last executing test programs: 29m33.127616362s ago: executing program 1 (id=301): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x105, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x200400c5}, 0xc000) (fail_nth: 5) 29m32.570949983s ago: executing program 1 (id=304): open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1890, &(0x7f0000000040)={0x0, 0x4804, 0xc000, 0x0, 0xf9}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0386dd60000009001406fffe8000000000000000000000000000bbfe8000000000000000000000000000aa4e234e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70020004907800000402ee04f98900859cafe5c3fc871207065bd0e71764ac00"], 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x0, 0x56}, 0x28) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95::\x01\x00\x00', 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a94000000060a0b0400000000000000000200000068000480640001800a00010071756575650000005400028006000140000600000600024037e5000006000140000900000600024000040000060001400008000006000140000d00000800044000000809080004400000000406000240000700000600000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xbc}}, 0x80) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 29m30.116064537s ago: executing program 1 (id=312): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) geteuid() r3 = socket$igmp(0x2, 0x3, 0x2) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) 29m29.098879318s ago: executing program 1 (id=314): syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b", @ANYBLOB="e1c8fbb17c649821f5a7b80adf43923bdd771362e26a6e3665dc96ddcf7de39f24da3252ef996e4c95eaea3f4494bafdee8c5ca9d2e70e7a64fd04b92c95ec2d4c75fd673f8073cf1bca9db32e3900435af8974742b3a97053345c37ed0ec69e507d6e6f2595dfcb58dbecd7dbcc24bdf3df6f2e1214ebe76dd5e504ce5566b6703b4aeaab8507084a65907878859a00c8440ea4a1e23b7fdcf87abdae6dd2c30c8c324f90a766"], 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x38, 0x1) r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r1 = fsopen(&(0x7f0000000280)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='c::;\xf8\x81N\x80\x1a\x81\x85L\x89\xb4\xb6;o$:\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) r3 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x14a) renameat(r3, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x800, 0x0, 0x2, 0x1, 0x2a15, 0xd}, 0x20) prctl$PR_GET_TSC(0x19, 0xfffffffffffffffe) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x5000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x4000000800}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x32, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x32}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000280)={0x4, 0x2, 0xeeee0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000900014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9e", 0xc1}], 0x1}, 0x0) syz_io_uring_setup(0x131d, &(0x7f00000003c0)={0x0, 0x7d0c, 0x40, 0x3, 0x10000167}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mmap$IORING_OFF_SQES(&(0x7f000014b000/0x2000)=nil, 0x2000, 0x800008, 0x12, r3, 0x10000000) r8 = socket(0x2a, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x111, 0x4}}, 0x20) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) 29m27.072818438s ago: executing program 1 (id=323): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000003c0)={{0xa, 0x6, 0x6, 0x0, 'syz1\x00', 0x401}, 0x3, 0x20000000, 0x6, r3, 0x9, 0x3, 'syz0\x00', &(0x7f0000000300)=['/dev/vim2m\x00', '-\x14[&$\x00', '\x00', '%@\x00', '{-[+-\x00', '\x00', '*\x00', '/dev/vim2m\x00', '/dev/comedi0\x00'], 0x36}) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f0000002f00)={0xa, 0x4e24, 0x10000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c) syz_open_dev$vim2m(&(0x7f0000002c80), 0x7, 0x2) 29m26.571339399s ago: executing program 1 (id=327): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c90012000e00050014060a000a3d6e55ea"], 0x17) 29m25.208655483s ago: executing program 32 (id=327): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c90012000e00050014060a000a3d6e55ea"], 0x17) 29m0.549534413s ago: executing program 4 (id=389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SET_THP_DISABLE(0x41, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) pread64(r0, &(0x7f00000003c0)=""/170, 0xaa, 0x38a) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_settime(0x100000000000000, &(0x7f0000000040)={0x8000000000000802, 0xfffffffffffffffe}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000380)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2}) syz_open_dev$media(0x0, 0xfff, 0xe2040) r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x40000006, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000000c0)={0x23, 0x3, 0x17, 0x9, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x5, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22582) ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000000)={0x8, 0xe, 0x80005, 0xfffffffe, 0x0, 0x1, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9d}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) 28m58.615230502s ago: executing program 4 (id=398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={0x0, 0x0, 0x36, 0x0, 0x1}, 0x28) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) r3 = io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x3, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r3, 0x21, &(0x7f0000000340)={0x0, 0x2fc3f, 0xa199d81a3839c514, 0xffffffff, 0x377, 0x0, r3}, 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r4, 0x0, 0x0, 0x4840, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x8}, 0x10) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000680)="1b0000001a000700ab092500090007000aab0700a90100001d603693", 0x1c) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, 0x0, 0x0) r8 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, &(0x7f0000000880)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r8, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) 28m53.42083016s ago: executing program 4 (id=409): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done={0x40106308, 0x2}], 0x69, 0x0, &(0x7f00000000c0)="36695d73cb981cb03973712eba6e5cfe8930c9d925136f78d6ab16816e1993f4b8978449841a137c7f5696bb599176ff87850d559e939f512eb91bb706a6ced59190ec1d535fe5436b93670b8ac5313136c5b95bfdf9e412b2751f73fdd9a0fd76ed04e84b243cb0ab"}) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 28m52.715595703s ago: executing program 4 (id=416): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c90012000e00050014060a000a3d6e55ea"], 0x17) 28m51.401377626s ago: executing program 4 (id=419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x4e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_io_uring_setup(0x2004680, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x80003, 0x18c}, &(0x7f0000000240)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmmsg(r6, &(0x7f0000003040)=[{{&(0x7f00000001c0)=@can={0x1d, r7}, 0x80, 0x0}}], 0x1, 0x20000008) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2004, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r9, 0x404c4701, &(0x7f0000000040)={0x7, 0x0, 0x7fff, 0x400000, 0x14, "3eccd8000000787322dbf90f000000040100"}) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000280)=0xb3) 28m50.416302181s ago: executing program 4 (id=421): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x9, 0xfffffffe}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000d98000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) r2 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7800000002060108000000000000000000000000050005000a0000001400078008001140000000000500150000000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e65742c6e65740000000015000300686173683a69702c706f72742c6e6574"], 0x78}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r3, 0x7a5, &(0x7f0000000140)={{@host}, 0x1}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) 28m35.347397737s ago: executing program 33 (id=421): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x9, 0xfffffffe}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000d98000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) r2 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7800000002060108000000000000000000000000050005000a0000001400078008001140000000000500150000000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e65742c6e65740000000015000300686173683a69702c706f72742c6e6574"], 0x78}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r3, 0x7a5, &(0x7f0000000140)={{@host}, 0x1}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) 15m40.441641183s ago: executing program 0 (id=2721): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040ed7e54e"], 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 15m40.09294752s ago: executing program 0 (id=2722): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) dup3(r3, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'gretap0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x100, 0x7fff, {{0x5, 0x4, 0x0, 0x1e, 0x14, 0x67, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) syz_open_dev$mouse(0x0, 0x3, 0x200400) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1400000004000000040000005ffe000000000000", @ANYRES32, @ANYBLOB="000000000000e8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r4, 0x0, &(0x7f0000000040)=""/61}, 0x20) dup3(0xffffffffffffffff, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x10) connect$llc(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4008, 0x7, &(0x7f0000006680)) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/16) 15m39.834552188s ago: executing program 0 (id=2723): shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x400000c, 0x13012, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setlease(r3, 0x400, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r5, 0x4020744f, 0x0) 15m38.456445036s ago: executing program 0 (id=2724): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) get_mempolicy(0x0, &(0x7f0000000100), 0x3, &(0x7f000000f000/0x2000)=nil, 0x1) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x400000000fffd, 0xffffffffffff7d0d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c", 0xc7}], 0x3}], 0x1, 0x40800) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) socket$inet6(0xa, 0x3, 0x6) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) 15m30.727333071s ago: executing program 0 (id=2742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m28.364182057s ago: executing program 0 (id=2746): openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0xfffffffffffffe90, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 15m11.497489285s ago: executing program 34 (id=2746): openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0xfffffffffffffe90, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 8m35.868514963s ago: executing program 3 (id=3786): socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x2b, 0x3, 0x1000) (async) socket(0x2b, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4952, &(0x7f0000000300)={0x0, 0xe3d6, 0x8, 0x1, 0x141}, 0x0, &(0x7f0000000380)) (async) syz_io_uring_setup(0x4952, &(0x7f0000000300)={0x0, 0xe3d6, 0x8, 0x1, 0x141}, 0x0, &(0x7f0000000380)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) getpid() (async) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setns(r3, 0x24020000) (async) setns(r3, 0x24020000) landlock_create_ruleset(0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) pipe2$watch_queue(0x0, 0x80) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0xd, @sdr={0x31303553, 0x9}}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14) (async) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000a23000/0x4000)=nil, 0x4000}}) 8m33.13097861s ago: executing program 3 (id=3792): socket$pptp(0x18, 0x1, 0x2) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x40) write$selinux_attr(r6, &(0x7f0000000440)='system_u:object_r:printer_device_t:s0\x00', 0x26) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4c014) 8m28.215377698s ago: executing program 3 (id=3809): socket$netlink(0x10, 0x3, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x100) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000040)={0x9b, 0x1, 'client1\x00', 0x0, "cdf86d00df4a0908", "85c93f5defb2224f6ac043513777ec05e0b5d17e2fa9a03b2a4d9cd03b8a6979", 0xa, 0x4}) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) r2 = socket$key(0xf, 0x3, 0x2) recvfrom(r2, 0x0, 0x0, 0x10001, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0xc, 0x0, "a0ab3cb55fa00c8c700e5e09285f491eac0cea1ce9f0ec42ea14458ee7781bec402d2d321b88022cf1948c5293dc6ad261085cf4a3985220570ea63beac9bd0280683400429fdad3e08006b7b7038662"}, 0xd8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r7], 0x3c}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8800) 8m26.315855975s ago: executing program 3 (id=3817): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x28, r1, 0x201, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x28}, 0x1, 0x2000000, 0x0, 0x4008000}, 0x4000) 8m25.831336383s ago: executing program 3 (id=3819): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2145c89, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x610800, 0x0) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) 8m24.950863415s ago: executing program 3 (id=3822): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil) (async) r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000580)="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", 0x26e) (async) write(0xffffffffffffffff, &(0x7f0000000580)="6aa622141ffd6e3e8a1f81314ad441eb66a430a4d00fee102e9d9772441fc60ce66d7f1c697456e500d6483dc075eac161fd5e4b93f919bd659621ce33b0de8c9d7a9ce08facf651ff0e07e0097110aa0a993e5b4a0c75b2a3ce02d21a7aea6c05b69e7e948f00d70d3d42ead4bdb3eb38c7755129f53424a0144d8a5f673849314c166c2fd393595e12e1fef9a3dba456c1a6b36c74f3d520de6a5841d259e0abfd2297735558b0eb001295f78d7dccc703b154b9cb3052e91713a5f0ca9127ed08eba9a24f4605b0c3be3cdc9bdc8430545b465052fc4cbf360ea070455d691af90ded22f98528ddd64bbd70ba7c103abba61dc95714fcedfcdad372288ceb7409731a14c9baf4a4fbaacffdc50b353b43b79de31f9db9ab378f464f63fbfb4f0cfa3f7b037077f3069f04501dceabd334ff7fa65bc3847e5fc29a2827f950040d91c5c90192e0b9304cf2740f20b6d84593fa50a5a63b06ef078f86f478e3fde6dc98b64138bdbbb0bb3c594c0518579d26f1e694e5f449a2bf2c3fd37fe1854e3b1de331f6866dc951a9b40b1ac58ab951d046a88e0024bc375ee1a9dee616504e12a2e4914960632a3db9b6897f7a10f763939ad309392a35db1eb30537a1cf201f48058421d010650ed8042a906293c477a18ae8c412038bf1880f932b25effe8c06a786ec15220a0000000000000043ee9d684752ed3e5e8e0023f8c40f7cd97a6071f73cc25fe534d41a05e4bbf2e3063567e6b910515bd436dfd856e8811943ca0fb52438acf2000000000071115e849e2e7045d47924d799e981cfa70dfc9690340d3c04ae84fe01f63ee2c47128cee5ef212ef4ec713b81d0e536f813d6e930d6a1bd30835c8f0000", 0x26e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000800)=ANY=[@ANYBLOB="ffffffffffffbbbbbabbbbbb810013000805000817a2f1ff80114502115efa2edffe20909cab2da7c0ba8cc356fcdb59c3048b9ae94577115ca496e8207377a0b02da9b6b5f9dbacf68e1ecd9b71d26b036bef2c5ce88ea55818abc98ace892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626dd33800b261e2f6292f759b1c6d900000000", @ANYRESOCT=r3, @ANYRES64=r5, @ANYRES16=r2], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x301, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_open_dev$video(&(0x7f0000000c80), 0x4, 0x8000) (async) r7 = syz_open_dev$video(&(0x7f0000000c80), 0x4, 0x8000) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000cc0)=0x3a1b400) dup(r3) (async) dup(r3) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) (async) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) (async) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85e0800"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) 8m8.945479981s ago: executing program 35 (id=3822): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil) (async) r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000580)="6aa622141ffd6e3e8a1f81314ad441eb66a430a4d00fee102e9d9772441fc60ce66d7f1c697456e500d6483dc075eac161fd5e4b93f919bd659621ce33b0de8c9d7a9ce08facf651ff0e07e0097110aa0a993e5b4a0c75b2a3ce02d21a7aea6c05b69e7e948f00d70d3d42ead4bdb3eb38c7755129f53424a0144d8a5f673849314c166c2fd393595e12e1fef9a3dba456c1a6b36c74f3d520de6a5841d259e0abfd2297735558b0eb001295f78d7dccc703b154b9cb3052e91713a5f0ca9127ed08eba9a24f4605b0c3be3cdc9bdc8430545b465052fc4cbf360ea070455d691af90ded22f98528ddd64bbd70ba7c103abba61dc95714fcedfcdad372288ceb7409731a14c9baf4a4fbaacffdc50b353b43b79de31f9db9ab378f464f63fbfb4f0cfa3f7b037077f3069f04501dceabd334ff7fa65bc3847e5fc29a2827f950040d91c5c90192e0b9304cf2740f20b6d84593fa50a5a63b06ef078f86f478e3fde6dc98b64138bdbbb0bb3c594c0518579d26f1e694e5f449a2bf2c3fd37fe1854e3b1de331f6866dc951a9b40b1ac58ab951d046a88e0024bc375ee1a9dee616504e12a2e4914960632a3db9b6897f7a10f763939ad309392a35db1eb30537a1cf201f48058421d010650ed8042a906293c477a18ae8c412038bf1880f932b25effe8c06a786ec15220a0000000000000043ee9d684752ed3e5e8e0023f8c40f7cd97a6071f73cc25fe534d41a05e4bbf2e3063567e6b910515bd436dfd856e8811943ca0fb52438acf2000000000071115e849e2e7045d47924d799e981cfa70dfc9690340d3c04ae84fe01f63ee2c47128cee5ef212ef4ec713b81d0e536f813d6e930d6a1bd30835c8f0000", 0x26e) (async) write(0xffffffffffffffff, &(0x7f0000000580)="6aa622141ffd6e3e8a1f81314ad441eb66a430a4d00fee102e9d9772441fc60ce66d7f1c697456e500d6483dc075eac161fd5e4b93f919bd659621ce33b0de8c9d7a9ce08facf651ff0e07e0097110aa0a993e5b4a0c75b2a3ce02d21a7aea6c05b69e7e948f00d70d3d42ead4bdb3eb38c7755129f53424a0144d8a5f673849314c166c2fd393595e12e1fef9a3dba456c1a6b36c74f3d520de6a5841d259e0abfd2297735558b0eb001295f78d7dccc703b154b9cb3052e91713a5f0ca9127ed08eba9a24f4605b0c3be3cdc9bdc8430545b465052fc4cbf360ea070455d691af90ded22f98528ddd64bbd70ba7c103abba61dc95714fcedfcdad372288ceb7409731a14c9baf4a4fbaacffdc50b353b43b79de31f9db9ab378f464f63fbfb4f0cfa3f7b037077f3069f04501dceabd334ff7fa65bc3847e5fc29a2827f950040d91c5c90192e0b9304cf2740f20b6d84593fa50a5a63b06ef078f86f478e3fde6dc98b64138bdbbb0bb3c594c0518579d26f1e694e5f449a2bf2c3fd37fe1854e3b1de331f6866dc951a9b40b1ac58ab951d046a88e0024bc375ee1a9dee616504e12a2e4914960632a3db9b6897f7a10f763939ad309392a35db1eb30537a1cf201f48058421d010650ed8042a906293c477a18ae8c412038bf1880f932b25effe8c06a786ec15220a0000000000000043ee9d684752ed3e5e8e0023f8c40f7cd97a6071f73cc25fe534d41a05e4bbf2e3063567e6b910515bd436dfd856e8811943ca0fb52438acf2000000000071115e849e2e7045d47924d799e981cfa70dfc9690340d3c04ae84fe01f63ee2c47128cee5ef212ef4ec713b81d0e536f813d6e930d6a1bd30835c8f0000", 0x26e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000800)=ANY=[@ANYBLOB="ffffffffffffbbbbbabbbbbb810013000805000817a2f1ff80114502115efa2edffe20909cab2da7c0ba8cc356fcdb59c3048b9ae94577115ca496e8207377a0b02da9b6b5f9dbacf68e1ecd9b71d26b036bef2c5ce88ea55818abc98ace892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626dd33800b261e2f6292f759b1c6d900000000", @ANYRESOCT=r3, @ANYRES64=r5, @ANYRES16=r2], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x301, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_open_dev$video(&(0x7f0000000c80), 0x4, 0x8000) (async) r7 = syz_open_dev$video(&(0x7f0000000c80), 0x4, 0x8000) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000cc0)=0x3a1b400) dup(r3) (async) dup(r3) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) (async) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) (async) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85e0800"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) 2m56.847298874s ago: executing program 8 (id=4820): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x9, 0x4, 0xd4, 0x7, 0xfffffffb, 0x100, 0xf4e5, 0x5}}}}]}, 0x58}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000d80)=@newqdisc={0x264, 0x29, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffdfdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x9}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_red={{0x8}, {0x118, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x9}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x9}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_STAB={0x108, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x4, 0x1, 0xfb, 0x0, 0x3, 0xec5, 0x4}}, {0xc, 0x2, [0x2, 0x401, 0x6, 0x8]}}, {{0x1c, 0x1, {0x1, 0x6, 0x8, 0x2, 0x1, 0x4, 0x7, 0x1}}, {0x6, 0x2, [0x7fe]}}, {{0x1c, 0x1, {0x1, 0x4, 0x200, 0x0, 0x2, 0x1, 0x0, 0x2}}, {0x8, 0x2, [0x9c6, 0x80]}}, {{0x1c, 0x1, {0x24, 0x8, 0x200, 0x60000, 0x2, 0x8000, 0x5, 0x3}}, {0xa, 0x2, [0x6, 0x80, 0xc3]}}, {{0x1c, 0x1, {0x8, 0x9, 0x4, 0x9, 0x0, 0xfffffff0, 0x3, 0x2}}, {0x8, 0x2, [0x401, 0xfff9]}}, {{0x1c, 0x1, {0x0, 0x0, 0x10, 0x2, 0x0, 0x5, 0x7, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x4, 0xb, 0x1ff, 0x3c, 0x0, 0xfffffff8, 0x3, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000001800010900000000ffdbdf2502180000ff0000080000000208000100ac14140059d4ff11d4bd38"], 0x24}}, 0x8000) write$UHID_CREATE(r3, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r3, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1) socket$nl_route(0x10, 0x3, 0x0) 2m55.776763585s ago: executing program 8 (id=4823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000000), 0x4) r3 = dup3(r2, 0xffffffffffffffff, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xd0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000980)={0x0, 0xef, 0x0, 0x0}) 2m54.451474003s ago: executing program 8 (id=4826): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x2b, 0xffffffde, 0x29c22ffa88ee5622, 0x0, 0xfffe, 0x2, 0x6, 0x0, 0x0, 0x8, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) close(r2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40086602, &(0x7f0000000000)) 2m54.05767807s ago: executing program 8 (id=4831): syz_open_dev$vim2m(&(0x7f0000000280), 0x7d, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x14, 0x0, 0x1, 0x70bd2c}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 2m53.266176322s ago: executing program 8 (id=4833): syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x5) socket(0x840000000002, 0x3, 0xff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000240)={0x1, 0x6, 0x80, 0x1aa, 0xd30a, 0x5}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xa, 0x5, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYRES8, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8d02008239213c4d23edfcbe6d55b57cb15e63c15cee7ae7c53d570d81c3d624c716334e82788d"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4040000) 2m50.683424829s ago: executing program 8 (id=4839): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x24e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) r2 = socket(0x2, 0x80805, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000), 0x0) socket$inet6(0xa, 0x3, 0x5) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0xfffffffe) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x43, 0xa0, 0x90, 0x98, 0x1b8, 0x178, 0x178, 0x1b8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0xfc}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xffffffffffffff3c) ioprio_get$uid(0x3, 0x0) r4 = syz_io_uring_setup(0x5c2, &(0x7f00000003c0)={0x0, 0x36c, 0x2000, 0x0, 