last executing test programs: 2m58.301635611s ago: executing program 1 (id=1100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r3, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000002900000043000000"], 0x30}}], 0x1, 0x24044010) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x700}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) 2m57.324061291s ago: executing program 1 (id=1102): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x244, 0x3, 0x1, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x80003e, 0x8f, 0x6, 0x1, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0xdd4, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x1, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0xfffffff9, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0xffffffff, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x2, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x80, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf243f, 0xfff]}, 0x45c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000001c0)={0x1, 0x5, 0x3d1, 0x80000}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394", 0xf}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x2f, 0x0, 0x0, 0x0, 0x0}, 0x48) prctl$PR_SET_IO_FLUSHER(0x41, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10100, &(0x7f0000001680)={0x0, 0x989680}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00'], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x2decc7e7, 0xf1d7, {0xffffffffffffffff}, {0xee00}, 0x3ff}) syz_open_procfs(r6, &(0x7f0000000000)='fdinfo/3\x00') close(0x3) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 2m56.077974583s ago: executing program 1 (id=1110): r0 = socket$can_j1939(0x1d, 0x2, 0x7) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x0, 0x8100}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x4000, 0xe000, 0x6, 0x2f, 0x0, @private=0xa010101, @empty}, {0x4e22, 0x880b, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "1d4217e1bfa91bbd23030518f778c8d43d5f30b69ffc521e", "b5b2e9b5791174229622e2bde84c543b8f297df0844ccad44b3db4a7e44e501b"}}}}}}}, 0x6e) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000002c0)={0x1d, r2, 0x2, {0x2, 0x0, 0x4}}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB=',rootmode=00000000000000000100000,us', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002100)={0x2020}, 0x2020) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x22}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001500), 0x200, 0x0) ioctl$TIOCSISO7816(r7, 0xc0285443, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x1, 0x0) syz_io_uring_complete(0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x248000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0x3}, 0x4e23, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x16}, {0x0, 0x2, 0x4000000000000, 0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x1a11}, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x4, 0xa5}}, 0xe8) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r8, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4, 0xfa00, {r8}}, 0xb) socket$nl_route(0x10, 0x3, 0x0) 2m54.648353484s ago: executing program 1 (id=1114): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x40, 0x0, 0x7fff0000}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fanotify_init(0x500, 0x400) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000001380)=@vmx={0xe, 0x0, 0x2080, {0xd000, 0x40000, {0x2}, 0x1, 0x3}, {"2a78bbd5e9ca2e4676f52825cf56627984e62d237142764f821e4feeb14e3d49ee01747a94a45869582c48f6e1a56095484f00f1dce5d98fd6ac862333de2b0bb894249ea18254296a2daf77e5fd91e88737d37651c55e621c87bc67317774cd5b94abc8ab6354b1d9b407bde55030be2d3b101248a20e5c62fc2c214093b09eb836f5ab7f5a87a67c0924fd4138e415885a359061f80a67f161550755a532dcb60fb136e1d093bd0de4973edd65da26bb88c71a12e34d68afe27bd93c9e45f611890ea77616831b0d593c58054b20b4f39c38b199c62e047d9ea7b472a14c6d287e1fe8523f5366883240f37c3481f94069bc5f276df058e7a5a7073ef080fb238f89e452aefa47daefdb2106072d350e34eefa94bd67910b2bbd877f66d26b223bb5c3c25f95dca94c2177d36db6e0bcde5f6b5ee51d99068962522dbd05a5133845ee8a1e54e6928e81ccf55cf8a94f4471c09bdc79f9d83edaa14db740450ffd25268681c668b803cb727bc4ef450be8269473007d3ff85d70934bc646444069c22f37e56b120f47660c6435f576f8df8f654be84afb68cb6efffe6e99db7b6f0378474054d12547e4227da92085fc4798446ae123bacac727d3aae7228ab7d0c0ea5a06d2866edade95d3529601949504b59c96bb990a58234835cdaf6ab56d3f0ece0a1c5996328e22071370a9444e4253bc60cc43bd9de40370a8912d86aa4deb47c454ef4bd1dc9f28f3e985fa734520d25e522deae8a808953ec2a9e03a9d10fa0d3e87bab185e4e1698992d502817f86fa8142d8143bb83f2a1c41d5cf8448b02aa80a89e800603a8417d0447745418b69784974e2fc8e1c6ab723220b195b8aca23efee0163aaf8b031c42b3d209769fdd1498608f17dc0b80edd468062bb38cb6ad56c41545139ab5b8e94415a9f15117541bf966b9aeb9041ad0b1c7e30e79f12b429184253fc905720134fe6553ea5a37059e1ae169af1767b1aa80f44a8be92fc6fd2850d23daa650c5c8e2098d686335839bfb1e2984f14e378a408310243c37a22e56648119e337c5ebfea106d8710dbaeb3ae4c739ef26b8f68524234f1dd92855dcc1694bcf4db54dc460cf952d03d2c7ab183e6deafb0f091abc37567a5f872741ad53b6f2b54519eb37d72911bb266165f8862dd7b210f4ebd4bfd9600a751808b7ecc0235daa922facb6a1838faf31f03f51bb7f3b60ce5b98ef85b0533950030296499fc6571005ad18f25c2e1bac88e310cb1b5300e100e3f6fed97a96a87fc5eb7799cabca6ebc1a15565715fce93820f3f516fc6d92fe4bd69f707d0416261f6e43991f17ddd190d6199ebf204b98f0b3cd5671d39756dd6040e5c7424532ada89368264413c824525fe8b5adf66d1d46a1ee6b988f81aeef97b727deaa860541efae92dc6ef8c6c5a1fa502112d55d31af55ea7c86345e25baa96559f0eb78ee8bfeb6d513bef054609e8a1502886a98cd5871d75381f66a21c9cddb05c7f6ad46e7e9013bfb752f2ef84b8ab70767b0221a8238527b941f382a7eeb5846c0bf6d61b015248a7348c1d1da8591c78607deda907f87e77700a90ce618bd018333a417aafa5ef2ef742b39b3be158994058f28000f52100bb567a16e0a091694c9a5df155826087dd7841b18fd160bef008b86f9941ee9cec495fee5a602fce06270f96e60c1bba4e36b26ce9ccd07ecbae075c9c0bd867e4315088ec56aeb13f3c0101a53ed0df6aa84e956466a114e2e8677d02c7fc744eaffb6accaf31a07d2ff8b32714270d2b633a3a08e88593f196cc0605edf7d72c7f0e49bd456529e52b3b08ad8e1da1eb85cb037803b5a8a90564d9937c95e3ae974378bb265d4c604fdc9b4fff7fc588cad89f37d9ce86035c22a609d197cfdb8f2a92b20e10f1905e3ae69321262e92b3013d93289a4ba6fa1d8f1286766bf652664573841b85c42fcaa2f7cc584e0c9d0e62950ca40e861d355084c962268471a13ac27d8eab4f330e389aec2cf92acd12a07745981797234c6de641571f603d82b7ca97894d7f14656301c9eda43d6fd80f204aa0808986636f6442a50a40ff8aebbcedce66c86b745f6da1b9f15a40606c347539bf7c5b8f02e2a621c6dd4422e43de42c8d8b7bb22323ed889dcab3205a39603140dfcf9fbf8c56f9e576226b0b7c6b497b782b27be84e2c50538c56a014e77d57066bb92594123fbf4a6f9e14028cb2d9032e087c91bd0ffdb09ac239e5721f831b67f369623481a6dbe033c558ae03a23a4fe454f6df95d042afb352da3e064e30c85bde1aef66709893c4a56dda1df283465e58be04d757cb2ff3b07959b0ac51199b6e8182febbff1283aeb13f28c0fe2f49cc5644381b51873f55ae532f30aae70db31bdc2a56eedad740055fbb2a30d6e3f4dbf2ee88bac7d5b2a10e610e9ca6dbe6c5b7f405daece3e3a9bf163d3bbca00121554709c4cf39ac6cc14860fbfbbec75548ea27447d456400cc5df8659da4ce584432dff3f1ff5b1b69ea31c9544ea4c64118a75e72aa27bbb682e3868ef6586cca711471c288f54d74cea152a8087c3c95c4aa937894e5757fc2814ac68bd38971202669cf48e46a7cae010799a5d899017454e8a0417ef4d89c27561af325dab4b5545d1f93e453e0f742bb971054bfb65d08a833945f272080a490f478e6a6fcc98528e553fc25a934a892d993e790876312313f578f62ef3e86a14ee3406e797f57489c9c771c5e1788f6b059ba597fc125c444306a869f6248368e8576e53e4f03821eeea0729ef47599e2bfd52d43699dfde12c3cfaf2c6bd418950fb539b4cd4cfbbd31d4473fffeaf0f01b85db787af50dee2e5d435bc0d642cdf486618188cc415a74ce86a5dc76aaa5473326db638d3dc2d6bf483feb2231faa7ec1552b6c7e4bf3ac3c65be8b7bfcb5fcac871b25146a6144b41a6b2b3819fdff465834da5ea97f582cc91bba5703b6a9fdeb9d9e0aabfd8cc2ad3576b8c2cbd807719b50f02ab5f50507fc9a144016fbfb4a430cb683c05bbb1878bec57e02f892ec16b0950ee3a936947787004a1a1d08e6bc13f4c7096678e88237c69b5625a4908513ad03793d01826259eea4a85574e0205b378c61e525100041d8db155089ef4003d587a70a988cdd9310925ca0565bbed7a746b45c7a909187cbe83b6dea049b24cde1919596bb9f17d6dcf7d28e42474bf7435a944c7d34ee2de8cb67fc85d2d93690348149037656e471dffb24807ef7579b65bcac93849eae5eaf307610f670f0b98ede7a65828b68fef67036b55af659623fad6b4292ea482bfdd741e390eff45e16ce05fc8b5726e6d14348307f8957940d70247ab18157fbd21efe30bb81800a0708e6bcdf0ecb077782292018e9c3aa5261ab87eb73291aa873b67c6ec4cf4f890dc079b9db56cdea3f9e5796ba2939e459190925c24d9c1da38e291d15d33dbb63d316e999d16c63ef3718e56dc3fe727e159da9c864e1ca830a3a348d6adb60c5d61c62bbe8f92fd506d6f7e84769d6ce2b19316e97897903ad2fe0e7ccfb42da05bf3924615fdfdbe55d16dc6425710484c5324056ca2d565c0d999fd883ca76e263f62bae77a324d7cdbb972d66fabb10ab4bbce579e8c5396393f106463be84ba1191e715e33cc73dfbee4621cf689c13122d414c9fa4a0b839a2aa22c7f74116b4131e949d44b9ec982e1bed733eaf3b209ff73f63f476b50bd33af0ee0f5da72422c2bac6f047ca4699f5dad660b9ce57f021e658638e7449c9735c7568ec75a13676fdf0744fad191732f30843d283b94e1e544cd3087c331f5539882012234c38cd604361b8f1bb717c1c0ca7e01189da25c9d447b50c279e59889f377760237ce087bddc5dd4d36fb113b271bde4edb2829ebe1b2c12d979ce72b031d62a2a041b8b1a671ea5933d5aec661cbb297f70fbfb785747c6a70c3dfdd527296f71f20e50f1f92467c58d11c4a78ef96e2b5df06b3c82d0427c1812ec4618347fe4e5c4f321a4f10e84b3b47baa2b688ed28d506bccc1dd11ef47cd603b28d355048f9a11c9c888c52cf916e0cb0cbe146597f2ab4b1d0d161a2c971f03000000a18fe6153f153d7da4814cf14bb9d896f00f07adaece51573255a58ec8be0612f70d7f104e5bcfe424ae5f96564b1d16a445b836da659289bb185c145fe8a39b382cbd8c6980561075c99896108a68bd3b61b88a823245c4aad3721c8d9b13ae01758a9d41f7dab79ac4d9feafbaf0f517550d8b0ff94323c12063a9a48f795882a21f6142b801a57e7b0c6cb842c169874fdddd655249af77f17035a3a34e29c21c87c2396bc9d61d844c2524b780030bf8402bf9229dc8b09c3bc7d004f0bf9ae9ec82688df040c0008eb05929cac796cd5e5c845b77ef1c018369a94b875b2018a34d688a17af7eb6892470847426790afc3ce62f88625e2a8152873a33fe771f7f6ddd9899e8d08c0207cae89183a16fe685a192ab76bdb4e5b0b0cf73ea28d724eaea750b4c45787774f764d1183f385a1fb5ef140986cfd1278d9861d22ac3da567b94522bb7d706d0530f24c33a2f6b2080df3562e3afb987a56e328de0fe1c7f7bcafd8b5ea0ae497c46696a9e235ce200d06c23800d204e679c30922c8e52feff5ea75d3af4136cec771233a6a0f76b344a3535c4d4b4958dca650da155b0203f1e440521f30e7ddd83b4d704e8e55b09ef78f074760ceb5d9c17a380ec80fe0756f7703861afed398de9dd711d88ab9e94a0c9ba8f733ee12f54f5cbb15878c4a2010a2d77eee985647406cb1c141ca4af51bebbbcb35f4b99f3e618885bee360b974ef06fef29e180a95e5b678bbcf0aedb1600e2784820fe6775696663082993a1302a71308fdc185d46787842f0acc787fb9312d8b39ccab9d6a8d94924e73eb541029caf9c344bacc6691d6e257388aa6c574ff63d5722f6c5522145ab35bd5cdae330a105407e04229ce8abca4dcd212fe1042f7607835860781d34ab3ed0b490d2e0a4779984b3d4d8e4c52d6392e862769708735490124a5f642c60ec8a5baaff5d6ac520f587a06f59df325384e2efd8930f9c19f131b64d8e852753e4a613b44e74bca64d912ff88e778ff84a79b8919b0a547db2e56b80907eca63a03a1e45c7fc2b81a399db44a88fbdcb0e5278fc9dad918dd48e372252de4d886d866e4208e2d816cb9dffde59b35510d3d347eb2b37bf2dd13f434848eaf34ae0ef9c178f93d172ebc5fe42c7c2e763a083be31aedad9da64737e5f1bc6ab7bc37605b11d36493711f133e0a516305370a0136c84ef37d6674924e6e88a4bbe0d717bf95957c125e9a5973539a6e73ee134198fc8e151d4b4682dfac1d29540581966a8597826dbd89b9899d23de99a53da3b60a3083110fb56dd97b23b40c1b6bd9f3a7c685c8279534d7aca84ad3f22ed3e5ab9e510335283689f8bd85bfc5010418f87dc8ce2835bd0d9a97186f7bf082721d59cdb58d6e0bebe4b8c77ee9fa7b4aca508f7cb90e68c0c77fcb31598d6fff2f95c89f5e7b13a30f5c9cfdb0f13746c0b1b8b1541ab921f07aee83c005efbe44ff43f752e6f1eec5e57baab07440ca99b19714d16aeb161d1f48888eaaaa92b8ace7501c6e091b09a40878a65abb0361f97603e4f6a3f9a73386a5bcc8232c2657c81e32bf709bb3c934d3cebbf91835badd1b77fc6a58b71a57afa9923725d71a277bf8d5e0efe9841d07adf115f8bbf58be6932fbe1a63cb27f5cc753ad78810c15f095ae4472e3f625274f94", "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"}}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005880), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f00000012c0)={0xfffffdf8, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x0, 0x4, {{0x0, 0x1, @in6={0xa, 0x4e20, 0xffff, @private1, 0x2}}, {0x0, 0x2, @in={0x2, 0x1ff, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x0, 0x4, {{0x0, 0x1, @in={0x2, 0x4e22, @private=0xa010102}}, {0x0, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x0, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x0, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x617}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x2}, @TIPC_NLA_PROP_WIN]}]}]}, 0x18}}, 0x8040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close(r8) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x240, r4, 0x100, 0x6, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7001}]}, @TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x57}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc5e}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200e}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) r9 = fcntl$dupfd(r1, 0x406, r1) fanotify_mark(r2, 0x1, 0x40000019, r9, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m53.941567894s ago: executing program 1 (id=1116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000680)={0x1, 0x0, [{0x48, 0x0, 0x2000000004}]}) 2m52.233558774s ago: executing program 1 (id=1121): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000a44000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000400)={0x0, &(0x7f0000000340)=[@wrmsr={0x65, 0x20, {0x40000023, 0xda71}}], 0x20}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x7, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket(0x2, 0x1, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) unshare(0x100000) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x40) getdents64(r7, &(0x7f0000000040)=""/45, 0x2d) getdents(r7, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=ANY=[@ANYBLOB="38000000405bf307cd191459790000fbaad1af9d3ac175c82bc08f6500017c0000040042800c000180070006008010000b800c0009"], 0x38}, 0x1, 0x0, 0x0, 0x8855}, 0x0) symlink(&(0x7f0000000040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14318, 0x1a2a1}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r13, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r13, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) socket$kcm(0xa, 0x5, 0x0) 2m35.862077033s ago: executing program 32 (id=1121): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000a44000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000400)={0x0, &(0x7f0000000340)=[@wrmsr={0x65, 0x20, {0x40000023, 0xda71}}], 0x20}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x7, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket(0x2, 0x1, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) unshare(0x100000) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x40) getdents64(r7, &(0x7f0000000040)=""/45, 