PREEMPT(full) [ 1408.039360][T25047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1408.039370][T25047] Call Trace: [ 1408.039376][T25047] [ 1408.039383][T25047] dump_stack_lvl+0x16c/0x1f0 [ 1408.039403][T25047] should_fail_ex+0x512/0x640 [ 1408.039425][T25047] ? kmem_cache_alloc_node_noprof+0x65/0x760 [ 1408.039450][T25047] should_failslab+0xc2/0x120 [ 1408.039468][T25047] kmem_cache_alloc_node_noprof+0x78/0x760 [ 1408.039489][T25047] ? __alloc_skb+0x2b2/0x380 [ 1408.039514][T25047] ? __alloc_skb+0x2b2/0x380 [ 1408.039531][T25047] ? __pfx_netlink_insert+0x10/0x10 [ 1408.039545][T25047] __alloc_skb+0x2b2/0x380 [ 1408.039564][T25047] ? __pfx___alloc_skb+0x10/0x10 [ 1408.039584][T25047] ? netlink_autobind.isra.0+0x158/0x370 [ 1408.039606][T25047] netlink_alloc_large_skb+0x69/0x140 [ 1408.039623][T25047] netlink_sendmsg+0x698/0xdd0 [ 1408.039643][T25047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1408.039667][T25047] ____sys_sendmsg+0xa5d/0xc30 [ 1408.039686][T25047] ? copy_msghdr_from_user+0x10a/0x160 [ 1408.039708][T25047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1408.039724][T25047] ? __lock_acquire+0x433/0x22f0 [ 1408.039753][T25047] ___sys_sendmsg+0x134/0x1d0 [ 1408.039777][T25047] ? __pfx____sys_sendmsg+0x10/0x10 [ 1408.039798][T25047] ? __lock_acquire+0x433/0x22f0 [ 1408.039841][T25047] __sys_sendmsg+0x16d/0x220 [ 1408.039864][T25047] ? __pfx___sys_sendmsg+0x10/0x10 [ 1408.039896][T25047] ? rcu_is_watching+0x12/0xc0 [ 1408.039914][T25047] do_syscall_64+0xcd/0xf80 [ 1408.039931][T25047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.039946][T25047] RIP: 0033:0x7feb1218f749 [ 1408.039959][T25047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1408.039973][T25047] RSP: 002b:00007feb103f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1408.039988][T25047] RAX: ffffffffffffffda RBX: 00007feb123e5fa0 RCX: 00007feb1218f749 [ 1408.039999][T25047] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1408.040008][T25047] RBP: 00007feb103f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1408.040017][T25047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1408.040026][T25047] R13: 00007feb123e6038 R14: 00007feb123e5fa0 R15: 00007fff7a8bb0d8 [ 1408.040048][T25047] [ 1408.053748][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1408.089518][T25049] ip6_vti0 speed is unknown, defaulting to 1000 [ 1408.465397][T25053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1408.689740][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.746544][T25054] bridge0: entered promiscuous mode [ 1408.854364][ T24] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1408.864996][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.941797][T25054] bridge0: left promiscuous mode [ 1408.947943][ T24] usb 5-1: Product: syz [ 1408.952777][ T24] usb 5-1: Manufacturer: syz [ 1408.958489][ T24] usb 5-1: SerialNumber: syz [ 1409.003391][ T24] usb 5-1: config 0 descriptor?? [ 1409.085746][T25061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.104266][T25061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.130962][T25061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.145527][T25061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.525989][ T24] usb 5-1: USB disconnect, device number 72 [ 1409.982372][ T30] audit: type=1400 audit(1764718713.793:1547): avc: denied { setopt } for pid=25071 comm="syz.4.4479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1411.776606][T25092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4484'. [ 1412.647356][ T30] audit: type=1400 audit(1764718716.309:1548): avc: denied { lock } for pid=25096 comm="syz.4.4488" path="socket:[89170]" dev="sockfs" ino=89170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1413.407350][T25097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1413.490099][T25097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1413.680829][T25127] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4493'. [ 1413.849269][T25097] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1414.484601][T25097] macsec1: left promiscuous mode [ 1414.512049][T25097] macsec1: left allmulticast mode [ 1414.565680][ T3539] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.601095][ T3539] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.623424][ T3539] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.705628][ T3539] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.369279][ T30] audit: type=1400 audit(1764718718.807:1549): avc: denied { read } for pid=25132 comm="syz.9.4496" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1415.713194][T25139] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1415.719739][T25139] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1415.771633][T25139] vhci_hcd vhci_hcd.0: Device attached [ 1415.875885][T25148] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4498'. [ 1416.046787][ T7006] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1416.273586][ T79] usb 41-1: new low-speed USB device number 7 using vhci_hcd [ 1416.297076][ T7006] usb 5-1: config index 0 descriptor too short (expected 8192, got 18) [ 1416.313816][ T7006] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.336293][ T7006] usb 5-1: config 0 has no interfaces? [ 1416.346507][ T7006] usb 5-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 1416.369337][ T7006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.388608][ T7006] usb 5-1: config 0 descriptor?? [ 1416.573018][ T30] audit: type=1400 audit(1764718719.985:1550): avc: denied { execute } for pid=25155 comm="syz.3.4501" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1416.596373][ C0] vkms_vblank_simulate: vblank timer overrun [ 1416.610608][ T24] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1416.623457][T25142] vhci_hcd: cannot find a urb of seqnum 33125 max seqnum 6 [ 1416.631055][ T7006] usb 5-1: string descriptor 0 read error: -71 [ 1416.674378][ T7006] usb 5-1: USB disconnect, device number 73 [ 1416.688694][ T50] vhci_hcd: stop threads [ 1416.693286][ T50] vhci_hcd: release socket [ 1416.714075][ T50] vhci_hcd: disconnect device [ 1416.861509][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1416.927207][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1416.938351][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.946568][ T24] usb 3-1: Product: syz [ 1416.951949][ T24] usb 3-1: Manufacturer: syz [ 1416.956694][ T24] usb 3-1: SerialNumber: syz [ 1417.537527][ T24] usb 3-1: config 0 descriptor?? [ 1417.684409][T25167] vxcan3: entered promiscuous mode [ 1417.765507][ T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1418.034576][ T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1418.147413][ T24] usb 3-1: USB disconnect, device number 108 [ 1418.214214][T25183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.330003][T25183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1419.318940][ T50] Bluetooth: hci5: Frame reassembly failed (-84) [ 1419.467649][T25200] Bluetooth: hci7: Frame reassembly failed (-84) [ 1419.536184][T19282] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 1419.647876][T14172] Bluetooth: hci7: Frame reassembly failed (-84) [ 1419.977528][ T888] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1420.612457][ T888] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1420.631241][ T888] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1420.643295][ T888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.651346][ T888] usb 3-1: Product: syz [ 1420.655607][ T888] usb 3-1: Manufacturer: syz [ 1420.660375][ T888] usb 3-1: SerialNumber: syz [ 1420.701479][ T888] usb 3-1: config 0 descriptor?? [ 1420.836931][ T888] rc_core: IR keymap rc-streamzap not found [ 1421.136925][ T888] Registered IR keymap rc-empty [ 1421.142772][ T888] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1421.161514][ T888] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input77 [ 1421.250916][ T888] usb 3-1: USB disconnect, device number 109 [ 1421.269240][T25220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1421.309678][T25220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1421.328134][T25224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1421.471260][T17921] Bluetooth: hci5: command 0x1003 tx timeout [ 1421.479125][T14396] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1421.779224][T14396] Bluetooth: hci7: command 0x1003 tx timeout [ 1421.786032][ T5837] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1422.050076][ T79] vhci_hcd: vhci_device speed not set [ 1424.970571][T25252] @: renamed from vlan0 (while UP) [ 1425.007300][ T30] audit: type=1400 audit(1764718727.871:1551): avc: denied { read } for pid=25251 comm="syz.3.4528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1425.094702][T18417] usb 10-1: new full-speed USB device number 75 using dummy_hcd [ 1425.418543][T25266] loop7: detected capacity change from 0 to 2 [ 1425.436922][ T30] audit: type=1400 audit(1764718728.133:1552): avc: denied { write } for