0x21c}, &(0x7f0000000180)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r7, 0xda90) r8 = accept4(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000002c0)=0x8) sendto$inet_nvme_of_msg(r8, &(0x7f00000001c0)={@data_h2c={{0x6, 0x2, 0x18, 0x3}, 0x1, 0x8, 0x7ff, 0x7, "103fcafa"}, @val=0x0}, 0x88, 0x0, 0x0, 0x0) sync() sync() sync() 2m34.181067259s ago: executing program 36 (id=4839): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x24e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) r2 = socket(0x2, 0x80805, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000), 0x0) socket$inet6(0xa, 0x3, 0x5) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0xfffffffe) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x43, 0xa0, 0x90, 0x98, 0x1b8, 0x178, 0x178, 0x1b8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0xfc}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xffffffffffffff3c) ioprio_get$uid(0x3, 0x0) r4 = syz_io_uring_setup(0x5c2, &(0x7f00000003c0)={0x0, 0x36c, 0x2000, 0x0, 0x21c}, &(0x7f0000000180)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r7, 0xda90) r8 = accept4(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000002c0)=0x8) sendto$inet_nvme_of_msg(r8, &(0x7f00000001c0)={@data_h2c={{0x6, 0x2, 0x18, 0x3}, 0x1, 0x8, 0x7ff, 0x7, "103fcafa"}, @val=0x0}, 0x88, 0x0, 0x0, 0x0) sync() sync() sync() 11.027021004s ago: executing program 5 (id=5316): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c43", 0x8, 0xfffffffffffffffb) socket$unix(0x1, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX, @ANYBLOB=',wfAn\x00=', @ANYRESHEX, @ANYBLOB=',\x00']) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x4c805) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)) r5 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 9.956282581s ago: executing program 5 (id=5319): r0 = socket(0x15, 0x3, 0x84000) prctl$PR_SET_MM_EXE_FILE(0x22, 0xd, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r2 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) fsopen(0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYBLOB="2a004f800c00d700"], 0x218}}, 0xc000) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x8002f, 0x80, 0x10002, 0x4, 0x1, 0xcc7, 0x80000008, 0x17, 0xa, 0x24c, 0xfff, 0x7, 0x5, 0x5, 0x2, 0x105, 0x8, 0x2, 0x2009, 0x1, 0x488, 0x6, 0x4000000, 0x20001e5a, 0x1000b, 0x7, 0x9, 0x800008, 0x4, 0x401, 0xfffffffd]}) sendfile(r1, r1, 0x0, 0x8) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x8000000000015) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="440000001000010400f69b000200000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb01001800000000000000260000002600000002000000040000000121a60f0100000000000000000000000800000049000000000000000f00ffde000000000000"], 0x0, 0x42, 0x0, 0xfffffffc}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dc", 0x0, 0x2055ea38, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 9.347193262s ago: executing program 7 (id=5321): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001060000000000000000020000000005001300000000000c00090005001400f041e8de88374b5c5eadd7aae09e4ee765ea6a9c2a1db4723a09024e6c86586e6697e07272d6d7f441302a6ed06f92d65a643eb82de8133b3a46e53b459de86ed286084fdbc022d972f5545e8b0fedfe91f30247156ba43043608af4877eed3054730269df8cbd", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB], 0x38}}, 0x0) statx(0xffffffffffffffff, 0x0, 0x7100, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) execve(0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) execve(0x0, 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x5607, 0x4) msync(&(0x7f000011d000/0x3000)=nil, 0x3000, 0x5) ioctl$VT_ACTIVATE(r0, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) 9.28831729s ago: executing program 9 (id=5323): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x2, 0x1, 0x0, 0x1}}, 0x2e) getsockopt(r3, 0x111, 0x4, 0x0, &(0x7f0000000080)) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xd}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x4001400200bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002240)=""/102400, 0x19000) close(0x3) msgget$private(0x0, 0x790) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd=r5, 0x1, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) 8.731318117s ago: executing program 6 (id=5324): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x2c0183, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x1000, 0x400) sendmmsg$inet(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000280)={0x6, 0x8000, 0x8, 0x3, 0x0}, &(0x7f0000000ac0)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000b00)=@sack_info={r4, 0x7, 0x456}, &(0x7f0000000b40)=0xc) syz_open_procfs$userns(0x0, &(0x7f0000000580)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000fc0), 0x101080, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f00000007c0)='\x00', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\xd1\v\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f0000000980)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f0000000a80)='::-$[]#:{\x00']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) 8.459692605s ago: executing program 9 (id=5325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002400)=""/102400, 0x19000) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1c00000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 8.404634773s ago: executing program 7 (id=5326): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x80) fcntl$notify(r0, 0x402, 0x26) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019c80)=""/102400, 0x19000) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)) 8.308701973s ago: executing program 2 (id=5327): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(r0, 0x0, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1}], 0x1}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) 7.239425911s ago: executing program 2 (id=5328): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macsec0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) syz_open_procfs$namespace(r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f00000001c0)='binder\x00', 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x9, 0x2) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000040)={0xb, 0x1, 0x0, "f819ebf45608e22e7a4944572ae210d0125a4b55b61c5deb3eb574c486d27eb2"}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, r9, 0x100, 0x0, 0x0, {0x45}}, 0x14}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 5.755985021s ago: executing program 7 (id=5329): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000c80)=ANY=[@ANYBLOB="09000000c80000"], 0x7) syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x498, 0x400, 0x1, 0x161}, &(0x7f0000000dc0)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x4c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x400}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000040)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x8000, 0x80, 0x4c3, 0x7, {{0x18, 0x4, 0x1, 0x29, 0x60, 0x64, 0x0, 0x9, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_addr={0x44, 0x34, 0x37, 0x1, 0x0, [{@rand_addr=0x64010102, 0x9}, {@multicast2, 0x4}, {@empty, 0x9}, {@multicast2, 0x101}, {@multicast2, 0x4}, {@multicast1, 0x27b}]}, @cipso={0x86, 0xc, 0x3, [{0x6, 0x6, "01976d61"}]}, @timestamp={0x44, 0xc, 0x12, 0x0, 0x0, [0x0, 0x2]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2}, 0xfffffe0f) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bind$inet6(r4, 0x0, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/97, 0x61) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r6, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002) close(0xffffffffffffffff) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x200000) 5.704153162s ago: executing program 9 (id=5330): prlimit64(0x0, 0x9, &(0x7f0000000000)={0xa, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ldst={0x2, 0x1, 0x1, 0x4, 0x3, 0x40}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='bfs\x00', 0xc0800, &(0x7f00000002c0)='/)\b\x028&\x87\xc2&\xe9=\xe6\xab\xdde`\xc4c\x00\xd2D\x00\x00\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f00000001c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x20, 0x1e, 0x301, 0x20000002, 0x0, {0x1}, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000300)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r8, r9, 0x0, 0x1f5, 0x0, 0xfffffffd, {0x6, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x8005, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) 5.643359151s ago: executing program 5 (id=5331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002) r2 = syz_open_procfs(0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x40800) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) accept$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r8, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 5.451399859s ago: executing program 2 (id=5332): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c0001"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 5.254874246s ago: executing program 2 (id=5333): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000100)=@generic={0x29, "c2420c34c6093966ffd63c3d196d11182867f6873f0c074d126f7e23428284e8814a62f7083fc6064253b608c90786c8ce306db9a48b0d11314f5caced07582292b7605dec369ce0f7cebf7ffdce292b1767b9b53ca136aeb4347b8092716448d4d83f4846580d4946db80481ec30edfee9a5e304db700117f165fa8cd89"}, 0x80, &(0x7f0000000640)=[{&(0x7f00000003c0)="f020914f12acbdf15232c49edf51a0352867b1fc8afcbdb0927c1a0bcdaaef474b457e028da91ad8930b495c9871308facd55bb056074c2935f121357152d62c16f591267a9d4e01be70406a544de9efa2939aa6d7385b238a009de14945fdd4dc1bbf35c70d631c9d09a7dfdd6d10cf5fba907bc26794106d5e334009e4193334eb8fa35dbfe937d76be023e327301a221c2260a2d03d0138", 0x99}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000040)="3b6f4a3b412df962b068d4e0228e15313e3a669aff40b72a4c3a7c1ef9f7bb0307a532cce9fbf7027276ec63a4325a2e0a7d", 0x32}, {&(0x7f0000000540)="1b006c525e70e45b96f71f81176709368afc99ae9d53b1c5ef08b38e4db9663f334bc1cc71c35572b0f4dbf2bdddca3d625ea1919a26c5c09fa3b5bbc11697ff76cf87e6f3e026303bdaf6aa17daf52a1ac03e20b2010daea8e9fbf64d1bded4660ceea18d64451baa1d2e5cc85491bfe2fc8c6209171bf6f676a56ba2cc106c3d19899a6533d61a", 0x88}, {&(0x7f00000004c0)="e76838f97e01f1bc9e370009821c244267c78da75272d50a72eb8914f4ca724e6f828285055fcfb14c01b5d6f5b84e0e90e559307b96d307faa657bdc236a4fd", 0x40}, {&(0x7f0000000600)}], 0x6, &(0x7f00000006c0)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0xb84f}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x7f}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x707e}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000017c0)="c1b6d415e24fa29ff535d48ea1d4437cef47b2ab57192e8cdf0e05e336216531a43f981ce58931f7bdb695f6b2815034e614ee777396a51f26597a9125f5eee260ebf005101593536bd0feecf312a42722afedf8af58b02591fbb60df31df90104712e1a6bfccdd746fafdaf1c91a84d139c6904b5427e3cffdaf3db4fd3da53e1b46146c584e4e488866cd094a6dbcc9c0c0f05f3993a4a1ab1b635660ad6f654f1", 0xa2}, {&(0x7f0000001880)="6c4326c50008567c27ab0b1cfbf31de7b463291821fd3f63cebafca3b7a9b721ffb9af72c11b701b5b6837a05450e1c7aa5a6bb4917f3d4df7d9804f31da7c8901e4b2bbca63394f6f0360482dc460a1510686ff83b2980f75ddc8a3b513c7a5ebfb153c24826356ec077ca61808d3d8270610849ecc90088d067eec3982f3d8517bdff4b3ee28714b52a46c0ada985d9db37e323ad58eee6e8557da19e0d8736a99179513bc1fc47f23f860deaf79211081e5b2dcb55a83ea31263e8ab82383abf15ec3e4ac7cfcfbd0874ebdd76e4eb6be99480a", 0xd5}, {&(0x7f0000001980)="106d9a0bf167a76714e410d726a0b47bf3899614f74c61bd950ccbd768ac9d0b6f9d86e477013a20b4d85afc1bbf65dd5005cd4370cf3b72e15be5b32a4524009a5508d3718cb200e441c533303cf335da73269e6fc816f43a885315a69735a8", 0x60}, {&(0x7f0000001a00)="a0d94ecfe2b866f9a3b59b025972394148dcd82def5e0c579e44de5703c2bd72e3cab2cabf71035388b459a7505e836eaefce58e5d79f3f5bb93e14499fbe9d3dc979abf4ffcaa14c839375c258c617e", 0x50}], 0x4, &(0x7f0000001ac0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xd38}}, @timestamping={{0x14, 0x1, 0x25, 0xe}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x60}}, {{&(0x7f0000001b40)=@pptp={0x18, 0x2, {0x3, @private=0xa010101}}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000001bc0)="c4b0771b866a572ec667206ef135103db237d06cc8c7e29d622d74c7e7dabdf780ae7b50de0002f2b14553aefa68da3d0c330b6952b8c5aa69d5ea8105fd5c7650e8789bd6549fafb097bf35d170b092d0d96956b328b282d7510a3f718a3a383fb9a1dfb1d961b6a8e868a43d7541f57f20409f260b8cc70f2d55db00b58d9ad91f10da82762cdc8312395cb0de41681c0280aa5aeb020c30688e32b0e8ae993385d157a69a5b7eafcdda6dd6e89a7e229a1b7485f3bd750b5b262557b4078e172866b6d604fda0", 0xc8}, {&(0x7f0000001cc0)="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", 0x1000}], 0x2, &(0x7f0000002d00)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x30}}, {{&(0x7f0000002d40)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4c}, 0x80, &(0x7f0000004000)=[{&(0x7f0000002dc0)="00a4cad3598854c8cd9d31cca9a3fe3e95375b2171dd0e8c7b7db63287d8cc317d156c16eca6611d17187c62e7a22136f4c9d857efa7a0241c5b05c0c6d053c820815bc7e2c8f03da09b0b51f0555377f941702e4eef4e406d2cc49a76f4c107001976d453555aad8c0fb061d4cc92bac7ce965717aaa548f6983bf8cb4fe490af06387b01d954648df0fb16ce5e14c260122f8426599a2f0484ae005b4ee434f80184d4201bd06e5523ec28ef2cfaca92f7a0125deefddb8f6e3b86688644", 0xbf}, {&(0x7f0000002e80)="55abfdcbc4b11ce3b57ee69459776e8dda5b9ead9e6db9d219f4e3c9dc44fa789b532b20f732fb27ddc5da3c2ed3e280300f9570eab54a9fe9598b39070998d83d184e69cedff1ee14a7ccc7938863d3b66c76ec4ca8", 0x56}, {&(0x7f0000002f00)="e274235f4c32a4a451fb0d784458e077b951d8513be73c1fa23ed3c37e73ab89339f13973074c0748369e1525cbe51d7f800de79888ea36348", 0x39}, {&(0x7f0000002f40)="9c19b928d2e92fab27d7ae", 0xb}, {&(0x7f0000002f80)="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", 0x1000}, {&(0x7f0000003f80)="ab54a506a7df96d6ff715664a878068cb2ddfd5f396f57decb08dbf2cee1d264cf6edb41330d303d661e99c31f15aa93f20c2e75bafcd354a38593d589d89fc312c649fc51e48a4d003b1d", 0x4b}], 0x6}}, {{&(0x7f0000004080)=@l2={0x1f, 0xa, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f00000054c0)=[{&(0x7f0000004100)="c041342cbbcfe2ebe4951824750d278d4d4568114a898831beb2a37f33f98804c5896eaecf6df7382fef9beb9421881ed2dd1f8eb98ec76a4435c90dd83b59c662a44c3f4115502082e0122d47e62a9098218f18a2ef87d441d001d5e48364c7725a2c3b9130bf90c3ba7b95e0a97a423824e2e3215f242d3e4d45c8377f8b8bbde675e50229c5c2c24e62477fe2171134430ff26389a70501bd4bd35b80058487b69e01fc93d568fde0c4ac82901e99642a1db6f2591b4e5343cc885dcb653c4d5acc9421046a78", 0xc8}, {&(0x7f0000004200)="3022527c22e2e759e79f8816cc27d45ad32e5f68ee65cbb7bdebea750c03e2e01302d46403943afa23977a7d861f66112dcd8b72751a52463472f89151b1cf2c9ef2509f80a676a4ab2d4aded8b6293ca9cbd2a67668d25829e3cb56dc12362aa2b84c0f7963a16fad1fdbb5506c", 0x6e}, {&(0x7f0000004280)="7b52995b5dfc7c603767a4c6dae85f71fa938c41cd29accef01d6b5243aa9a389866f60d758bd093b8c580c91ac87cc602f950a79b6e0a0f9bc899fd1d4da90918166defc4b476b82c25657b254b3532159727d41f546627e0aee64aa0315ee9ee8ca9129e7bdba188561f38855f295df9adbe206fb242b18ede0e27fa75f8762142f04b0f94cc395175df6f3c0d7ee452653d85bf8c68156286728ceeeb5974f9f30b620e1ad0683382c867ce8fc0100eab0487979917621291f01cec99b8e08558390d7b9ac6ad0195dab7f57644dd36a97d4057edb715a34e39c55ee10d92bd8b14be96500997b75bc099d58a7de02f5fa72f4f08956aef2dc7a8c19c832addd61178886a76d9e8053ea0bb7a488e14649f3c8c81a4cf0a10559f886041d2ee745c4d830155689dd2084fe75cce1046bff44452de9c1b1c40f63f7bbd47afc08bfe15300a1dda7d9300c9edb9383e2aa0353fcde4422f47f38faab0ef590e6e6e5d8a796b93a73d30cf682ab25ea5cf191d42332d937e90102b610987350ee15e74317a9ceed3e24d6ed1e1750bd9209b85296ff278ed9876a21ebd82d5b663def1fa6b35726b3e274935db5132d957110440a61d0c34f2da88ca251a631b91142f8b3d359a13f6e7f9edfcb0463b71a4f29d379950b9061ce42efac2ffa1a89be5ca9a2382d91a0dc7ff31cd1230e43aadf6a6ef38a91fce28e86e2f5dab40984d0cfb06c58155643acb8aa2b086ff41d9a5b2828e0e54668b5e06cda8161987d9ba8fd2b617c79c61076eb5fe34238ef403c328ac82b37caabf7824069ae2ec365c17ab0780e6731d0975a65ffffbcf0461b7a0b73db532e36d2dff64b390c3fc923c49447a97ecba6a92106153a1fab02bb3263984c4a8831213c4ebf60bc62692ce04c04b4311d94529854d37083105109f85ab899b7c4b8c1e8b7e23ef8d8b49dde5aaa413fef1c86af2b4ea4d8bb3104fd15d531a2571e966393a21660124a3bb82be958a12130d294f785dc94f359f3d80e729f1040ff463f526677d61ef023203d2a22fe68c203b79a65207e520a5570339e45f8d9ab5ea8a420c24f09cbb1177586b2be836f6782e406c57441fe4a51368d81246802664428335df394f5440792f90a32e1d81d54baadebf97c731a747e85a650162c0e97c47bcc0374d8b54cdbf64dd73157f4af60535f9891c8564ac16f7aeae1bdfa6f9d13dd50d488ccc2e7a9f42f3d39fe8768e791730008814e0184f8aed8b43cad3e350c7fe47342c098fd756ccf76a6ee1d431b6000b79716b20dd8c3a51550371350ec20747361bbd5f281d9c46384557c9a9c425cc582e2015f298a2a8a2b7c3002259ab152d7ce3789a84e98d9c9cc4df0a3a834358d14f004fa5b5731c955f5e59bb3e81b03b2c53c9765fd6f0696fce4603028b5ff4aaf16b18d10549a2102f0a30f8e08cdac96e770ca8c275061d64991e293042d91eab4b46b4b25c11db4ad18187d05c1a40265fbf0c347dd7aa7df5dad2d686ee903336ac875c1744d4ec5379a5626154292003672c00938dfcac2cf66e2df47b8c76df32055c83afa8a245cd4696188c2a2e6b5be979a582577fd17fafb3fb0f5b3cce05ce51d96d908ca800f1ea8f5bcbf8e0ecebf5faf8c80806debc010b5cd98b4353018b708f747cb71eec5c222479ec0650aa43c7fc637031ddc668ffd7d2fa155b010a7338aa0b5a6cc1b708a2739aacde520c3ab31817a11c0ad6c953b5673c4207fba16087bbead06116125c919b44617ffa9da2e397678bc04e2135e7b6ef46c1ebf57ce893bed38e4c68449f4e04690a996f3b57fb7d95e408305d381c899d7d9129af403eca9b42ccecc598b3355d59c2dcab89381321b6270edc02691863ce019772fe12fb57c9d4088ac132621c38a89791eb26f4399a4ab9658d0e7f9001e2eb1ed009d01c93293f6bd4f7a2c869fcd4b2f015fa8aed2b3c2bf50241b1dc10dee7068c5f0ace04f3743eebe0fd23502724176e4c40c72292d644255de24eacde763f85c83d2c4755d81c3d69b76980d66794aa75403b71c1cf3a709ab46b89e9c0cda0463e2553352d51723d092ea1f2e9c623238a6d4acbe9bac2259a6995d60e9668dea0643e03d2e38dbd093a726a8235b971eadbda877d7c6f287eb2d4fe0ed8f15a6ed3f769de950fd38c8cfa314c459258e4a0e77a885a92e7a611ac51333b795429aa118413d6d2a1722b192dee8e4b794dde9b9d3bc5e859ebd176573c0ae2f351a267633a30cbe07739bf6b07414515fee228c9b27b2c4b3421824aa8c1f557ec1a262582d4051a285377e808826927f94cd6035d161f3d567ac50eaffdc196825b4a467c5154c24ee55ae78865fb6731e054f284a8759767593a94fb116ae8f2a22977bcf6488c8ae2e139db236c7c366b20c3e14ffb706e13ed307e09da78bcd753feebfda6cc842e100c40409e1ff6f22162906a20780b5b070e82766f241475fca696e19baf118f638e9f169c479aa16f9add5e26e0be95ab01defeecd75e47fdff016983c0d2c179d0617f09cf21d6d2ce3cd8ab6bd4960032db579ffe199ba989ee2307703ab34c606a4add965e0074653a7a1315a86ecc7ab5a9791bda63f1f72fd70a49d8e66e193ad3716eb4a0c39c4af02012a2632f3b539a0019a34a4a6d69017f9655cd91bda2a33e8b3bf54a845d9f5da398ba7c2729474c056ac6399b9c114c7d9618577097e811e34da9692748e669b7904f7dcce69b60523005e9dfb4b70a91d00ff1cc802206a3833d5b8e05ca76d88e6cceff09e4f3890f60aa8b97d8f1c3d96be7a02093036565e8137ef3ed3f57a9940cf812cd9fa9edfae596a17b4a1d9b5c822c25f1c3afec3707d3ebbc3f7dfdbd6edacd25dfd974e2f647b61ac7dd4a3f6b129688742d12cf08cd3a7204382b5caa3a9e01c648f5740b0020af15b4997588eaf9ff7a2a6b64679344b149a1dad08a5af6d3287dfa9c034648c8381c4f1ad84faf6f1b64f7b5eb6e749e0088fcade47df12c2ddf41ac0aa1325ac3ac9f9c957b81e5f2e4b98bc5d3c7fbe926a7011fc4f81cf868354d7a5d5a3040cfceb1e86ab674c19ae405637461846a384e0d6f937b7adc6385b40da45814c6e1f150ba840e2bb05e3458cf9c5ae0023fb3525a998d767af2bda963de620be59e2b0655d781730cedd6e66408a2b715473e9e79979de22986c0b02e90d047af8d3d037c955d0d34d08a42ed693e1612b277d6f17d3e90d9b55115afc4c93348c960dff749fd3aa1164494a6d797b28b36f0386fe91c7101310466cdf3cae13e88663c69eb7b3d20bc3a16d79c6b40272110a1830b6069238f9f680afe75df605a303e5e2a71921ac31e6a37e0a46ea9f7b2fa1cb64e9c4679abf5b5edd8f85fd24a767d45fcfbfb4eb6147a477adec598439fcf70d321e40c806314b3f7ce6c23daf461890ed6b25668aab2b5d86d45e93e9a2c9d142f909cfed5fd934c6bce431ebd26aa67ece891034951579578266945208c0e1f0f4454a87fc5399eda76570c4410fc3dcb01b6e8082ec07dbfae7d59a72d7e1fce7877b30f810019ef34ac5f950f117fafc5772f2ad777763aff40ddbad06230bd6064d67321a12149a8e3c169a271a044345cf2ada4b58f400cd7352edf012ef1c3b176ef203db0887664a1d8d8907c20d7661917e5c0e10a39e81d73357bb81be60eb620ac7817b55ec37d92cea9fc23180fc7a63bf5bab45c5e189f182c4f516c8ea515b2edfb6c4cf3371d0db33fc2c95949b4c2f05fdc308b2ff5b01c47c343f0c3c1149bf690925f0dcc89c96f4e4b5070e7f65965406f46f4644f585c3753adf36cf0fa7d1089940316e9db0c2f948852e94372324cf4caf0023a17d795cb2a3d0eeb84b25925c505da9c0ef411f4fddf6e538d3487011e592c09091835343703626588f0be8f7c2e4112e4f3e0685c7c1783e385842782b9cf298a8b5b124b2c3ccf2f8b3d1bf191973fdf8de11b95bda6107b8123885b361c032fe71a37f106558b07c074df37dd8a0660753ade9997dbf7c2f5c6cfb5031b6f7672a6a6971748a7b508909876eb9a089289edeb7050a38aeb8f2a68d6996e100c39d6d96a25776b0529037dbd3d0fe81566f167b1234ced49a087a23d2ba607292440f4cdc017a78dd19e6597c898e02c59677f7e079a5d80dc1eb1a20091d7ea3293deeab97ae66b38c59ba084528fc0eb77fa72182a4d956926083c8f20cd387853a8407d07d61c6a911f3e416e483712d2e3813eb855666277f16865d54b6f2fd91d7461f4224a5ba1abdb12bbb517dfcb8c9ce1b5173df536a7cd175bde2614847d66327aaad04f53c8453fe07a907774ec16957e9464a8b2a661111ea55eeed235c41583dfae56f87b95a0461940fbe8d01ffa341609c66ff138df0b09252feeb192a819db11b229732f4b132cee25371ed5c2eebf1def07d17531bbfc3950e951c2e47145ab34370d293f3cdfb0516d33cc17ca2cfa4535dab3eb1c10170729a2dea043899dd117eb441504368449fba70de4a5d888970a86830afd1499473f75369fb31375363be12f35ce3ad40e4ba3a591f470a0209523b33f9d7fde115705a088ca184801b6193f5a9cd30dfb41adf2f440f836f99a1c4f33f28a8ffa56c3a74353534cf6f5d6ff34ee9ebbbe7a2a8d5c574d878acbe7a0406213124f33797f08d2af944e7fcaabe40136eb55a80ccf5076ecdc1d431eb8487af75125429f2a24800346bdcd77ac3cae2c9a70e3d01533681014365717d4c1a94f31752f1fd3825fbd07c756eb2079f2effd06984b2eaa2cfd6196d9ac2cff749eb84a37834b12911e4a5b0bf8620c719a8a1a6c7e0f69f4edc7cfbc934345426cc7cb895f3a22a2d1ed6e256db83ef17d8552e5c23ab998067e64a1ccef60847aa92bef93be568c5ae0193081711d138f9d8633b0c6da299ea29f9e117b9e45db73aae7b5c81dfcfa99a39e5261c228b3e5d0790929ec7513b9cfa4f345e661c6f84def0e6d099bcdc9d45e32e4e8131ee3f779d5cb41a1d32f6aa898d7900cd9d14e9c65e30842c3864d266c6cf3cf22ff894aa691aa556719ba56bb5acbb139ae3ffee88ad62792576d3c815f2691b10a2409c4dde27ae666beae36dd82871e5b738e58310955b26cb5e1322a9077c12efd01cc00899a9db23d6e24037b5818038183ff7da954fc4cb45e1fec0c7a05152d374d18caa7f5c7fc026d0a80b2d0895c5031939349a343bf4a52338a5e8367af9ca9596f39ab985c5f5d4dc34717ac7303786b5494a9b8a8d7d117028c729fe149c556ad15aa4ae8eba5b22d1a4ce086d8f694371fd5d3d9acc751b77ef62de1deb4cc9249f640ce7e513d7dd340ba0f7357a96c7613e5d0bbe908491ce60ff3f5fcf313e12465d45ae23ce1fcad65236db0747e5416096a4cd8cea5cbe0e71cf142f6d878e3e31b71d9ac0972ae34578fea2e5bc39e69cfd49515f69ebe34f0edf0dccacf5d8bf28a8cb551b121ab61e8b0073135c7dc5c95ae6acc2142dcd69d1bb58957dd3d389d81738ca48910627781d4d2392feb3208190804b2446eab8e5250f39631198fd316686604cb2b57cc617198cdedb39574aea9b9ad4d406c2d6564fca35ed99bd61f14ddd990f897cf6f2cb82c4073ee4880d73fb3451d45be32229751f53f925404d08ba145bdd66494d8e7cc5f0556e04eb223c8a4674c05e85f8925e6a4906cf00d942345c2b64018d66e643765653c368f2ffb5992a0d1ad104173f577869cab498cc3c611ff87b452", 