0x2d) getdents(r7, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=ANY=[@ANYBLOB="38000000405bf307cd191459790000fbaad1af9d3ac175c82bc08f6500017c0000040042800c000180070006008010000b800c0009"], 0x38}, 0x1, 0x0, 0x0, 0x8855}, 0x0) symlink(&(0x7f0000000040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14318, 0x1a2a1}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r13, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r13, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) socket$kcm(0xa, 0x5, 0x0) 2m1.32412376s ago: executing program 2 (id=1290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sigaltstack(&(0x7f00000004c0)={&(0x7f0000000400)=""/186, 0x2, 0xba}, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'trusted.', '{%![^\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x3e8, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 2m1.07942194s ago: executing program 2 (id=1292): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804c}, 0x0) 2m0.903644379s ago: executing program 2 (id=1293): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000010}) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x109000, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f0000000040)={0x18}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)={0x6c, 0x14, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@generic="7487d7396092a1916c860d8a91c3dec7a3d47d43edca4d4ef824f7ee3befd802601870b0bbcd6f05db59b6fc8833d74aecb3849b625803bd5192bb90c93559e453c06f8355972794919b89467e90bffd5b9ee217336b83181c40"]}, 0x6c}], 0x1, 0x0, 0x0, 0x4004004}, 0x4080) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'dvmrp1\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x1000, 0x10009, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0xdb, 0x13, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x8, 0x816d, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x3, 0x4}) 2m0.384293611s ago: executing program 2 (id=1294): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$panthor(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x110, r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="00280e11ec00"}) io_setup(0xf, &(0x7f0000000080)=0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x28082, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = eventfd(0x7a8) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x4000) r8 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611008000000000062"], 0x0, 0x4}, 0x94) ioctl$SIOCSIFHWADDR(r9, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x3ff, 0x40000) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r11, r12, 0x0, 0x20000023896) r13 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x113200, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@local, @private, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r13, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'syztnl0\x00', r14, 0xdcd3b9d4da3299e7, 0x40, 0x5, 0x5, {{0x9, 0x4, 0x2, 0x4, 0x24, 0x64, 0x0, 0x62, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x8, 0xbd, 0x0, 0x5, [0xd]}, @end, @timestamp_addr={0x44, 0x4, 0x6c, 0x1, 0x5}]}}}}}) ioctl$HIDIOCGRAWNAME(r13, 0x80404804, &(0x7f0000000680)) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r13, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x140f, 0x10, 0x70bd2f, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x2c}}, 0x0) r15 = eventfd2(0x81, 0x81800) io_submit(r3, 0x8, &(0x7f0000000840)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x9, r4, &(0x7f0000000100)="04f12e664cbdd4d8dd3a9fa69ec89462f60378c1118a07e63b3e76966be264ba97b0eb20b2629f9ea421b687f7a4e04dc1c91632866b44395a424f1cb9949c8c7c5a87e2275e758c90d94b46c5df6680fc3d1a24f7b9847ec833b1f62c0a70cb24a702ceaefd52b9d5475ea6a99def88e724b5eb4b8e38437aa0c1811a1fa8a31efe867d3aa5b2fcd351", 0x8a, 0x7, 0x0, 0x1, r5}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x1, r2, &(0x7f0000000280)="0a2e1e66872cd7dea83dcbc109fc95b6b1a92815d7", 0x15, 0x387f, 0x0, 0x1, r6}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x9, r2, &(0x7f0000000300)="2fe0f0b7bd682099a9dc5ca7d09d0b7099ced443fa901009156f743dfc6a3cad38e3163ef60d7716a0fe0f69c536d642649a4e22bc747aae5febfc3ff6fe5b0db78226687937c5bf0acb15a0ffb312d7a86f05e26ee64767b09ecf374906a88b86430e8f91c6186126ddab904e", 0x6d, 0x4aa7, 0x0, 0x0, r7}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0xff39, r0, &(0x7f0000000400)="96cf3ae7785e592952ba0cb616dfbda251538758b962", 0x16, 0xffffffffffffffff, 0x0, 0x0, r8}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x0, r10, &(0x7f00000004c0)="3b24ea6b8ea79ef74b723ec236f3fafb52be2e2800eba602170d30ca10843d65f9481c2d12741ba37c4c1d28bc008b97a3c2461811769d095ae0afb033e5c259d027b1f35c6675ed1433", 0x4a, 0x6, 0x0, 0x2, r12}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x2, r1, &(0x7f0000000580)="0ea71522fbcbb7ce3947c7149252ce28b1769eaf105baf7f69bbea390ed33244304bf2f1f2f21060be4cc719ab213fd5d23fd1116e350b4f364fc30103c30d9e93d4482570beab9910354a222a37ed1f0235339c46845f874e128348732a15d84747189b914901c0bab5271046968b5d2949542c56a1f748f47de08425fa69b48f73f0", 0x83, 0x2798, 0x0, 0x1, r13}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x6, r1, &(0x7f0000000680)="bfe7a8a4c6b8c303fe19b66fc5d1471c9106204358c0abc41028adfe9176d815f860c14a44cb1f7a37f28d5cc8221349566cbf5a55c5ca5e58fd66731dfa3ef637086409c809cec722889e646540c900b210e597660b2f69e397a225beb07c20d5d74e5b4f335eb7751cc375be0fff5abf4668ce595ae787337ec54d55835a312d9019db5f131828837e65830706f5fac896dd646c8959bb9f48c85da5", 0x9d, 0x7, 0x0, 0x3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x1000, r0, &(0x7f0000000780)="890d29b2b3d06b1a333822e2c1065fb5a081e36082b86737914eedcfaa0f1b2af0b6eeb9538da414b3798c45f1256faeda028075af73de23bba32673e798b8d50962300095c67bcc59688a7471d4", 0x4e, 0x4, 0x0, 0x0, r15}]) 1m59.985796375s ago: executing program 2 (id=1297): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@deltfilter={0xf9c, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0xf64, 0x2, [@TCA_CGROUP_ACT={0xf60, 0x1, [@m_connmark={0xa4, 0x0, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x671, 0x7, 0x7, 0x3}, 0xe57}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x10000, 0xffffffffffffffff, 0xc, 0xa00}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x5, 0x5854}, 0xfffc}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x50, 0x14, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xe68, 0x5, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x3fe}, 0xb1, 0x3, [{0xf7b7, 0x5, 0x9, 0xd, 0xdd, 0x5}]}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x82, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x9, 0x8f, 0xffffdd1a, 0x10, 0x4}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x3ff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xf9c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000880)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf250f0000000c0007800800f8ff04000000"], 0x20}, 0x1, 0x0, 0x0, 0x40003}, 0x4) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000040)={r4, 0x3}, 0x8) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x8000) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r5 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0x1, 0xfffffffc}, 0x50) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x7, &(0x7f00000000c0)={0x1}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x28}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r6, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r7, 0x1}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r10, r12, 0x25, 0x2, @void}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', r12, 0x7800, 0x7, 0x45a, 0x3, {{0x14, 0x4, 0x2, 0xe, 0x50, 0x68, 0x0, 0x3, 0x29, 0x0, @multicast2, @broadcast, {[@lsrr={0x83, 0x1f, 0x3f, [@remote, @empty, @multicast1, @rand_addr=0x64010100, @multicast2, @rand_addr=0x64010101, @broadcast]}, @noop, @ssrr={0x89, 0x1b, 0x12, [@broadcast, @private=0xa010100, @loopback, @multicast1, @multicast1, @broadcast]}]}}}}}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r13, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000300)={'ip6gre0\x00', 0x1000}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) 1m59.500849025s ago: executing program 2 (id=1300): r0 = socket(0x2, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setresuid(0x0, 0xee00, 0x0) keyctl$join(0x1, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905065abf0300000009058202"], 0x0) keyctl$session_to_parent(0x12) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/259], 0x119) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0x4, 0x1a, 0x2, 0x42, 0xfb, 0x7, 0xd4, 0x0, 0x4, 0x7, 0x2}, {0xffff1000, 0x2, 0xd, 0xb, 0x8, 0x40, 0x6, 0x8, 0x5, 0xf, 0x3, 0xcc}, {0xeeee0000, 0xdddd1000, 0x4, 0x8, 0x2, 0x7, 0x4, 0x1, 0x8c, 0x9, 0x6, 0x5}, {0xeeef0000, 0x3000, 0xd, 0xf, 0x68, 0x46, 0x2, 0xd, 0x46, 0x3, 0xfc, 0x1}, {0x100000, 0x58000, 0x3, 0x3f, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6f, 0x1, 0xfb, 0x4, 0x80, 0x1, 0xfa}, {0x8080000, 0x2000, 0xc, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x1, 0x7, 0x0, 0x6}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x6, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x100000, 0x5}, {0xdddd1000, 0x5}, 0x40010000, 0x0, 0xf000, 0x300, 0x7, 0x0, 0x9000, [0x4, 0x402, 0x8, 0x1]}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x49323de44ee88a26, 0x0, 0x49, 0x1, 0x7, 0x4, 0xe, 0x0, 0x0, 0xb2, 0x2}, {0xf000, 0xdddd0000, 0x8, 0x5, 0xbb, 0x5, 0x38, 0x8, 0x7, 0xfd, 0xdd}, {0xeeef0000, 0x4000, 0xd, 0xe4, 0x3, 0xd, 0x6, 0x9, 0x2, 0x5, 0x42, 0x80}, {0x0, 0x8000000, 0xc, 0xc, 0x44, 0xcb, 0x5, 0x9, 0x40, 0x9, 0x1, 0x5}, {0xffff1000, 0xa000, 0xb, 0x7, 0xe, 0x2, 0x6, 0x8f, 0x1, 0xd, 0x5, 0x2}, {0x80a0001, 0x80a0000, 0xb, 0x5, 0x61, 0x18, 0x7, 0xfc, 0xc, 0x9, 0x6, 0x4}, {0x7002, 0xeeee0000, 0x8, 0xff, 0xbc, 0x80, 0x1, 0x4, 0x5, 0x0, 0xbf, 0x9}, {0x30000, 0x2000, 0x4, 0x3, 0x4, 0x6, 0x9, 0xfa, 0x7, 0xc6, 0x0, 0x81}, {0xf000, 0x3}, {0xc000, 0x8}, 0x14, 0x0, 0xeeee8000, 0x20, 0x0, 0x4801, 0x33339800, [0x9, 0x1ff, 0x86d, 0x100000000008001]}) ioctl$XFS_IOC_SET_RESBLKS(r6, 0xc0105872, &(0x7f0000000080)={0x94, 0x2008000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 1m43.348389477s ago: executing program 33 (id=1300): r0 = socket(0x2, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setresuid(0x0, 0xee00, 0x0) keyctl$join(0x1, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905065abf0300000009058202"], 0x0) keyctl$session_to_parent(0x12) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/259], 0x119) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0x4, 0x1a, 0x2, 0x42, 0xfb, 0x7, 0xd4, 0x0, 0x4, 0x7, 0x2}, {0xffff1000, 0x2, 0xd, 0xb, 0x8, 0x40, 0x6, 0x8, 0x5, 0xf, 0x3, 0xcc}, {0xeeee0000, 0xdddd1000, 0x4, 0x8, 0x2, 0x7, 0x4, 0x1, 0x8c, 0x9, 0x6, 0x5}, {0xeeef0000, 0x3000, 0xd, 0xf, 0x68, 0x46, 0x2, 0xd, 0x46, 0x3, 0xfc, 0x1}, {0x100000, 0x58000, 0x3, 0x3f, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6f, 0x1, 0xfb, 0x4, 0x80, 0x1, 0xfa}, {0x8080000, 0x2000, 0xc, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x1, 0x7, 0x0, 0x6}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x6, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x100000, 0x5}, {0xdddd1000, 0x5}, 0x40010000, 0x0, 0xf000, 0x300, 0x7, 0x0, 0x9000, [0x4, 0x402, 0x8, 0x1]}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x49323de44ee88a26, 0x0, 0x49, 0x1, 0x7, 0x4, 0xe, 0x0, 0x0, 0xb2, 0x2}, {0xf000, 0xdddd0000, 0x8, 0x5, 0xbb, 0x5, 0x38, 0x8, 0x7, 0xfd, 0xdd}, {0xeeef0000, 0x4000, 0xd, 0xe4, 0x3, 0xd, 0x6, 0x9, 0x2, 0x5, 0x42, 0x80}, {0x0, 0x8000000, 0xc, 0xc, 0x44, 0xcb, 0x5, 0x9, 0x40, 0x9, 0x1, 0x5}, {0xffff1000, 0xa000, 0xb, 0x7, 0xe, 0x2, 0x6, 0x8f, 0x1, 0xd, 0x5, 0x2}, {0x80a0001, 0x80a0000, 0xb, 0x5, 0x61, 0x18, 0x7, 0xfc, 0xc, 0x9, 0x6, 0x4}, {0x7002, 0xeeee0000, 0x8, 0xff, 0xbc, 0x80, 0x1, 0x4, 0x5, 0x0, 0xbf, 0x9}, {0x30000, 0x2000, 0x4, 0x3, 0x4, 0x6, 0x9, 0xfa, 0x7, 0xc6, 0x0, 0x81}, {0xf000, 0x3}, {0xc000, 0x8}, 0x14, 0x0, 0xeeee8000, 0x20, 0x0, 0x4801, 0x33339800, [0x9, 0x1ff, 0x86d, 0x100000000008001]}) ioctl$XFS_IOC_SET_RESBLKS(r6, 0xc0105872, &(0x7f0000000080)={0x94, 0x2008000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 10.297902322s ago: executing program 4 (id=1709): close(0xffffffffffffffff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000380)="7689c40b9f6bb8ba435dd0cf55eb915987a29d00f58661d6b51c771f80c8027bf65870b391168c56cef89aa6ed3c1354f94e306a70d89127f638acac286220e905068b3ac969e54580c403cd7ccbcad4eb9c9689fe5829d58704240776990dde1604b65d8581a81742b0e7e603fecd8f93d163b44ac0e8fbd47dd4db8b1e8708c3b0e7f5", 0x2c}, {&(0x7f0000000180)="379f01b63f1c82a927f806db4fef8c1220e6a5e7030e51f854eae6053f5860e46c69342971c6fad1edf7c924f84cb0e9eb", 0x31}, {&(0x7f00000002c0)="e2e96bd631be03bc651563531950647d5aa25ff14203e2d8fc3140a989683d46fac7ee099f23645e5039b13c37930282cbaae88ded175eda82374bcd1d0b1644f6d44d343726dc0140", 0x49}], 0x1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = inotify_init() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x1f, 0x0, 0x0) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x4200004b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) close(r2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="6c28000040000701f6ffffff00000000017c0000040042800c00018006000600800a0000482802"], 0x286c}, 0x1, 0x0, 0x0, 0x48815}, 0x400c000) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102400, 0x19000) socket$igmp(0x2, 0x3, 0x2) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f00000000c0)={0x800, {"9e635dc76a838237bb614938256fb439", "fcb740f277963370e947903d75a07afd", "328cf8df35407c95ae1f2b32aeb580c1"}, 0x5, 0x7}) 9.028896073s ago: executing program 6 (id=1713): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x76, &(0x7f0000000740)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, 'P~Y', 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a}], "359464030f0f85ed"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xfd58, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000700000078a20662f9c89a15625865c695db7d3a478bd6ff4a4518e93e523eeae7b002ce238a803da7f2b87b2caa48e152867797fc235662987965fd1a295dcd877282b5e4b867b97b480e8b078c00919feefc8fb94beaea30d9ed100517c1ae8795497a2c1157e467b1fbe2278e940af4239b"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, 0x0, &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400010d2bbd70000200000007000000", @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="010200007f"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) write$binfmt_format(r4, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 8.425924294s ago: executing program 6 (id=1714): r0 = syz_open_dev$dri(&(0x7f0000000080), 0xb, 0x400) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x2, 0x0, 0x4, 0x39f}) (fail_nth: 3) 8.056643869s ago: executing program 