pid=25254 comm="syz.4.4527" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1425.473561][T25263] ALSA: mixer_oss: invalid OSS volume '' [ 1425.516177][T25266] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.4527' sets config #0 [ 1425.566307][T25266] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.4527' sets config #1 [ 1425.586939][T18417] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1426.413745][T18417] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1426.437059][T18417] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1426.446655][T18417] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1426.455055][T18417] usb 10-1: Product: syz [ 1426.459278][T18417] usb 10-1: Manufacturer: syz [ 1426.464973][T18417] usb 10-1: SerialNumber: syz [ 1426.472398][T18417] usb 10-1: config 0 descriptor?? [ 1426.481592][T18417] usb 10-1: selecting invalid altsetting 0 [ 1426.766925][T25280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4534'. [ 1427.492779][T25287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1427.858077][T25287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4537'. [ 1427.894333][T25287] netlink: 'syz.3.4537': attribute type 9 has an invalid length. [ 1428.423272][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1428.436469][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1428.461313][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1428.489318][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1428.819890][T25312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4541'. [ 1429.026121][T25313] Bluetooth: hci5: Frame reassembly failed (-84) [ 1429.075773][ T5837] Bluetooth: hci6: unexpected event for opcode 0x2028 [ 1429.286792][T24770] Bluetooth: hci5: Frame reassembly failed (-84) [ 1429.305696][T24770] Bluetooth: hci5: Frame reassembly failed (-84) [ 1430.283648][T18417] usb 10-1: USB disconnect, device number 75 [ 1430.995878][ T30] audit: type=1400 audit(1764718733.483:1553): avc: denied { append } for pid=25333 comm="syz.9.4551" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1431.311096][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1431.913913][ T888] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1432.074323][ T888] usb 5-1: Using ep0 maxpacket: 8 [ 1432.083752][ T888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.110091][ T888] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1432.129166][ T888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.146296][ T888] usb 5-1: Product: syz [ 1432.153839][ T888] usb 5-1: Manufacturer: syz [ 1432.163951][ T888] usb 5-1: SerialNumber: syz [ 1432.173427][ T888] usb 5-1: config 0 descriptor?? [ 1432.528944][ T888] usb 5-1: USB disconnect, device number 74 [ 1432.638063][T25356] nvme_fabrics: missing parameter 'transport=%s' [ 1432.644566][T25356] nvme_fabrics: missing parameter 'nqn=%s' [ 1433.713009][T25375] Bluetooth: hci5: Frame reassembly failed (-84) [ 1433.735737][ T5837] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 1433.777469][ T3539] Bluetooth: hci5: Frame reassembly failed (-84) [ 1433.842239][T25376] overlayfs: failed to clone upperpath [ 1434.683448][ T7006] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1434.865553][ T7006] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1435.370179][ T7006] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1435.380047][ T7006] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.399504][ T7006] usb 3-1: config 0 descriptor?? [ 1435.923085][T17921] Bluetooth: hci5: command 0x1003 tx timeout [ 1435.929969][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1436.023253][ T7006] lenovo 0003:17EF:6047.0021: unknown main item tag 0x2 [ 1436.031315][ T7006] lenovo 0003:17EF:6047.0021: item fetching failed at offset 4/5 [ 1436.039400][ T7006] lenovo 0003:17EF:6047.0021: hid_parse failed [ 1436.077267][ T7006] lenovo 0003:17EF:6047.0021: probe with driver lenovo failed with error -22 [ 1436.089807][T25406] nvme_fabrics: missing parameter 'transport=%s' [ 1436.096351][T25406] nvme_fabrics: missing parameter 'nqn=%s' [ 1437.166745][ T9] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 1437.257531][T25429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.273076][T25418] nvme_fabrics: missing parameter 'transport=%s' [ 1437.279414][T25418] nvme_fabrics: missing parameter 'nqn=%s' [ 1437.286719][T25429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.347159][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1437.354124][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1437.370171][ T9] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1437.389207][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.405452][ T9] usb 10-1: Product: syz [ 1437.412714][ T9] usb 10-1: Manufacturer: syz [ 1437.418628][ T9] usb 10-1: SerialNumber: syz [ 1437.492782][ T9] usb 10-1: config 0 descriptor?? [ 1438.184354][ T7006] usb 10-1: USB disconnect, device number 76 [ 1438.515475][ T9] usb 3-1: USB disconnect, device number 110 [ 1438.744325][T25449] FAULT_INJECTION: forcing a failure. [ 1438.744325][T25449] name failslab, interval 1, probability 0, space 0, times 0 [ 1438.796974][T25449] CPU: 1 UID: 0 PID: 25449 Comm: syz.3.4583 Not tainted syzkaller #0 PREEMPT(full) [ 1438.797000][T25449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1438.797011][T25449] Call Trace: [ 1438.797018][T25449] [ 1438.797025][T25449] dump_stack_lvl+0x16c/0x1f0 [ 1438.797048][T25449] should_fail_ex+0x512/0x640 [ 1438.797073][T25449] ? kmem_cache_alloc_lru_noprof+0x66/0x720 [ 1438.797102][T25449] should_failslab+0xc2/0x120 [ 1438.797123][T25449] kmem_cache_alloc_lru_noprof+0x79/0x720 [ 1438.797148][T25449] ? map_id_range_up+0x2ce/0x3b0 [ 1438.797167][T25449] ? __d_alloc+0x35/0xa80 [ 1438.797195][T25449] ? __d_alloc+0x35/0xa80 [ 1438.797216][T25449] __d_alloc+0x35/0xa80 [ 1438.797237][T25449] ? __lock_acquire+0x433/0x22f0 [ 1438.797266][T25449] d_alloc_parallel+0x111/0x1510 [ 1438.797291][T25449] ? find_held_lock+0x2b/0x80 [ 1438.797309][T25449] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1438.797331][T25449] ? __d_lookup+0x266/0x4a0 [ 1438.797356][T25449] lookup_open.isra.0+0x66c/0x1780 [ 1438.797381][T25449] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1438.797416][T25449] ? lookup_fast+0x156/0x610 [ 1438.797437][T25449] path_openat+0x12bb/0x3140 [ 1438.797467][T25449] ? __pfx_path_openat+0x10/0x10 [ 1438.797490][T25449] ? stack_depot_save_flags+0x29/0x9b0 [ 1438.797522][T25449] do_filp_open+0x20b/0x470 [ 1438.797544][T25449] ? __pfx_do_filp_open+0x10/0x10 [ 1438.797564][T25449] ? __do_sys_io_uring_enter+0xd69/0x1630 [ 1438.797584][T25449] ? do_syscall_64+0xcd/0xf80 [ 1438.797600][T25449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.797636][T25449] ? alloc_fd+0x471/0x7d0 [ 1438.797671][T25449] io_openat2+0x206/0x850 [ 1438.797697][T25449] ? __pfx_io_openat2+0x10/0x10 [ 1438.797729][T25449] __io_issue_sqe+0xe8/0x7c0 [ 1438.797757][T25449] io_issue_sqe+0x85/0x1000 [ 1438.797775][T25449] ? __io_openat_prep+0x31c/0x420 [ 1438.797800][T25449] io_submit_sqes+0x94d/0x2690 [ 1438.797835][T25449] __do_sys_io_uring_enter+0xd69/0x1630 [ 1438.797859][T25449] ? __fget_files+0x20e/0x3c0 [ 1438.797878][T25449] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1438.797902][T25449] ? fput+0x9b/0xd0 [ 1438.797924][T25449] ? ksys_write+0x1ac/0x250 [ 1438.797942][T25449] ? __pfx_ksys_write+0x10/0x10 [ 1438.797969][T25449] do_syscall_64+0xcd/0xf80 [ 1438.797988][T25449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.798005][T25449] RIP: 0033:0x7fb6b538f749 [ 1438.798020][T25449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1438.798037][T25449] RSP: 002b:00007fb6b35ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1438.798055][T25449] RAX: ffffffffffffffda RBX: 00007fb6b55e5fa0 RCX: 00007fb6b538f749 [ 1438.798067][T25449] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000003 [ 1438.798078][T25449] RBP: 00007fb6b35ee090 R08: 0000000000000000 R09: 00000000fffffdcf [ 1438.798089][T25449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1438.798100][T25449] R13: 00007fb6b55e6038 R14: 00007fb6b55e5fa0 R15: 00007ffde6afb578 [ 1438.798127][T25449] [ 1439.354643][ T9] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1439.461514][ T79] usb 10-1: new full-speed USB device number 77 using dummy_hcd [ 1439.904340][T25463] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2564 sclass=netlink_tcpdiag_socket pid=25463 comm=syz.3.4589 [ 1439.988303][ T79] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1440.022956][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1440.140781][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 1440.353857][ T79] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1440.363192][ T79] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.371950][ T79] usb 10-1: Product: syz [ 1440.376369][ T79] usb 10-1: Manufacturer: syz [ 1440.376560][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 1440.381075][ T79] usb 10-1: SerialNumber: syz [ 1440.387509][ T79] usb 10-1: config 0 descriptor?? [ 1440.403881][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1440.438671][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1440.467372][ T79] rc_core: IR keymap rc-streamzap not found [ 1440.473329][ T79] Registered IR keymap rc-empty [ 1440.490158][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1440.493154][ T79] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1440.500041][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.517034][ T79] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input78 [ 1440.592036][ T9] usb 3-1: Product: syz [ 1440.602385][ T9] usb 3-1: Manufacturer: syz [ 1440.614087][ T9] usb 3-1: SerialNumber: syz [ 1440.636076][ T9] usb 3-1: config 0 descriptor?? [ 1440.744227][ T5899] usb 10-1: USB disconnect, device number 77 [ 1440.770651][T25451] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1440.773852][T25473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.786634][T25473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1441.628172][ C0] port100 3-1:0.0: NFC: Urb failure (status -71) [ 1441.740831][ T9] port100 3-1:0.0: NFC: Could not get supported command types [ 1442.066266][ T9] usb 3-1: USB disconnect, device number 111 [ 1442.219783][ T7006] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1442.509204][ T7006] usb 5-1: Using ep0 maxpacket: 8 [ 1442.525165][ T7006] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.609048][ T7006] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1444.062756][T25513] Bluetooth: hci5: Frame reassembly failed (-84) [ 1444.072630][ T5837] Bluetooth: hci6: unexpected event for opcode 0x2028 [ 1444.452880][ T7006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.461086][ T7006] usb 5-1: Product: syz [ 1444.468635][ T7006] usb 5-1: Manufacturer: syz [ 1444.473243][ T6188] Bluetooth: hci5: Frame reassembly failed (-84) [ 1444.473287][ T7006] usb 5-1: SerialNumber: syz [ 1444.487549][ T7006] usb 5-1: config 0 descriptor?? [ 1444.796812][ T7006] usb 5-1: USB disconnect, device number 75 [ 1445.071922][T25533] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4608'. [ 1445.088193][T25533] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4608'. [ 1445.256796][T25535] netlink: 220 bytes leftover after parsing attributes in process `syz.9.4609'. [ 1446.019613][T25546] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4613'. [ 1446.029112][ T5937] usb 10-1: new full-speed USB device number 78 using dummy_hcd [ 1446.636308][T17921] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1446.694815][T25547] ubi31: attaching mtd0 [ 1446.699010][T14396] Bluetooth: hci5: command 0x1003 tx timeout [ 1446.734532][ T5937] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1446.819528][T25547] ubi31: scanning is finished [ 1446.902592][ T5937] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1446.933523][ T5937] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.148046][ T5937] usb 10-1: Product: syz [ 1447.152318][ T5937] usb 10-1: Manufacturer: syz [ 1447.167961][ T5937] usb 10-1: SerialNumber: syz [ 1447.262319][T25555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1447.267982][ T5937] usb 10-1: config 0 descriptor?? [ 1447.276394][T25555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1447.305830][T25556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4614'. [ 1447.319445][ T30] audit: type=1400 audit(1764718748.749:1554): avc: denied { getopt } for pid=25554 comm="syz.3.4615" lport=19160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1447.364906][ T5937] rc_core: IR keymap rc-streamzap not found [ 1447.384492][ T5937] Registered IR keymap rc-empty [ 1447.390935][ T5937] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1447.412064][ T5937] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input79 [ 1447.503040][T25547] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1447.553234][ T5937] usb 10-1: USB disconnect, device number 78 [ 1448.250323][T25574] IPv6: Can't replace route, no match found [ 1448.342637][T25579] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4620'. [ 1449.816402][T25587] hub 6-0:1.0: USB hub found [ 1449.822653][T25587] hub 6-0:1.0: 1 port detected [ 1450.251705][T25582] fuse: Bad value for 'fd' [ 1451.196147][T25608] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4631'. [ 1451.520505][ T5899] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1452.236805][ T9] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 1452.784924][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1452.796520][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.807825][T25636] netlink: 'syz.2.4640': attribute type 3 has an invalid length. [ 1452.815875][T25636] netlink: 'syz.2.4640': attribute type 3 has an invalid length. [ 1452.832763][ T9] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1452.855578][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.917221][ T9] usb 10-1: Product: syz [ 1452.922926][ T9] usb 10-1: Manufacturer: syz [ 1452.927711][ T9] usb 10-1: SerialNumber: syz [ 1452.945184][ T9] usb 10-1: config 0 descriptor?? [ 1453.027934][ T5899] usb 5-1: device descriptor read/64, error -71 [ 1453.192658][ T9] usb 10-1: USB disconnect, device number 79 [ 1453.290454][T25640] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4641'. [ 1453.309348][ T5899] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1453.514970][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 1453.522348][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.562014][T25646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.616641][T25646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.642281][T25643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4642'. [ 1453.681766][ T5899] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1453.693124][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.701151][ T5899] usb 5-1: Product: syz [ 1453.706250][ T5899] usb 5-1: Manufacturer: syz [ 1453.711033][ T5899] usb 5-1: SerialNumber: syz [ 1453.719183][ T5899] usb 5-1: config 0 descriptor?? [ 1454.002728][ T9] usb 5-1: USB disconnect, device number 77 [ 1454.596139][T25667] netlink: 'syz.4.4645': attribute type 12 has an invalid length. [ 1455.357291][T25670] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4647'. [ 1455.949235][ T30] audit: type=1400 audit(1764718756.485:1555): avc: denied { getopt } for pid=25677 comm="syz.9.4649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1457.250122][T25689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.304760][T25692] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1457.311314][T25692] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1457.327637][T25692] vhci_hcd vhci_hcd.0: Device attached [ 1457.804436][ T79] usb 41-1: new low-speed USB device number 8 using vhci_hcd [ 1458.063236][ T5899] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1458.260223][T25706] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1458.401111][T25704] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1458.412047][T25704] overlayfs: failed to look up (tracing) for ino (-66) [ 1458.530455][T25712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.550026][T25712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.618837][T25707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4657'. [ 1458.642567][ T5899] usb 5-1: config index 0 descriptor too short (expected 8192, got 18) [ 1458.758534][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.798067][ T5899] usb 5-1: config 0 has no interfaces? [ 1458.831990][ T5899] usb 5-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 1458.858943][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.367909][ T5899] usb 5-1: config 0 descriptor?? [ 1459.385110][T25726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.545685][T25726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.603832][T25693] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 7 [ 1459.622542][ T5899] usb 5-1: string descriptor 0 read error: -71 [ 1459.630586][ T50] vhci_hcd: stop threads [ 1459.635916][ T50] vhci_hcd: release socket [ 1459.643984][ T5899] usb 5-1: USB disconnect, device number 78 [ 1459.654054][ T50] vhci_hcd: disconnect device [ 1462.857943][T25753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25753 comm=syz.7.4668 [ 1462.968187][T25762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.026132][T25762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.086040][T25766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4673'. [ 1463.088663][T25764] netlink: 'syz.9.4672': attribute type 1 has an invalid length. [ 1463.109180][T25764] netlink: 'syz.9.4672': attribute type 2 has an invalid length. [ 1463.285860][T25770] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4674'. [ 1463.373497][ T30] audit: type=1400 audit(1764718763.762:1556): avc: denied { lock } for pid=25772 comm="syz.7.4675" path="socket:[91605]" dev="sockfs" ino=91605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1463.521684][ T79] vhci_hcd: vhci_device speed not set [ 1463.531321][T25777] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1463.537820][T25777] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1463.572452][T25777] vhci_hcd vhci_hcd.0: Device attached [ 1463.928724][T25783] Bluetooth: hci5: Frame reassembly failed (-84) [ 1464.072268][T17921] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 1464.091768][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 1464.182880][T25788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.191716][T25788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.571489][ T30] audit: type=1326 audit(1764718764.604:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25786 comm="syz.3.