0x1000}, {&(0x7f0000005280)="3e9555ccff4f71993398d3338a9e1df6b5a87cc87613813f8acfd1ba5ff3d31186826dd29cd4bd577eae60b8d7a46f7c6e0ec21a7b77bc960c23ff5bfa78989932e9246e74c87095192536b3f2a804643285f46c3f76a5f291783b8123f74cdd2a63a40a7542aea3125b08082b2a3a52ea42ed62e5ba3e61836d9418297785ed9f5611333dfa170ff0351baa43ec7f33ac62cb513131d708c0cec55e6fbaae1014bbcd00af8b9e088efa63cff9c656df7ee2134bfb2f57b6c6a0443cdc77949eaa9e", 0xc2}, {&(0x7f0000005380)="4a91b673f4247d5e7fdd945c07c3ebcf65", 0x11}, {&(0x7f00000053c0)}, {&(0x7f0000005400)="7ba82c69a6eee2a07a6c178bf55e6099870f1afc93c5c389fad746a8cd96183d02a5eb2b9d4f57b3add6ff63a75bc5de62682ab8aa2a3b08fa199c51200c8e686ba973f1d0626fcd7ff40aaf2069839d4da9ea13e004d3aa506f157767f10509244eb7544d29f7cb63985ecc8a0220f26edb9dfd6d8ccc61507075d5b887d5ab3247bf0ecf7e5dc2120a578c0f82ba315a9cda30f89b3d5014", 0x99}], 0x7, &(0x7f0000005540)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x60}}, {{&(0x7f00000055c0)=@ethernet={0x6, @random="d9e623db78b3"}, 0x80, &(0x7f00000056c0)=[{&(0x7f0000005640)="1d5273b3df5eea7ae7c697ec48b13d408c5315af6a057b37a232f5421186fc1b50ad74c66255f2942f", 0x29}, {0x0}], 0x2, &(0x7f0000005700)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x18}}], 0x6, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x185402) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 5.154995178s ago: executing program 6 (id=5334): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x2000) 4.626002039s ago: executing program 5 (id=5335): ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'caif0\x00', 0x401}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x700, 0x0, 0xfd5e, {[@timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4a) 4.605687393s ago: executing program 2 (id=5336): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x19, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000007000000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018450000080000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000000010000f8ffffffb702000008000000b70300000c3700008500000006000000bf91000000000000b7020000020000008500000084000000b70000000000000095e5ff0000000000"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x40}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) setresgid(0xffffffffffffffff, 0xee01, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.406841905s ago: executing program 5 (id=5337): socket$netlink(0x10, 0x3, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x100) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000040)={0x9b, 0x1, 'client1\x00', 0x0, "cdf86d00df4a0908", "85c93f5defb2224f6ac043513777ec05e0b5d17e2fa9a03b2a4d9cd03b8a6979", 0xa, 0x4}) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$vsock_stream(0x28, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r5], 0x3c}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8800) 4.356134479s ago: executing program 9 (id=5338): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a2c0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677265001c00028006000e0001000000060003008000000008000700e0000002"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() ptrace$getsig(0x4202, r0, 0x8, &(0x7f0000000180)) sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x2b0, 0x1b0, 0x380, 0x0, 0x0, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0xffffff00], [], 'nicvf0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3}, {0xffffffffffffffff, 0x0, 0x1}, {0x0, 0x1, 0x1}, 0x56, 0xff}}}, {{@uncond, 0x0, 0xd8, 0x600, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x2, 0x9, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@ipv6={@mcast1, @loopback, [], [], 'batadv_slave_0\x00', 'geneve1\x00', {}, {}, 0x2}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x90009427, &(0x7f0000000080)) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000100)=0x20d8, 0x4) preadv(r4, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f0000004180)={0x1, 0x6, 0x0, 0x0, 0x3, 0x3, 0x0, 0x8, 0x1}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 3.151259465s ago: executing program 6 (id=5339): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001a000100283d805500000000000020000000000700100000080002007fd55f3f1fea5fd14f3638d97b05024e35eff0c6f5ffb05884e1641152cab6b96d1d67363053a7d92ab0d602ef9f8dcc48366afd8ab7f26aca88971503c2a6a9549ab52e2252170872a1c39f69576e51d4ba9786ea7f53f14baf7066497a8a609e086acc31e3289f64fc2a05c5441df57ece2c2457de581f97ba5fdf5e4b1363dc4c00b97014ee851373f01aaa71e8adcf3b7c596d2bcbfda4af"], 0x24}}, 0xea5bc50b6199d77e) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x40, 0x0) ftruncate(r1, 0x2007ffd) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0xa0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getpid() r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="20f6c734e3d81107", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000200), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000400)="b0", 0x1, 0x400c0d5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0xa2d7}, 0x1c) writev(r3, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}], 0x18, 0x8015}, 0x84) 2.944851769s ago: executing program 9 (id=5340): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x80) fcntl$notify(r0, 0x402, 0x26) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019c80)=""/102400, 0x19000) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)) 2.911462659s ago: executing program 5 (id=5341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002400)=""/102400, 0x19000) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1c00000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 1.993254445s ago: executing program 9 (id=5342): prlimit64(0x0, 0x9, &(0x7f0000000000)={0xa, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='bfs\x00', 0xc0800, &(0x7f00000002c0)='/)\b\x028&\x87\xc2&\xe9=\xe6\xab\xdde`\xc4c\x00\xd2D\x00\x00\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f00000001c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x20, 0x1e, 0x301, 0x20000002, 0x0, {0x1}, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000300)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r8, r9, 0x0, 0x1f5, 0x0, 0xfffffffd, {0x6, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x8005, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) 1.811110413s ago: executing program 2 (id=5343): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) execveat(r1, 0x0, 0x0, 0x0, 0x1000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4624, @multicast2}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f00000003c0)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) lchown(&(0x7f0000000180)='./file0\x00', 0x0, 0xffffffffffffffff) mount$9p_xen(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=xen,access=client,cache=readahead,nodevmap,fowner=', @ANYRESHEX=r2, @ANYBLOB="2c736d61636b66737472616e736d7574653d2f6465762f7562695f6374726c002c6673757569643d61313463354834662d303033642d346466302d353666352d36383830516231626a5f757365723d2f64657642bea3d5cc8483b6c7ffadec720abb2f7562695f6374726c002c636f6e746578743d757365725f752c6d6561737572"]) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r6, 0x0, 0xc9, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e6b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r7, 0x4004480f, 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x880, 0x0) mount_setattr(r8, &(0x7f0000000240)='./file0\x00', 0x1000, &(0x7f00000002c0)={0x10008a, 0x0, 0x160000, {r3}}, 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000100)={0x3, 'veth1_virt_wifi\x00', {0x6}, 0x2}) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000600)) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, 0x0) 1.600619791s ago: executing program 6 (id=5344): r0 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5000002, 0x200000005c831, 0xffffffffffffffff, 0x14fdd000) remap_file_pages(&(0x7f00008f8000/0x1000)=nil, 0x1000, 0x0, 0xfffffffffffffffd, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xbe, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x1a, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffa}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x3}, @ldst={0x2, 0x2, 0x2, 0x1, 0x9, 0x80, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe02a, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x8, '\x00', r2, @flow_dissector=0x11, r0, 0x8, &(0x7f00000001c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x5, 0x0, 0x2}, 0x10, r3, r0, 0x2, &(0x7f0000000540)=[r1, r0, r0, r0, r0], &(0x7f0000000580)=[{0x5, 0x4, 0xd, 0x3}, {0x5, 0x5, 0x3, 0xc}], 0x10, 0x40}, 0x94) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a27f2000f2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e"], 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) 1.467763651s ago: executing program 6 (id=5345): add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r1, 0x1, 0x0, 0x400, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x20000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bc28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xfff1}, {0xffe0, 0xe}}}, 0x24}}, 0x0) r7 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x230, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x65010102, @multicast2, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@udp={{0x30}, {[0x4e20, 0x4e20], [0x4e21, 0x4e22]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x2}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(r9, 0x27e2, 0xda81, 0x24, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000003e0007012bbd700000000000027c00000400fc800f0001806d14314965356ee88b"], 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r13}, 0x38) 1.365468188s ago: executing program 7 (id=5346): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) gettid() r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r2 = socket$rxrpc(0x21, 0x2, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x5, r3, &(0x7f0000000080), 0xffffffffffffffd) bind$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) socket(0x15, 0x4, 0x2) getsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) 754.988167ms ago: executing program 7 (id=5347): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x2, 0x1, 0x0, 0x1}}, 0x2e) getsockopt(r3, 0x111, 0x4, 0x0, &(0x7f0000000080)) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xd}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x4001400200bce) read$msr(0xffffffffffffffff, &(0x7f0000002240)=""/102400, 0x19000) msgget$private(0x0, 0x790) r4 = syz_io_uring_setup(0x356, &(0x7f0000000200)={0x0, 0xd87, 0x80, 0x2, 0x149}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd=r7, 0x1, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) 611.466256ms ago: executing program 6 (id=5348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002400)=""/102400, 0x19000) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1c00000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 0s ago: executing program 7 (id=5349): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001060000000000000000020000000005001300000000000c00090005001400f041e8de88374b5c5eadd7aae09e4ee765ea6a9c2a1db4723a09024e6c86586e6697e07272d6d7f441302a6ed06f92d65a643eb82de8133b3a46e53b459de86ed286084fdbc022d972f5545e8b0fedfe91f30247156ba43043608af4877eed3054730269df8cbd", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB], 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) execve(0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) execve(0x0, 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x5607, 0x4) msync(&(0x7f000011d000/0x3000)=nil, 0x3000, 0x5) ioctl$VT_ACTIVATE(r0, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): 924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1700.506899][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1700.558803][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1700.590835][ T5924] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1700.623078][T24787] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4637'. [ 1700.637652][ T5924] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version cf [ 1700.874986][ T5924] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1700.994851][ T5924] usb 3-1: USB disconnect, device number 43 [ 1702.933689][ T30] audit: type=1326 audit(2000000675.639:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24812 comm="syz.7.4645" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58a9d9c629 code=0x0 [ 1703.130689][T24822] fuse: Bad value for 'fd' [ 1703.177997][T24822] md: array md2 already initialised! [ 1703.666656][T24833] FAULT_INJECTION: forcing a failure. [ 1703.666656][T24833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1703.680535][T24833] CPU: 0 UID: 0 PID: 24833 Comm: syz.8.4649 Tainted: G L syzkaller #0 PREEMPT(full) [ 1703.680563][T24833] Tainted: [L]=SOFTLOCKUP [ 1703.680570][T24833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1703.680582][T24833] Call Trace: [ 1703.680589][T24833] [ 1703.680597][T24833] dump_stack_lvl+0x100/0x190 [ 1703.680637][T24833] should_fail_ex.cold+0x5/0xa [ 1703.680664][T24833] _copy_to_user+0x32/0xd0 [ 1703.680695][T24833] ksys_shmctl.constprop.0+0x2f1/0x390 [ 1703.680721][T24833] ? __pfx_ksys_shmctl.constprop.0+0x10/0x10 [ 1703.680743][T24833] ? irqentry_exit+0x180/0x670 [ 1703.680767][T24833] ? lockdep_hardirqs_on+0x78/0x100 [ 1703.680785][T24833] ? irqentry_exit+0x180/0x670 [ 1703.680812][T24833] ? ksys_write+0x1a2/0x250 [ 1703.680855][T24833] do_syscall_64+0x106/0xf80 [ 1703.680874][T24833] ? clear_bhb_loop+0x40/0x90 [ 1703.680898][T24833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.680916][T24833] RIP: 0033:0x7fbda079c629 [ 1703.680933][T24833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1703.680949][T24833] RSP: 002b:00007fbda166f028 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 1703.680968][T24833] RAX: ffffffffffffffda RBX: 00007fbda0a16180 RCX: 00007fbda079c629 [ 1703.680980][T24833] RDX: 0000200000000040 RSI: 0000000000000003 RDI: 0000000000000000 [ 1703.680991][T24833] RBP: 00007fbda166f090 R08: 0000000000000000 R09: 0000000000000000 [ 1703.681001][T24833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1703.681012][T24833] R13: 00007fbda0a16218 R14: 00007fbda0a16180 R15: 00007ffde61c01e8 [ 1703.681036][T24833] [ 1704.255267][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5300 ms [ 1704.263338][ C1] lec:lec_tx_timeout: lec0 [ 1705.035429][T15572] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1705.206437][T15572] usb 6-1: Using ep0 maxpacket: 16 [ 1705.216089][T15572] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.238286][T15572] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1705.256100][T15572] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1705.265606][T15572] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.268331][T24850] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4655'. [ 1705.901930][T15572] usbhid 6-1:128.0: can't add hid device: -71 [ 1705.910861][T15572] usbhid 6-1:128.0: probe with driver usbhid failed with error -71 [ 1705.930053][T15572] usb 6-1: USB disconnect, device number 66 [ 1706.329991][T24865] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4660'. [ 1707.547610][T24879] 9p: Bad value for 'rfdno' [ 1709.774640][T24890] SET target dimension over the limit! [ 1710.051504][T24896] netlink: 'syz.2.4669': attribute type 3 has an invalid length. [ 1710.307727][T24889] delete_channel: no stack [ 1710.931802][T24904] netlink: 'syz.7.4670': attribute type 3 has an invalid length. [ 1711.880811][ T30] audit: type=1400 audit(2000000684.006:2582): avc: denied { shutdown } for pid=24911 comm="syz.6.4672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1712.166332][ T30] audit: type=1400 audit(2000000684.015:2583): avc: denied { read } for pid=24911 comm="syz.6.4672" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1712.267833][T24915] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4673'. [ 1712.323163][ T30] audit: type=1400 audit(2000000684.015:2584): avc: denied { open } for pid=24911 comm="syz.6.4672" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1712.472221][ T793] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1712.654243][ T793] usb 9-1: Using ep0 maxpacket: 16 [ 1712.695319][ T793] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1712.735333][ T793] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1712.775748][ T793] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1712.906859][ T793] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1712.942189][ T793] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1713.359108][ T793] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1713.370014][ T793] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1713.412270][ T793] usb 9-1: Manufacturer: syz [ 1713.448302][ T793] usb 9-1: config 0 descriptor?? [ 1714.056503][T24941] 9p: Bad value for 'rfdno' [ 1714.546346][ T793] rc_core: IR keymap rc-hauppauge not found [ 1714.601817][T24946] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4682'. [ 1714.845323][ T793] Registered IR keymap rc-empty [ 1714.866147][ T793] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1714.908373][ T793] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1714.943379][ T793] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1714.978557][ T793] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input91 [ 1715.039845][ T793] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1715.122066][ T793] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1715.154023][ T793] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1715.170151][T24955] netlink: 'syz.2.4684': attribute type 3 has an invalid length. [ 1715.218127][ T793] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1715.336500][ T793] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1715.419250][ T793] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1715.442528][ T793] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1715.519120][ T793] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1715.594368][ T793] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1715.672884][ T793] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1715.720643][ T793] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1715.763094][ T793] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version cf [ 1715.800382][ T793] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1715.881446][ T793] usb 9-1: USB disconnect, device number 27 [ 1717.287874][T24984] FAULT_INJECTION: forcing a failure. [ 1717.287874][T24984] name failslab, interval 1, probability 0, space 0, times 0 [ 1717.301923][T24984] CPU: 0 UID: 0 PID: 24984 Comm: syz.6.4694 Tainted: G L syzkaller #0 PREEMPT(full) [ 1717.301951][T24984] Tainted: [L]=SOFTLOCKUP [ 1717.301958][T24984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1717.301969][T24984] Call Trace: [ 1717.301975][T24984] [ 1717.301982][T24984] dump_stack_lvl+0x100/0x190 [ 1717.302012][T24984] should_fail_ex.cold+0x5/0xa [ 1717.302029][T24984] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1717.302047][T24984] should_failslab+0xc2/0x120 [ 1717.302067][T24984] __kmalloc_noprof+0xe0/0x850 [ 1717.302087][T24984] tomoyo_realpath_from_path+0xb6/0x690 [ 1717.302103][T24984] tomoyo_path_number_perm+0x23c/0x580 [ 1717.302121][T24984] ? tomoyo_path_number_perm+0x22e/0x580 [ 1717.302140][T24984] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1717.302173][T24984] ? find_held_lock+0x2b/0x80 [ 1717.302190][T24984] ? __fget_files+0x215/0x3d0 [ 1717.302201][T24984] ? hook_file_ioctl_common+0x146/0x410 [ 1717.302220][T24984] ? __fget_files+0x21f/0x3d0 [ 1717.302238][T24984] security_file_ioctl+0xd3/0x230 [ 1717.302252][T24984] __x64_sys_ioctl+0xb7/0x210 [ 1717.302270][T24984] do_syscall_64+0x106/0xf80 [ 1717.302284][T24984] ? clear_bhb_loop+0x40/0x90 [ 1717.302299][T24984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1717.302311][T24984] RIP: 0033:0x7f07ea39c629 [ 1717.302322][T24984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1717.302333][T24984] RSP: 002b:00007f07eb1d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1717.302345][T24984] RAX: ffffffffffffffda RBX: 00007f07ea616090 RCX: 00007f07ea39c629 [ 1717.302352][T24984] RDX: 0000200000000040 RSI: 00000000c028aa03 RDI: 0000000000000007 [ 1717.302359][T24984] RBP: 00007f07eb1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1717.302365][T24984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1717.302372][T24984] R13: 00007f07ea616128 R14: 00007f07ea616090 R15: 00007ffd439f4b68 [ 1717.302387][T24984] [ 1717.302438][T24984] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1717.520665][ T793] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1717.698836][ T793] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1717.710464][ T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1717.721721][ T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1717.731688][ T793] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1717.847299][ T793] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1717.883095][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.947731][ T793] usb 3-1: config 0 descriptor?? [ 1718.082175][ T30] audit: type=1400 audit(2000000689.818:2585): avc: denied { create } for pid=24993 comm="syz.8.4698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1718.502759][ T793] plantronics 0003:047F:FFFF.005C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1718.601389][T24990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1718.672287][T24990] block nbd5: NBD_DISCONNECT [ 1718.947156][ T5924] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1719.067482][T25010] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4702'. [ 1719.337648][ T5924] usb 9-1: Using ep0 maxpacket: 16 [ 1719.347998][ T5924] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1719.348037][ T5924] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1719.348058][ T5924] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1719.348080][ T5924] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1719.348100][ T5924] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1719.353712][ T5924] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1719.353732][ T5924] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1719.353746][ T5924] usb 9-1: Manufacturer: syz [ 1719.355377][ T5924] usb 9-1: config 0 descriptor?? [ 1719.685527][ T5924] rc_core: IR keymap rc-hauppauge not found [ 1719.693498][ T5924] Registered IR keymap rc-empty [ 1719.701003][T21822] usb 3-1: USB disconnect, device number 44 [ 1719.720841][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1719.751787][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1719.754291][T25019] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1719.782673][ T30] audit: type=1400 audit(2000000691.409:2586): avc: denied { name_bind } for pid=25018 comm="syz.7.4704" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1719.815067][ T5924] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1719.846109][ T5924] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input93 [ 1719.861820][ T30] audit: type=1400 audit(2000000691.409:2587): avc: denied { node_bind } for pid=25018 comm="syz.7.4704" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1719.908034][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1719.918243][ T30] audit: type=1400 audit(2000000691.437:2588): avc: denied { read } for pid=25018 comm="syz.7.4704" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1719.962724][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1719.984107][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1720.009250][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1720.058989][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1720.176751][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1720.207974][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1720.225491][T25023] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4705'. [ 1720.235093][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1720.244122][T25023] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4705'. [ 1720.272550][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1720.294204][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1720.313435][ T30] audit: type=1400 audit(2000000691.895:2589): avc: denied { write } for pid=25028 comm="syz.2.4707" name="usbmon8" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1720.339642][ T5924] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1720.370735][ T5924] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version cf [ 1720.380677][ T5924] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1720.395472][ T5924] usb 9-1: USB disconnect, device number 28 [ 1721.339491][T25047] netlink: 'syz.7.4711': attribute type 2 has an invalid length. [ 1721.363840][T25047] netlink: 'syz.7.4711': attribute type 1 has an invalid length. [ 1721.371998][T25047] FAULT_INJECTION: forcing a failure. [ 1721.371998][T25047] name failslab, interval 1, probability 0, space 0, times 0 [ 1721.386823][T25047] CPU: 1 UID: 0 PID: 25047 Comm: syz.7.4711 Tainted: G L syzkaller #0 PREEMPT(full) [ 1721.386853][T25047] Tainted: [L]=SOFTLOCKUP [ 1721.386859][T25047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1721.386872][T25047] Call Trace: [ 1721.386879][T25047] [ 1721.386886][T25047] dump_stack_lvl+0x100/0x190 [ 1721.386933][T25047] should_fail_ex.cold+0x5/0xa [ 1721.386959][T25047] should_failslab+0xc2/0x120 [ 1721.386988][T25047] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1721.387012][T25047] ? skb_clone+0x190/0x400 [ 1721.387039][T25047] skb_clone+0x190/0x400 [ 1721.387058][T25047] netlink_deliver_tap+0xaed/0xcc0 [ 1721.387084][T25047] netlink_unicast+0x70c/0x870 [ 1721.387108][T25047] ? __pfx_netlink_unicast+0x10/0x10 [ 1721.387125][T25047] ? __alloc_skb+0x5b7/0x710 [ 1721.387160][T25047] netlink_ack+0x655/0xb80 [ 1721.387185][T25047] netlink_rcv_skb+0x333/0x420 [ 1721.387203][T25047] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1721.387224][T25047] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1721.387244][T25047] ? ns_capable+0xd2/0xf0 [ 1721.387261][T25047] nfnetlink_rcv+0x1b3/0x440 [ 1721.387278][T25047] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1721.387293][T25047] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1721.387308][T25047] netlink_unicast+0x5aa/0x870 [ 1721.387322][T25047] ? __pfx_netlink_unicast+0x10/0x10 [ 1721.387340][T25047] netlink_sendmsg+0x8b0/0xda0 [ 1721.387355][T25047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1721.387367][T25047] ? __might_fault+0xc0/0x140 [ 1721.387387][T25047] ____sys_sendmsg+0xa54/0xc30 [ 1721.387404][T25047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1721.387424][T25047] ___sys_sendmsg+0x190/0x1e0 [ 1721.387439][T25047] ? __pfx____sys_sendmsg+0x10/0x10 [ 1721.387471][T25047] __sys_sendmsg+0x170/0x220 [ 1721.387489][T25047] ? __pfx___sys_sendmsg+0x10/0x10 [ 1721.387516][T25047] do_syscall_64+0x106/0xf80 [ 1721.387530][T25047] ? clear_bhb_loop+0x40/0x90 [ 1721.387545][T25047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.387557][T25047] RIP: 0033:0x7f58a9d9c629 [ 1721.387568][T25047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1721.387579][T25047] RSP: 002b:00007f58aacb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1721.387591][T25047] RAX: ffffffffffffffda RBX: 00007f58aa015fa0 RCX: 00007f58a9d9c629 [ 1721.387598][T25047] RDX: 00000000240080c0 RSI: 0000200000000100 RDI: 0000000000000003 [ 1721.387605][T25047] RBP: 00007f58aacb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1721.387612][T25047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1721.387618][T25047] R13: 00007f58aa016038 R14: 00007f58aa015fa0 R15: 00007ffe81b67648 [ 1721.387633][T25047] [ 1721.828177][T25050] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4713'. [ 1722.004052][T16356] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1722.349263][T16356] usb 9-1: Using ep0 maxpacket: 16 [ 1722.357269][T16356] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1722.376578][T16356] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1722.405928][T16356] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1722.427726][T16356] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.848335][T25065] SET target dimension over the limit! [ 1722.887120][T16356] usbhid 9-1:128.0: can't add hid device: -71 [ 1722.904575][T16356] usbhid 9-1:128.0: probe with driver usbhid failed with error -71 [ 1723.082879][T16356] usb 9-1: USB disconnect, device number 29 [ 1723.176710][T25065] delete_channel: no stack [ 1723.748292][T25070] netlink: 'syz.7.4718': attribute type 3 has an invalid length. [ 1724.212483][T25079] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4719'. [ 1724.221744][T25079] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4719'. [ 1724.432727][ T793] libceph: connect (1)[c::]:6789 error -101 [ 1724.443988][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 1724.450797][ T24] libceph: connect (1)[b::]:6789 error -101 [ 1724.458228][ T24] libceph: mon0 (1)[b::]:6789 connect error [ 1724.707116][T25074] ceph: No mds server is up or the cluster is laggy [ 1724.714332][T25076] ceph: No mds server is up or the cluster is laggy [ 1724.755350][ T24] libceph: connect (1)[b::]:6789 error -101 [ 1724.765975][ T24] libceph: mon0 (1)[b::]:6789 connect error [ 1724.798599][ T30] audit: type=1400 audit(2000000696.097:2590): avc: denied { mount } for pid=25081 comm="syz.5.4720" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1725.315782][T16356] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1725.496888][T16356] usb 9-1: Using ep0 maxpacket: 16 [ 1725.540065][T16356] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.841346][T16356] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1725.875179][T16356] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1725.894528][T16356] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1725.950642][T16356] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1726.010966][T16356] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1726.026165][T16356] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1726.047693][T16356] usb 9-1: Manufacturer: syz [ 1726.066647][T16356] usb 9-1: config 0 descriptor?? [ 1726.394977][T16356] rc_core: IR keymap rc-hauppauge not found [ 1726.401045][T16356] Registered IR keymap rc-empty [ 1726.422468][T16356] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1726.458954][T16356] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1726.514228][T16356] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1726.541971][T16356] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input94 [ 1726.577338][T16356] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1726.696393][T16356] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1726.747801][T16356] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1726.802124][T16356] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1726.832178][T16356] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1726.875859][T16356] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1726.887049][T25099] CUSE: unknown device info "" [ 1726.891909][T25099] CUSE: unknown device info "" [ 1726.900857][T16356] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1726.924079][T25099] CUSE: unknown device info "" [ 1726.937588][T25099] CUSE: unknown device info "" [ 1726.939883][T16356] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1726.948260][T25099] CUSE: unknown device info "" [ 1727.007540][T25099] CUSE: unknown device info "" [ 1727.095083][T25103] SET target dimension over the limit! [ 1727.151259][T25099] CUSE: unknown device info "" [ 1727.153583][T16356] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1727.188308][T25099] CUSE: unknown device info "" [ 1727.291387][T16356] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1727.320224][T16356] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1727.323723][T25099] CUSE: DEVNAME unspecified [ 1727.391691][T25107] FAULT_INJECTION: forcing a failure. [ 1727.391691][T25107] name failslab, interval 1, probability 0, space 0, times 0 [ 1727.392199][T16356] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version cf [ 1727.447221][T25107] CPU: 1 UID: 0 PID: 25107 Comm: syz.6.4726 Tainted: G L syzkaller #0 PREEMPT(full) [ 1727.447245][T25107] Tainted: [L]=SOFTLOCKUP [ 1727.447250][T25107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1727.447257][T25107] Call Trace: [ 1727.447261][T25107] [ 1727.447267][T25107] dump_stack_lvl+0x100/0x190 [ 1727.447292][T25107] should_fail_ex.cold+0x5/0xa [ 1727.447309][T25107] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1727.447324][T25107] should_failslab+0xc2/0x120 [ 1727.447343][T25107] __kmalloc_noprof+0xe0/0x850 [ 1727.447362][T25107] tomoyo_realpath_from_path+0xb6/0x690 [ 1727.447380][T25107] tomoyo_path_number_perm+0x23c/0x580 [ 1727.447398][T25107] ? tomoyo_path_number_perm+0x22e/0x580 [ 1727.447417][T25107] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1727.447449][T25107] ? find_held_lock+0x2b/0x80 [ 1727.447464][T25107] ? __fget_files+0x215/0x3d0 [ 1727.447474][T25107] ? hook_file_ioctl_common+0x146/0x410 [ 1727.447493][T25107] ? __fget_files+0x21f/0x3d0 [ 1727.447505][T25107] security_file_ioctl+0xd3/0x230 [ 1727.447519][T25107] __x64_sys_ioctl+0xb7/0x210 [ 1727.447537][T25107] do_syscall_64+0x106/0xf80 [ 1727.447551][T25107] ? clear_bhb_loop+0x40/0x90 [ 1727.447565][T25107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.447578][T25107] RIP: 0033:0x7f07ea39c629 [ 1727.447589][T25107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1727.447599][T25107] RSP: 002b:00007f07eb1f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1727.447612][T25107] RAX: ffffffffffffffda RBX: 00007f07ea615fa0 RCX: 00007f07ea39c629 [ 1727.447620][T25107] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1727.447626][T25107] RBP: 00007f07eb1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1727.447633][T25107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1727.447639][T25107] R13: 00007f07ea616038 R14: 00007f07ea615fa0 R15: 00007ffd439f4b68 [ 1727.447653][T25107] [ 1727.447660][T25107] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1727.674785][T25107] input: syz1 as /devices/virtual/input/input95 [ 1727.692558][T25109] input: syz1 as /devices/virtual/input/input96 [ 1727.699326][T16356] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1727.766404][T16356] usb 9-1: USB disconnect, device number 30 [ 1728.248883][T25100] delete_channel: no stack [ 1728.389879][T25119] SET target dimension over the limit! [ 1728.704000][T16356] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1728.877188][T16356] usb 9-1: Using ep0 maxpacket: 8 [ 1729.005224][T16356] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1729.014157][T16356] usb 9-1: config 179 has no interface number 0 [ 1729.032468][T16356] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1729.074968][T16356] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1729.098788][T25117] delete_channel: no stack [ 1729.136335][T16356] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1729.189618][T16356] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1729.221571][T16356] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1729.269261][T16356] usb 9-1: config 179 interface 65 has no altsetting 0 [ 1729.293744][T16356] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1729.327896][T16356] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.532241][T16356] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input97 [ 1729.707393][ T5163] input input97: unable to receive magic message: -110 [ 1729.775897][ T5163] input input97: unable to receive magic message: -71 [ 1729.814667][ T2464] block nbd0: Possible stuck request ffff888027b48000: control (read@0,1024B). Runtime 90 seconds [ 1729.826012][ T2464] block nbd0: Possible stuck request ffff888027b48200: control (read@1024,1024B). Runtime 90 seconds [ 1729.837653][ T2464] block nbd0: Possible stuck request ffff888027b48400: control (read@2048,1024B). Runtime 90 seconds [ 1729.849946][ T2464] block nbd0: Possible stuck request ffff888027b48600: control (read@3072,1024B). Runtime 90 seconds [ 1729.889412][ T5163] input input97: unable to receive magic message: -71 [ 1729.914502][T16356] usb 9-1: USB disconnect, device number 31 [ 1729.920977][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1729.921017][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1731.425337][T25144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4734'. [ 1731.672106][T25151] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4735'. [ 1732.089931][ T5924] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1732.610920][T25155] 9p: Bad value for 'rfdno' [ 1732.722174][ T5924] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1732.746990][ T5924] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1732.783602][ T5924] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1056, setting to 64 [ 1732.805810][T25159] usb usb8: usbfs: process 25159 (syz.7.4739) did not claim interface 0 before use [ 1732.825920][ T5924] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1732.909930][ T5924] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1732.931961][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.158384][T16356] usb 6-1: new low-speed USB device number 67 using dummy_hcd [ 1733.195223][ T5924] usb 3-1: GET_CAPABILITIES returned 4a [ 1733.215222][ T5924] usbtmc 3-1:16.0: can't read capabilities [ 1733.311811][T16356] usb 6-1: device descriptor read/64, error -71 [ 1733.480930][ T5924] usb 3-1: USB disconnect, device number 45 [ 1733.582249][T25168] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4741'. [ 1733.789172][T16356] usb 6-1: new low-speed USB device number 68 using dummy_hcd [ 1733.929529][T16356] usb 6-1: device descriptor read/64, error -71 [ 1734.291369][T16356] usb usb6-port1: attempt power cycle [ 1734.654801][T16356] usb 6-1: new low-speed USB device number 69 using dummy_hcd [ 1734.838652][T16356] usb 6-1: device descriptor read/8, error -71 [ 1735.124527][T16356] usb 6-1: new low-speed USB device number 70 using dummy_hcd [ 1735.371526][T16356] usb 6-1: device not accepting address 70, error -71 [ 1735.379784][T16356] usb usb6-port1: unable to enumerate USB device [ 1735.660202][T25196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25196 comm=syz.7.4747 [ 1735.685679][T25196] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4747'. [ 1735.847608][T25198] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4749'. [ 1736.663293][ T5925] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1736.800273][ T30] audit: type=1400 audit(2000000707.328:2591): avc: denied { listen } for pid=25219 comm="syz.5.4756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1736.842631][ T30] audit: type=1400 audit(2000000707.366:2592): avc: denied { accept } for pid=25219 comm="syz.5.4756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1736.888595][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1736.912975][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1736.929783][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1736.940024][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1736.974133][ T5925] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1737.006777][T21822] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1737.014660][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.264394][ T5925] usb 3-1: config 0 descriptor?? [ 1737.280429][ T30] audit: type=1400 audit(2000000707.394:2593): avc: denied { read } for pid=25219 comm="syz.5.4756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1737.452883][ T30] audit: type=1400 audit(2000000707.394:2594): avc: denied { create } for pid=25219 comm="syz.5.4756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1737.473184][T21822] usb 9-1: Using ep0 maxpacket: 8 [ 1737.565222][T21822] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1737.604791][T21822] usb 9-1: config 0 has no interface number 0 [ 1737.887812][T21822] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1737.929490][T21822] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1737.935288][ T5925] plantronics 0003:047F:FFFF.005D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1737.995091][T21822] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1738.026506][T21822] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1738.214313][T25231] random: crng reseeded on system resumption [ 1739.441742][T21822] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1739.450844][T21822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.526680][T21822] usb 9-1: config 0 descriptor?? [ 1739.553649][T21822] ldusb 9-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1739.599372][T25235] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4760'. [ 1740.725611][ T5924] usb 9-1: USB disconnect, device number 32 [ 1740.749412][ T5924] ldusb 9-1:0.55: LD USB Device #1 now disconnected [ 1740.840219][T25256] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4764'. [ 1741.296962][T25260] No such timeout policy "syz0" [ 1741.478072][T25266] netlink: 'syz.5.4767': attribute type 3 has an invalid length. [ 1741.555257][T25269] netlink: 'syz.7.4768': attribute type 1 has an invalid length. [ 1741.563039][T25269] netlink: 2108 bytes leftover after parsing attributes in process `syz.7.4768'. [ 1741.574654][T25269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1741.585837][T25269] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4768'. [ 1741.600740][T25269] No source specified [ 1741.975293][T16356] usb 3-1: USB disconnect, device number 46 [ 1742.202707][T25278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1742.286069][T25278] tipc: Started in network mode [ 1742.307570][T25278] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1742.367452][T25278] tipc: Enabled bearer , priority 10 [ 1743.095084][ T24] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1743.612715][T25306] SET target dimension over the limit! [ 1743.631771][T21822] tipc: Node number set to 1 [ 1743.642396][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1743.668028][T25305] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4778'. [ 1743.682417][T18223] block nbd8: Receive control failed (result -32) [ 1743.730539][T25307] io-wq is not configured for unbound workers [ 1743.935128][T25295] block nbd8: shutting down sockets [ 1743.968393][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1744.009940][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1744.092827][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1744.468247][T25310] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4780'. [ 1744.508898][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1744.806599][T25302] delete_channel: no stack [ 1744.833515][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.866902][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1744.880682][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 1744.939937][ T24] usb 6-1: config 0 descriptor?? [ 1745.646489][T25322] SET target dimension over the limit! [ 1745.726208][ T24] plantronics 0003:047F:FFFF.005E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1746.217748][ T24] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1746.309514][T25331] binder: BINDER_SET_CONTEXT_MGR already set [ 1746.340010][T25331] binder: 25330:25331 ioctl 4018620d 200000000100 returned -16 [ 1746.407513][ T24] usb 9-1: device descriptor read/64, error -71 [ 1746.473939][T16356] usb 6-1: USB disconnect, device number 71 [ 1747.219319][ T24] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1747.344193][ T30] audit: type=1400 audit(2000000717.183:2595): avc: denied { module_load } for pid=25335 comm="syz.5.4785" path="/305/bus" dev="tmpfs" ino=1669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 1747.539866][ T24] usb 9-1: device descriptor read/64, error -71 [ 1747.691321][ T24] usb usb9-port1: attempt power cycle [ 1747.829693][T25340] netlink: 'syz.6.4786': attribute type 3 has an invalid length. [ 1748.118217][ T24] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1748.175002][ T24] usb 9-1: device descriptor read/8, error -71 [ 1748.494440][T25351] SET target dimension over the limit! [ 1748.576317][ T24] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1748.630576][ T24] usb 9-1: device descriptor read/8, error -71 [ 1748.828253][T25354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4791'. [ 1750.136627][ T24] usb usb9-port1: unable to enumerate USB device [ 1750.253742][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1750.261769][ C1] lec:lec_tx_timeout: lec0 [ 1752.153930][T25349] delete_channel: no stack [ 1752.764132][T25376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4795'. [ 1753.687014][T25383] 9p: Bad value for 'rfdno' [ 1754.357248][T21822] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1754.638475][T21822] usb 6-1: Using ep0 maxpacket: 16 [ 1754.720931][T21822] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.775773][T21822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1754.815622][T21822] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1754.871129][T21822] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1754.982069][T21822] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1755.031919][T21822] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1755.149073][T21822] usb 6-1: Manufacturer: syz [ 1755.204313][T21822] usb 6-1: config 0 descriptor?? [ 1755.467733][T25394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1755.493040][T25393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1755.525278][T25394] block nbd2: NBD_DISCONNECT [ 1755.543861][T25393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1756.266760][T25406] SET target dimension over the limit! [ 1756.855512][ T30] audit: type=1400 audit(2000000726.093:2596): avc: denied { append } for pid=25412 comm="syz.7.4806" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1757.905980][T21822] usb 6-1: USB disconnect, device number 72 [ 1757.971346][T25402] delete_channel: no stack [ 1758.941776][T25436] netlink: 'syz.2.4810': attribute type 3 has an invalid length. [ 1759.079211][T25431] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4809'. [ 1760.260817][T25442] 9p: Bad value for 'rfdno' [ 1761.316655][T25449] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4814'. [ 1761.955175][ T2464] block nbd0: Possible stuck request ffff888027b48000: control (read@0,1024B). Runtime 120 seconds [ 1761.971869][ T2464] block nbd0: Possible stuck request ffff888027b48200: control (read@1024,1024B). Runtime 120 seconds [ 1761.989779][ T2464] block nbd0: Possible stuck request ffff888027b48400: control (read@2048,1024B). Runtime 120 seconds [ 1762.001322][ T2464] block nbd0: Possible stuck request ffff888027b48600: control (read@3072,1024B). Runtime 120 seconds [ 1762.275451][T25456] FAULT_INJECTION: forcing a failure. [ 1762.275451][T25456] name failslab, interval 1, probability 0, space 0, times 0 [ 1762.304153][T25456] CPU: 0 UID: 0 PID: 25456 Comm: syz.6.4817 Tainted: G L syzkaller #0 PREEMPT(full) [ 1762.304185][T25456] Tainted: [L]=SOFTLOCKUP [ 1762.304191][T25456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1762.304202][T25456] Call Trace: [ 1762.304210][T25456] [ 1762.304217][T25456] dump_stack_lvl+0x100/0x190 [ 1762.304255][T25456] should_fail_ex.cold+0x5/0xa [ 1762.304278][T25456] ? tomoyo_encode2+0xfb/0x3c0 [ 1762.304299][T25456] should_failslab+0xc2/0x120 [ 1762.304326][T25456] __kmalloc_noprof+0xe0/0x850 [ 1762.304350][T25456] ? d_absolute_path+0x136/0x1b0 [ 1762.304377][T25456] tomoyo_encode2+0xfb/0x3c0 [ 1762.304399][T25456] tomoyo_encode+0x29/0x50 [ 1762.304418][T25456] tomoyo_realpath_from_path+0x18c/0x690 [ 1762.304444][T25456] tomoyo_path_number_perm+0x23c/0x580 [ 1762.304470][T25456] ? tomoyo_path_number_perm+0x22e/0x580 [ 1762.304496][T25456] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1762.304544][T25456] ? find_held_lock+0x2b/0x80 [ 1762.304566][T25456] ? __fget_files+0x215/0x3d0 [ 1762.304583][T25456] ? hook_file_ioctl_common+0x146/0x410 [ 1762.304611][T25456] ? __fget_files+0x21f/0x3d0 [ 1762.304632][T25456] security_file_ioctl+0xd3/0x230 [ 1762.304654][T25456] __x64_sys_ioctl+0xb7/0x210 [ 1762.304683][T25456] do_syscall_64+0x106/0xf80 [ 1762.304710][T25456] ? clear_bhb_loop+0x40/0x90 [ 1762.304731][T25456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.304747][T25456] RIP: 0033:0x7f07ea39c629 [ 1762.304762][T25456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1762.304779][T25456] RSP: 002b:00007f07eb1f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1762.304797][T25456] RAX: ffffffffffffffda RBX: 00007f07ea615fa0 RCX: 00007f07ea39c629 [ 1762.304809][T25456] RDX: 00002000000001c0 RSI: 00000000c06864b8 RDI: 0000000000000003 [ 1762.304819][T25456] RBP: 00007f07eb1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1762.304830][T25456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1762.304840][T25456] R13: 00007f07ea616038 R14: 00007f07ea615fa0 R15: 00007ffd439f4b68 [ 1762.304864][T25456] [ 1762.304882][T25456] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1762.642912][ T30] audit: type=1400 audit(2000000731.512:2597): avc: denied { map } for pid=25459 comm="syz.6.4819" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1762.675811][T25460] binder_alloc: 25459: pid 25459 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1762.697127][ T30] audit: type=1400 audit(2000000731.540:2598): avc: denied { call } for pid=25459 comm="syz.6.4819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1762.717224][T25460] binder_alloc: 25459: pid 25459 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1763.061498][ T5924] hid-generic 0003:0004:0000.005F: unknown main item tag 0x0 [ 1763.070456][ T5924] hid-generic 0003:0004:0000.005F: unknown main item tag 0x0 [ 1763.378654][ T5924] hid-generic 0003:0004:0000.005F: unknown main item tag 0x0 [ 1763.453037][ T5924] hid-generic 0003:0004:0000.005F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1764.173946][T25470] fido_id[25470]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1764.405454][T25479] SET target dimension over the limit! [ 1765.348515][T25482] 9p: Bad value for 'rfdno' [ 1765.406575][ T30] audit: type=1804 audit(2000000734.095:2599): pid=25485 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.4826" name="/newroot/188/file0" dev="fuse" ino=1 res=1 errno=0 [ 1766.345266][T15572] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 1766.414671][ T9499] lec:lec_start_xmit: lec0:No lecd attached [ 1766.549076][T25495] orangefs_mount: mount request failed with -4 [ 1766.668356][T15572] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1766.711573][T15572] usb 3-1: config 0 has no interface number 0 [ 1766.717670][T15572] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1766.720857][T25509] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4833'. [ 1766.894424][T15572] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1766.981010][T15572] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1767.140125][T15572] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.625530][T15572] usb 3-1: config 0 descriptor?? [ 1767.646092][T25493] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1767.702569][T15572] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1767.953013][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1767.970142][ T5964] usb 3-1: USB disconnect, device number 47 [ 1768.940248][T25526] 9p: Unknown access argument 18446744073709551615: -34 [ 1769.119906][T25526] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1769.146067][ T30] audit: type=1400 audit(2000000737.605:2600): avc: denied { getopt } for pid=25525 comm="syz.7.4838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1769.221532][ T30] audit: type=1400 audit(2000000737.605:2601): avc: denied { getopt } for pid=25525 comm="syz.7.4838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1770.213234][ T793] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1770.505086][ T793] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1770.542056][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1770.570329][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1770.605890][ T793] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1770.650796][ T793] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1770.661901][ T793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.684065][ T793] usb 6-1: config 0 descriptor?? [ 1770.934452][ T30] audit: type=1400 audit(2000000739.271:2602): avc: denied { getopt } for pid=25544 comm="syz.7.4843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1771.150945][ T793] usbhid 6-1:0.0: can't add hid device: -71 [ 1771.182857][ T793] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1771.325780][ T793] usb 6-1: USB disconnect, device number 73 [ 1771.456695][T25552] FAULT_INJECTION: forcing a failure. [ 1771.456695][T25552] name failslab, interval 1, probability 0, space 0, times 0 [ 1771.471912][T25547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1771.484371][T25547] block nbd6: NBD_DISCONNECT [ 1771.490744][T25552] CPU: 0 UID: 0 PID: 25552 Comm: syz.2.4845 Tainted: G L syzkaller #0 PREEMPT(full) [ 1771.490765][T25552] Tainted: [L]=SOFTLOCKUP [ 1771.490770][T25552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1771.490778][T25552] Call Trace: [ 1771.490783][T25552] [ 1771.490788][T25552] dump_stack_lvl+0x100/0x190 [ 1771.490815][T25552] should_fail_ex.cold+0x5/0xa [ 1771.490831][T25552] ? tomoyo_encode2+0xfb/0x3c0 [ 1771.490845][T25552] should_failslab+0xc2/0x120 [ 1771.490865][T25552] __kmalloc_noprof+0xe0/0x850 [ 1771.490888][T25552] tomoyo_encode2+0xfb/0x3c0 [ 1771.490903][T25552] tomoyo_encode+0x29/0x50 [ 1771.490915][T25552] tomoyo_mount_acl+0x14c/0x8b0 [ 1771.490928][T25552] ? is_bpf_text_address+0x8a/0x1a0 [ 1771.490947][T25552] ? bpf_ksym_find+0x128/0x1c0 [ 1771.490966][T25552] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1771.490985][T25552] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1771.490996][T25552] ? kernel_text_address+0x8d/0x100 [ 1771.491012][T25552] ? unwind_get_return_address+0x59/0xa0 [ 1771.491040][T25552] ? tomoyo_domain+0xb2/0x150 [ 1771.491054][T25552] ? tomoyo_profile+0x47/0x60 [ 1771.491071][T25552] tomoyo_mount_permission+0x214/0x460 [ 1771.491082][T25552] ? tomoyo_mount_permission+0x1f6/0x460 [ 1771.491095][T25552] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1771.491116][T25552] security_sb_mount+0xdd/0x270 [ 1771.491137][T25552] path_mount+0x158/0x23d0 [ 1771.491155][T25552] ? __pfx_path_mount+0x10/0x10 [ 1771.491166][T25552] ? lockdep_hardirqs_on+0x78/0x100 [ 1771.491182][T25552] ? putname+0xb1/0x110 [ 1771.491192][T25552] ? kmem_cache_free+0x124/0x6a0 [ 1771.491210][T25552] ? __x64_sys_mount+0x293/0x310 [ 1771.491223][T25552] __x64_sys_mount+0x293/0x310 [ 1771.491236][T25552] ? __pfx___x64_sys_mount+0x10/0x10 [ 1771.491254][T25552] do_syscall_64+0x106/0xf80 [ 1771.491265][T25552] ? clear_bhb_loop+0x40/0x90 [ 1771.491280][T25552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1771.491292][T25552] RIP: 0033:0x7f656e79c629 [ 1771.491304][T25552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1771.491314][T25552] RSP: 002b:00007f656f69a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1771.491327][T25552] RAX: ffffffffffffffda RBX: 00007f656ea15fa0 RCX: 00007f656e79c629 [ 1771.491334][T25552] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 0000200000000200 [ 1771.491341][T25552] RBP: 00007f656f69a090 R08: 00002000000001c0 R09: 0000000000000000 [ 1771.491350][T25552] R10: 0000000001008840 R11: 0000000000000246 R12: 0000000000000001 [ 1771.491357][T25552] R13: 00007f656ea16038 R14: 00007f656ea15fa0 R15: 00007ffe6f87ec68 [ 1771.491371][T25552] [ 1771.773125][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1771.781148][ C1] lec:lec_tx_timeout: lec0 [ 1772.605589][T25559] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4849'. [ 1773.435264][T25575] bridge0: port 3(syz_tun) entered blocking state [ 1773.442143][T25575] bridge0: port 3(syz_tun) entered disabled state [ 1773.448702][T25575] syz_tun: entered allmulticast mode [ 1773.455397][T25575] syz_tun: entered promiscuous mode [ 1773.461046][T25575] bridge0: port 3(syz_tun) entered blocking state [ 1773.468186][T25575] bridge0: port 3(syz_tun) entered forwarding state [ 1773.579482][T25578] SET target dimension over the limit! [ 1773.834390][T25577] delete_channel: no stack [ 1774.229763][ T5925] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1774.437366][ T5925] usb 6-1: New USB device found, idVendor=09c0, idProduct=1203, bcdDevice=d3.32 [ 1774.466274][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.498698][ T5925] usb 6-1: config 0 descriptor?? [ 1775.145033][T25591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1775.154608][T25591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1775.173816][ T30] audit: type=1400 audit(2000000743.211:2603): avc: denied { connect } for pid=25580 comm="syz.5.4854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1776.352986][T25599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1776.375792][T25599] block nbd7: NBD_DISCONNECT [ 1777.514927][ T24] usb 6-1: USB disconnect, device number 74 [ 1777.827717][T25626] 9p: Bad value for 'rfdno' [ 1780.206673][T25648] SET target dimension over the limit! [ 1780.970281][T25656] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4873'. [ 1781.100447][T25648] delete_channel: no stack [ 1782.700625][T25678] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4878'. [ 1782.834417][ T5964] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1783.090970][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1783.102736][ T5964] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1783.114144][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.129308][ T5964] usb 6-1: config 0 descriptor?? [ 1783.784737][ T5964] keytouch 0003:0926:3333.0060: fixing up Keytouch IEC report descriptor [ 1783.865670][ T5964] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0060/input/input100 [ 1784.260706][ T5964] keytouch 0003:0926:3333.0060: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1784.619438][ T5964] usb 6-1: USB disconnect, device number 75 [ 1785.287571][T25697] fido_id[25697]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1785.400512][T25702] random: crng reseeded on system resumption [ 1785.714563][T18283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1785.725547][T18283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1785.733677][T18283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1785.741773][T18283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1785.752661][T18283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1785.779834][T18223] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1785.789541][T18223] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1785.801215][T18223] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1785.812759][T18223] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1785.823228][T18223] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1785.844169][ T30] audit: type=1400 audit(2000000753.225:2604): avc: denied { mounton } for pid=25709 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1786.765573][T25709] chnl_net:caif_netlink_parms(): no params data found [ 1786.906504][T25709] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.923447][T25709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.941496][T25709] bridge_slave_0: entered allmulticast mode [ 1786.957661][T25709] bridge_slave_0: entered promiscuous mode [ 1786.981359][T25709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1787.010687][T25709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.017924][T25709] bridge_slave_1: entered allmulticast mode [ 1787.059627][T25709] bridge_slave_1: entered promiscuous mode [ 1787.153256][T25733] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4890'. [ 1787.189259][T25709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1787.215351][T25709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1787.267342][T25709] team0: Port device team_slave_0 added [ 1787.280043][T25709] team0: Port device team_slave_1 added [ 1787.649970][T25709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1787.659084][ T30] audit: type=1400 audit(2000000754.928:2605): avc: denied { read } for pid=25738 comm="syz.7.4892" laddr=::7f00:1 lport=44512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1787.683241][T25709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1787.757279][T25709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1787.790244][T25709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1787.810822][T25709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1787.877983][T25709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1788.087833][T18283] Bluetooth: hci1: command tx timeout [ 1788.534681][T25709] hsr_slave_0: entered promiscuous mode [ 1788.551741][T25709] hsr_slave_1: entered promiscuous mode [ 1788.563686][T25709] debugfs: 'hsr0' already exists in 'hsr' [ 1788.569575][T25709] Cannot create hsr debugfs directory [ 1789.526323][T25771] SET target dimension over the limit! [ 1789.632536][T25709] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1789.812030][T25709] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1789.853146][T25709] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1789.889422][T25709] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1790.003070][T25770] delete_channel: no stack [ 1790.184157][T25709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1790.236726][ T793] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1790.247851][T18283] Bluetooth: hci1: command tx timeout [ 1790.289088][T25709] 8021q: adding VLAN 0 to HW filter on device team0 [ 1790.303756][ T7991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1790.310855][ T7991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1790.365691][ T7991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1790.372793][ T7991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1790.397701][ T5925] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1790.431315][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1790.450432][ T793] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1790.493087][ T793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.550179][ T793] usb 6-1: config 0 descriptor?? [ 1790.592637][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1790.631357][ T5925] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1790.674991][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.715598][ T5925] usb 3-1: config 0 descriptor?? [ 1790.948581][T25709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1791.009547][ T793] keytouch 0003:0926:3333.0061: fixing up Keytouch IEC report descriptor [ 1791.041928][ T793] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0061/input/input101 [ 1791.519428][ T5925] keytouch 0003:0926:3333.0062: fixing up Keytouch IEC report descriptor [ 1791.907536][ T5925] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0062/input/input102 [ 1791.963927][ T793] keytouch 0003:0926:3333.0061: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1792.108593][ T793] usb 6-1: USB disconnect, device number 76 [ 1792.198761][ T5925] keytouch 0003:0926:3333.0062: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1792.321296][ T5925] usb 3-1: USB disconnect, device number 48 [ 1792.452306][T25805] fido_id[25805]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1792.470974][T18283] Bluetooth: hci1: command tx timeout [ 1792.563112][T25810] fido_id[25810]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1792.991614][T25709] veth0_vlan: entered promiscuous mode [ 1793.048632][T25821] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4910'. [ 1793.065050][T25709] veth1_vlan: entered promiscuous mode [ 1793.191029][T25709] veth0_macvtap: entered promiscuous mode [ 1793.247486][T25709] veth1_macvtap: entered promiscuous mode [ 1793.284251][T25709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1793.351638][T25709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1793.489760][ T7991] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.529260][ T7991] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.559117][ T7991] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.601094][ T7991] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.818480][T25838] 9p: Bad value for 'rfdno' [ 1794.290789][ T2464] block nbd0: Possible stuck request ffff888027b48000: control (read@0,1024B). Runtime 150 seconds [ 1794.302114][ T2464] block nbd0: Possible stuck request ffff888027b48200: control (read@1024,1024B). Runtime 150 seconds [ 1794.313784][ T2464] block nbd0: Possible stuck request ffff888027b48400: control (read@2048,1024B). Runtime 150 seconds [ 1794.333647][ T2464] block nbd0: Possible stuck request ffff888027b48600: control (read@3072,1024B). Runtime 150 seconds [ 1794.561200][T25843] random: crng reseeded on system resumption [ 1794.692945][T18283] Bluetooth: hci1: command tx timeout [ 1795.508167][T13159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1795.847365][T13159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1796.008625][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1796.033477][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1796.112259][ T30] audit: type=1400 audit(2000000762.827:2606): avc: denied { mounton } for pid=25709 comm="syz-executor" path="/root/syzkaller.2oJkXV/syz-tmp" dev="sda1" ino=2063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1796.169518][T25848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4920'. [ 1796.190770][ T30] audit: type=1400 audit(2000000762.827:2607): avc: denied { mounton } for pid=25709 comm="syz-executor" path="/root/syzkaller.2oJkXV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1796.251603][ T30] audit: type=1400 audit(2000000762.827:2608): avc: denied { mounton } for pid=25709 comm="syz-executor" path="/root/syzkaller.2oJkXV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=101944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1796.331746][ T30] audit: type=1400 audit(2000000762.902:2609): avc: denied { mounton } for pid=25709 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1796.409433][ T30] audit: type=1400 audit(2000000762.902:2610): avc: denied { mount } for pid=25709 comm="syz-executor" name="/" dev="gadgetfs" ino=8288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1796.489570][ T30] audit: type=1400 audit(2000000762.902:2611): avc: denied { mount } for pid=25709 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1796.792699][T25857] SET target dimension over the limit! [ 1797.127564][T25856] delete_channel: no stack [ 1797.244781][ T30] audit: type=1400 audit(2000000763.894:2612): avc: denied { write } for pid=25863 comm="syz.6.4924" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1797.345987][ T30] audit: type=1400 audit(2000000763.894:2613): avc: denied { ioctl } for pid=25863 comm="syz.6.4924" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1797.605353][T25873] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4926'. [ 1797.772552][ T30] audit: type=1400 audit(2000000764.353:2614): avc: denied { ioctl } for pid=25863 comm="syz.6.4924" path="socket:[102600]" dev="sockfs" ino=102600 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1798.018590][ T30] audit: type=1400 audit(2000000764.624:2615): avc: denied { setopt } for pid=25876 comm="syz.2.4927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1798.517491][T21881] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1798.893496][T21881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1798.929411][T21881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1798.960873][T21881] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1799.097601][T21881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.148467][T21881] usb 3-1: config 0 descriptor?? [ 1799.361343][T25887] 9p: Bad value for 'rfdno' [ 1799.570361][T25890] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4932'. [ 1800.001632][T25879] 9pnet_fd: Insufficient options for proto=fd [ 1800.043739][T21881] cp2112 0003:10C4:EA90.0063: unknown main item tag 0x0 [ 1800.081234][T21881] cp2112 0003:10C4:EA90.0063: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1800.122510][T25895] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4933'. [ 1800.420400][T25879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1800.469409][T25879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1800.673573][T25879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1801.504574][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1801.504600][ T30] audit: type=1400 audit(2000000767.507:2618): avc: denied { ioctl } for pid=25900 comm="syz.9.4934" path="socket:[102649]" dev="sockfs" ino=102649 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1801.569543][ T30] audit: type=1400 