6 (id=1716): getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x2, [@var, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x5e}, 0x28) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, 0x9}}}, 0x84) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r2, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0x7fffffff}]}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.538674753s ago: executing program 3 (id=1723): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x1000000, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 6.420370766s ago: executing program 4 (id=1724): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x76, &(0x7f0000000740)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, 'P~Y', 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a}], "359464030f0f85ed"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xfd58, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000700000078a20662f9c89a15625865c695db7d3a478bd6ff4a4518e93e523eeae7b002ce238a803da7f2b87b2caa48e152867797fc235662987965fd1a295dcd877282b5e4b867b97b480e8b078c00919feefc8fb94beaea30d9ed100517c1ae8795497a2c1157e467b1fbe2278e940af4239b"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, 0x0, &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400010d2bbd70000200000007000000", @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="010200007f"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) write$binfmt_format(r4, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 6.399303941s ago: executing program 6 (id=1725): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x4, &(0x7f0000000300)={0x0, 0x39, 0x1, @thr={&(0x7f0000000140)="21d34d76286ae74368bfcfcd13ef53d48e7e8def70ee869a0c935a617947c965b104c936769b2c1db6a9da9b348cd5b2952242b4b6326f981b0eac8b35ba1b80f72febf7fde0b77b6535637233b4837d8fd0fdaae733da486353a8d111acd3a7363eca11da240a6a97938695eeffc9cb3eff04a35db9a4859acd6afda4edb2f9d8917f5133be44732743938cbc8ae862ea34612bd0bc2b02130876e43b50a8572291de0a8afbd1d88c612db10960989fc7b7cf1f1016676e1d", &(0x7f0000000200)="da323048926ac630cdd0b845fc48d3aace5a3ce2d068a9c6ea03de175387fceb69470ca999586895799c887fb9b608e95a301602d5ec2003fd75ee409a2adcaab3db4687f007c5192695766e05361417c443081ecbda4d1952eebcad9c27f949dedf459b9f6bbda90d61e012d0ecab588432d1245c300d048d82037fb33b62e3d84a8917cd2208000171fc02cae1ecf8de1cbdcf2c6778238d682bb55db6206174a83471161205c93976047f76e1b3942c515bff987c97d7330d1db4ecd4a5f1de3d1ae185e6821d0e04ab685cee92daf0261bca7b3e25157fc68e90886c7b4069d3e5d8b701f3507e7f"}}, &(0x7f0000000340)=0x0) timer_settime(r1, 0x0, &(0x7f0000000380)={{0x77359400}, {0x77359400}}, &(0x7f00000003c0)) r2 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000bd74f06a5ebc93f971ca91e7517f64b1cc25515a564e03aadbdfdc58947dc6f269db28273ae0966928c6ce6ced070027fc4a7afa5e8d0d60064ff1deff2309927461833d078ef8d82b3087f7eb91cffbb91388f8bf9ab309c80a44b5bd737f9601"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8681, 0x0) close(r3) socket(0x1a, 0x6, 0xb) ioctl$TUNSETOFFLOAD(r3, 0x40047438, 0x119603dac37497ed) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYRESDEC=r3, @ANYRES64=r0, @ANYRES8=r3, @ANYBLOB="e9c03448bb782172c68f6a66"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.821974844s ago: executing program 4 (id=1728): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)=',8Z', 0x3) accept4(r2, 0x0, 0x0, 0x800) epoll_create1(0x0) inotify_init1(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012100, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x90010000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) 4.610557209s ago: executing program 0 (id=1729): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000000)="240000001a005f", 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 4.608697836s ago: executing program 5 (id=1730): socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x842, &(0x7f0000000340)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=r0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', '', [], 0xa, "201100000000b073dbc2e1e649efc1d73828a06efe233dc8013ff03212750dda49e8d9eed99dedf65d632853f4dfe6d11ac5eb9dc22d5ec2b368dd84d61c"}, 0xffffff9b) 4.39912439s ago: executing program 3 (id=1731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010003000000000000000a00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x48881}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="d8000000140081044e81f782db46b904021d000025000000040000a118000200ff02000100000e1208000f0100810401a80316ea1f000b40032a5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc0000000000000080bb9ad809d5e1cace81b341139fe3cd4032ecedb12d1d2eb0c0ed0bffa29954e5413f017fe491", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r8 = accept(r6, 0x0, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r8}, 0x20) close(r9) recvmsg$can_bcm(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) recvmsg$can_bcm(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10060) timer_create(0x0, 0x0, 0x0) flock(r4, 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) flock(r5, 0x1) close(0x3) 4.296598779s ago: executing program 0 (id=1732): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x80000000) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000b, 0x4010, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xcd4281fa15e8457d, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x16) r4 = dup(r1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xc5, "af2096196d3e5ec44ec7cc889887bf0474781e2fda9778e43081b6577030d4f6c2cc4844c54055299d66596d822b1b846ab8054eb27ce196ce16cbfe30c30ef9e9e93298cdec09072fe25bb0ff1c64bd0d5c9b6b37911827eaf3fcf3f79a231f038e1bb79d090f8bfad735548f775062970e838130acf24b366611a9dd05f7b76681cedd2dfc9a405c3f2a2055f67436829f66b6e848aa1efb277292318fe08e9718cff6a58e236468017e57e78b7245053a98a207da1d8d52ceee0e0d7d944568684baad1"}, &(0x7f00000001c0)=0xcd) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={r5, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}, 0xfffffffc, 0x2, 0x1, 0x0, 0x8, 0x3, 0xc}, 0x9c) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f00000002c0)={'HL\x00'}, &(0x7f0000000300)=0x1e) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000340)={{0x62, @multicast1, 0x4e24, 0x4, 'dh\x00', 0x20, 0x8, 0x45}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x2, 0x3, 0x975e, 0x642}}, 0x44) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000003c0)={0x0, @aes128, 0x0, @desc2}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000540)={0x20, 0x2, &(0x7f0000000440)="2a57888688d5c2517e81269d66218314750b34803fcf3347c590057f07083bc3f44e7131f5f9067f358198d65f476ad07aa8aa778b158ce3ec42cdf7b222e12af4b298a8adbb6fd58a17ac3c3ea536241cf9973db410de5b0ffe64d78d97036a98861daf4f289c12d90a127d343b4a24ef75e6527f7c94f6cee41e0d441738a9e31086f052f0d03a3921dff34b28bb0237990f5f537e12413f6fccac00a6c83a220d1db91382bb2c25ee8dbd72395fcabf36fbd65d5561ccda69b899c32f2b6af1709307bb3f16050b2ad557b63eecafa51afd4e0b181049b149697ba3e2d8c9a737a8e6ee68bd40", 0x6, 0x6}) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000005c0)={0xfffffffffffffffe, 0x0, [0x1f7aa88a, 0x8000000000000000, 0x7, 0x9], &(0x7f0000000580)}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000600)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000006c0)={0x28, 0x3, r7, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000680)}) getsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000700), &(0x7f0000000740)=0x4) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000780)={0x6, {{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x88) r8 = syz_open_dev$admmidi(&(0x7f0000000840), 0x5, 0x200040) ioctl$FS_IOC_GETVERSION(r8, 0x80087601, &(0x7f0000000880)) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), r4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x7c, r9, 0x4, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x401}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff7}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbd}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x80) r10 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf32(r10, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0xf, 0x3, 0x0, 0x9, 0x0, 0x6, 0x10001, 0x22a, 0x38, 0x1f0, 0x7fff, 0x8000, 0x20, 0x3, 0xff, 0x2}, [{0x1, 0x400, 0x3, 0x0, 0xec2, 0x6, 0x8, 0x10}, {0x70000000, 0xa, 0x0, 0x9, 0x8, 0x8, 0x6, 0x7}, {0x60000000, 0x80000000, 0x0, 0x6, 0x2, 0xaa, 0x1, 0x7ff}], "e604d0b4ab2d68950fda3b4d7f1cebc393e836ed9e9f62f02f8aeca4505dee650d9b12ab31032afc935acad133bca6c0c89454c3283e208631487d7bbefaa5147cb1daa929165c450ec49fc582f148b193174118966be09c44a4827e70fdc9d130dda7ca6ab566c5ed440793998ec34179ec54ca026f07854943848b036f748d3ad55c62c32339fcf648b568b68824e8db8369b33cca1c32fc2e3e9b958ac9ed1a51917a5c919cbe30209306d2532fdbafea673e0f7b2e7c8104998f", ['\x00']}, 0x254) syz_open_dev$video4linux(&(0x7f0000000cc0), 0x81, 0x1) openat$cgroup_procs(r4, &(0x7f0000000d00)='tasks\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r8) syz_emit_ethernet(0x92, &(0x7f0000000d40)={@link_local, @local, @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0xe, 0x4, 0x0, 0x8, 0x80, 0x65, 0x0, 0x14, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x64010100, {[@rr={0x7, 0x13, 0xc, [@multicast2, @remote, @rand_addr=0x64010100, @multicast1]}, @timestamp={0x44, 0x10, 0x5a, 0x0, 0x8, [0xfffffffa, 0x0, 0xd]}, @noop]}}, {0x4e20, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "0aa5ec92ab873fb6ac3216790fb18c3adc32d0b928a5e82c", "1c282405c1fbc27f8fb5c2bc9601b54e7a9d9bea4bcefff0fa3b7ac4480aa19b"}}}}}}, &(0x7f0000000e00)={0x1, 0x1, [0x8ba, 0x476, 0xecb, 0xeee]}) syz_open_dev$usbfs(&(0x7f0000000e40), 0x4, 0x10000) 4.275219901s ago: executing program 5 (id=1733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r2}) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x70bd2a, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) 4.144554927s ago: executing program 3 (id=1734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x800) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f0000000000)=[{0x80000000}], &(0x7f0000000180)}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000000c0)={r3, 0x0, &(0x7f0000000040)}) 3.59730049s ago: executing program 0 (id=1735): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$unix(0x1, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$unix(r1, &(0x7f00000003c0)=@abs={0x1}, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0xb) accept4(r2, 0x0, 0x0, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) 3.407016824s ago: executing program 4 (id=1736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x60b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) (fail_nth: 10) 3.012061502s ago: executing program 4 (id=1737): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082403"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf886dd6a7abd6a00006701fc0000890ea2fcf217ddd40900000000000000000000000000ff020000000000"], 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0xa3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7, 0x0, 0xc0, {0x8, 0xb, 0x0, 0x0, 0x1, 0x24, 0x30, 0x4e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0xb9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xb, 0x0, 0x9, {0xa, 0x25, 0x25, 0x1, 0xe, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0x80, 0x9, {0xa, 0x25, 0x25, 0x81, 0x0, 0x5}}}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x800) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f00000001c0)={0xf, r0, 'id0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x0, 0xc000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)=ANY=[@ANYBLOB="020a0700020000002bbd7000fddbdf25"], 0x10}}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f00000002c0)=ANY=[], 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x688003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)={0x1a}) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000100000000000000440005002001000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) poll(&(0x7f0000000140)=[{r6, 0x14}], 0x1, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000070500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000005d00)={0x14, 0x10, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0xf2}]}, 0x14}, {&(0x7f0000000940)={0x77c, 0x11, 0x200, 0x70bd2d, 0x25dfdbff, "", [@nested={0x13f, 0x123, 0x0, 0x1, [@typed={0x5, 0x68, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xff}, @nested={0x4, 0x12f}, @generic="2bb7fafe95d2e2fdc737e4ab6f7221946d5f64711cc94763c948f57696a44b9b0f9bd92c1c491e4ec2bd910dd6bc5f0c64f688d55d0c82f29792f8c8f5d51ec381a60a09349c8c3adc7dcc906ef0b2fcb1b729f95989fdc70d0e518453f9708ad7bc031e579b8c3ee6f85770e46b0a7aee90a451", @generic="7e587cbbe172c2f12fef4ea11d8e648ccdad666acb2060fa00755c2ca1f45eb80681c29a9784a3f2bcc93fb72a0c0e9b77a5ce63edd81c8a339c91221bc70541587de9093c8a7bfa876b28f478a484541b70d1ef7695d8deb05ec9a8643f67347ff9295429d4348ee99aac484c4b20d89701d205606562a58c408347e3f9ac62744898ea6022db7d85eac2d45c4a80dc470dbe64fef242eb7591fb786fadfd67c7984e8f7f58b7", @typed={0x8, 0xf3, 0x0, 0x0, @pid}, @typed={0x8, 0xfb, 0x0, 0x0, @pid}]}, @nested={0x37e, 0x110, 0x0, 0x1, [@nested={0x4, 0xd2}, @generic="756e9dbc7a10bad8f3d4029475f87537db3f2cc8ee1b9ab2a8b537b42882e68cbee3f5f26f3742d2705eeee74ad2357463b7ef24f62b0300b5f998a06fa0cef6f7ef809ee66ad8e1fa84e9d96ae6f1d2ae312ff91b45f32c3b04d765c9e37a331af38d792d8b5b27341669e0eef07e11e80a0ec4e97869a4a6be8d3ff3cd7aefd7fdd7fe4b1ef57f923c06f5bb25e770f531b848de928d8514f351370b5b242a6d9b593a3e68943acd942766aa9f55b220b5a3d32269e23158e77d5a56f3f57c4998bc565c6f8c6cabb86d18c75ce9757cfe7b", @generic="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", @generic="80774f04db3dcf0fe5dc15b25da9ef60b770c1cafd06de4184ed6341e4986c4d88838ba5fc95fadc064dac1b41c40fe4cf247a24a3", @generic="86ed99f1b35aa65747ff3a9d2b25b979125baa7bd7ecd1564a8a6f92508df8e2ae0a54733668a8dd26e5d35ee47cf2838c8226e29825b66f21bc04592925dc703bbdda51c2c70c6462f739e1b1a1d53c86c86a706daeb159eaecca875152330ccdabed06c49c4a479427bc6de93bbe19938d185b04e24a648887c382cb0736c24d36756a36dbbc48e668be09c8c5928db7", @nested={0x4, 0x6f}, @generic="bfab5e4d3c816f18030f0febda63c7723bb970a0240fbd5d3aeaf1c6147f728e799467101faf47810262ce3303b2e0b4a580d572dd564bd85a67c7bd7d45bf0125400517945e90ef377475abc2f9d6592a09ae20469d804c2ca61b1cabf1509beaacfdbbf0067135b98c2e68e1d08012e5ff3d3e5bb1b810431cd4467b120a957e550b7dd55abed52ff97f2a275395138cfb831b92a25fa8a91eaa67e37616d60cae342f553cf4152e429bb5df06359beef91250ac01a46deefe0ae41ada95bb71521f9710344930ddb9f49b53daf282aab6a89f74ef2cbf3bd690"]}, @typed={0x4, 0x9a}, @typed={0xc, 0x57, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x99, 0x0, 