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b538f749 code=0x7ffc0000 [ 1464.594937][ C1] vkms_vblank_simulate: vblank timer overrun [ 1464.618665][ T30] audit: type=1326 audit(1764718764.604:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25786 comm="syz.3.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b538f749 code=0x7ffc0000 [ 1464.643189][ T30] audit: type=1326 audit(1764718764.604:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25786 comm="syz.3.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb6b538f749 code=0x7ffc0000 [ 1464.666625][ C1] vkms_vblank_simulate: vblank timer overrun [ 1464.673889][ T79] usb 41-1: device descriptor read/64, error -110 [ 1464.686276][ T30] audit: type=1326 audit(1764718764.604:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25786 comm="syz.3.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b538f749 code=0x7ffc0000 [ 1464.710033][ T30] audit: type=1326 audit(1764718764.604:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25786 comm="syz.3.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b538f749 code=0x7ffc0000 [ 1464.733495][ C1] vkms_vblank_simulate: vblank timer overrun [ 1464.740430][ T5899] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1464.748832][ T30] audit: type=1326 audit(1764718764.604:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25786 comm="syz.3.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6b538df90 code=0x7ffc0000 [ 1464.749225][T25792] fuse: Bad value for 'fd' [ 1464.772271][ C1] vkms_vblank_simulate: vblank timer overrun [ 1464.772509][ T30] audit: type=1326 audit(1764718764.604:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25786 comm="syz.3.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b538f749 code=0x7ffc0000 [ 1464.772572][ T30] audit: type=1326 audit(1764718764.604:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25786 comm="syz.3.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b538f749 code=0x7ffc0000 [ 1464.772612][ T30] audit: type=1326 audit(1764718764.604:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25786 comm="syz.3.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fb6b538f749 code=0x7ffc0000 [ 1464.939129][ T79] usb 41-1: new low-speed USB device number 9 using vhci_hcd [ 1464.952137][ T24] Process accounting resumed [ 1465.062863][ T5899] usb 5-1: config index 0 descriptor too short (expected 8192, got 18) [ 1465.071782][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.092037][ T5899] usb 5-1: config 0 has no interfaces? [ 1465.098133][ T5899] usb 5-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 1465.107181][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.122448][ T5899] usb 5-1: config 0 descriptor?? [ 1465.228811][T25810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4687'. [ 1465.345584][T25780] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 8 [ 1465.357934][ T5899] usb 5-1: string descriptor 0 read error: -71 [ 1465.371064][ T2989] vhci_hcd: stop threads [ 1465.376281][ T5899] usb 5-1: USB disconnect, device number 79 [ 1465.381759][ T2989] vhci_hcd: release socket [ 1465.393903][ T2989] vhci_hcd: disconnect device [ 1465.706986][ T24] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1465.877984][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1465.884600][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.897062][ T24] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1465.906273][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.919353][ T24] usb 3-1: Product: syz [ 1465.927072][ T24] usb 3-1: Manufacturer: syz [ 1465.934447][ T24] usb 3-1: SerialNumber: syz [ 1465.941234][ T24] usb 3-1: config 0 descriptor?? [ 1466.013109][T25819] input: syz0 as /devices/virtual/input/input80 [ 1466.083157][T25818] fuse: Bad value for 'fd' [ 1466.171829][ T5937] usb 3-1: USB disconnect, device number 112 [ 1466.309810][T17921] Bluetooth: hci5: command 0x1003 tx timeout [ 1466.317115][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1466.544737][T25826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4692'. [ 1468.086730][T25839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.096052][T25839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.109363][T25839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4698'. [ 1469.077263][T25858] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1469.083830][T25858] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1469.126390][T25857] fuse: Bad value for 'fd' [ 1469.129330][T25858] vhci_hcd vhci_hcd.0: Device attached [ 1469.286091][T18417] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1469.416825][ T5937] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1469.441161][ T9] usb 10-1: new low-speed USB device number 80 using dummy_hcd [ 1469.452456][ T7006] usb 37-1: new low-speed USB device number 7 using vhci_hcd [ 1469.573077][T18417] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1469.657134][ T5937] usb 3-1: config index 0 descriptor too short (expected 8192, got 18) [ 1469.662503][T18417] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1469.718816][ T5937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.892986][ T5937] usb 3-1: config 0 has no interfaces? [ 1469.902060][ T5937] usb 3-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 1469.902081][T18417] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.911486][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.927663][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1469.939316][ T9] usb 10-1: config 9 has an invalid interface number: 236 but max is 0 [ 1469.950019][ T9] usb 10-1: config 9 has no interface number 0 [ 1469.960475][ T5937] usb 3-1: config 0 descriptor?? [ 1470.014627][ T9] usb 10-1: config 9 interface 236 altsetting 0 endpoint 0x4 has invalid maxpacket 16, setting to 8 [ 1470.031865][ T9] usb 10-1: config 9 interface 236 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1470.045149][ T9] usb 10-1: config 9 interface 236 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 1470.045960][T18417] usb 5-1: config 0 descriptor?? [ 1470.126587][ T9] usb 10-1: config 9 interface 236 altsetting 0 endpoint 0x1 has invalid maxpacket 18441, setting to 8 [ 1470.168324][ T9] usb 10-1: config 9 interface 236 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1470.198845][T25859] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 1470.200262][ T5937] usb 3-1: string descriptor 0 read error: -71 [ 1470.212065][ T2989] vhci_hcd: stop threads [ 1470.226132][ T9] usb 10-1: string descriptor 0 read error: -22 [ 1470.230130][ T2989] vhci_hcd: release socket [ 1470.240553][ T5937] usb 3-1: USB disconnect, device number 113 [ 1470.247842][ T2989] vhci_hcd: disconnect device [ 1470.248124][ T9] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice=55.e2 [ 1470.289434][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.328915][T25864] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1470.348348][ T9] usb 10-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1470.379419][ T79] vhci_hcd: vhci_device speed not set [ 1470.535614][T18417] lenovo 0003:17EF:6047.0022: item fetching failed at offset 3/5 [ 1470.544379][T18417] lenovo 0003:17EF:6047.0022: hid_parse failed [ 1470.554774][T18417] lenovo 0003:17EF:6047.0022: probe with driver lenovo failed with error -22 [ 1470.575388][ T5822] usb 10-1: USB disconnect, device number 80 [ 1471.969108][T25898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.581681][T25898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.625295][T25898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4712'. [ 1472.744198][T18417] usb 5-1: USB disconnect, device number 80 [ 1473.873867][T25909] fuse: Bad value for 'fd' [ 1473.873955][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1473.873967][ T30] audit: type=1400 audit(1764718773.584:1582): avc: denied { lock } for pid=25910 comm="syz.2.4716" path="socket:[90676]" dev="sockfs" ino=90676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1474.398538][T18417] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1474.520781][T25927] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1474.527335][T25927] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1474.539405][T25927] vhci_hcd