audit(2000000767.591:2619): avc: denied { setopt } for pid=25900 comm="syz.9.4934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1801.656681][T25879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1802.228775][T21881] cp2112 0003:10C4:EA90.0063: error requesting version [ 1802.311893][T21881] cp2112 0003:10C4:EA90.0063: probe with driver cp2112 failed with error -71 [ 1802.710206][T25920] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1802.842396][ T30] audit: type=1400 audit(2000000769.135:2620): avc: denied { ioctl } for pid=25921 comm="syz.2.4940" path="socket:[102186]" dev="sockfs" ino=102186 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1802.938064][T25924] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1803.239800][T21881] usb 3-1: USB disconnect, device number 49 [ 1805.079632][T25946] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4945'. [ 1805.702132][T25950] 9p: Bad value for 'rfdno' [ 1805.710066][T25944] binder: BINDER_SET_CONTEXT_MGR already set [ 1805.716038][T25944] binder: 25941:25944 ioctl 4018620d 200000004a80 returned -16 [ 1806.386855][ T30] audit: type=1400 audit(2000000772.439:2621): avc: denied { write } for pid=25961 comm="syz.2.4952" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1806.847909][T25967] netlink: 'syz.9.4951': attribute type 3 has an invalid length. [ 1807.578811][T16356] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1807.765731][T16356] usb 3-1: Using ep0 maxpacket: 16 [ 1807.778944][T16356] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1807.809077][T16356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1807.830650][T16356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1808.918670][T16356] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1808.948995][T16356] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1809.022612][T16356] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1809.048936][ T30] audit: type=1400 audit(2000000774.947:2622): avc: denied { map } for pid=25983 comm="syz.6.4959" path="/dev/cec0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1809.078938][T16356] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1809.098697][T16356] usb 3-1: Manufacturer: syz [ 1809.120846][T16356] usb 3-1: config 0 descriptor?? [ 1809.177032][T25987] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4958'. [ 1809.474674][ T30] audit: type=1400 audit(2000000775.340:2623): avc: denied { write } for pid=25991 comm="syz.7.4961" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1809.509083][T16356] rc_core: IR keymap rc-hauppauge not found [ 1809.519848][T16356] Registered IR keymap rc-empty [ 1809.531044][T16356] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1809.560281][ T30] audit: type=1400 audit(2000000775.368:2624): avc: denied { open } for pid=25991 comm="syz.7.4961" path="/461/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1809.601493][T16356] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1809.626397][ T30] audit: type=1400 audit(2000000775.415:2625): avc: denied { ioctl } for pid=25991 comm="syz.7.4961" path="/461/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1809.652307][T16356] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1809.684645][T16356] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input103 [ 1809.762838][T16356] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1809.802036][T16356] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1809.839189][T16356] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1809.887167][T16356] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1809.911583][T16356] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1809.951288][T16356] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1810.014876][T16356] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1810.077321][T16356] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1810.185904][T25989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1810.216443][T25989] block nbd6: NBD_DISCONNECT [ 1810.282061][T16356] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1810.306357][T16356] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1810.514513][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1810.524216][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 1810.533220][T16356] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1810.563010][T16356] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version cf [ 1810.584281][T16356] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1810.634389][T16356] usb 3-1: USB disconnect, device number 50 [ 1812.038156][T16356] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1812.205922][T16356] usb 6-1: Using ep0 maxpacket: 16 [ 1812.212837][T16356] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1812.263277][T16356] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1812.285367][T16356] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1812.308419][T16356] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.790285][T16356] usbhid 6-1:128.0: can't add hid device: -71 [ 1812.798259][T16356] usbhid 6-1:128.0: probe with driver usbhid failed with error -71 [ 1812.815247][T16356] usb 6-1: USB disconnect, device number 77 [ 1813.173366][T26034] netlink: 268 bytes leftover after parsing attributes in process `syz.7.4971'. [ 1813.194512][T26034] FAULT_INJECTION: forcing a failure. [ 1813.194512][T26034] name failslab, interval 1, probability 0, space 0, times 0 [ 1813.208034][T26034] CPU: 1 UID: 0 PID: 26034 Comm: syz.7.4971 Tainted: G L syzkaller #0 PREEMPT(full) [ 1813.208063][T26034] Tainted: [L]=SOFTLOCKUP [ 1813.208070][T26034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1813.208080][T26034] Call Trace: [ 1813.208087][T26034] [ 1813.208095][T26034] dump_stack_lvl+0x100/0x190 [ 1813.208127][T26034] should_fail_ex.cold+0x5/0xa [ 1813.208144][T26034] should_failslab+0xc2/0x120 [ 1813.208165][T26034] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1813.208185][T26034] ? __alloc_skb+0x140/0x710 [ 1813.208210][T26034] __alloc_skb+0x140/0x710 [ 1813.208226][T26034] ? __alloc_skb+0x5b7/0x710 [ 1813.208243][T26034] ? __pfx___alloc_skb+0x10/0x10 [ 1813.208259][T26034] ? genl_rcv_msg+0x4be/0x800 [ 1813.208280][T26034] netlink_ack+0x117/0xb80 [ 1813.208296][T26034] netlink_rcv_skb+0x333/0x420 [ 1813.208309][T26034] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1813.208324][T26034] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1813.208342][T26034] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1813.208356][T26034] genl_rcv+0x28/0x40 [ 1813.208368][T26034] netlink_unicast+0x5aa/0x870 [ 1813.208383][T26034] ? __pfx_netlink_unicast+0x10/0x10 [ 1813.208400][T26034] netlink_sendmsg+0x8b0/0xda0 [ 1813.208415][T26034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1813.208427][T26034] ? __might_fault+0xc0/0x140 [ 1813.208447][T26034] ____sys_sendmsg+0xa54/0xc30 [ 1813.208463][T26034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1813.208484][T26034] ___sys_sendmsg+0x190/0x1e0 [ 1813.208499][T26034] ? __pfx____sys_sendmsg+0x10/0x10 [ 1813.208531][T26034] __sys_sendmsg+0x170/0x220 [ 1813.208549][T26034] ? __pfx___sys_sendmsg+0x10/0x10 [ 1813.208576][T26034] do_syscall_64+0x106/0xf80 [ 1813.208592][T26034] ? clear_bhb_loop+0x40/0x90 [ 1813.208607][T26034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1813.208619][T26034] RIP: 0033:0x7f58a9d9c629 [ 1813.208631][T26034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1813.208642][T26034] RSP: 002b:00007f58aacb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1813.208654][T26034] RAX: ffffffffffffffda RBX: 00007f58aa015fa0 RCX: 00007f58a9d9c629 [ 1813.208661][T26034] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000004 [ 1813.208668][T26034] RBP: 00007f58aacb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1813.208675][T26034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1813.208681][T26034] R13: 00007f58aa016038 R14: 00007f58aa015fa0 R15: 00007ffe81b67648 [ 1813.208695][T26034] [ 1813.551335][T21881] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1813.639281][T26039] Cannot find add_set index 0 as target [ 1813.714972][T21881] usb 3-1: New USB device found, idVendor=09c0, idProduct=1203, bcdDevice=d3.32 [ 1813.733190][T21881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.954947][T21881] usb 3-1: config 0 descriptor?? [ 1814.107958][T26038] delete_channel: no stack [ 1814.236575][T26055] FAULT_INJECTION: forcing a failure. [ 1814.236575][T26055] name failslab, interval 1, probability 0, space 0, times 0 [ 1814.251321][T26055] CPU: 0 UID: 0 PID: 26055 Comm: syz.9.4977 Tainted: G L syzkaller #0 PREEMPT(full) [ 1814.251351][T26055] Tainted: [L]=SOFTLOCKUP [ 1814.251357][T26055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1814.251367][T26055] Call Trace: [ 1814.251374][T26055] [ 1814.251382][T26055] dump_stack_lvl+0x100/0x190 [ 1814.251417][T26055] should_fail_ex.cold+0x5/0xa [ 1814.251440][T26055] should_failslab+0xc2/0x120 [ 1814.251468][T26055] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1814.251494][T26055] ? key_alloc+0x423/0x1310 [ 1814.251518][T26055] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 1814.251545][T26055] kmemdup_noprof+0x29/0x60 [ 1814.251572][T26055] key_alloc+0x423/0x1310 [ 1814.251601][T26055] ? __pfx_key_alloc+0x10/0x10 [ 1814.251620][T26055] ? bpf_lsm_key_permission+0x9/0x10 [ 1814.251647][T26055] ? security_key_permission+0x7b/0x230 [ 1814.251673][T26055] __key_create_or_update+0x720/0xe30 [ 1814.251699][T26055] ? __pfx___key_create_or_update+0x10/0x10 [ 1814.251721][T26055] ? lookup_user_key+0x3f3/0x1300 [ 1814.251753][T26055] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1814.251773][T26055] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1814.251799][T26055] key_create_or_update+0x42/0x60 [ 1814.251823][T26055] __do_sys_add_key+0x2e8/0x460 [ 1814.251851][T26055] ? __pfx___do_sys_add_key+0x10/0x10 [ 1814.251874][T26055] ? ksys_write+0x1ac/0x250 [ 1814.251918][T26055] do_syscall_64+0x106/0xf80 [ 1814.251940][T26055] ? clear_bhb_loop+0x40/0x90 [ 1814.251964][T26055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1814.251983][T26055] RIP: 0033:0x7f1b7859c629 [ 1814.252005][T26055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1814.252022][T26055] RSP: 002b:00007f1b793e5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1814.252041][T26055] RAX: ffffffffffffffda RBX: 00007f1b78815fa0 RCX: 00007f1b7859c629 [ 1814.252054][T26055] RDX: 0000200000002ac0 RSI: 0000200000002a80 RDI: 0000200000002a40 [ 1814.252065][T26055] RBP: 00007f1b793e5090 R08: 0000000021fec890 R09: 0000000000000000 [ 1814.252077][T26055] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000002 [ 1814.252088][T26055] R13: 00007f1b78816038 R14: 00007f1b78815fa0 R15: 00007ffcb2ebb688 [ 1814.252114][T26055] [ 1814.563696][T26057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1814.573577][T26057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1815.416517][T26068] Invalid logical block size (1792) [ 1816.489470][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5580 ms [ 1816.497524][ C1] lec:lec_tx_timeout: lec0 [ 1817.120465][T21881] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1817.255536][T26090] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4983'. [ 1817.266405][T26090] openvswitch: netlink: Message has 3 unknown bytes. [ 1817.793332][T21881] usb 10-1: Using ep0 maxpacket: 16 [ 1817.838834][T21881] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1818.092633][T21881] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1818.226017][T26104] SET target dimension over the limit! [ 1818.736069][T21881] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1818.766761][T21881] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.825782][T26102] delete_channel: no stack [ 1818.947073][ T5924] usb 3-1: USB disconnect, device number 51 [ 1819.192182][T26103] delete_channel: no stack [ 1819.370561][T26113] random: crng reseeded on system resumption [ 1819.372056][ T30] audit: type=1400 audit(2000000784.606:2626): avc: denied { append } for pid=26111 comm="syz.6.4992" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1819.428330][ T5924] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1819.743294][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1819.929321][ T5924] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1819.976232][T21881] usbhid 10-1:128.0: can't add hid device: -71 [ 1819.982507][T21881] usbhid 10-1:128.0: probe with driver usbhid failed with error -71 [ 1820.169458][T21881] usb 10-1: USB disconnect, device number 2 [ 1820.241804][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.294590][ T5924] usb 3-1: config 0 descriptor?? [ 1820.597517][ T5924] usbhid 3-1:0.0: can't add hid device: -71 [ 1820.624166][ T5924] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1821.256771][ T5924] usb 3-1: USB disconnect, device number 52 [ 1821.586637][ T5924] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1821.866721][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 1821.962336][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1822.006193][ T5924] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1822.028328][T26151] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5002'. [ 1822.055498][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.186335][ T5924] usb 3-1: config 0 descriptor?? [ 1822.244518][ T5924] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1822.316890][ T5924] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1822.403640][ T5924] usb 3-1: USB disconnect, device number 53 [ 1822.443908][ T5924] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1822.546765][T26156] SET target dimension over the limit! [ 1823.015433][T26155] delete_channel: no stack [ 1824.407019][ T24] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1824.631372][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1824.686371][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.748173][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1825.110431][T26183] random: crng reseeded on system resumption [ 1825.834749][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1825.860121][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1825.869784][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1826.215500][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1826.224746][ T24] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1826.237231][ T24] usb 6-1: Manufacturer: syz [ 1826.322946][ T24] usb 6-1: config 0 descriptor?? [ 1827.141903][ T2464] block nbd0: Possible stuck request ffff888027b48000: control (read@0,1024B). Runtime 180 seconds [ 1827.153465][ T2464] block nbd0: Possible stuck request ffff888027b48200: control (read@1024,1024B). Runtime 180 seconds [ 1827.165227][ T2464] block nbd0: Possible stuck request ffff888027b48400: control (read@2048,1024B). Runtime 180 seconds [ 1827.177414][ T2464] block nbd0: Possible stuck request ffff888027b48600: control (read@3072,1024B). Runtime 180 seconds [ 1827.195870][ T30] audit: type=1400 audit(2000000791.531:2627): avc: denied { create } for pid=26188 comm="syz.9.5013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1827.399158][ T24] rc_core: IR keymap rc-hauppauge not found [ 1827.486422][ T30] audit: type=1400 audit(2000000791.550:2628): avc: denied { getopt } for pid=26188 comm="syz.9.5013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1827.491268][ T24] Registered IR keymap rc-empty [ 1827.637358][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1827.698282][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1827.752589][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1827.824018][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input104 [ 1827.926063][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1828.040450][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1828.116782][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1828.189520][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1828.264298][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1828.466663][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1828.509764][T26206] loop8: detected capacity change from 0 to 8 [ 1828.542211][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1828.595836][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1828.660778][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1828.921278][T26206] Dev loop8: unable to read RDB block 8 [ 1828.976382][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1829.034851][T26206] loop8: unable to read partition table [ 1829.108440][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1829.115866][T26206] loop8: partition table beyond EOD, truncated [ 1829.337961][T26206] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1829.518909][ T24] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version cf [ 1829.580228][T26214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5020'. [ 1829.589563][ T24] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1829.735081][ T24] usb 6-1: USB disconnect, device number 78 [ 1829.983211][T26220] Cannot find add_set index 0 as target [ 1831.082586][T26220] delete_channel: no stack [ 1832.147006][T26237] SET target dimension over the limit! [ 1833.224875][T26247] SET target dimension over the limit! [ 1833.383963][T26248] delete_channel: no stack [ 1833.599533][T26254] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5031'. [ 1833.641611][T26236] delete_channel: no stack [ 1833.839733][ T30] audit: type=1400 audit(2000000798.148:2629): avc: denied { getopt } for pid=26260 comm="syz.7.5035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1834.105971][ T30] audit: type=1400 audit(2000000798.326:2630): avc: denied { getopt } for pid=26258 comm="syz.6.5034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1834.298233][ T30] audit: type=1400 audit(2000000798.579:2631): avc: denied { write } for pid=26270 comm="syz.7.5037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1835.381685][ T9499] lec:lec_start_xmit: lec0:No lecd attached [ 1835.490835][T26287] netlink: 165 bytes leftover after parsing attributes in process `syz.9.5042'. [ 1836.163924][T26298] Cannot find add_set index 0 as target [ 1836.271567][T26294] delete_channel: no stack [ 1836.407224][T26300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5044'. [ 1836.951288][T26308] SET target dimension over the limit! [ 1837.413369][T26314] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5049'. [ 1837.478806][T26307] delete_channel: no stack [ 1838.090765][T26319] fuse: Bad value for 'fd' [ 1838.151261][T26304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1838.206419][T26304] block nbd6: NBD_DISCONNECT [ 1840.191203][T26342] 9p: Bad value for 'rfdno' [ 1841.022142][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5280 ms [ 1841.030178][ C1] lec:lec_tx_timeout: lec0 [ 1842.507874][T26356] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5063'. [ 1843.212467][T15572] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1843.319320][ T30] audit: type=1400 audit(2000000807.011:2632): avc: denied { unmount } for pid=17010 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1843.524114][T15572] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1843.576384][T15572] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1843.622221][ T30] audit: type=1400 audit(2000000807.292:2633): avc: denied { name_bind } for pid=26363 comm="syz.7.5064" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1843.654652][T15572] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1843.725254][T15572] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1843.762096][T26366] FAULT_INJECTION: forcing a failure. [ 1843.762096][T26366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1843.845698][T26366] CPU: 0 UID: 0 PID: 26366 Comm: syz.5.5065 Tainted: G L syzkaller #0 PREEMPT(full) [ 1843.845722][T26366] Tainted: [L]=SOFTLOCKUP [ 1843.845726][T26366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1843.845735][T26366] Call Trace: [ 1843.845740][T26366] [ 1843.845746][T26366] dump_stack_lvl+0x100/0x190 [ 1843.845773][T26366] should_fail_ex.cold+0x5/0xa [ 1843.845790][T26366] _copy_to_user+0x32/0xd0 [ 1843.845812][T26366] simple_read_from_buffer+0xcb/0x170 [ 1843.845841][T26366] proc_fail_nth_read+0x1af/0x230 [ 1843.845863][T26366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1843.845882][T26366] ? rw_verify_area+0xce/0x6d0 [ 1843.845899][T26366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1843.845913][T26366] vfs_read+0x1e4/0xb30 [ 1843.845933][T26366] ? __pfx_vfs_read+0x10/0x10 [ 1843.845948][T26366] ? __fget_files+0x215/0x3d0 [ 1843.845964][T26366] ? __fget_files+0x21f/0x3d0 [ 1843.845978][T26366] ksys_read+0x12a/0x250 [ 1843.845995][T26366] ? __pfx_ksys_read+0x10/0x10 [ 1843.846015][T26366] do_syscall_64+0x106/0xf80 [ 1843.846028][T26366] ? clear_bhb_loop+0x40/0x90 [ 1843.846044][T26366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.846056][T26366] RIP: 0033:0x7f50bed5cece [ 1843.846066][T26366] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1843.846077][T26366] RSP: 002b:00007f50bfb84fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1843.846089][T26366] RAX: ffffffffffffffda RBX: 00007f50bfb856c0 RCX: 00007f50bed5cece [ 1843.846097][T26366] RDX: 000000000000000f RSI: 00007f50bfb850a0 RDI: 0000000000000005 [ 1843.846104][T26366] RBP: 00007f50bfb85090 R08: 0000000000000000 R09: 0000000000000000 [ 1843.846111][T26366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1843.846122][T26366] R13: 00007f50bf016038 R14: 00007f50bf015fa0 R15: 00007ffdc399bd98 [ 1843.846137][T26366] [ 1844.612745][T15572] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1844.697745][T15572] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.848976][T15572] usb 10-1: config 0 descriptor?? [ 1845.264273][ T5924] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1845.300495][T26380] netlink: zone id is out of range [ 1845.326185][T26380] netlink: zone id is out of range [ 1845.353462][T26380] netlink: zone id is out of range [ 1845.375179][T15572] usb 10-1: can't set config #0, error -71 [ 1845.407437][T26380] netlink: zone id is out of range [ 1845.412683][T26380] netlink: zone id is out of range [ 1845.418178][T26380] netlink: zone id is out of range [ 1845.423565][T26380] netlink: zone id is out of range [ 1845.429355][T26380] netlink: zone id is out of range [ 1845.434503][T26380] netlink: zone id is out of range [ 1845.459531][T26380] netlink: zone id is out of range [ 1845.461346][T26381] batadv_slave_0: entered promiscuous mode [ 1845.472728][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1845.480631][T26381] batman_adv: batadv0: Adding interface: macvtap1 [ 1845.496965][T26381] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1845.533085][T26381] batman_adv: batadv0: Interface activated: macvtap1 [ 1845.539768][ T5924] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1845.591835][T15572] usb 10-1: USB disconnect, device number 3 [ 1845.731503][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1845.895958][ T5924] usb 3-1: config 0 descriptor?? [ 1846.377654][ T5924] keytouch 0003:0926:3333.0064: fixing up Keytouch IEC report descriptor [ 1846.415115][ T5924] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0064/input/input105 [ 1846.558792][ T5924] keytouch 0003:0926:3333.0064: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1847.110350][T16356] usb 3-1: USB disconnect, device number 54 [ 1848.713759][T26411] random: crng reseeded on system resumption [ 1850.695950][T26431] SET target dimension over the limit! [ 1850.789801][ T5924] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1850.979612][T26427] delete_channel: no stack [ 1851.055676][ T5924] usb 6-1: Using ep0 maxpacket: 32 [ 1851.080953][ T5924] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1851.096729][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.122835][ T5924] usb 6-1: Product: syz [ 1851.151727][ T5924] usb 6-1: Manufacturer: syz [ 1851.171661][ T5924] usb 6-1: SerialNumber: syz [ 1851.434321][T26423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1851.455018][T26423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1851.567254][ T5924] usb 6-1: palm_os_4_probe - error -110 getting connection info [ 1851.607958][ T5924] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 1851.662538][ T5924] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1851.726505][ T5924] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1851.726913][ T30] audit: type=1800 audit(2000000814.882:2634): pid=26442 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.5082" name="bus" dev="ramfs" ino=104719 res=0 errno=0 [ 1851.905303][T26439] net_ratelimit: 10 callbacks suppressed [ 1851.905326][T26439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1851.942620][T26439] block nbd2: NBD_DISCONNECT [ 1854.271576][T15572] usb 6-1: USB disconnect, device number 79 [ 1854.393749][T15572] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1854.481079][T15572] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1854.642221][T26465] random: crng reseeded on system resumption [ 1855.871921][T15572] visor 6-1:1.0: device disconnected [ 1856.048689][T26471] Cannot find add_set index 0 as target [ 1856.792786][T26469] delete_channel: no stack [ 1857.918887][ T30] audit: type=1400 audit(2000000820.675:2635): avc: denied { connect } for pid=26487 comm="syz.9.5100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1858.414978][T26497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1858.442608][T26497] bridge_slave_1: left allmulticast mode [ 1858.467374][T26497] bridge_slave_1: left promiscuous mode [ 1858.516900][T26497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1858.524412][ T5964] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1859.524038][T26497] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1859.533057][ T5964] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1859.560940][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1859.614432][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1859.646211][ T5964] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1859.742991][ T2464] block nbd0: Possible stuck request ffff888027b48000: control (read@0,1024B). Runtime 210 seconds [ 1859.855279][T26506] random: crng reseeded on system resumption [ 1859.904149][ T2464] block nbd0: Possible stuck request ffff888027b48200: control (read@1024,1024B). Runtime 210 seconds [ 1859.916431][ T2464] block nbd0: Possible stuck request ffff888027b48400: control (read@2048,1024B). Runtime 210 seconds [ 1859.928205][ T2464] block nbd0: Possible stuck request ffff888027b48600: control (read@3072,1024B). Runtime 210 seconds [ 1860.696852][ T5964] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1861.034854][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.100011][ T5964] usb 3-1: config 0 descriptor?? [ 1861.254224][T26511] SET target dimension over the limit! [ 1861.444745][T26514] SET target dimension over the limit! [ 1861.568471][ T5964] usb 3-1: can't set config #0, error -71 [ 1861.585227][ T5964] usb 3-1: USB disconnect, device number 55 [ 1862.109771][T26511] delete_channel: no stack [ 1862.302038][T26512] delete_channel: no stack [ 1863.685438][T26532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5112'. [ 1863.931372][T15572] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1864.229412][T15572] usb 6-1: Using ep0 maxpacket: 16 [ 1864.242383][T15572] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1864.323090][T15572] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1864.399576][T15572] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1864.405588][T26537] netlink: 'syz.6.5113': attribute type 3 has an invalid length. [ 1864.500753][T15572] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1864.651163][T26542] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5114'. [ 1865.107628][T26546] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5115'. [ 1865.257805][T26554] random: crng reseeded on system resumption [ 1866.578264][T15572] usbhid 6-1:128.0: can't add hid device: -71 [ 1866.618407][T15572] usbhid 6-1:128.0: probe with driver usbhid failed with error -71 [ 1866.644863][T26550] netlink: 'syz.9.5104': attribute type 3 has an invalid length. [ 1866.730283][T15572] usb 6-1: USB disconnect, device number 80 [ 1866.872183][T26564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5118'. [ 1867.264617][T26572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5119'. [ 1867.656779][ T793] hid-generic 0003:0004:0000.0065: unknown main item tag 0x0 [ 1867.725035][ T793] hid-generic 0003:0004:0000.0065: unknown main item tag 0x0 [ 1867.792411][ T793] hid-generic 0003:0004:0000.0065: unknown main item tag 0x0 [ 1867.850254][ T793] hid-generic 0003:0004:0000.0065: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1868.506548][T26578] fido_id[26578]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1870.512619][ T793] usb 6-1: new full-speed USB device number 81 using dummy_hcd [ 1870.692759][ T793] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1870.740734][ T793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1870.957162][ T793] usb 6-1: config 0 descriptor?? [ 1870.988155][ T793] cp210x 6-1:0.0: cp210x converter detected [ 1871.433743][ T793] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1872.699574][T26615] sctp: [Deprecated]: syz.6.5125 (pid 26615) Use of int in maxseg socket option. [ 1872.699574][T26615] Use struct sctp_assoc_value instead [ 1873.036573][T26622] netlink: 'syz.9.5134': attribute type 3 has an invalid length. [ 1874.125731][ T24] usb 6-1: USB disconnect, device number 81 [ 1874.176631][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1874.296967][ T24] cp210x 6-1:0.0: device disconnected [ 1874.715758][T26640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5140'. [ 1875.085543][ T24] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1875.097399][ T5924] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1875.270368][ T5924] usb 3-1: New USB device found, idVendor=09c0, idProduct=1203, bcdDevice=d3.32 [ 1875.270487][ T24] usb 6-1: New USB device found, idVendor=09c0, idProduct=1203, bcdDevice=d3.32 [ 1875.304158][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.304277][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.344080][ T5924] usb 3-1: config 0 descriptor?? [ 1875.346867][ T24] usb 6-1: config 0 descriptor?? [ 1875.745522][T26661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1875.770515][T26661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1875.778578][T26660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1875.791929][T26660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1876.024433][T26664] fuse: Bad value for 'group_id' [ 1876.032875][T26664] fuse: Bad value for 'group_id' [ 1876.158996][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1876.168236][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 1877.675856][T26682] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5153'. [ 1878.304332][T21881] usb 3-1: USB disconnect, device number 56 [ 1878.320963][ T5924] usb 6-1: USB disconnect, device number 82 [ 1878.395865][T26679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1878.864791][T26700] 9p: Bad value for 'rfdno' [ 1879.844033][T26679] block nbd9: NBD_DISCONNECT [ 1879.943759][ T30] audit: type=1400 audit(2000000841.293:2636): avc: denied { execute } for pid=26706 comm="syz.6.5162" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1880.206690][T26710] random: crng reseeded on system resumption [ 1881.625107][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5110 ms [ 1881.633175][ C1] lec:lec_tx_timeout: lec0 [ 1881.645359][ T30] audit: type=1400 audit(2000000842.884:2637): avc: denied { getopt } for pid=26712 comm="syz.6.5163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1882.728238][ T5924] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1883.132801][ T5924] usb 10-1: device descriptor read/64, error -71 [ 1883.527816][ T5924] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1883.645570][T21822] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1883.677905][ T5924] usb 10-1: device descriptor read/64, error -71 [ 1883.795816][ T5924] usb usb10-port1: attempt power cycle [ 1883.807291][T21822] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1883.820893][T21822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 1883.842996][T21822] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1883.853816][T21822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.907077][T21822] usb 3-1: config 0 descriptor?? [ 1884.153900][T26731] fuse: Bad value for 'fd' [ 1884.164721][T21822] ath6kl: Failed to submit usb control message: -71 [ 1884.174021][T21822] ath6kl: unable to send the bmi data to the device: -71 [ 1884.181805][ T5924] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1884.193585][T21822] ath6kl: Unable to send get target info: -71 [ 1884.206664][T21822] ath6kl: Failed to init ath6kl core: -71 [ 1884.216159][ T5924] usb 10-1: device descriptor read/8, error -71 [ 1884.235204][T21822] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1884.269353][T21822] usb 3-1: USB disconnect, device number 57 [ 1884.479300][ T5924] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1884.511299][ T5924] usb 10-1: device descriptor read/8, error -71 [ 1884.629087][ T5924] usb usb10-port1: unable to enumerate USB device [ 1884.765415][T26744] netlink: 'syz.5.5172': attribute type 3 has an invalid length. [ 1886.327014][T26754] orangefs_mount: mount request failed with -4 [ 1886.577497][T21881] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1886.850341][T26780] libceph: secret too big 289 [ 1887.247690][T21881] usb 3-1: Using ep0 maxpacket: 16 [ 1887.260041][T21881] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1887.274274][T21881] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1887.284544][T21881] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1887.294351][T21881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1887.947006][T21881] usbhid 3-1:128.0: can't add hid device: -71 [ 1887.953165][T21881] usbhid 3-1:128.0: probe with driver usbhid failed with error -71 [ 1888.026652][T21881] usb 3-1: USB disconnect, device number 58 [ 1888.592861][T26805] netlink: 'syz.9.5188': attribute type 3 has an invalid length. [ 1888.675055][T26799] delete_channel: no stack [ 1888.979772][ T5964] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1889.143689][ T5964] usb 3-1: New USB device found, idVendor=09c0, idProduct=1203, bcdDevice=d3.32 [ 1889.156013][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1889.202780][ T5964] usb 3-1: config 0 descriptor?? [ 1889.757034][T26818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1889.914074][T26818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1889.949185][T26826] kAFS: unable to lookup cell '({^@' [ 1891.128251][T26847] random: crng reseeded on system resumption [ 1892.627839][ T2464] block nbd0: Possible stuck request ffff888027b48000: control (read@0,1024B). Runtime 240 seconds [ 1892.646848][ T2464] block nbd0: Possible stuck request ffff888027b48200: control (read@1024,1024B). Runtime 240 seconds [ 1892.693503][ T2464] block nbd0: Possible stuck request ffff888027b48400: control (read@2048,1024B). Runtime 240 seconds [ 1892.721700][ T2464] block nbd0: Possible stuck request ffff888027b48600: control (read@3072,1024B). Runtime 240 seconds [ 1893.032175][ T30] audit: type=1400 audit(2000000853.538:2638): avc: denied { map } for pid=26849 comm="syz.5.5202" path="socket:[106627]" dev="sockfs" ino=106627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1893.057848][ T30] audit: type=1400 audit(2000000853.538:2639): avc: denied { read accept } for pid=26849 comm="syz.5.5202" path="socket:[106627]" dev="sockfs" ino=106627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1893.989068][ T793] usb 3-1: USB disconnect, device number 59 [ 1894.455996][ T24] hid-generic 0003:0004:0000.0066: unknown main item tag 0x0 [ 1894.853430][ T24] hid-generic 0003:0004:0000.0066: unknown main item tag 0x0 [ 1894.957769][ T24] hid-generic 0003:0004:0000.0066: unknown main item tag 0x0 [ 1895.008588][ T24] hid-generic 0003:0004:0000.0066: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1895.822665][T26882] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5211'. [ 1895.972792][T26885] fido_id[26885]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1896.944644][ T5964] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1897.107740][ T5964] usb 6-1: Using ep0 maxpacket: 16 [ 1897.370084][ T5964] usb 6-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 1897.386360][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.408330][ T5964] usb 6-1: config 0 descriptor?? [ 1897.939825][T26920] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1899.978016][ T5964] usbhid 6-1:0.0: can't add hid device: -71 [ 1900.002165][ T5964] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1900.036874][ T5964] usb 6-1: USB disconnect, device number 83 [ 1900.367186][T26951] random: crng reseeded on system resumption [ 1901.711043][T26953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5233'. [ 1901.790028][T26960] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1903.016132][T21881] hid-generic 0003:0004:0000.0067: unknown main item tag 0x0 [ 1903.153058][T21881] hid-generic 0003:0004:0000.0067: unknown main item tag 0x0 [ 1903.239437][T21881] hid-generic 0003:0004:0000.0067: unknown main item tag 0x0 [ 1903.267090][T21881] hid-generic 0003:0004:0000.0067: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1903.928551][T26984] geneve2: left promiscuous mode [ 1903.937442][T26984] bond4: left promiscuous mode [ 1903.942270][T26984] bridge1: left promiscuous mode [ 1904.882943][ T9499] lec:lec_start_xmit: lec0:No lecd attached [ 1905.402534][T26987] fido_id[26987]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1905.709082][T27006] syzkaller0: entered promiscuous mode [ 1905.726284][T27006] syzkaller0: entered allmulticast mode [ 1905.859516][T27011] SET target dimension over the limit! [ 1906.291168][T27011] delete_channel: no stack [ 1906.616042][T27023] netlink: 'syz.6.5249': attribute type 3 has an invalid length. [ 1906.906554][ T793] hid-generic 0003:0004:0000.0068: unknown main item tag 0x0 [ 1906.930813][ T793] hid-generic 0003:0004:0000.0068: unknown main item tag 0x0 [ 1907.285723][ T793] hid-generic 0003:0004:0000.0068: unknown main item tag 0x0 [ 1907.339455][ T793] hid-generic 0003:0004:0000.0068: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1907.735961][T27035] fido_id[27035]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1907.934063][ T793] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1908.117760][ T793] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1908.146486][T27043] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 1908.157585][ T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 1908.185993][ T793] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1908.224422][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1908.262230][ T793] usb 3-1: config 0 descriptor?? [ 1908.514136][T27039] fuse: Bad value for 'fd' [ 1908.552484][ T793] ath6kl: Failed to submit usb control message: -71 [ 1908.573262][ T793] ath6kl: unable to send the bmi data to the device: -71 [ 1908.584929][ T793] ath6kl: Unable to send get target info: -71 [ 1908.619688][ T793] ath6kl: Failed to init ath6kl core: -71 [ 1908.919042][ T793] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1908.971377][ T793] usb 3-1: USB disconnect, device number 60 [ 1909.255413][T27055] SET target dimension over the limit! [ 1910.119134][ T30] audit: type=1400 audit(2000000869.515:2640): avc: denied { setattr } for pid=27063 comm="syz.6.5260" name="file0" dev="tmpfs" ino=2006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1910.228264][T27054] delete_channel: no stack [ 1910.531821][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5280 ms [ 1910.539897][ C1] lec:lec_tx_timeout: lec0 [ 1910.594738][T27066] 9p: Could not find request transport: xen [ 1910.639501][ T30] audit: type=1400 audit(2000000869.524:2641): avc: denied { mounton } for pid=27063 comm="syz.6.5260" path="/368/file0" dev="tmpfs" ino=2006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1910.793431][T27071] netlink: zone id is out of range [ 1910.803124][T27071] netlink: zone id is out of range [ 1910.808360][T27071] netlink: zone id is out of range [ 1910.846881][T27071] netlink: zone id is out of range [ 1910.907674][T27071] netlink: zone id is out of range [ 1910.921593][T27071] netlink: zone id is out of range [ 1910.930028][T27071] netlink: zone id is out of range [ 1910.935349][T27071] netlink: zone id is out of range [ 1910.937443][T27072] batadv_slave_0: entered promiscuous mode [ 1910.961123][T27071] netlink: zone id is out of range [ 1910.966333][T27071] netlink: zone id is out of range [ 1911.090591][T27072] batman_adv: batadv0: Adding interface: macvtap1 [ 1911.118917][T27072] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1911.247573][T27072] batman_adv: batadv0: Interface activated: macvtap1 [ 1911.455968][ T793] hid-generic 0003:0004:0000.0069: unknown main item tag 0x0 [ 1911.471040][ T793] hid-generic 0003:0004:0000.0069: unknown main item tag 0x0 [ 1911.734962][ T793] hid-generic 0003:0004:0000.0069: unknown main item tag 0x0 [ 1911.791952][ T793] hid-generic 0003:0004:0000.0069: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1913.276439][T27095] input: syz1 as /devices/virtual/input/input107 [ 1914.364404][T27098] batman_adv: batadv0: Adding interface: macvtap2 [ 1914.381068][T27098] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1914.548220][T27098] batman_adv: batadv0: Interface activated: macvtap2 [ 1914.665103][ T30] audit: type=1326 audit(2000000873.771:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27101 comm="syz.5.5269" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f50bed9c629 code=0x0 [ 1916.140119][T27121] FAULT_INJECTION: forcing a failure. [ 1916.140119][T27121] name failslab, interval 1, probability 0, space 0, times 0 [ 1916.152934][T27121] CPU: 1 UID: 0 PID: 27121 Comm: syz.7.5274 Tainted: G L syzkaller #0 PREEMPT(full) [ 1916.152965][T27121] Tainted: [L]=SOFTLOCKUP [ 1916.152973][T27121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1916.152984][T27121] Call Trace: [ 1916.152992][T27121] [ 1916.153000][T27121] dump_stack_lvl+0x100/0x190 [ 1916.153043][T27121] should_fail_ex.cold+0x5/0xa [ 1916.153069][T27121] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1916.153095][T27121] should_failslab+0xc2/0x120 [ 1916.153127][T27121] __kmalloc_noprof+0xe0/0x850 [ 1916.153160][T27121] tomoyo_realpath_from_path+0xb6/0x690 [ 1916.153187][T27121] tomoyo_path_number_perm+0x23c/0x580 [ 1916.153216][T27121] ? tomoyo_path_number_perm+0x22e/0x580 [ 1916.153245][T27121] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1916.153274][T27121] ? finish_task_switch.isra.0+0x200/0xb80 [ 1916.153326][T27121] ? find_held_lock+0x2b/0x80 [ 1916.153348][T27121] ? __fget_files+0x215/0x3d0 [ 1916.153366][T27121] ? hook_file_ioctl_common+0x146/0x410 [ 1916.153395][T27121] ? __fget_files+0x21f/0x3d0 [ 1916.153416][T27121] security_file_ioctl+0xd3/0x230 [ 1916.153437][T27121] __x64_sys_ioctl+0xb7/0x210 [ 1916.153465][T27121] do_syscall_64+0x106/0xf80 [ 1916.153491][T27121] ? clear_bhb_loop+0x40/0x90 [ 1916.153516][T27121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1916.153535][T27121] RIP: 0033:0x7f58a9d9c629 [ 1916.153553][T27121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1916.153570][T27121] RSP: 002b:00007f58aac72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1916.153590][T27121] RAX: ffffffffffffffda RBX: 00007f58aa016180 RCX: 00007f58a9d9c629 [ 1916.153602][T27121] RDX: 0000200000000440 RSI: 000000008050640a RDI: 0000000000000007 [ 1916.153613][T27121] RBP: 00007f58aac72090 R08: 0000000000000000 R09: 0000000000000000 [ 1916.153624][T27121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1916.153634][T27121] R13: 00007f58aa016218 R14: 00007f58aa016180 R15: 00007ffe81b67648 [ 1916.153674][T27121] [ 1916.153704][T27121] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1916.358701][ T5964] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1916.389252][T27122] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 1916.399973][T27122] SELinux: failed to load policy [ 1916.616534][ T5964] usb 3-1: Using ep0 maxpacket: 16 [ 1916.625169][ T5964] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 1916.635850][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.654559][ T5964] usb 3-1: config 0 descriptor?? [ 1917.368836][T27135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1917.380275][T27135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1917.393500][T27135] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1918.127782][T27145] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5282'. [ 1919.306953][ T5964] usbhid 3-1:0.0: can't add hid device: -71 [ 1919.381995][ T5964] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1919.401540][ T5964] usb 3-1: USB disconnect, device number 61 [ 1919.585104][T27163] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1921.005019][T27182] random: crng reseeded on system resumption [ 1922.019998][T27188] net_ratelimit: 30 callbacks suppressed [ 1922.020021][T27188] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1922.155567][T27191] netlink: zone id is out of range [ 1922.160881][T27191] netlink: zone id is out of range [ 1922.167367][T27191] netlink: zone id is out of range [ 1922.179088][T27191] netlink: zone id is out of range [ 1922.196229][T27191] netlink: zone id is out of range [ 1922.262220][T27191] netlink: zone id is out of range [ 1922.267509][T27191] netlink: zone id is out of range [ 1922.320389][T27198] batadv_slave_0: entered