0x0, @fd=r7}, @generic="3005057594c7ab943b5447e5dcd935d0174f7563bf8d474a80c078f91aac47cf688eb27288388c27767774db39ec27df61a491c78d295c711398b1414d8d6c686f73c41e7773a851ba5cafd69f44b0187c4409dd51baa049ecd31af0bee819f99f2f5d2f01a154c7fb11105a05953f1515a045c494234a5750daa56431212f3204ad35e66a41f52559735511e8e65d773accf631a2360ddf0c10b312fce14a960004fafd6616da835fc82c75e6ab415f5c4bc536fe448145004f3584ae", @generic="211a872844642da368ea6558c1fc13ab57d59c61bc642eba390a6b69eb4ddb133d397ec78417d0dc67b477c825c3bad925f424667e8f8b647cd26c5cb4c4dc86875d754de7ce2f1fbb2cec9ad75aa3e85a7a4c999d503495cff96ddb72f53439b362b3feea830f1251b782c62f90177eaa25d698db474154ec08042c0173a3c14b45e045b89c63664cd3430f8e8a0edb817283d40952d670c3f6161f77c4546e75b72ffaa3663a13d766678100dd98607aa2922c630553357ca092e6cde3ec8aed6f080c8111680a58751bab7bc67fbf223c22ab912d3acb7f847c04312f84dec36773114e4d285d", @generic, @typed={0xeb, 0x95, 0x0, 0x0, @binary="5a9645c76ab4425df96fa068997c7a578cdb7ea440018325d1bd501406526cb7c2b7f4e6e974539e725301f347c99fdb459046b9a0984089cf286b7b1a7d641d067756ae8918d1c55f4714f32f4a986a201fee258cf3c5f926b664176ae93aa921a265e294394b49d0a79551dd69720d4c7cac6294d3ed0cb7485a2ac6749cc4e719de1f6b2f47eeff3eaeac2d428e233e85c2f45e981b4b4fddae40e4ed86055c4619ffb0abb2483fe186e8179cb5e611c40bdbf3f8ac946bbeeb1aef87ebb0bbd34f5f812e48ad00ef2c141b64ef2cc9acf07cccd3f4c34e2f7f379536de837ca20ab66938e7"}]}, 0x77c}, {&(0x7f00000010c0)={0x28, 0x40, 0x300, 0x70bd27, 0x25dfdbfd, "", [@typed={0xd, 0x55, 0x0, 0x0, @str='/dev/kvm\x00'}, @typed={0x8, 0x5d, 0x0, 0x0, @uid}]}, 0x28}], 0x3, 0x0, 0x0, 0x400c445}, 0x0) 2.945505803s ago: executing program 3 (id=1738): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x76, &(0x7f0000000740)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, 'P~Y', 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a}], "359464030f0f85ed"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xfd58, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000700000078a20662f9c89a15625865c695db7d3a478bd6ff4a4518e93e523eeae7b002ce238a803da7f2b87b2caa48e152867797fc235662987965fd1a295dcd877282b5e4b867b97b480e8b078c00919feefc8fb94beaea30d9ed100517c1ae8795497a2c1157e467b1fbe2278e940af4239b"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, 0x0, &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="010200007f"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) write$binfmt_format(r4, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 2.937570811s ago: executing program 5 (id=1739): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_setup(0xbd9, &(0x7f0000000000)={0x0, 0x5ed5, 0x5000, 0x1, 0x127, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) recvfrom$inet(r3, 0x0, 0x0, 0x2700, 0x0, 0x0) write$tcp_mem(r3, &(0x7f0000000000)={0xfffffffffffffff3, 0x20, 0x7384581a, 0x20, 0x400}, 0x48) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x8, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x64010100, @multicast1}, {0x11, 0xfe, 0x0, @multicast2}}}}}, 0x0) sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) syz_io_uring_complete(r2, r4) listen(r1, 0x0) writev(r0, &(0x7f0000000280), 0x0) 2.854733324s ago: executing program 3 (id=1740): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x4022}], 0x1, 0xe13) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 2.699755755s ago: executing program 5 (id=1741): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}], 0x1, 0x20000044) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c01", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c0001800800030001"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.576604273s ago: executing program 0 (id=1742): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000000)="240000001a005f", 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.576216762s ago: executing program 6 (id=1743): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x80) mkdir(&(0x7f0000000000)='./file0\x00', 0x34) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004c0000440000000000069078ac1e0001ac14140d8307d7e0000002440c050300000007000000008606000000", @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB='P\x00\x00\x00\x00\x00\x00\x00'], 0x0) (async) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004c0000440000000000069078ac1e0001ac14140d8307d7e0000002440c050300000007000000008606000000", @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB='P\x00\x00\x00\x00\x00\x00\x00'], 0x0) chdir(&(0x7f0000000040)='./file0\x00') (async) chdir(&(0x7f0000000040)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x84) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write(r2, &(0x7f0000000380)="851b243cd457ff990d9fa8b9f9598dc3a770b94361e24863be046ffc91aef96c508126df142cc1b7a868044dd10defcdb78de729746be597dfb43f0e5a789a56d67c4d2f2cc4ef6e", 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000003000000020000000000000000000000000000423c21a904b9d1750914e5148b6c4e04836d41586c2a00417f621991b5db8f2a5d69d7bd02a02dbff2fd204d16ae9de62baf5beeec9b6f336bfd7a264cbbcabf97a04819e4e79906223a8955b0b511e55bc2fb0b3a300b077a8f7b4f7cfa5ef777e0e352545939f013b9105edb5561"], 0x50) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) (async) r4 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES64=r4], 0x0, 0x37, 0x0, 0x3}, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 2.52171013s ago: executing program 5 (id=1744): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x1000000, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 2.436283159s ago: executing program 0 (id=1745): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) connect$can_j1939(r0, &(0x7f00000002c0)={0x1d, r1, 0x2, {0x1, 0xff}, 0x1}, 0x18) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) close$fd_v4l2_buffer(r3) 2.360590098s ago: executing program 6 (id=1746): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000034b000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00004c9000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f000016a000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x2, 0x348}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x21cd, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000200)}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) preadv(r1, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/20, 0x14}], 0x1, 0x5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r0, 0x221d, 0xcf75, 0x37, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) connect$can_bcm(r5, &(0x7f0000000000), 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r7, 0x4068aea3, &(0x7f0000000040)={0xc4, 0x0, 0x6}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 2.241668242s ago: executing program 0 (id=1747): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) sigaltstack(&(0x7f0000000180)={&(0x7f0000001200)=""/4122, 0xc0000002, 0xa54}, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) (async) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_clone(0xc0012fb, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {0xd}, {0x3, 0x5}, {0xfff2}}}, 0x24}}, 0x0) (async) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e9f, 0x0, @mcast1, 0x7}, 0x1c) (async) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r7, 0x89e3, &(0x7f0000000100)={0x33, 0x7ff, 0xb, 0xb}) (async) r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) dup3(r8, r9, 0x0) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000300)='\n', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="c6", 0x1}], 0x1}}], 0x2, 0x4004010) (async) r10 = openat$sndseq(0xffffff9c, &(0x7f0000001740), 0x400) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r10, 0xc0105303, &(0x7f0000001780)={0x1, 0x7, 0xf}) (async) shutdown(r0, 0x1) 1.182968701s ago: executing program 3 (id=1748): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_pidfd_open(0x0, 0x0) setns(r0, 0x24020000) r1 = syz_clone(0xb2168400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0x5e7, 0x10000, 0x2, 0x158}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000040)={0x100, 0xffffffffffffffff, 0x20, {0xc5, 0x100}, 0x4}, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) prlimit64(r3, 0xb, 0x0, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a2c000000060a05000000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100200000000000000000000700000a3367626393542af4f668dbaab7785ae37542a5f8e10de0bdb9165aabf1"], 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 638.129223ms ago: executing program 5 (id=1749): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = io_uring_setup(0x4166, &(0x7f0000000140)={0x0, 0x4, 0x400, 0x3, 0x161}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000400), &(0x7f0000000440)=0x4) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) r3 = dup(r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, 0x0, &(0x7f0000000580)=0x1e) ioctl$BLKRRPART(r3, 0x125f, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)) 0s ago: executing program 4 (id=1750): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x76, &(0x7f0000000740)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, 'P~Y', 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a}], "359464030f0f85ed"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xfd58, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000700000078a20662f9c89a15625865c695db7d3a478bd6ff4a4518e93e523eeae7b002ce238a803da7f2b87b2caa48e152867797fc235662987965fd1a295dcd877282b5e4b867b97b480e8b078c00919feefc8fb94beaea30d9ed100517c1ae8795497a2c1157e467b1fbe2278e940af4239b"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, 0x0, &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="010200007f"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) write$binfmt_format(r4, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) kernel console output (not intermixed with test programs): ext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 358.148623][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.193535][ T5708] usb 5-1: config 0 descriptor?? [ 358.436305][ T5708] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 358.455765][ T5708] [drm:udl_init] *ERROR* Selecting channel failed [ 358.491499][ T5708] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 358.498494][ T5708] [drm] Initialized udl on minor 2 [ 358.514217][ T5708] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 358.524055][ T5708] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 358.552534][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 358.564440][ T5708] usb 5-1: USB disconnect, device number 36 [ 358.575416][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 358.677048][ T6283] block nbd1: Possible stuck request ffff888028337000: control (read@0,1024B). Runtime 180 seconds [ 358.687852][ T6283] block nbd1: Possible stuck request ffff8880283371c0: control (read@1024,1024B). Runtime 180 seconds [ 358.698893][ T6283] block nbd1: Possible stuck request ffff888028337380: control (read@2048,1024B). Runtime 180 seconds [ 358.710270][ T6283] block nbd1: Possible stuck request ffff888028337540: control (read@3072,1024B). Runtime 180 seconds [ 358.978375][ T30] audit: type=1400 audit(1779513528.537:709): avc: denied { set_context_mgr } for pid=10383 comm="syz.5.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 359.048031][ T30] audit: type=1400 audit(1779513528.602:710): avc: denied { call } for pid=10383 comm="syz.5.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 359.294471][T10390] x_tables: duplicate underflow at hook 3 [ 359.461319][T10388] binder: 10383:10388 ioctl c0306215 200000004a40 returned -22 [ 359.949331][ T5815] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 360.540814][T10407] xt_cgroup: path and classid specified [ 360.576779][ T5815] usb 4-1: Using ep0 maxpacket: 8 [ 360.610429][ T5815] usb 4-1: unable to get BOS descriptor or descriptor too short [ 360.635315][ T5815] usb 4-1: config 117 has an invalid interface number: 163 but max is 0 [ 360.648313][ T5815] usb 4-1: config 117 has no interface number 0 [ 360.663068][ T5815] usb 4-1: config 117 interface 163 has no altsetting 0 [ 360.672750][ T5815] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 360.697983][ T804] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 360.708871][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.725458][ T5815] usb 4-1: Product: syz [ 360.737598][ T804] usb 1-1: USB disconnect, device number 53 [ 360.752739][ T5815] usb 4-1: Manufacturer: syz [ 360.770329][ T5815] usb 4-1: SerialNumber: syz [ 360.806739][ T7634] udevd[7634]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.270958][T10432] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 361.319851][T10401] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1299'. [ 361.329861][T10401] netem: unknown loss type 5 [ 361.341886][T10401] netem: change failed [ 361.378462][ T804] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 361.541939][ T804] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 361.560154][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.560205][ T29] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 361.571334][ T804] usb 1-1: config 0 descriptor?? [ 361.802171][ T5815] f81534a_ctrl 4-1:117.163: failed to enable ports: -71 [ 361.814349][ T5815] f81534a_ctrl 4-1:117.163: probe with driver f81534a_ctrl failed with error -71 [ 361.829499][ T804] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 361.831132][ T29] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 361.845695][ T5815] usb 4-1: USB disconnect, device number 45 [ 361.850432][ T804] [drm:udl_init] *ERROR* Selecting channel failed [ 361.854435][ T29] usb 5-1: config 0 has no interface number 0 [ 361.920183][T10438] netlink: 'syz.5.1310': attribute type 11 has an invalid length. [ 362.173025][ T804] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 362.207998][ T804] [drm] Initialized udl on minor 2 [ 362.233686][ T5708] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 362.272963][ T804] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 362.275815][ T29] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 362.284981][ T804] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 362.291956][ T4945] block nbd2: Possible stuck request ffff8880283a5080: control (read@0,1024B). Runtime 180 seconds [ 362.292000][ T4945] block nbd2: Possible stuck request ffff8880283a5240: control (read@1024,1024B). Runtime 180 seconds [ 362.292021][ T4945] block nbd2: Possible stuck request ffff8880283a5400: control (read@2048,1024B). Runtime 180 seconds [ 362.292041][ T4945] block nbd2: Possible stuck request ffff8880283a55c0: control (read@3072,1024B). Runtime 180 seconds [ 362.293876][ T29] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 362.304961][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 362.310160][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.310181][ T29] usb 5-1: Product: syz [ 362.310193][ T29] usb 5-1: Manufacturer: syz [ 362.310206][ T29] usb 5-1: SerialNumber: syz [ 362.344060][ T29] usb 5-1: config 0 descriptor?? [ 362.361454][ T804] usb 1-1: USB disconnect, device number 54 [ 362.377983][ T29] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 362.395521][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 362.464061][ T5708] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 362.473264][ T5708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.481355][ T5708] usb 6-1: Product: syz [ 362.485826][ T5708] usb 6-1: Manufacturer: syz [ 362.507108][ T5708] usb 6-1: SerialNumber: syz [ 362.536306][ T5708] usb 6-1: config 0 descriptor?? [ 363.052488][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 363.061104][ T1221] usb 5-1: USB disconnect, device number 37 [ 363.070550][ T1221] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 363.242379][ T30] audit: type=1400 audit(1779513532.531:711): avc: denied { ioctl } for pid=10451 comm="syz.0.1314" path="socket:[31386]" dev="sockfs" ino=31386 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 363.271274][ T29] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 363.460727][ T29] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 363.473064][ T29] usb 4-1: config 0 has no interface number 0 [ 363.479949][ T29] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 363.491971][ T29] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 363.503366][ T29] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 363.513468][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.541623][ T29] usb 4-1: config 0 descriptor?? [ 363.566863][T10449] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 363.597215][ T29] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 364.904066][T10467] trusted_key: encrypted_key: master key parameter 'dKfault' is invalid [ 364.916937][ T6283] block nbd3: Possible stuck request ffff888028415080: control (read@0,1024B). Runtime 180 seconds [ 365.037782][ T6283] block nbd3: Possible stuck request ffff888028415240: control (read@1024,1024B). Runtime 180 seconds [ 365.055643][ T6283] block nbd3: Possible stuck request ffff888028415400: control (read@2048,1024B). Runtime 180 seconds [ 365.066699][ T6283] block nbd3: Possible stuck request ffff8880284155c0: control (read@3072,1024B). Runtime 180 seconds [ 365.359752][ T5708] usb 6-1: f81604_read: reg: 105 failed: -EPROTO [ 365.369498][ T5708] f81604 6-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 365.379461][ T5708] f81604 6-1:0.0: probe with driver f81604 failed with error -71 [ 365.551635][ T5708] usb 6-1: USB disconnect, device number 9 [ 366.766908][ T29] usb 4-1: USB disconnect, device number 46 [ 367.546351][ T5708] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 367.728517][ T5708] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 367.757407][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.830991][ T5708] usb 5-1: config 0 descriptor?? [ 368.124429][ T5708] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 368.145105][ T5708] [drm:udl_init] *ERROR* Selecting channel failed [ 368.171817][ T5708] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 368.178600][ T5708] [drm] Initialized udl on minor 2 [ 368.657854][ T5708] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 368.672919][ T5708] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 368.685952][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 368.698946][ T5708] usb 5-1: USB disconnect, device number 38 [ 368.710077][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 369.796965][ T29] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 369.964226][ T29] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 369.982838][ T29] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.018181][ T29] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 370.053530][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.296836][ T29] usb 1-1: usb_control_msg returned -32 [ 370.303306][ T29] usbtmc 1-1:16.0: can't read capabilities [ 370.416968][T10539] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 370.425902][ T30] audit: type=1400 audit(1779513539.248:712): avc: denied { watch } for pid=10538 comm="syz.5.1339" path="/27/file0" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 370.462416][ T30] audit: type=1400 audit(1779513539.267:713): avc: denied { watch_reads } for pid=10538 comm="syz.5.1339" path="/27" dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 370.646756][ T9] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 370.686096][T10546] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 370.694510][ T10] usb 1-1: USB disconnect, device number 55 [ 370.807607][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 370.816556][ T9] usb 5-1: config 192 has an invalid interface number: 48 but max is 0 [ 370.825598][ T9] usb 5-1: config 192 has an invalid descriptor of length 44, skipping remainder of the config [ 370.837519][ T9] usb 5-1: config 192 has no interface number 0 [ 370.844080][ T9] usb 5-1: config 192 interface 48 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 370.857322][ T9] usb 5-1: config 192 interface 48 has no altsetting 0 [ 370.867969][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=fc0c, bcdDevice= 0.7a [ 370.877253][ T9] usb 5-1: New USB device strings: Mfr=0, Product=250, SerialNumber=3 [ 370.886137][ T5708] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 370.893879][ T9] usb 5-1: Product: syz [ 370.898868][ T9] usb 5-1: SerialNumber: syz [ 371.064878][ T5708] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 371.088441][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.102023][ T5708] usb 6-1: config 0 descriptor?? [ 371.135740][T10537] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1338'. [ 371.180602][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1338'. [ 371.278709][ T9] ftdi_sio 5-1:192.48: FTDI USB Serial Device converter detected [ 371.399447][ T9] usb 5-1: Detected SIO [ 371.433910][ T5708] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 371.517384][ T5708] [drm:udl_init] *ERROR* Selecting channel failed [ 371.524713][ T9] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 371.612650][ T9] usb 5-1: USB disconnect, device number 39 [ 371.668128][ T5708] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 371.693874][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 371.710431][ T5708] [drm] Initialized udl on minor 2 [ 371.720214][ T5708] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 371.728827][ T9] ftdi_sio 5-1:192.48: device disconnected [ 371.738019][ T5708] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 371.751533][ T804] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 371.764315][ T5708] usb 6-1: USB disconnect, device number 10 [ 371.771968][ T804] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 372.215774][ T30] audit: type=1400 audit(1779513540.923:714): avc: denied { ioctl } for pid=10573 comm="syz.3.1351" path="socket:[32389]" dev="sockfs" ino=32389 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 372.242955][ T29] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 372.409728][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 372.416449][ T29] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 372.425106][ T5730] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 372.432764][ T29] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 372.444486][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 372.456198][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 372.465985][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 372.478837][ T29] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 372.488396][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.498453][ T29] usb 5-1: config 0 descriptor?? [ 372.510038][ T29] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input26 [ 372.533528][ T4965] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 372.547621][ T4965] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 372.561801][ T4965] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 372.574554][ T4965] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 372.583175][ T5946] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 372.595101][ T4965] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 372.604805][ T4965] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 372.614793][ T5730] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 372.622923][ T5730] usb 6-1: config 0 has no interface number 0 [ 372.629290][ T5730] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 372.640514][ T5730] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 372.652022][ T5730] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 372.661164][ T5730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.670912][ T5730] usb 6-1: config 0 descriptor?? [ 372.676651][T10570] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 372.688989][ T5730] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 372.814194][T10580] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 372.968068][ T804] usb 6-1: USB disconnect, device number 11 [ 372.968100][ C1] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 374.017771][T10594] xt_cgroup: path and classid specified [ 375.378851][ T29] usb 5-1: USB disconnect, device number 40 [ 375.716139][T10623] openvswitch: netlink: IP tunnel dst address not specified [ 375.944309][ T5621] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 375.959856][ T5621] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 375.969035][ T5621] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 375.977553][ T5621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 375.987730][ T5621] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 376.173089][ T29] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 376.577614][ T29] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 376.595118][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.604999][ T29] usb 1-1: Product: syz [ 376.609741][ T29] usb 1-1: Manufacturer: syz [ 376.615207][ T29] usb 1-1: SerialNumber: syz [ 376.705150][T10650] fuse: Bad value for 'group_id' [ 376.711934][T10650] fuse: Bad value for 'group_id' [ 378.037857][T10667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1373'. [ 378.107261][ T29] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 378.153397][ T29] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 378.176992][ T5621] Bluetooth: hci6: command tx timeout [ 378.233573][T10678] fuse: Bad value for 'group_id' [ 378.240540][T10678] fuse: Bad value for 'group_id' [ 378.331666][ T5730] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 378.360021][T10629] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.368456][T10629] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.375771][T10629] bridge_slave_0: entered allmulticast mode [ 378.383487][T10629] bridge_slave_0: entered promiscuous mode [ 378.393238][T10629] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.400568][T10629] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.407857][T10629] bridge_slave_1: entered allmulticast mode [ 378.415236][T10629] bridge_slave_1: entered promiscuous mode [ 378.443070][T10629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.456807][T10629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.461750][ T29] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 378.497396][T10629] team0: Port device team_slave_0 added [ 378.499413][ T29] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 378.511619][T10629] team0: Port device team_slave_1 added [ 378.513397][ T5730] usb 6-1: Using ep0 maxpacket: 32 [ 378.538581][ T5730] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.552286][ T5730] usb 6-1: too many endpoints for config 0 interface 0 altsetting 252: 255, using maximum allowed: 30 [ 378.564361][ T29] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 378.565894][T10629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.576254][ T5730] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.593563][ T29] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 378.595261][T10629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.611567][ T29] usb 1-1: USB disconnect, device number 56 [ 378.634165][ T5730] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.655529][T10629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.669366][ T5730] usb 6-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 378.708969][ T5730] usb 6-1: config 0 interface 0 has no altsetting 0 [ 378.720252][ T5730] usb 6-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 378.730668][T10629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.740331][ T5730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.748746][T10629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.768295][ T5730] usb 6-1: config 0 descriptor?? [ 378.790822][T10690] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 378.798600][T10629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.822033][T10690] netlink: 'syz.4.1377': attribute type 2 has an invalid length. [ 378.835844][T10690] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1377'. [ 378.862141][T10629] hsr_slave_0: entered promiscuous mode [ 378.872111][T10629] hsr_slave_1: entered promiscuous mode [ 378.879812][T10629] debugfs: 'hsr0' already exists in 'hsr' [ 378.892325][T10629] Cannot create hsr debugfs directory [ 379.142346][T10629] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 379.158057][T10629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 379.168154][T10629] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 379.199480][T10629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 379.217570][T10629] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 379.231959][ T5730] elecom 0003:056E:00FD.000D: unknown main item tag 0x0 [ 379.255317][ T5730] elecom 0003:056E:00FD.000D: unknown main item tag 0x0 [ 379.280879][ T5730] elecom 0003:056E:00FD.000D: unknown main item tag 0x0 [ 379.293095][T10629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 379.599568][ T5730] elecom 0003:056E:00FD.000D: hidraw0: USB HID v0.02 Device [HID 056e:00fd] on usb-dummy_hcd.5-1/input0 [ 379.619600][T10629] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 379.835067][T10701] program syz.0.1379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.150111][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.156665][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.172789][ T4945] block nbd4: Possible stuck request ffff8880284a0000: control (read@0,1024B). Runtime 180 seconds [ 