vhci_hcd.0: Device attached [ 1474.653769][T18417] usb 3-1: Using ep0 maxpacket: 16 [ 1474.965445][T18417] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.979905][T18417] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1475.003275][T18417] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1475.012619][T18417] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.082683][ T5899] usb 41-1: new low-speed USB device number 10 using vhci_hcd [ 1475.106859][ T9] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1475.115140][ T7006] vhci_hcd: vhci_device speed not set [ 1475.140600][T18417] usb 3-1: Product: syz [ 1475.151000][T18417] usb 3-1: Manufacturer: syz [ 1475.159417][T18417] usb 3-1: SerialNumber: syz [ 1475.349210][ T9] usb 5-1: config index 0 descriptor too short (expected 8192, got 18) [ 1475.359468][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.372826][ T9] usb 5-1: config 0 has no interfaces? [ 1475.378616][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 1475.390204][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.402090][ T9] usb 5-1: config 0 descriptor?? [ 1475.412208][T25911] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4716'. [ 1475.433398][T18417] usb 3-1: 0:2 : does not exist [ 1475.454080][T18417] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1475.493208][T18417] usb 3-1: USB disconnect, device number 114 [ 1475.543021][T25696] udevd[25696]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1475.640389][T25928] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 9 [ 1475.641032][ T9] usb 5-1: string descriptor 0 read error: -71 [ 1475.673382][ T3539] vhci_hcd: stop threads [ 1475.676164][ T9] usb 5-1: USB disconnect, device number 81 [ 1475.690912][ T3539] vhci_hcd: release socket [ 1475.701845][ T3539] vhci_hcd: disconnect device [ 1476.713980][T25965] kAFS: unable to lookup cell '(,' [ 1476.953448][T18417] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1477.082544][T25974] hub 6-0:1.0: USB hub found [ 1477.089086][T25974] hub 6-0:1.0: 1 port detected [ 1477.567679][T18417] usb 5-1: config 0 has an invalid interface number: 17 but max is 0 [ 1477.584383][T18417] usb 5-1: config 0 has no interface number 0 [ 1477.593309][T18417] usb 5-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=b4.dd [ 1477.606996][T18417] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.615412][T18417] usb 5-1: Product: syz [ 1477.620027][T18417] usb 5-1: Manufacturer: syz [ 1477.624904][T18417] usb 5-1: SerialNumber: syz [ 1477.659323][T18417] usb 5-1: config 0 descriptor?? [ 1477.894638][T25964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4730'. [ 1478.050307][T18417] snd_usb_podhd 5-1:0.17: Line 6 POD HD300 found [ 1478.057716][T18417] usb 5-1: selecting invalid altsetting 5 [ 1478.063456][T18417] snd_usb_podhd 5-1:0.17: set_interface failed [ 1478.070266][T18417] snd_usb_podhd 5-1:0.17: Line 6 POD HD300 now disconnected [ 1478.078652][T18417] snd_usb_podhd 5-1:0.17: probe with driver snd_usb_podhd failed with error -22 [ 1478.101299][T18417] usb 5-1: USB disconnect, device number 82 [ 1478.526842][T25982] Bluetooth: hci5: Frame reassembly failed (-84) [ 1478.606804][ T5837] Bluetooth: hci6: unexpected event for opcode 0x2028 [ 1478.620059][T14167] Bluetooth: hci5: Frame reassembly failed (-84) [ 1478.626600][T14167] Bluetooth: hci5: Frame reassembly failed (-84) [ 1478.861779][T25988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1479.269880][T25994] hub 6-0:1.0: USB hub found [ 1479.276404][T25994] hub 6-0:1.0: 1 port detected [ 1479.857194][T26001] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4741'. [ 1479.960860][T26001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4741'. [ 1480.133892][T25999] bond1 (unregistering): Released all slaves [ 1480.167478][T26011] overlayfs: failed to resolve './file1': -2 [ 1480.246233][ T5822] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 1480.374564][ T7006] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1480.418722][ T5822] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1480.427942][ T5822] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.438076][ T5822] usb 10-1: config 0 descriptor?? [ 1480.535948][ T7006] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.546270][ T7006] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1480.555304][ T7006] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.565131][ T7006] usb 3-1: config 0 descriptor?? [ 1480.574138][ T7006] pwc: Askey VC010 type 2 USB webcam detected. [ 1480.652429][ T5899] vhci_hcd: vhci_device speed not set [ 1480.786087][ T7006] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1480.793151][ T7006] pwc: recv_control_msg error -32 req 02 val 2700 [ 1480.800118][ T7006] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1480.823896][T14396] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1480.832380][T19282] Bluetooth: hci5: command 0x1003 tx timeout [ 1480.853064][ T7006] pwc: recv_control_msg error -71 req 04 val 1000 [ 1480.922317][ T5822] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1480.949808][ T7006] pwc: recv_control_msg error -71 req 04 val 1300 [ 1480.986145][ T7006] pwc: recv_control_msg error -71 req 04 val 1400 [ 1481.001217][ T7006] pwc: recv_control_msg error -71 req 02 val 2000 [ 1481.012358][ T7006] pwc: recv_control_msg error -71 req 02 val 2100 [ 1481.026949][ T7006] pwc: recv_control_msg error -71 req 04 val 1500 [ 1481.038608][ T7006] pwc: recv_control_msg error -71 req 02 val 2500 [ 1481.045707][ T7006] pwc: recv_control_msg error -71 req 02 val 2400 [ 1481.057402][ T7006] pwc: recv_control_msg error -71 req 02 val 2600 [ 1481.066207][ T7006] pwc: recv_control_msg error -71 req 02 val 2900 [ 1481.074720][ T7006] pwc: recv_control_msg error -71 req 02 val 2800 [ 1481.084595][ T7006] pwc: recv_control_msg error -71 req 04 val 1100 [ 1481.095369][ T7006] pwc: recv_control_msg error -71 req 04 val 1200 [ 1481.114706][ T7006] pwc: Registered as video103. [ 1481.121492][ T7006] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input81 [ 1481.151886][ T5822] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 1481.170176][ T7006] usb 3-1: USB disconnect, device number 115 [ 1481.192081][ T5822] [drm] Initialized udl on minor 2 [ 1481.417173][T26029] xt_NFQUEUE: number of total queues is 0 [ 1481.601078][ T7006] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 1482.172632][ T5822] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 1482.246057][ T5822] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1482.269387][ T9] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1482.300132][ T5822] usb 10-1: USB disconnect, device number 81 [ 1482.308219][ T9] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1482.428339][ T7006] usb 3-1: config 0 has an invalid interface number: 17 but max is 0 [ 1482.436468][ T7006] usb 3-1: config 0 has no interface number 0 [ 1482.481218][ T7006] usb 3-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=b4.dd [ 1482.817622][ T7006] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.839955][ T7006] usb 3-1: Product: syz [ 1482.844293][ T7006] usb 3-1: Manufacturer: syz [ 1482.854447][ T7006] usb 3-1: SerialNumber: syz [ 1482.859794][T26040] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4753'. [ 1482.861868][ T7006] usb 3-1: config 0 descriptor?? [ 1482.870433][T26040] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4753'. [ 1483.263308][T26052] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4757'. [ 1483.374083][T26019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4746'. [ 1484.628677][T26071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.679801][ T5899] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 1484.696717][T26071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.982083][ T5899] usb 10-1: Using ep0 maxpacket: 16 [ 1485.003222][ T5899] usb 10-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1485.014434][ T5899] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.022858][ T5899] usb 10-1: Product: syz [ 1485.027914][ T5899] usb 10-1: Manufacturer: syz [ 1485.032649][ T5899] usb 10-1: SerialNumber: syz [ 1485.139695][ T5899] usb 10-1: config 0 descriptor?? [ 1485.408416][ T5899] visor 10-1:0.0: Sony Clie 3.5 converter detected [ 1485.510101][T26082] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4765'. [ 1485.521307][T26082] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4765'. [ 1485.947629][ T5899] usb 10-1: clie_3_5_startup: get config number failed: -71 [ 1485.961192][ T5899] visor 10-1:0.0: probe with driver visor failed with error -71 [ 1485.990048][ T5899] usb 10-1: USB disconnect, device number 82 [ 1486.168195][ T7006] snd_usb_podhd 3-1:0.17: Line 6 POD HD300 found [ 1486.245200][T26101] netlink: 'syz.7.4771': attribute type 20 has an invalid length. [ 1486.271174][T26101] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4771'. [ 1486.294290][ T6111] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1486.306106][T26101] netlink: 'syz.7.4771': attribute type 20 has an invalid length. [ 1486.314815][ T6111] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1486.327069][T26101] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4771'. [ 1486.338903][ T6111] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1486.366356][ T6111] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1486.760847][ T7006] usb 3-1: selecting invalid altsetting 5 [ 1486.767012][ T7006] snd_usb_podhd 3-1:0.17: set_interface failed [ 1486.773424][ T7006] snd_usb_podhd 3-1:0.17: Line 6 POD HD300 now disconnected [ 1486.782363][ T7006] snd_usb_podhd 3-1:0.17: probe with driver snd_usb_podhd failed with error -22 [ 1486.853235][ T7006] usb 3-1: USB disconnect, device number 116 [ 1486.959060][T26111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4772'. [ 1487.145044][T26114] hub 6-0:1.0: USB hub found [ 1487.153247][T26114] hub 6-0:1.0: 1 port detected [ 1487.527582][T26106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=26106 comm=syz.2.4772 [ 1487.547702][T26106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=26106 comm=syz.2.4772 [ 1487.578387][T26115] kAFS: unable to lookup cell '(,' [ 1487.672132][T26106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=26106 comm=syz.2.4772 [ 1487.685735][T26106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=26106 comm=syz.2.4772 [ 1488.940712][T26134] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4780'. [ 1489.215409][T26136] fuse: Bad value for 'fd' [ 1489.718617][T26145] random: crng reseeded on system resumption [ 1489.872311][T26150] binder: 26148:26150 unknown command 0 [ 1489.881070][T26150] binder: 26148:26150 ioctl c0306201 2000000001c0 returned -22 [ 1489.896843][T26151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1489.953818][T26152] binder: 26148:26152 ioctl c0306201 0 returned -14 [ 1490.016288][T26152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1490.195900][T26152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1490.419374][T26158] Bluetooth: hci5: Frame reassembly failed (-84) [ 1490.682543][T13073] Bluetooth: hci5: Frame reassembly failed (-84) [ 1490.745825][T26153] lo speed is unknown, defaulting to 1000 [ 1490.771252][T26153] ip6_vti0 speed is unknown, defaulting to 1000 [ 1492.625884][T14396] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1493.809460][ T9] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 1493.993124][T26196] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4798'. [ 1494.205426][T26197] tipc: Started in network mode [ 1494.208231][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 1494.217799][T26197] tipc: Node identity 4, cluster identity 4711 [ 1494.225642][T26197] tipc: Node number set to 4 [ 1494.238824][ T9] usb 10-1: config 0 has an invalid interface number: 10 but max is 0 [ 1494.259597][ T9] usb 10-1: config 0 has no interface number 0 [ 1494.291353][ T9] usb 10-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.df [ 1494.311685][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.336739][ T9] usb 10-1: Product: syz [ 1494.343091][ T9] usb 10-1: Manufacturer: syz [ 1494.349247][ T9] usb 10-1: SerialNumber: syz [ 1494.364975][ T9] usb 10-1: config 0 descriptor?? [ 1494.794414][ T888] usb 10-1: USB disconnect, device number 83 [ 1495.376319][T26203] nvme_fabrics: missing parameter 'transport=%s' [ 1495.382659][T26203] nvme_fabrics: missing parameter 'nqn=%s' [ 1496.666945][ T79] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 1497.171734][T26237] input: syz1 as /devices/virtual/input/input82 [ 1497.407009][ T79] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1497.427015][ T79] usb 10-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1497.446045][ T79] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.915242][ T79] usb 10-1: config 0 descriptor?? [ 1498.211244][T26255] hub 6-0:1.0: USB hub found [ 1498.216535][T26255] hub 6-0:1.0: 1 port detected [ 1498.747063][ T79] lenovo 0003:17EF:6047.0023: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.9-1/input0 [ 1498.800501][T26260] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4817'. [ 1498.874233][T26264] netlink: 21 bytes leftover after parsing attributes in process `syz.7.4818'. [ 1499.238900][ T79] lenovo 0003:17EF:6047.0023: Failed to switch middle button: -71 [ 1499.249541][ T79] lenovo 0003:17EF:6047.0023: Fn-lock setting failed: -71 [ 1499.258438][ T79] lenovo 0003:17EF:6047.0023: Sensitivity setting failed: -71 [ 1499.269726][ T79] usb 10-1: USB disconnect, device number 84 [ 1499.297264][ T7006] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1499.305167][T26271] netlink: 'syz.3.4819': attribute type 1 has an invalid length. [ 1499.613968][ T7006] usb 5-1: config 0 has an invalid interface number: 17 but max is 0 [ 1499.700884][ T7006] usb 5-1: config 0 has no interface number 0 [ 1499.743272][ T7006] usb 5-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=b4.dd [ 1499.755483][ T7006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.763666][ T7006] usb 5-1: Product: syz [ 1499.769371][ T7006] usb 5-1: Manufacturer: syz [ 1499.774040][ T7006] usb 5-1: SerialNumber: syz [ 1499.782768][ T7006] usb 5-1: config 0 descriptor?? [ 1499.918081][T26285] fuse: Bad value for 'fd' [ 1500.057411][T26268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4820'. [ 1500.094404][T26288] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4824'. [ 1500.346781][T26298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1500.394513][T26298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1500.791156][T26311] 9pnet_fd: Insufficient options for proto=fd [ 1500.802569][T26304] team0: Device xfrm1 is of different type [ 1502.130427][T26326] FAULT_INJECTION: forcing a failure. [ 1502.130427][T26326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1502.143510][T26326] CPU: 1 UID: 0 PID: 26326 Comm: syz.2.4834 Not tainted syzkaller #0 PREEMPT(full) [ 1502.143532][T26326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1502.143542][T26326] Call Trace: [ 1502.143548][T26326] [ 1502.143554][T26326] dump_stack_lvl+0x16c/0x1f0 [ 1502.143575][T26326] should_fail_ex+0x512/0x640 [ 1502.143602][T26326] _copy_to_user+0x32/0xd0 [ 1502.143627][T26326] vivid_radio_rx_read+0x7cd/0xb90 [ 1502.143655][T26326] ? __pfx_vivid_radio_rx_read+0x10/0x10 [ 1502.143681][T26326] vivid_radio_read+0x86/0xc0 [ 1502.143700][T26326] v4l2_read+0x229/0x360 [ 1502.143717][T26326] ? __pfx_v4l2_read+0x10/0x10 [ 1502.143734][T26326] vfs_read+0x1e4/0xcf0 [ 1502.143758][T26326] ? __pfx_vfs_read+0x10/0x10 [ 1502.143772][T26326] ? find_held_lock+0x2b/0x80 [ 1502.143788][T26326] ? __fget_files+0x204/0x3c0 [ 1502.143812][T26326] ? __fget_files+0x20e/0x3c0 [ 1502.143852][T26326] ksys_read+0x12a/0x250 [ 1502.143869][T26326] ? __pfx_ksys_read+0x10/0x10 [ 1502.143894][T26326] do_syscall_64+0xcd/0xf80 [ 1502.143913][T26326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.143929][T26326] RIP: 0033:0x7f4f6c78e15c [ 1502.143942][T26326] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1502.143958][T26326] RSP: 002b:00007f4f6d5e6fb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1502.143974][T26326] RAX: ffffffffffffffda RBX: 0000200000003400 RCX: 00007f4f6c78e15c [ 1502.143985][T26326] RDX: 0000000000002000 RSI: 0000200000003400 RDI: 0000000000000008 [ 1502.143995][T26326] RBP: 00007f4f6d5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1502.144005][T26326] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000008 [ 1502.144014][T26326] R13: 00002000000013c0 R14: 00007f4f6c9e6090 R15: 00007fffa9d93828 [ 1502.144039][T26326] [ 1502.557828][T26333] fuse: Bad value for 'fd' [ 1503.237539][T26341] overlayfs: failed to clone upperpath [ 1503.408646][T26345] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1503.415500][T26345] FAULT_INJECTION: forcing a failure. [ 1503.415500][T26345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1503.428597][T26345] CPU: 0 UID: 0 PID: 26345 Comm: syz.2.4840 Not tainted syzkaller #0 PREEMPT(full) [ 1503.428618][T26345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1503.428627][T26345] Call Trace: [ 1503.428633][T26345] [ 1503.428639][T26345] dump_stack_lvl+0x16c/0x1f0 [ 1503.428658][T26345] should_fail_ex+0x512/0x640 [ 1503.428682][T26345] _copy_to_user+0x32/0xd0 [ 1503.428709][T26345] simple_read_from_buffer+0xcb/0x170 [ 1503.428728][T26345] proc_fail_nth_read+0x197/0x240 [ 1503.428751][T26345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1503.428774][T26345] ? rw_verify_area+0xcf/0x6c0 [ 1503.428795][T26345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1503.428816][T26345] vfs_read+0x1e4/0xcf0 [ 1503.428831][T26345] ? __pfx___mutex_lock+0x10/0x10 [ 1503.428849][T26345] ? __pfx_vfs_read+0x10/0x10 [ 1503.428870][T26345] ? __fget_files+0x20e/0x3c0 [ 1503.428894][T26345] ksys_read+0x12a/0x250 [ 1503.428908][T26345] ? __pfx_ksys_read+0x10/0x10 [ 1503.428923][T26345] ? fput+0x9b/0xd0 [ 