promiscuous mode [ 1922.344292][T27191] netlink: zone id is out of range [ 1922.352020][T27191] netlink: zone id is out of range [ 1922.367895][T27198] batman_adv: batadv0: Adding interface: macvtap1 [ 1922.374989][T27198] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1922.438096][ T30] audit: type=1400 audit(2000000881.039:2643): avc: denied { bind } for pid=27189 comm="syz.7.5295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1922.477351][T27198] batman_adv: batadv0: Interface activated: macvtap1 [ 1922.926150][T27212] fuse: Bad value for 'rootmode' [ 1922.938112][T27211] Cannot find add_set index 0 as target [ 1923.095473][T27217] delete_channel: no stack [ 1924.429189][ T30] audit: type=1400 audit(2000000882.863:2644): avc: denied { getopt } for pid=27222 comm="syz.2.5302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1925.062565][ T2464] block nbd0: Possible stuck request ffff888027b48000: control (read@0,1024B). Runtime 270 seconds [ 1925.073449][ T2464] block nbd0: Possible stuck request ffff888027b48200: control (read@1024,1024B). Runtime 270 seconds [ 1925.085407][ T2464] block nbd0: Possible stuck request ffff888027b48400: control (read@2048,1024B). Runtime 270 seconds [ 1925.097353][ T2464] block nbd0: Possible stuck request ffff888027b48600: control (read@3072,1024B). Runtime 270 seconds [ 1925.654223][ T30] audit: type=1400 audit(2000000883.920:2645): avc: denied { getopt } for pid=27236 comm="syz.5.5304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1925.740601][ T30] audit: type=1400 audit(2000000884.135:2646): avc: denied { wake_alarm } for pid=27241 comm="syz.6.5305" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1925.778236][T27244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5303'. [ 1926.120895][T27242] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5305'. [ 1927.996918][T27277] netlink: 'syz.2.5314': attribute type 10 has an invalid length. [ 1928.084334][T27277] bridge0: port 3(syz_tun) entered disabled state [ 1928.105012][T27277] syz_tun: left allmulticast mode [ 1928.120949][T27278] binder: BINDER_SET_CONTEXT_MGR already set [ 1928.121012][T27277] bridge0: port 3(syz_tun) entered disabled state [ 1928.127215][T27278] binder: 27276:27278 ioctl 4018620d 200000000480 returned -16 [ 1928.146638][T27278] binder: 27276:27278 ioctl c0306201 200000000640 returned -22 [ 1928.177748][T27278] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(16) [ 1928.181034][T27277] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1928.184357][T27278] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1928.184809][T27278] vhci_hcd vhci_hcd.0: Device attached [ 1928.337860][T27277] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(18) [ 1928.344481][T27277] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1928.352389][T27277] vhci_hcd vhci_hcd.0: Device attached [ 1928.388306][T27283] vhci_hcd: connection closed [ 1928.396086][T27279] vhci_hcd: connection closed [ 1928.400932][T26703] vhci_hcd vhci_hcd.2: stop threads [ 1928.427762][T26703] vhci_hcd vhci_hcd.2: release socket [ 1928.451192][T26703] vhci_hcd vhci_hcd.2: disconnect device [ 1928.460607][T26703] vhci_hcd vhci_hcd.2: stop threads [ 1928.465823][T26703] vhci_hcd vhci_hcd.2: release socket [ 1928.482721][T26703] vhci_hcd vhci_hcd.2: disconnect device [ 1928.503073][T21881] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1930.248551][T27304] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5321'. [ 1930.622496][T27310] net_ratelimit: 11 callbacks suppressed [ 1930.622513][T27310] netlink: zone id is out of range [ 1930.679474][T27310] netlink: zone id is out of range [ 1930.685276][T27310] netlink: zone id is out of range [ 1930.702275][T27310] netlink: zone id is out of range [ 1930.708733][T27310] netlink: zone id is out of range [ 1930.713975][T27310] netlink: zone id is out of range [ 1930.719918][T27310] netlink: zone id is out of range [ 1930.721975][T27319] batman_adv: batadv0: Adding interface: macvtap2 [ 1930.725151][T27310] netlink: zone id is out of range [ 1930.737639][T27310] netlink: zone id is out of range [ 1930.742791][T27310] netlink: zone id is out of range [ 1931.036516][T27319] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1931.156056][T27319] batman_adv: batadv0: Interface activated: macvtap2 [ 1932.711899][T27334] 9p: Bad value for 'rfdno' [ 1934.125265][T27345] netlink: 'syz.9.5330': attribute type 3 has an invalid length. [ 1934.169992][T27347] netlink: 'syz.2.5332': attribute type 1 has an invalid length. [ 1934.196349][T27347] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.5332'. [ 1934.705500][T27351] block nbd2: NBD_DISCONNECT [ 1935.087145][ T30] audit: type=1400 audit(2000000892.872:2647): avc: denied { map } for pid=27361 comm="syz.2.5336" path="socket:[107949]" dev="sockfs" ino=107949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1935.190253][ T30] audit: type=1400 audit(2000000892.900:2648): avc: denied { read } for pid=27361 comm="syz.2.5336" path="socket:[107949]" dev="sockfs" ino=107949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1937.255956][T27377] 9p: Bad value for 'rfdno' [ 1937.920071][T27386] 9p: Could not find request transport: xen [ 1937.938951][T27384] netlink: 'syz.9.5342': attribute type 3 has an invalid length. [ 1938.167917][ T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1938.407279][T27396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5345'. [ 1938.588994][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1938.608407][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1938.703421][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1938.715855][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1938.734000][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1938.748554][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.767764][ T9] usb 3-1: config 0 descriptor?? [ 1939.504450][ T31] INFO: task syz.8.4839:25533 blocked for more than 143 seconds. [ 1939.522456][ T31] Tainted: G L syzkaller #0 [ 1939.540041][ T9] plantronics 0003:047F:FFFF.006A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1939.584252][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1939.635894][ T31] task:syz.8.4839 state:D stack:29000 pid:25533 tgid:25527 ppid:21669 task_flags:0x400040 flags:0x00080002 [ 1939.689312][ T31] Call Trace: [ 1939.704424][ T31] [ 1939.726153][ T31] __schedule+0xfee/0x60e0 [ 1939.762983][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1939.789389][ T31] ? __pfx___schedule+0x10/0x10 [ 1939.791368][T27409] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5349'. [ 1939.852261][ T31] ? find_held_lock+0x2b/0x80 [ 1940.133322][ T31] ? schedule+0x2bf/0x390 [ 1940.145300][ T31] schedule+0xdd/0x390 [ 1940.149413][ T31] schedule_preempt_disabled+0x13/0x30 [ 1940.154875][ T31] __mutex_lock+0xc9a/0x1b90 [ 1940.159946][ T31] ? sync_bdevs+0x153/0x480 [ 1940.164453][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1940.170491][ T31] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1940.187990][ T31] ? iput.part.0+0x1a0/0xf50 [ 1940.192770][ T31] ? sync_bdevs+0x153/0x480 [ 1940.197585][ T31] sync_bdevs+0x153/0x480 [ 1940.202496][ T31] ksys_sync+0xb0/0xf0 [ 1940.206612][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 1940.212538][ T31] ? do_syscall_64+0x95/0xf80 [ 1940.217407][ T31] __do_sys_sync+0xe/0x20 [ 1940.222769][ T31] do_syscall_64+0x106/0xf80 [ 1940.228911][ T31] ? clear_bhb_loop+0x40/0x90 [ 1940.234391][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.240320][ T31] RIP: 0033:0x7fbda079c629 [ 1940.250132][ T31] RSP: 002b:00007fbda162d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1940.259137][ T31] RAX: ffffffffffffffda RBX: 00007fbda0a16360 RCX: 00007fbda079c629 [ 1940.267756][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1940.278966][ T31] RBP: 00007fbda0a16360 R08: 0000000000000000 R09: 0000000000000000 [ 1940.289630][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1940.299685][ T31] R13: 00007fbda0a163f8 R14: 00007fbda0a16360 R15: 00007ffde61c01e8 [ 1940.310195][ T31] [ 1940.313313][ T31] INFO: task syz.8.4839:25535 blocked for more than 144 seconds. [ 1940.322550][ T31] Tainted: G L syzkaller #0 [ 1940.339508][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1940.362267][ T31] task:syz.8.4839 state:D stack:28104 pid:25535 tgid:25527 ppid:21669 task_flags:0x400040 flags:0x00080002 [ 1940.398675][ T31] Call Trace: [ 1940.411314][ T31] [ 1940.424022][ T31] __schedule+0xfee/0x60e0 [ 1940.435535][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1940.458584][ T31] ? __pfx___schedule+0x10/0x10 [ 1940.477584][ T31] ? find_held_lock+0x2b/0x80 [ 1940.496999][ T31] ? schedule+0x2bf/0x390 [ 1940.528060][ T9] usb 3-1: USB disconnect, device number 62 [ 1940.542938][ T31] schedule+0xdd/0x390 [ 1940.553262][ T31] schedule_preempt_disabled+0x13/0x30 [ 1940.582267][ T31] __mutex_lock+0xc9a/0x1b90 [ 1940.596005][ T31] ? sync_bdevs+0x153/0x480 [ 1940.613314][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1940.647082][ T31] ? __pfx___schedule+0x10/0x10 [ 1940.667239][ T31] ? iput.part.0+0x1a0/0xf50 [ 1940.691898][ T31] ? sync_bdevs+0x153/0x480 [ 1940.704998][ T31] sync_bdevs+0x153/0x480 [ 1940.717347][ T31] ksys_sync+0xb0/0xf0 [ 1940.742740][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 1940.775074][ T31] ? do_syscall_64+0x95/0xf80 [ 1940.780192][ T31] __do_sys_sync+0xe/0x20 [ 1940.796168][ T31] do_syscall_64+0x106/0xf80 [ 1940.813949][ T31] ? clear_bhb_loop+0x40/0x90 [ 1940.828595][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.839552][ T31] RIP: 0033:0x7fbda079c629 [ 1940.853332][ T31] RSP: 002b:00007fbda160c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1940.873536][ T31] RAX: ffffffffffffffda RBX: 00007fbda0a16450 RCX: 00007fbda079c629 [ 1940.906705][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1940.925379][ T31] RBP: 00007fbda0a16450 R08: 0000000000000000 R09: 0000000000000000 [ 1940.940997][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1940.962150][ T31] R13: 00007fbda0a164e8 R14: 00007fbda0a16450 R15: 00007ffde61c01e8 [ 1940.986407][ T31] [ 1940.994313][ T31] INFO: task syz.8.4839:25537 blocked for more than 145 seconds. [ 1941.082787][ T31] Tainted: G L syzkaller #0 [ 1941.108109][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1941.136600][ T31] task:syz.8.4839 state:D stack:28040 pid:25537 tgid:25527 ppid:21669 task_flags:0x400040 flags:0x00080002 [ 1941.167886][ T31] Call Trace: [ 1941.183420][ T31] [ 1941.197098][ T31] __schedule+0xfee/0x60e0 [ 1941.209145][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1941.224747][ T31] ? __pfx___schedule+0x10/0x10 [ 1941.252565][ T31] ? find_held_lock+0x2b/0x80 [ 1941.273171][ T31] ? schedule+0x2bf/0x390 [ 1941.289637][ T31] schedule+0xdd/0x390 [ 1941.301623][ T31] schedule_preempt_disabled+0x13/0x30 [ 1941.323661][ T31] __mutex_lock+0xc9a/0x1b90 [ 1941.346771][ T31] ? sync_bdevs+0x153/0x480 [ 1941.370406][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1941.389013][ T31] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1941.399770][ T31] ? iput.part.0+0x1a0/0xf50 [ 1941.405494][ T31] ? sync_bdevs+0x153/0x480 [ 1941.410140][ T31] sync_bdevs+0x153/0x480 [ 1941.414531][ T31] ksys_sync+0xb0/0xf0 [ 1941.419839][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 1941.424699][ T31] ? kcov_ioctl+0x16a/0x720 [ 1941.430503][ T31] ? do_syscall_64+0x95/0xf80 [ 1941.435235][ T31] __do_sys_sync+0xe/0x20 [ 1941.439724][ T31] do_syscall_64+0x106/0xf80 [ 1941.444366][ T31] ? clear_bhb_loop+0x40/0x90 [ 1941.449155][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1941.455252][ T31] RIP: 0033:0x7fbda079c629 [ 1941.459783][ T31] RSP: 002b:00007fbda15eb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1941.468314][ T31] RAX: ffffffffffffffda RBX: 00007fbda0a16540 RCX: 00007fbda079c629 [ 1941.476485][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1941.484865][ T31] RBP: 00007fbda0a16540 R08: 0000000000000000 R09: 0000000000000000 [ 1941.493009][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1941.501093][ T31] R13: 00007fbda0a165d8 R14: 00007fbda0a16540 R15: 00007ffde61c01e8 [ 1941.509240][ T31] [ 1941.512579][ T31] [ 1941.512579][ T31] Showing all locks held in the system: [ 1941.529051][ T31] 4 locks held by ksoftirqd/0/15: [ 1941.534193][ T31] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1941.544603][ T31] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x60e0 [ 1941.567984][ T31] #2: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: refill_obj_stock+0x14c/0x6c0 [ 1941.579188][ T31] #3: ffff888054b6aed0 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xb2/0x1a80 [ 1941.590122][ T31] 1 lock held by khungtaskd/31: [ 1941.595014][ T31] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1941.606639][ T31] 2 locks held by getty/5562: [ 1941.612613][ T31] #0: ffff8880384b30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1941.624007][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1941.636958][ T31] 1 lock held by syz-executor/5791: [ 1941.642387][ T31] 1 lock held by udevd/5824: [ 1941.647017][ T31] #0: ffff888027aac358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1941.658102][ T31] 1 lock held by syz.8.4839/25533: [ 1941.664562][ T31] #0: ffff888027aac358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1941.675535][ T31] 1 lock held by syz.8.4839/25535: [ 1941.680683][ T31] #0: ffff888027aac358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1941.691691][ T31] 1 lock held by syz.8.4839/25537: [ 1941.697965][ T31] #0: ffff888027aac358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1941.707932][ T31] [ 1941.711918][ T31] ============================================= [ 1941.711918][ T31] [ 1941.720466][ T31] NMI backtrace for cpu 1 [ 1941.720484][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1941.720508][ T31] Tainted: [L]=SOFTLOCKUP [ 1941.720514][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1941.720526][ T31] Call Trace: [ 1941.720534][ T31] [ 1941.720541][ T31] dump_stack_lvl+0x100/0x190 [ 1941.720573][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1941.720590][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1941.720619][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1941.720645][ T31] sys_info+0x141/0x190 [ 1941.720665][ T31] watchdog+0xd25/0x1050 [ 1941.720692][ T31] ? __pfx_watchdog+0x10/0x10 [ 1941.720713][ T31] ? __kthread_parkme+0x18c/0x230 [ 1941.720738][ T31] ? kthread+0x13a/0x450 [ 1941.720751][ T31] ? __pfx_watchdog+0x10/0x10 [ 1941.720776][ T31] kthread+0x370/0x450 [ 1941.720789][ T31] ? __pfx_kthread+0x10/0x10 [ 1941.720805][ T31] ret_from_fork+0x754/0xd80 [ 1941.720825][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1941.720842][ T31] ? __switch_to+0x7b4/0x1120 [ 1941.720862][ T31] ? __pfx_kthread+0x10/0x10 [ 1941.720877][ T31] ret_from_fork_asm+0x1a/0x30 [ 1941.720903][ T31] [ 1941.720911][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1941.847897][ C0] NMI backtrace for cpu 0 [ 1941.847918][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1941.847940][ C0] Tainted: [L]=SOFTLOCKUP [ 1941.847945][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1941.847954][ C0] RIP: 0010:lock_acquire+0x140/0x380 [ 1941.847983][ C0] Code: bc 07 00 4c 8b 14 24 65 49 ff 42 08 65 8b 05 8b 96 28 12 83 f8 07 0f 86 10 ff ff ff 90 0f 0b 90 e9 07 ff ff ff 48 8b 74 24 68 <48> 89 ef e8 18 fd 8f 00 8b 0d 36 cc f4 0e 85 c9 0f 84 bd 00 00 00 [ 1941.847997][ C0] RSP: 0018:ffffc90000007570 EFLAGS: 00000202 [ 1941.848011][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 1941.848020][ C0] RDX: 0000000000000000 RSI: ffffffff81b7faf1 RDI: ffffffff8e1228e0 [ 1941.848029][ C0] RBP: ffffffff8e7e93e0 R08: 0000000000000000 R09: 0000000000000000 [ 1941.848039][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 1941.848047][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1941.848056][ C0] FS: 0000000000000000(0000) GS:ffff88812434a000(0000) knlGS:0000000000000000 [ 1941.848070][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1941.848080][ C0] CR2: 000000110c3e6869 CR3: 0000000076352000 CR4: 00000000003526f0 [ 1941.848089][ C0] Call Trace: [ 1941.848094][ C0] [ 1941.848100][ C0] ? find_held_lock+0x2b/0x80 [ 1941.848121][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 1941.848143][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1941.848164][ C0] unwind_next_frame+0xd1/0x1ea0 [ 1941.848182][ C0] ? unwind_next_frame+0xbd/0x1ea0 [ 1941.848198][ C0] ? x86_64_start_reservations+0x24/0x30 [ 1941.848220][ C0] ? x86_64_start_reservations+0x24/0x30 [ 1941.848238][ C0] ? kernel_text_address+0x8d/0x100 [ 1941.848255][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1941.848273][ C0] arch_stack_walk+0x94/0xf0 [ 1941.848292][ C0] ? x86_64_start_reservations+0x24/0x30 [ 1941.848311][ C0] stack_trace_save+0x8e/0xc0 [ 1941.848327][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1941.848343][ C0] ? stack_trace_save+0x8e/0xc0 [ 1941.848360][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1941.848379][ C0] kasan_save_stack+0x30/0x50 [ 1941.848398][ C0] ? kasan_save_stack+0x30/0x50 [ 1941.848414][ C0] ? kasan_save_track+0x14/0x30 [ 1941.848431][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1941.848449][ C0] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 1941.848468][ C0] ? kmalloc_reserve+0x148/0x350 [ 1941.848489][ C0] ? __alloc_skb+0x185/0x710 [ 1941.848509][ C0] ? new_skb+0x21/0x230 [ 1941.848529][ C0] ? aoecmd_cfg+0x210/0x7a0 [ 1941.848546][ C0] ? call_timer_fn+0x19a/0x670 [ 1941.848563][ C0] ? __run_timers+0x757/0xb30 [ 1941.848580][ C0] ? run_timer_base+0x114/0x190 [ 1941.848597][ C0] ? run_timer_softirq+0x1a/0x50 [ 1941.848615][ C0] ? handle_softirqs+0x1eb/0x9e0 [ 1941.848633][ C0] ? __irq_exit_rcu+0xef/0x150 [ 1941.848647][ C0] ? irq_exit_rcu+0x9/0x30 [ 1941.848663][ C0] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1941.848679][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1941.848695][ C0] ? pv_native_safe_halt+0xf/0x20 [ 1941.848708][ C0] ? default_idle+0x9/0x10 [ 1941.848723][ C0] ? default_idle_call+0x6c/0xb0 [ 1941.848738][ C0] ? do_idle+0x35b/0x4b0 [ 1941.848755][ C0] ? cpu_startup_entry+0x4f/0x60 [ 1941.848770][ C0] ? rest_init+0x251/0x260 [ 1941.848786][ C0] ? start_kernel+0x47f/0x480 [ 1941.848803][ C0] ? x86_64_start_reservations+0x24/0x30 [ 1941.848830][ C0] kasan_save_track+0x14/0x30 [ 1941.848851][ C0] __kasan_slab_alloc+0x89/0x90 [ 1941.848870][ C0] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 1941.848887][ C0] ? kmalloc_reserve+0x148/0x350 [ 1941.848902][ C0] ? __kasan_slab_alloc+0x30/0x90 [ 1941.848921][ C0] kmalloc_reserve+0x148/0x350 [ 1941.848939][ C0] __alloc_skb+0x185/0x710 [ 1941.848956][ C0] ? __alloc_skb+0x5b7/0x710 [ 1941.848975][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 1941.848994][ C0] ? mark_held_locks+0x40/0x70 [ 1941.849014][ C0] new_skb+0x21/0x230 [ 1941.849030][ C0] aoecmd_cfg+0x210/0x7a0 [ 1941.849047][ C0] ? __pfx_aoecmd_cfg+0x10/0x10 [ 1941.849069][ C0] ? __pfx_discover_timer+0x10/0x10 [ 1941.849088][ C0] ? call_timer_fn+0x19a/0x670 [ 1941.849103][ C0] call_timer_fn+0x19a/0x670 [ 1941.849119][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1941.849135][ C0] ? debug_object_activate+0x331/0x490 [ 1941.849155][ C0] ? __run_timers+0x747/0xb30 [ 1941.849172][ C0] ? rcu_is_watching+0x12/0xc0 [ 1941.849191][ C0] ? __pfx_discover_timer+0x10/0x10 [ 1941.849210][ C0] __run_timers+0x757/0xb30 [ 1941.849230][ C0] ? __pfx___run_timers+0x10/0x10 [ 1941.849253][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 1941.849275][ C0] run_timer_base+0x114/0x190 [ 1941.849292][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1941.849312][ C0] run_timer_softirq+0x1a/0x50 [ 1941.849329][ C0] handle_softirqs+0x1eb/0x9e0 [ 1941.849347][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1941.849365][ C0] __irq_exit_rcu+0xef/0x150 [ 1941.849381][ C0] irq_exit_rcu+0x9/0x30 [ 1941.849396][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1941.849410][ C0] [ 1941.849415][ C0] [ 1941.849421][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1941.849436][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1941.849450][ C0] Code: e8 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 2c 1c 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1941.849463][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 1941.849475][ C0] RAX: 0000000009161291 RBX: ffffffff8e4975c0 RCX: ffffffff8b8f5c75 [ 1941.849484][ C0] RDX: 0000000000000000 RSI: ffffffff8de71a97 RDI: ffffffff8c1aefa0 [ 1941.849494][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 1941.849503][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 1941.849512][ C0] R13: 0000000000000000 R14: ffffffff90d96210 R15: 0000000000000000 [ 1941.849525][ C0] ? ct_kernel_exit+0x125/0x180 [ 1941.849541][ C0] default_idle+0x9/0x10 [ 1941.849556][ C0] default_idle_call+0x6c/0xb0 [ 1941.849572][ C0] do_idle+0x35b/0x4b0 [ 1941.849589][ C0] ? __pfx_do_idle+0x10/0x10 [ 1941.849608][ C0] cpu_startup_entry+0x4f/0x60 [ 1941.849624][ C0] rest_init+0x251/0x260 [ 1941.849641][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1941.849659][ C0] start_kernel+0x47f/0x480 [ 1941.849675][ C0] x86_64_start_reservations+0x24/0x30 [ 1941.849692][ C0] x86_64_start_kernel+0x12b/0x130 [ 1941.849709][ C0] common_startup_64+0x13e/0x148 [ 1941.849730][ C0] [ 1942.485102][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1942.495035][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 1942.495533][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1942.495553][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1942.495577][ T31] Tainted: [L]=SOFTLOCKUP [ 1942.495584][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1942.495594][ T31] Call Trace: [ 1942.495602][ T31] [ 1942.495609][ T31] dump_stack_lvl+0x100/0x190 [ 1942.495643][ T31] vpanic+0x552/0x970 [ 1942.495662][ T31] ? __pfx_vpanic+0x10/0x10 [ 1942.495680][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1942.495709][ T31] panic+0xd1/0xe0 [ 1942.495724][ T31] ? __pfx_panic+0x10/0x10 [ 1942.495742][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1942.495770][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1942.495792][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1942.495812][ T31] ? watchdog.cold+0x198/0x1ca [ 1942.495831][ T31] ? watchdog+0xd35/0x1050 [ 1942.495854][ T31] watchdog.cold+0x1a9/0x1ca [ 1942.495879][ T31] ? __pfx_watchdog+0x10/0x10 [ 1942.495900][ T31] ? __kthread_parkme+0x18c/0x230 [ 1942.495926][ T31] ? kthread+0x13a/0x450 [ 1942.495941][ T31] ? __pfx_watchdog+0x10/0x10 [ 1942.495960][ T31] kthread+0x370/0x450 [ 1942.495974][ T31] ? __pfx_kthread+0x10/0x10 [ 1942.495990][ T31] ret_from_fork+0x754/0xd80 [ 1942.496009][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1942.496026][ T31] ? __switch_to+0x7b4/0x1120 [ 1942.496047][ T31] ? __pfx_kthread+0x10/0x10 [ 1942.496063][ T31] ret_from_fork_asm+0x1a/0x30 [ 1942.496097][ T31] [ 1942.501255][ T31] Kernel Offset: disabled