380.173745][T10629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 380.184239][ T4945] block nbd4: Possible stuck request ffff8880284a01c0: control (read@1024,1024B). Runtime 180 seconds [ 380.201979][ T4945] block nbd4: Possible stuck request ffff8880284a0380: control (read@2048,1024B). Runtime 180 seconds [ 380.214589][ T4945] block nbd4: Possible stuck request ffff8880284a0540: control (read@3072,1024B). Runtime 180 seconds [ 380.317051][ T804] usb 6-1: USB disconnect, device number 12 [ 380.401085][ T5621] Bluetooth: hci6: command tx timeout [ 380.416160][ T5730] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 380.663315][T10629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.695129][ T5730] usb 1-1: Using ep0 maxpacket: 8 [ 380.705795][ T5730] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 380.720385][ T5730] usb 1-1: config 0 has no interface number 0 [ 380.731983][ T5730] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 380.745137][ T5730] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 380.760045][ T5730] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 380.773127][ T5730] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 380.786668][ T5730] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 380.796234][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.808318][ T5730] usb 1-1: config 0 descriptor?? [ 380.822018][ T5730] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 380.855786][T10629] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.910878][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.918091][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.946090][ T7697] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.953309][ T7697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.879786][T10732] fuse: Bad value for 'group_id' [ 381.885147][T10732] fuse: Bad value for 'group_id' [ 382.594149][ T1221] usb 1-1: USB disconnect, device number 57 [ 382.604958][ T1221] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 382.619907][ T5621] Bluetooth: hci6: command tx timeout [ 382.700958][T10629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.109437][T10752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 383.719405][ T30] audit: type=1400 audit(1779513551.045:715): avc: denied { create } for pid=10749 comm="syz.5.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 384.048947][ T30] audit: type=1400 audit(1779513551.083:716): avc: denied { write } for pid=10749 comm="syz.5.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 384.480191][T10629] veth0_vlan: entered promiscuous mode [ 384.504161][T10629] veth1_vlan: entered promiscuous mode [ 384.521130][ T1221] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 384.551422][T10629] veth0_macvtap: entered promiscuous mode [ 384.569369][T10629] veth1_macvtap: entered promiscuous mode [ 384.600196][T10629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.622416][T10629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.637542][ T7697] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.660282][ T7697] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.683719][ T7697] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.692000][ T6460] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 384.700045][ T1221] usb 5-1: Using ep0 maxpacket: 32 [ 384.702338][ T7697] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.722001][ T1221] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.739580][ T1221] usb 5-1: too many endpoints for config 0 interface 0 altsetting 252: 255, using maximum allowed: 30 [ 384.757009][ T1221] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.774117][ T1221] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.805583][ T1221] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 384.836030][ T1221] usb 5-1: config 0 interface 0 has no altsetting 0 [ 384.843168][ T5621] Bluetooth: hci6: command tx timeout [ 384.954327][ T7697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.974993][ T1221] usb 5-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 384.984605][ T1221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.992650][ T7697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.000600][ T6460] usb 4-1: Using ep0 maxpacket: 32 [ 385.007707][ T6460] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 385.016976][ T6460] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 385.034413][ T1221] usb 5-1: config 0 descriptor?? [ 385.042016][ T6460] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 385.054436][ T6460] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 385.105130][T10784] FAULT_INJECTION: forcing a failure. [ 385.105130][T10784] name failslab, interval 1, probability 0, space 0, times 0 [ 385.139321][T10784] CPU: 0 UID: 0 PID: 10784 Comm: syz.5.1398 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.139353][T10784] Tainted: [L]=SOFTLOCKUP [ 385.139366][T10784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 385.139377][T10784] Call Trace: [ 385.139383][T10784] [ 385.139390][T10784] dump_stack_lvl+0x100/0x190 [ 385.139417][T10784] should_fail_ex.cold+0x5/0xa [ 385.139443][T10784] should_failslab+0xc2/0x120 [ 385.139463][T10784] __kvmalloc_node_noprof+0xfa/0xa00 [ 385.139490][T10784] ? io_alloc_cache_init+0x38/0x170 [ 385.139514][T10784] ? lockdep_init_map_type+0x5c/0x250 [ 385.139543][T10784] io_alloc_cache_init+0x38/0x170 [ 385.139569][T10784] io_uring_setup.cold+0x3cd/0x1cde [ 385.139591][T10784] ? __pfx_io_uring_setup+0x10/0x10 [ 385.139609][T10784] ? __pfx___schedule+0x10/0x10 [ 385.139630][T10784] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 385.139651][T10784] ? preempt_schedule_irq+0x7b/0x90 [ 385.139675][T10784] ? rcu_is_watching+0x12/0xc0 [ 385.139717][T10784] ? __x64_sys_io_uring_setup+0x99/0x170 [ 385.139741][T10784] __x64_sys_io_uring_setup+0xc2/0x170 [ 385.139761][T10784] do_syscall_64+0x10b/0xf80 [ 385.139786][T10784] ? clear_bhb_loop+0x40/0x90 [ 385.139807][T10784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.139825][T10784] RIP: 0033:0x7f7b4799ce59 [ 385.139839][T10784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.139856][T10784] RSP: 002b:00007f7b48784028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 385.139874][T10784] RAX: ffffffffffffffda RBX: 00007f7b47c15fa0 RCX: 00007f7b4799ce59 [ 385.139885][T10784] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000001b7b [ 385.139895][T10784] RBP: 00007f7b48784090 R08: 0000000000000000 R09: 0000000000000000 [ 385.139905][T10784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.139915][T10784] R13: 00007f7b47c16038 R14: 00007f7b47c15fa0 R15: 00007ffcfffa39c8 [ 385.139939][T10784] [ 385.327608][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.337019][ T6460] usb 4-1: config 0 interface 0 has no altsetting 0 [ 385.339055][ T6460] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 385.340610][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.357623][ T6460] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 385.384886][ T6460] usb 4-1: Product: syz [ 385.390104][ T6460] usb 4-1: Manufacturer: syz [ 385.394871][ T6460] usb 4-1: SerialNumber: syz [ 385.487738][ T6460] usb 4-1: config 0 descriptor?? [ 385.537084][ T6460] usb 4-1: can't set config #0, error -71 [ 385.553517][T10791] netlink: 'syz.5.1400': attribute type 1 has an invalid length. [ 385.564970][ T6460] usb 4-1: USB disconnect, device number 47 [ 385.693711][T10794] fuse: Bad value for 'group_id' [ 385.713239][T10794] fuse: Bad value for 'group_id' [ 385.727681][ T1221] elecom 0003:056E:00FD.000E: unknown main item tag 0x0 [ 385.762243][ T1221] elecom 0003:056E:00FD.000E: unknown main item tag 0x0 [ 385.807920][ T1221] elecom 0003:056E:00FD.000E: unknown main item tag 0x0 [ 385.842342][ T1221] elecom 0003:056E:00FD.000E: hidraw0: USB HID v0.02 Device [HID 056e:00fd] on usb-dummy_hcd.4-1/input0 [ 386.411671][T10811] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.135987][ T9] usb 5-1: USB disconnect, device number 41 [ 387.414174][ T30] audit: type=1400 audit(1779513555.143:717): avc: denied { setopt } for pid=10817 comm="syz.3.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 387.955145][ T5730] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 388.148114][ T5730] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 388.180614][ T5730] usb 1-1: config 0 has no interface number 0 [ 388.196330][ T5730] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 388.232587][ T5730] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 388.260708][ T5730] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 388.337091][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.661432][ T5730] usb 1-1: config 0 descriptor?? [ 388.698329][T10816] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 388.714436][ T5730] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 388.913915][ T10] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 388.964311][ T30] audit: type=1400 audit(1779513556.593:718): avc: denied { write } for pid=10827 comm="syz.5.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 389.043688][T10830] syzkaller0: entered promiscuous mode [ 389.049977][T10830] syzkaller0: entered allmulticast mode [ 389.087171][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 389.089931][ T6460] usb 1-1: USB disconnect, device number 58 [ 389.095433][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 389.124430][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.155136][ T10] usb 4-1: config 0 has no interface number 0 [ 389.252190][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 389.272245][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.291533][ T10] usb 4-1: config 0 descriptor?? [ 389.299389][ T5730] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 389.317990][ T10] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 389.462275][ T5730] usb 6-1: Using ep0 maxpacket: 16 [ 389.469097][ T4945] block nbd5: Possible stuck request ffff8880284d7000: control (read@0,1024B). Runtime 180 seconds [ 389.470363][ T6283] block nbd0: Possible stuck request ffff8880282d5080: control (read@0,1024B). Runtime 210 seconds [ 389.490896][ T6283] block nbd0: Possible stuck request ffff8880282d5240: control (read@1024,1024B). Runtime 210 seconds [ 389.502641][ T6283] block nbd0: Possible stuck request ffff8880282d5400: control (read@2048,1024B). Runtime 210 seconds [ 389.513787][ T6283] block nbd0: Possible stuck request ffff8880282d55c0: control (read@3072,1024B). Runtime 210 seconds [ 389.529365][ T4945] block nbd5: Possible stuck request ffff8880284d71c0: control (read@1024,1024B). Runtime 180 seconds [ 389.540488][ T4945] block nbd5: Possible stuck request ffff8880284d7380: control (read@2048,1024B). Runtime 180 seconds [ 389.553253][ T4945] block nbd5: Possible stuck request ffff8880284d7540: control (read@3072,1024B). Runtime 180 seconds [ 389.570740][ T5730] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 389.590154][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.607830][ T5730] usb 6-1: Product: syz [ 389.611323][ T9] usb 4-1: USB disconnect, device number 48 [ 389.613342][ T5730] usb 6-1: Manufacturer: syz [ 389.630164][ T5730] usb 6-1: SerialNumber: syz [ 389.654589][ T5730] usb 6-1: config 0 descriptor?? [ 390.113150][ T5730] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 390.164299][ T5730] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 390.186947][ T5730] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 390.205262][ T5730] usb 6-1: media controller created [ 390.271163][ T5730] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 390.333452][T10841] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1415'. [ 390.345160][T10829] dtv5100: wlen = 0, aborting. [ 390.402605][ T5730] zl10353_read_register: readreg error (reg=127, ret==0) [ 390.436818][ T5730] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 390.443047][T10844] fuse: Bad value for 'group_id' [ 390.461847][T10844] fuse: Bad value for 'group_id' [ 390.473611][ T5730] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 390.516095][ T5730] usb 6-1: USB disconnect, device number 13 [ 390.647747][ T5730] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 391.172603][T10849] No such timeout policy "syz1" [ 391.576201][ T6283] block nbd1: Possible stuck request ffff888028337000: control (read@0,1024B). Runtime 210 seconds [ 391.586979][ T6283] block nbd1: Possible stuck request ffff8880283371c0: control (read@1024,1024B). Runtime 210 seconds [ 391.588916][ T30] audit: type=1400 audit(1779513558.717:719): avc: denied { append } for pid=10847 comm="syz.4.1417" name="sg0" dev="devtmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 391.597977][ T6283] block nbd1: Possible stuck request ffff888028337380: control (read@2048,1024B). Runtime 210 seconds [ 391.598003][ T6283] block nbd1: Possible stuck request ffff888028337540: control (read@3072,1024B). Runtime 210 seconds [ 392.778450][T10866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.764290][T10884] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 393.787380][T10884] netlink: 'syz.5.1420': attribute type 2 has an invalid length. [ 393.806893][T10884] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1420'. [ 394.934053][ T4945] block nbd2: Possible stuck request ffff8880283a5080: control (read@0,1024B). Runtime 210 seconds [ 394.945034][ T4945] block nbd2: Possible stuck request ffff8880283a5240: control (read@1024,1024B). Runtime 210 seconds [ 394.957110][ T4945] block nbd2: Possible stuck request ffff8880283a5400: control (read@2048,1024B). Runtime 210 seconds [ 394.968359][ T4945] block nbd2: Possible stuck request ffff8880283a55c0: control (read@3072,1024B). Runtime 210 seconds [ 395.693633][ T30] audit: type=1400 audit(1779513562.889:720): avc: denied { read } for pid=10893 comm="syz.4.1423" name="/" dev="configfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 395.809367][ T30] audit: type=1400 audit(1779513562.889:721): avc: denied { open } for pid=10893 comm="syz.4.1423" path="/290/file0" dev="configfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 395.892308][ T30] audit: type=1400 audit(1779513562.992:722): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 396.101074][T10904] blktrace: Concurrent blktraces are not allowed on sg0 [ 397.136320][T10911] fuse: Unknown parameter '0x0000000000000003' [ 397.165233][T10913] usb usb7: selecting invalid altsetting 6 [ 397.720490][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1433'. [ 398.169979][ T6283] block nbd3: Possible stuck request ffff888028415080: control (read@0,1024B). Runtime 210 seconds [ 398.180801][ T6283] block nbd3: Possible stuck request ffff888028415240: control (read@1024,1024B). Runtime 210 seconds [ 398.192214][ T6283] block nbd3: Possible stuck request ffff888028415400: control (read@2048,1024B). Runtime 210 seconds [ 398.205029][ T6283] block nbd3: Possible stuck request ffff8880284155c0: control (read@3072,1024B). Runtime 210 seconds [ 398.410685][T10920] ALSA: mixer_oss: invalid OSS volume '' [ 398.627974][ T30] audit: type=1326 audit(1779513565.368:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10909 comm="syz.6.1435" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c6f39ce59 code=0x0 [ 398.731901][ T30] audit: type=1400 audit(1779513565.733:724): avc: denied { shutdown } for pid=10930 comm="syz.0.