1503.428945][T26345] do_syscall_64+0xcd/0xf80 [ 1503.428961][T26345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.428976][T26345] RIP: 0033:0x7f4f6c78e15c [ 1503.428987][T26345] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1503.429001][T26345] RSP: 002b:00007f4f6d608030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1503.429015][T26345] RAX: ffffffffffffffda RBX: 00007f4f6c9e5fa0 RCX: 00007f4f6c78e15c [ 1503.429024][T26345] RDX: 000000000000000f RSI: 00007f4f6d6080a0 RDI: 0000000000000004 [ 1503.429033][T26345] RBP: 00007f4f6d608090 R08: 0000000000000000 R09: 0000000000000000 [ 1503.429041][T26345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1503.429049][T26345] R13: 00007f4f6c9e6038 R14: 00007f4f6c9e5fa0 R15: 00007fffa9d93828 [ 1503.429072][T26345] [ 1503.429901][T24770] Bluetooth: hci5: Frame reassembly failed (-84) [ 1503.688252][T26350] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4841'. [ 1503.708159][T26350] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4841'. [ 1503.738456][ T7006] snd_usb_podhd 5-1:0.17: Line 6 POD HD300 found [ 1503.763581][T26352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4842'. [ 1503.764326][ T7006] usb 5-1: selecting invalid altsetting 5 [ 1503.794983][ T7006] snd_usb_podhd 5-1:0.17: set_interface failed [ 1503.805493][ T7006] snd_usb_podhd 5-1:0.17: Line 6 POD HD300 now disconnected [ 1503.816763][ T7006] snd_usb_podhd 5-1:0.17: probe with driver snd_usb_podhd failed with error -22 [ 1503.868550][ T7006] usb 5-1: USB disconnect, device number 83 [ 1503.922891][T26341] fuse: Unknown parameter '•' [ 1503.978794][T26355] team0: Device xfrm1 is of different type [ 1504.247332][ T7006] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 1504.300009][T26360] hub 6-0:1.0: USB hub found [ 1504.305663][T26360] hub 6-0:1.0: 1 port detected [ 1504.846799][ T7006] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 1504.855103][ T7006] usb 5-1: config 5 has no interface number 0 [ 1504.861631][ T7006] usb 5-1: config 5 interface 123 has no altsetting 0 [ 1504.871362][ T7006] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1504.880530][ T7006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.888752][ T7006] usb 5-1: Product: syz [ 1504.892920][ T7006] usb 5-1: Manufacturer: syz [ 1504.897495][ T7006] usb 5-1: SerialNumber: syz [ 1505.155085][T26352] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4842'. [ 1505.556168][T26367] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4847'. [ 1505.582633][ T5899] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 1505.623958][ T7006] comedi comedi4: Wrong number of endpoints [ 1505.629944][T14396] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1505.648298][ T7006] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1505.661845][ T7006] usb 5-1: USB disconnect, device number 84 [ 1505.765449][ T5899] usb 10-1: Using ep0 maxpacket: 8 [ 1505.790563][ T5899] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.817694][ T5899] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1505.835039][ T5899] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.851997][ T5899] usb 10-1: Product: syz [ 1505.859801][ T5899] usb 10-1: Manufacturer: syz [ 1505.868613][ T5899] usb 10-1: SerialNumber: syz [ 1505.939442][ T5899] usb 10-1: config 0 descriptor?? [ 1506.035614][T26382] netlink: 'syz.7.4851': attribute type 1 has an invalid length. [ 1506.077659][T26382] bond2: entered promiscuous mode [ 1506.083127][T26382] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1506.104831][T26380] fuse: Bad value for 'fd' [ 1506.135142][T26382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58832 sclass=netlink_route_socket pid=26382 comm=syz.7.4851 [ 1506.164082][ T9] usb 10-1: USB disconnect, device number 85 [ 1506.223901][T26386] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4852'. [ 1506.337643][T26389] Bluetooth: MGMT ver 1.23 [ 1507.250862][T26403] netlink: 7064 bytes leftover after parsing attributes in process `syz.9.4858'. [ 1507.260054][T26403] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1507.568553][T26409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1507.626657][T26409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1508.160613][T26417] can0 (unregistered): slcan off ttyS3. [ 1508.325117][T26425] fuse: Bad value for 'fd' [ 1508.734898][T26430] fuse: Bad value for 'fd' [ 1509.328293][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 1509.335623][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 1509.686609][T26463] hub 6-0:1.0: USB hub found [ 1509.693153][T26463] hub 6-0:1.0: 1 port detected [ 1510.069483][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 1510.092093][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 1510.196852][T26455] ceph: No mds server is up or the cluster is laggy [ 1510.423494][T26469] hub 6-0:1.0: USB hub found [ 1510.489995][T26469] hub 6-0:1.0: 1 port detected [ 1510.854639][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 1510.896451][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 1511.464508][T26484] siw: device registration error -23 [ 1511.742892][T26482] fuse: Bad value for 'fd' [ 1513.752510][T26517] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4882'. [ 1514.221185][ T30] audit: type=1400 audit(1764718811.327:1583): avc: denied { ioctl } for pid=26536 comm="syz.3.4886" path="socket:[93718]" dev="sockfs" ino=93718 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1514.680831][ T888] usb 10-1: new full-speed USB device number 86 using dummy_hcd [ 1514.880128][ T888] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1514.897962][ T888] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1514.909870][ T888] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1514.922472][ T888] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1514.934651][ T888] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.958237][ T888] usb 10-1: Product: syz [ 1514.967208][ T888] usb 10-1: Manufacturer: syz [ 1514.977480][ T888] usb 10-1: SerialNumber: syz [ 1514.994848][ T888] usb 10-1: config 0 descriptor?? [ 1515.007837][ T888] streamzap 10-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 1515.088937][ T7006] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1515.329902][T26573] fuse: Bad value for 'fd' [ 1515.358918][ T888] usb 10-1: USB disconnect, device number 86 [ 1515.442578][ T7006] usb 5-1: Using ep0 maxpacket: 8 [ 1515.459599][ T7006] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1515.484717][ T7006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.493870][ T7006] usb 5-1: Product: syz [ 1515.498287][ T7006] usb 5-1: Manufacturer: syz [ 1515.507429][ T7006] usb 5-1: SerialNumber: syz [ 1515.536372][ T7006] usb 5-1: config 0 descriptor?? [ 1515.551775][ T7006] gspca_main: se401-2.14.0 probing 047d:5003 [ 1515.907100][T26594] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4897'. [ 1516.283008][ T7006] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1516.290669][ T7006] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 1516.306473][ T7006] usb 5-1: USB disconnect, device number 85 [ 1516.354049][T26608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1516.365011][T26608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1517.210757][T26631] vcan0: tx drop: invalid da for name 0x0000000000ee0000 [ 1517.233651][T26631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4905'. [ 1518.404983][T26634] nvme_fabrics: missing parameter 'transport=%s' [ 1518.411442][T26634] nvme_fabrics: missing parameter 'nqn=%s' [ 1518.507231][T26648] fuse: Bad value for 'fd' [ 1521.137949][ T5822] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1521.308761][ T5822] usb 5-1: Using ep0 maxpacket: 8 [ 1521.325500][ T5822] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1521.350209][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.370469][ T5822] usb 5-1: Product: syz [ 1521.380203][ T5822] usb 5-1: Manufacturer: syz [ 1521.392532][ T5822] usb 5-1: SerialNumber: syz [ 1521.427823][ T5822] usb 5-1: config 0 descriptor?? [ 1521.441038][ T5822] gspca_main: se401-2.14.0 probing 047d:5003 [ 1521.524517][T26703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1521.559264][T26703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1521.734310][T26705] fuse: Bad value for 'fd' [ 1523.460163][ T5822] gspca_se401: write req failed req 0x57 val 0x00 error -110 [ 1523.695123][ T5822] se401 5-1:0.0: probe with driver se401 failed with error -110 [ 1524.783500][ T5822] usb 5-1: USB disconnect, device number 86 [ 1525.357498][T26725] team0: Device xfrm1 is of different type [ 1525.916486][ T5899] usb 10-1: new full-speed USB device number 87 using dummy_hcd [ 1526.101476][ T5899] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1526.114975][ T5899] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1526.156457][ T5899] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1526.246366][ T5899] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1526.288882][ T5899] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.310409][ T5899] usb 10-1: Product: syz [ 1526.321462][ T5899] usb 10-1: Manufacturer: syz [ 1526.335703][ T5899] usb 10-1: SerialNumber: syz [ 1526.360422][ T5899] usb 10-1: config 0 descriptor?? [ 1526.374397][ T5899] streamzap 10-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 1526.641657][T26745] fuse: Bad value for 'fd' [ 1526.687055][ T5899] usb 10-1: USB disconnect, device number 87 [ 1527.463901][T26759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1528.774682][T26778] nvme_fabrics: missing parameter 'transport=%s' [ 1528.781945][T26778] nvme_fabrics: missing parameter 'nqn=%s' [ 1528.829132][ T30] audit: type=1400 audit(1764719080.983:1584): avc: denied { name_connect } for pid=26787 comm="syz.7.4944" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1530.020672][T26810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4948'. [ 1530.146084][T26810] sp0: Synchronizing with TNC [ 1642.401236][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1642.408194][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P26786/1:b..l [ 1642.416719][ C0] rcu: (detected by 0, t=10502 jiffies, g=137649, q=1859 ncpus=2) [ 1642.424578][ C0] task:syz.2.4943 state:R running task stack:25664 pid:26786 tgid:26786 ppid:19486 task_flags:0x400040 flags:0x00080001 [ 1642.438884][ C0] Call Trace: [ 1642.442142][ C0] [ 1642.445048][ C0] ? __schedule+0x1149/0x5de0 [ 1642.449708][ C0] __schedule+0x11c9/0x5de0 [ 1642.454203][ C0] ? __pfx___schedule+0x10/0x10 [ 1642.459033][ C0] ? lock_acquire+0x179/0x330 [ 1642.463685][ C0] ? __lock_acquire+0x433/0x22f0 [ 1642.468596][ C0] ? mark_held_locks+0x49/0x80 [ 1642.473333][ C0] preempt_schedule_irq+0x51/0x90 [ 1642.478325][ C0] irqentry_exit+0x36/0x90 [ 1642.482709][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1642.488657][ C0] RIP: 0010:lock_acquire+0x62/0x330 [ 1642.493831][ C0] Code: 98 0e 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 82 62 ec 0e 0f 82 74 02 00 00 8b 35 fa 92 ec 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 99 98 0e 12 0f 85 ad 02 00 00 48 83 c4 [ 1642.513409][ C0] RSP: 0018:ffffc90005b0f8b8 EFLAGS: 00000206 [ 1642.519450][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c87a0 RCX: 0000000000000001 [ 1642.527391][ C0] RDX: 0000000000000000 RSI: ffffffff8da7bbe0 RDI: ffffffff8bf1b880 [ 1642.535330][ C0] RBP: 0000000000000002 R08: 000000008cda5889 R09: 00000000833fa77a [ 1642.543271][ C0] R10: ffff888026adaff0 R11: 00000000a833fa77 R12: 0000000000000000 [ 1642.551209][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1642.559171][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 1642.564344][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1642.570469][ C0] unwind_next_frame+0xd1/0x20a0 [ 1642.575378][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 1642.580460][ C0] ? __free_frozen_pages+0x7df/0x1160 [ 1642.585804][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1642.591929][ C0] arch_stack_walk+0x94/0x100 [ 1642.596580][ C0] ? __free_frozen_pages+0x7df/0x1160 [ 1642.601924][ C0] stack_trace_save+0x8e/0xc0 [ 1642.606570][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1642.611911][ C0] ? __lock_acquire+0x433/0x22f0 [ 1642.616820][ C0] save_stack+0x160/0x1f0 [ 1642.621118][ C0] ? __pfx_save_stack+0x10/0x10 [ 1642.625944][ C0] ? __free_frozen_pages+0x7df/0x1160 [ 1642.631291][ C0] ? page_ext_put+0x3e/0xd0 [ 1642.635766][ C0] __reset_page_owner+0x84/0x1a0 [ 1642.640674][ C0] __free_frozen_pages+0x7df/0x1160 [ 1642.645845][ C0] ? ___free_pages+0xcd/0x220 [ 1642.650492][ C0] vfree+0x1fd/0xb50 [ 1642.654362][ C0] xskq_destroy+0x3b/0x50 [ 1642.658665][ C0] xsk_release+0x568/0x8b0 [ 1642.663057][ C0] __sock_release+0xb3/0x270 [ 1642.667623][ C0] ? __pfx_sock_close+0x10/0x10 [ 1642.672446][ C0] sock_close+0x1c/0x30 [ 1642.676572][ C0] __fput+0x402/0xb70 [ 1642.680533][ C0] task_work_run+0x150/0x240 [ 1642.685101][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1642.690187][ C0] ? __pfx___do_sys_close_range+0x10/0x10 [ 1642.695883][ C0] exit_to_user_mode_loop+0xec/0x130 [ 1642.701145][ C0] do_syscall_64+0x4ec/0xf80 [ 1642.705707][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.711569][ C0] RIP: 0033:0x7f4f6c78f749 [ 1642.715951][ C0] RSP: 002b:00007fffa9d93988 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1642.724329][ C0] RAX: 0000000000000000 RBX: 0000000000169f9c RCX: 00007f4f6c78f749 [ 1642.732272][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1642.740212][ C0] RBP: 00007f4f6c9e7da0 R08: 0000000000000001 R09: 0000000fa9d93c7f [ 1642.748151][ C0] R10: 0000001b2c520000 R11: 0000000000000246 R12: 00007f4f6c9e5fac [ 1642.756090][ C0] R13: 00007f4f6c9e5fa0 R14: ffffffffffffffff R15: 00007fffa9d93aa0 [ 1642.764046][ C0] [ 1642.767037][ C0] rcu: rcu_preempt kthread starved for 10525 jiffies! g137649 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1642.778456][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1642.788393][ C0] rcu: RCU grace-period kthread stack dump: [ 1642.794249][ C0] task:rcu_preempt state:I stack:27800 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1642.806120][ C0] Call Trace: [ 1642.809372][ C0] [ 1642.812278][ C0] ? __schedule+0x1149/0x5de0 [ 1642.816927][ C0] __schedule+0x11c9/0x5de0 [ 1642.821411][ C0] ? __pfx___schedule+0x10/0x10 [ 1642.826234][ C0] ? __free_object+0x286/0x410 [ 1642.830969][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1642.836138][ C0] ? __lock_acquire+0x433/0x22f0 [ 1642.841050][ C0] ? rcu_is_watching+0x12/0xc0 [ 1642.845783][ C0] ? irqentry_exit+0x3b/0x90 [ 1642.850341][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1642.855508][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1642.860854][ C0] ? prepare_to_swait_event+0xbc/0x480 [ 1642.866285][ C0] preempt_schedule_common+0x44/0xc0 [ 1642.871545][ C0] preempt_schedule_thunk+0x16/0x30 [ 1642.876723][ C0] _raw_spin_unlock_irqrestore+0x61/0x80 [ 1642.882335][ C0] prepare_to_swait_event+0xf5/0x480 [ 1642.887607][ C0] rcu_gp_fqs_loop+0x201/0xaf0 [ 1642.892348][ C0] ? rcu_gp_init+0xc2e/0x15e0 [ 1642.897000][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1642.902263][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1642.907429][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1642.912340][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1642.917165][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1642.922945][ C0] rcu_gp_kthread+0x26d/0x380 [ 1642.927594][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1642.932766][ C0] ? rcu_is_watching+0x12/0xc0 [ 1642.937499][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1642.942664][ C0] ? __kthread_parkme+0x19e/0x250 [ 1642.947658][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1642.952827][ C0] kthread+0x3c5/0x780 [ 1642.956868][ C0] ? __pfx_kthread+0x10/0x10 [ 1642.961429][ C0] ? rcu_is_watching+0x12/0xc0 [ 1642.966173][ C0] ? __pfx_kthread+0x10/0x10 [ 1642.970734][ C0] ret_from_fork+0x855/0xa50 [ 1642.975293][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1642.980375][ C0] ? __switch_to+0x7af/0x10d0 [ 1642.985021][ C0] ? __pfx_kthread+0x10/0x10 [ 1642.989582][ C0] ret_from_fork_asm+0x1a/0x30 [ 1642.994325][ C0] [ 1642.997315][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1643.003605][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1643.008788][ C1] NMI backtrace for cpu 1 [ 1643.008798][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1643.008813][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1643.008821][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1643.008834][ C1] Code: e5 76 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 56 2c 00 fb f4 8c 27 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1643.008846][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 1643.008856][ C1] RAX: 0000000004fd53e9 RBX: 0000000000000001 RCX: ffffffff8b5df429 [ 1643.008865][ C1] RDX: 0000000000000000 RSI: ffffffff8daa1838 RDI: ffffffff8bf1b880 [ 1643.008873][ C1] RBP: ffffed1003ad9498 R08: 0000000000000001 R09: ffffed10170a66e5 [ 1643.008881][ C1] R10: ffff8880b853372b R11: 00000000ffffffff R12: 0000000000000001 [ 1643.008889][ C1] R13: ffff88801d6ca4c0 R14: ffffffff908599d0 R15: 0000000000000000 [ 1643.008897][ C1] FS: 0000000000000000(0000) GS:ffff888124aa3000(0000) knlGS:0000000000000000 [ 1643.008911][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1643.008920][ C1] CR2: 00007feb103d4f98 CR3: 00000000758e5000 CR4: 00000000003526f0 [ 1643.008928][ C1] Call Trace: [ 1643.008933][ C1] [ 1643.008937][ C1] default_idle+0x13/0x20 [ 1643.008951][ C1] default_idle_call+0x6c/0xb0 [ 1643.008965][ C1] do_idle+0x38d/0x500 [ 1643.008978][ C1] ? __pfx_do_idle+0x10/0x10 [ 1643.008990][ C1] ? do_idle+0x14/0x500 [ 1643.009003][ C1] cpu_startup_entry+0x4f/0x60 [ 1643.009015][ C1] start_secondary+0x21d/0x2b0 [ 1643.009034][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1643.009055][ C1] common_startup_64+0x13e/0x148 [ 1643.009076][ C1]