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 398.803391][ T30] audit: type=1400 audit(1779513565.761:725): avc: denied { nlmsg_write } for pid=10930 comm="syz.0.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 399.182918][T10949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 399.882289][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 399.984553][T10961] blktrace: Concurrent blktraces are not allowed on sg0 [ 400.151249][ T10] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 400.171356][T10963] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 400.221703][T10963] netlink: 'syz.5.1444': attribute type 2 has an invalid length. [ 400.296202][T10963] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1444'. [ 400.928747][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 400.942897][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 400.952835][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.963434][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 400.974973][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 400.986894][ T10] usb 4-1: config 8 has an invalid interface number: 72 but max is 2 [ 400.999145][ T10] usb 4-1: config 8 has an invalid interface number: 188 but max is 2 [ 401.007639][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 401.023075][ T10] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 401.032112][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.047534][ T10] usb 4-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 401.063259][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 401.073495][ T10] usb 4-1: config 8 has an invalid interface number: 123 but max is 2 [ 401.086190][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 401.100171][ T10] usb 4-1: config 8 has no interface number 0 [ 401.111277][ T10] usb 4-1: config 8 has no interface number 1 [ 401.117761][ T9] usb 1-1: Manufacturer: syz [ 401.127011][ T10] usb 4-1: config 8 has no interface number 2 [ 401.142279][ T9] usb 1-1: config 0 descriptor?? [ 401.149967][ T10] usb 4-1: config 8 interface 72 altsetting 1 has an endpoint descriptor with address 0x3E, changing to 0xE [ 401.177617][ T10] usb 4-1: config 8 interface 72 altsetting 1 endpoint 0xE has invalid maxpacket 6351, setting to 64 [ 401.199293][ T10] usb 4-1: config 8 interface 72 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 401.226063][ T10] usb 4-1: config 8 interface 72 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 401.257185][ T10] usb 4-1: config 8 interface 72 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 401.290377][ T10] usb 4-1: config 8 interface 72 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 401.317365][ T10] usb 4-1: config 8 interface 72 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 401.347438][ T10] usb 4-1: config 8 interface 72 altsetting 1 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 401.410178][ T10] usb 4-1: config 8 interface 188 altsetting 102 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 401.446015][ T10] usb 4-1: config 8 interface 188 altsetting 102 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 401.458184][ T10] usb 4-1: config 8 interface 188 altsetting 102 has an invalid descriptor for endpoint zero, skipping [ 401.473505][ T10] usb 4-1: config 8 interface 188 altsetting 102 endpoint 0x2 has an invalid bInterval 255, changing to 4 [ 401.486236][ T9] rc_core: IR keymap rc-hauppauge not found [ 401.492387][ T9] Registered IR keymap rc-empty [ 401.500846][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 401.509786][ T10] usb 4-1: config 8 interface 188 altsetting 102 has a duplicate endpoint with address 0x3, skipping [ 401.523405][ T10] usb 4-1: config 8 interface 188 altsetting 102 has a duplicate endpoint with address 0xE, skipping [ 401.538089][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 401.558259][ T10] usb 4-1: config 8 interface 188 altsetting 102 has a duplicate endpoint with address 0x2, skipping [ 401.574122][ T10] usb 4-1: config 8 interface 188 altsetting 102 has a duplicate endpoint with address 0xE, skipping [ 401.607917][ T10] usb 4-1: config 8 interface 188 altsetting 102 has a duplicate endpoint with address 0xE, skipping [ 401.619359][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 401.641336][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input27 [ 401.654179][ T10] usb 4-1: config 8 interface 188 altsetting 102 has a duplicate endpoint with address 0x1, skipping [ 401.665716][ T10] usb 4-1: config 8 interface 188 altsetting 102 has an endpoint descriptor with address 0x5B, changing to 0xB [ 401.680581][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 401.693091][ T10] usb 4-1: config 8 interface 188 altsetting 102 has a duplicate endpoint with address 0xB, skipping [ 401.706264][ T10] usb 4-1: config 8 interface 188 altsetting 102 has a duplicate endpoint with address 0x1, skipping [ 401.721309][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 401.733466][ T10] usb 4-1: config 8 interface 188 altsetting 102 has a duplicate endpoint with address 0xF, skipping [ 401.752041][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 401.763094][ T10] usb 4-1: config 8 interface 123 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 401.775773][ T10] usb 4-1: config 8 interface 123 altsetting 2 has a duplicate endpoint with address 0x82, skipping [ 401.788094][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 401.799353][ T10] usb 4-1: config 8 interface 123 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 401.812039][ T10] usb 4-1: config 8 interface 123 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 401.826321][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 401.834637][ T10] usb 4-1: config 8 interface 123 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 401.847937][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 401.857754][ T10] usb 4-1: config 8 interface 123 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 401.872845][ T10] usb 4-1: config 8 interface 123 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 401.883790][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 401.893221][ T10] usb 4-1: config 8 interface 123 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 401.912098][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 401.919585][ T10] usb 4-1: config 8 interface 123 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 401.933878][ T10] usb 4-1: config 8 interface 123 altsetting 2 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 401.945936][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 401.959019][ T10] usb 4-1: config 8 interface 123 altsetting 2 endpoint 0x88 has invalid maxpacket 46849, setting to 64 [ 401.970455][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 401.977902][ T10] usb 4-1: config 8 interface 123 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 401.989861][ T10] usb 4-1: config 8 interface 123 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 402.001714][ T9] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 402.013190][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 402.021578][ T10] usb 4-1: config 8 interface 123 altsetting 2 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 402.057826][ T9] usb 1-1: USB disconnect, device number 59 [ 402.066123][ T10] usb 4-1: config 8 interface 72 has no altsetting 0 [ 402.093781][ T10] usb 4-1: config 8 interface 188 has no altsetting 0 [ 402.114195][ T10] usb 4-1: config 8 interface 123 has no altsetting 0 [ 402.139122][ T10] usb 4-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=69.0e [ 402.156824][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.165149][ T10] usb 4-1: Product: ⴆî§å³ªã‘™è™ã½½ï££á”“髺Ւêœä’¨Þ윷Ââ­îž©â²¦í—¼è¾±ì²‡è„ŽÈ â âŸ²äº™ç¡¡ç¤´æŸ”疉尣碩臢鳜ퟓÊ謸슃怴臘ç—֊춉꽮蜣䞃뽳䑻㵤筴ꇇã¦é°·ã¦€èµ¥ìº½ã ‚í™©ëª­ï¦¯â³¨î®Œï±ªç¯ [ 402.186409][ T10] usb 4-1: Manufacturer: 〠[ 402.207505][T10955] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 402.232440][T10955] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 402.277795][ T30] audit: type=1400 audit(1779513569.045:726): avc: denied { ioctl } for pid=10978 comm="syz.4.1451" path="socket:[35149]" dev="sockfs" ino=35149 ioctlcmd=0x9424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 402.482603][ T30] audit: type=1400 audit(1779513569.241:727): avc: denied { shutdown } for pid=10978 comm="syz.4.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 402.507039][T10955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1445'. [ 402.556930][ T10] usb 4-1: USB disconnect, device number 49 [ 402.671222][ T1221] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 402.907219][ T1221] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 402.921484][ T1221] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 402.932634][ T1221] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 402.944036][ T1221] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 402.955247][ T1221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.978736][ T1221] usb 1-1: config 0 descriptor?? [ 403.010176][T10991] team0: Device ip6tnl1 is of different type [ 403.268413][T11000] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 403.277590][T11000] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 403.359772][ T1221] ath6kl: Failed to submit usb control message: -71 [ 403.380311][ T1221] ath6kl: unable to send the bmi data to the device: -71 [ 403.407918][ T1221] ath6kl: Unable to send get target info: -71 [ 403.424483][ T1221] ath6kl: Failed to init ath6kl core: -71 [ 403.431207][ T1221] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 403.473134][ T1221] usb 1-1: USB disconnect, device number 60 [ 403.776762][T11013] blktrace: Concurrent blktraces are not allowed on sg0 [ 404.395069][T11016] NILFS (nullb0): couldn't find nilfs on the device [ 404.461507][T11014] bond2 (unregistering): Released all slaves [ 404.541448][ T30] audit: type=1400 audit(1779513571.159:728): avc: denied { ioctl } for pid=11007 comm="syz.0.1458" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 404.741166][T11025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1461'. [ 404.750379][T11025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1461'. [ 404.760318][T11025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1461'. [ 405.203246][T11028] usb usb7: selecting invalid altsetting 6 [ 405.512930][T11033] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 405.529512][T11033] netlink: 'syz.6.1464': attribute type 2 has an invalid length. [ 405.541689][T11033] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1464'. [ 405.781238][T11045] FAULT_INJECTION: forcing a failure. [ 405.781238][T11045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.794539][T11045] CPU: 0 UID: 0 PID: 11045 Comm: syz.0.1467 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.794566][T11045] Tainted: [L]=SOFTLOCKUP [ 405.794571][T11045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 405.794577][T11045] Call Trace: [ 405.794581][T11045] [ 405.794585][T11045] dump_stack_lvl+0x100/0x190 [ 405.794602][T11045] should_fail_ex.cold+0x5/0xa [ 405.794618][T11045] _copy_from_user+0x2e/0xd0 [ 405.794635][T11045] copy_msghdr_from_user+0x9f/0x4f0 [ 405.794652][T11045] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 405.794673][T11045] ___sys_sendmsg+0x106/0x1e0 [ 405.794689][T11045] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.794703][T11045] ? find_held_lock+0x2b/0x80 [ 405.794713][T11045] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 405.794743][T11045] __sys_sendmsg+0x170/0x220 [ 405.794755][T11045] ? __pfx___sys_sendmsg+0x10/0x10 [ 405.794772][T11045] ? rcu_is_watching+0x12/0xc0 [ 405.794790][T11045] do_syscall_64+0x10b/0xf80 [ 405.794805][T11045] ? clear_bhb_loop+0x40/0x90 [ 405.794818][T11045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.794829][T11045] RIP: 0033:0x7f820159ce59 [ 405.794838][T11045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.794848][T11045] RSP: 002b:00007f81ff7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.794860][T11045] RAX: ffffffffffffffda RBX: 00007f8201816090 RCX: 00007f820159ce59 [ 405.794867][T11045] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000005 [ 405.794873][T11045] RBP: 00007f81ff7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 405.794879][T11045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.794885][T11045] R13: 00007f8201816128 R14: 00007f8201816090 R15: 00007ffc37c2dc68 [ 405.794898][T11045] [ 407.118326][ T10] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 407.290341][ T10] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 407.290368][ T10] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 407.290387][ T10] usb 1-1: config 4 has no interface number 0 [ 407.290428][ T10] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 407.292168][ T10] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 407.292193][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.292212][ T10] usb 1-1: Product: syz [ 407.292226][ T10] usb 1-1: Manufacturer: syz [ 407.292240][ T10] usb 1-1: SerialNumber: syz [ 407.676002][ T10] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 407.804935][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 407.836538][T11072] x_tables: ip_tables: osf match: only valid for protocol 6 [ 407.843929][ T10] dib0700: firmware download failed at 7 with -22 [ 407.883038][ T10] usb 1-1: USB disconnect, device number 61 [ 407.892076][T11072] fuse: Bad value for 'fd' [ 408.572642][T11089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.250120][ T30] audit: type=1326 audit(1779513576.501:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11107 comm="syz.3.1485" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda63f9ce59 code=0x0 [ 410.364193][T11121] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 410.377489][T11125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1485'. [ 410.395940][T11121] netlink: 'syz.5.1486': attribute type 2 has an invalid length. [ 410.407141][T11123] FAULT_INJECTION: forcing a failure. [ 410.407141][T11123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.422408][T11121] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1486'. [ 410.431931][T11123] CPU: 0 UID: 0 PID: 11123 Comm: syz.4.1488 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.431958][T11123] Tainted: [L]=SOFTLOCKUP [ 410.431964][T11123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 410.431970][T11123] Call Trace: [ 410.431974][T11123] [ 410.431979][T11123] dump_stack_lvl+0x100/0x190 [ 410.431997][T11123] should_fail_ex.cold+0x5/0xa [ 410.432014][T11123] _copy_to_iter+0x5a4/0x1720 [ 410.432034][T11123] ? __pfx__copy_to_iter+0x10/0x10 [ 410.432049][T11123] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 410.432062][T11123] ? __skb_recv_datagram+0x1b2/0x220 [ 410.432081][T11123] simple_copy_to_iter+0x46/0x90 [ 410.432097][T11123] __skb_datagram_iter+0x129/0x900 [ 410.432112][T11123] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 410.432131][T11123] skb_copy_datagram_iter+0xa5/0x270 [ 410.432147][T11123] ? __pfx_sock_has_perm+0x10/0x10 [ 410.432160][T11123] netlink_recvmsg+0x27e/0xa90 [ 410.432176][T11123] ? __pfx_netlink_recvmsg+0x10/0x10 [ 410.432194][T11123] ? __pfx_netlink_recvmsg+0x10/0x10 [ 410.432209][T11123] sock_recvmsg+0x1a4/0x1f0 [ 410.432224][T11123] ____sys_recvmsg+0x218/0x640 [ 410.432240][T11123] ? __pfx_____sys_recvmsg+0x10/0x10 [ 410.432259][T11123] ? __lock_acquire+0x4a5/0x2630 [ 410.432277][T11123] ? irqentry_exit+0x24d/0x7e0 [ 410.432296][T11123] ___sys_recvmsg+0x16a/0x1a0 [ 410.432311][T11123] ? __pfx____sys_recvmsg+0x10/0x10 [ 410.432328][T11123] ? find_held_lock+0x2b/0x80 [ 410.432346][T11123] do_recvmmsg+0x301/0x760 [ 410.432363][T11123] ? __pfx_do_recvmmsg+0x10/0x10 [ 410.432377][T11123] ? __might_fault+0xc5/0x140 [ 410.432404][T11123] __x64_sys_recvmmsg+0x199/0x280 [ 410.432418][T11123] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 410.432431][T11123] ? rcu_is_watching+0x12/0xc0 [ 410.432449][T11123] do_syscall_64+0x10b/0xf80 [ 410.432464][T11123] ? clear_bhb_loop+0x40/0x90 [ 410.432477][T11123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.432488][T11123] RIP: 0033:0x7f0d42d9ce59 [ 410.432497][T11123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.432508][T11123] RSP: 002b:00007f0d43d21028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 410.432518][T11123] RAX: ffffffffffffffda RBX: 00007f0d43016090 RCX: 00007f0d42d9ce59 [ 410.432525][T11123] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000007 [ 410.432531][T11123] RBP: 00007f0d43d21090 R08: 0000200000003700 R09: 0000000000000000 [ 410.432537][T11123] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 410.432543][T11123] R13: 00007f0d43016128 R14: 00007f0d43016090 R15: 00007ffdf741da28 [ 410.432556][T11123] [ 411.984961][T11145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1492'. [ 412.083197][T11148] lo speed is unknown, defaulting to 1000 [ 412.091389][T11148] lo speed is unknown, defaulting to 1000 [ 412.179426][T11148] lo speed is unknown, defaulting to 1000 [ 412.214135][T11148] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 412.229418][T11148] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 412.246575][T11148] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 412.295113][T11148] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 412.377705][T11148] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 412.796639][T11148] lo speed is unknown, defaulting to 1000 [ 412.818603][T11148] lo speed is unknown, defaulting to 1000 [ 412.838100][T11148] lo speed is unknown, defaulting to 1000 [ 412.852595][T11148] lo speed is unknown, defaulting to 1000 [ 412.869847][T11148] lo speed is unknown, defaulting to 1000 [ 412.886744][T11148] lo speed is unknown, defaulting to 1000 [ 412.903400][T11148] lo speed is unknown, defaulting to 1000 [ 413.026112][ T30] audit: type=1400 audit(1779513579.102:730): avc: denied { ioctl } for pid=11153 comm="syz.5.1495" path="socket:[35517]" dev="sockfs" ino=35517 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 413.034081][ T4945] block nbd4: Possible stuck request ffff8880284a0000: control (read@0,1024B). Runtime 210 seconds [ 413.071699][ T4945] block nbd4: Possible stuck request ffff8880284a01c0: control (read@1024,1024B). Runtime 210 seconds [ 413.087319][ T4945] block nbd4: Possible stuck request ffff8880284a0380: control (read@2048,1024B). Runtime 210 seconds [ 413.099010][ T4945] block nbd4: Possible stuck request ffff8880284a0540: control (read@3072,1024B). Runtime 210 seconds [ 413.259336][T11156] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11156 comm=syz.5.1495 [ 413.274605][T11156] 9pnet_virtio: no channels available for device syz [ 413.958306][T11159] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1496'. [ 414.424603][T11165] usb usb7: selecting invalid altsetting 6 [ 414.667504][ T10] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 414.847675][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 414.869044][ T10] usb 6-1: config 192 has an invalid interface number: 48 but max is 0 [ 414.878161][ T10] usb 6-1: config 192 has an invalid descriptor of length 44, skipping remainder of the config [ 414.889434][ T10] usb 6-1: config 192 has no interface number 0 [ 414.897095][ T10] usb 6-1: config 192 interface 48 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 414.915528][ T10] usb 6-1: config 192 interface 48 has no altsetting 0 [ 414.970116][ T10] usb 6-1: New USB device found, idVendor=0403, idProduct=fc0c, bcdDevice= 0.7a [ 414.983014][ T10] usb 6-1: New USB device strings: Mfr=0, Product=250, SerialNumber=3 [ 415.009235][ T10] usb 6-1: Product: syz [ 415.025434][ T10] usb 6-1: SerialNumber: syz [ 415.267615][T11168] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1500'. [ 415.416599][T11187] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 415.789855][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1500'. [ 415.814299][T11183] netlink: 'syz.4.1504': attribute type 2 has an invalid length. [ 415.844007][T11183] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1504'. [ 416.029652][ T10] ftdi_sio 6-1:192.48: FTDI USB Serial Device converter detected [ 416.068718][ T10] usb 6-1: Detected SIO [ 416.090244][ T10] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 416.130968][ T10] usb 6-1: USB disconnect, device number 14 [ 416.173414][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 416.220859][ T10] ftdi_sio 6-1:192.48: device disconnected [ 416.781691][T11197] snd_dummy snd_dummy.0: control 0:2:0:syz0:32769 is already present [ 417.959498][T11207] syzkaller0: entered promiscuous mode [ 418.110975][T11207] syzkaller0: entered allmulticast mode [ 418.337505][T11209] loop5: detected capacity change from 0 to 7 [ 418.363362][T11209] Dev loop5: unable to read RDB block 7 [ 418.399760][T11209] loop5: unable to read partition table [ 418.429383][T11209] loop5: partition table beyond EOD, truncated [ 418.450286][T11209] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 418.574283][T11217] netlink: 212108 bytes leftover after parsing attributes in process `syz.0.1514'. [ 418.587097][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 418.631029][ T804] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 418.822599][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 418.905469][ T10] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 418.905488][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.905499][ T10] usb 6-1: Product: syz [ 418.905508][ T10] usb 6-1: Manufacturer: syz [ 418.905517][ T10] usb 6-1: SerialNumber: syz [ 418.914056][ T10] usb 6-1: config 0 descriptor?? [ 419.186863][T11225] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 419.876805][ T10] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 419.886328][ T804] usb 5-1: Using ep0 maxpacket: 16 [ 419.903623][ T804] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 419.988367][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.018522][ T804] usb 5-1: Product: syz [ 420.035954][ T804] usb 5-1: Manufacturer: syz [ 420.055059][ T804] usb 5-1: SerialNumber: syz [ 420.084845][ T804] usb 5-1: config 0 descriptor?? [ 420.105482][ T804] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 420.156626][T11229] loop7: detected capacity change from 0 to 16384 [ 420.610354][T11241] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 420.610354][T11241] Please contact the netfilter-devel mailing list or update your nftables rules. [ 420.830271][ T30] audit: type=1400 audit(1779513586.258:731): avc: denied { map } for pid=11232 comm="syz.6.1521" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 420.914489][ T30] audit: type=1400 audit(1779513586.258:732): avc: denied { execute } for pid=11232 comm="syz.6.1521" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 421.171278][ C1] I/O error, dev loop7, sector 7936 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 421.183170][ C1] I/O error, dev loop7, sector 8192 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 421.209195][ C1] I/O error, dev loop7, sector 7936 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 421.218863][ C1] Buffer I/O error on dev loop7, logical block 992, async page read [ 421.226897][ C1] I/O error, dev loop7, sector 7944 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 421.236286][ C1] Buffer I/O error on dev loop7, logical block 993, async page read [ 421.244372][ C1] I/O error, dev loop7, sector 7952 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 421.253802][ C1] Buffer I/O error on dev loop7, logical block 994, async page read [ 421.261849][ C1] I/O error, dev loop7, sector 7960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 421.271246][ C1] Buffer I/O error on dev loop7, logical block 995, async page read [ 421.279264][ C1] I/O error, dev loop7, sector 7968 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 421.288673][ C1] Buffer I/O error on dev loop7, logical block 996, async page read [ 421.296701][ C1] I/O error, dev loop7, sector 7976 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 421.306081][ C1] Buffer I/O error on dev loop7, logical block 997, async page read [ 421.314108][ C1] I/O error, dev loop7, sector 7984 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 421.323460][ C1] Buffer I/O error on dev loop7, logical block 998, async page read [ 421.331489][ C1] I/O error, dev loop7, sector 7992 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 421.340872][ C1] Buffer I/O error on dev loop7, logical block 999, async page read [ 421.348928][ C1] Buffer I/O error on dev loop7, logical block 1000, async page read [ 421.357060][ C1] Buffer I/O error on dev loop7, logical block 1001, async page read [ 421.393227][T11235] loop7: detected capacity change from 16384 to 0 [ 421.446635][ T804] usb 5-1: clie_3_5_startup: get config number failed: -71 [ 421.479346][ T804] visor 5-1:0.0: probe with driver visor failed with error -71 [ 421.523567][ T804] usb 5-1: USB disconnect, device number 42 [ 421.613197][ T6283] block nbd0: Possible stuck request ffff8880282d5080: control (read@0,1024B). Runtime 240 seconds [ 421.625096][ T6283] block nbd0: Possible stuck request ffff8880282d5240: control (read@1024,1024B). Runtime 240 seconds [ 421.637275][ T6283] block nbd0: Possible stuck request ffff8880282d5400: control (read@2048,1024B). Runtime 240 seconds [ 421.649458][ T6283] block nbd0: Possible stuck request ffff8880282d55c0: control (read@3072,1024B). Runtime 240 seconds [ 421.661697][ T4945] block nbd5: Possible stuck request ffff8880284d7000: control (read@0,1024B). Runtime 210 seconds [ 421.672538][ T4945] block nbd5: Possible stuck request ffff8880284d71c0: control (read@1024,1024B). Runtime 210 seconds [ 421.684484][ T4945] block nbd5: Possible stuck request ffff8880284d7380: control (read@2048,1024B). Runtime 210 seconds [ 421.698037][ T4945] block nbd5: Possible stuck request ffff8880284d7540: control (read@3072,1024B). Runtime 210 seconds [ 421.835006][ T30] audit: type=1400 audit(1779513587.334:733): avc: denied { mounton } for pid=11257 comm="syz.6.1524" path="/28/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 421.929351][ T30] audit: type=1400 audit(1779513587.428:734): avc: denied { unmount } for pid=10629 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 421.964916][ T5730] usb 6-1: USB disconnect, device number 15 [ 422.195183][T11268] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 422.867161][T11271] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 422.875607][ T30] audit: type=1400 audit(1779513588.307:735): avc: denied { mounton } for pid=11270 comm="syz.6.1527" path=2F32392FE91F7189591E9233614B dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 423.223355][T11272] usb usb7: selecting invalid altsetting 6 [ 423.654013][ T5730] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 423.665497][ T6283] block nbd1: Possible stuck request ffff888028337000: control (read@0,1024B). Runtime 240 seconds [ 423.676405][ T6283] block nbd1: Possible stuck request ffff8880283371c0: control (read@1024,1024B). Runtime 240 seconds [ 423.687789][ T6283] block nbd1: Possible stuck request ffff888028337380: control (read@2048,1024B). Runtime 240 seconds [ 423.698971][ T6283] block nbd1: Possible stuck request ffff888028337540: control (read@3072,1024B). Runtime 240 seconds [ 423.795249][T11294] netlink: 'syz.6.1538': attribute type 21 has an invalid length. [ 423.803289][T11294] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1538'. [ 423.814905][T11294] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1538'. [ 423.859283][ T5730] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 423.881759][ T5730] usb 6-1: config 0 has no interface number 0 [ 423.889483][ T804] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 423.909143][ T5730] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 423.940644][ T5730] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 423.956597][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.972029][ T5730] usb 6-1: Product: syz [ 423.979837][ T5730] usb 6-1: Manufacturer: syz [ 423.984471][ T5730] usb 6-1: SerialNumber: syz [ 423.995151][ T5730] usb 6-1: config 0 descriptor?? [ 424.016257][ T5730] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 424.071016][ T804] usb 5-1: Using ep0 maxpacket: 32 [ 424.079208][ T804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.099749][ T804] usb 5-1: too many endpoints for config 0 interface 0 altsetting 252: 255, using maximum allowed: 30 [ 424.112471][ T804] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.123801][ T804] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.133858][ T804] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 424.184556][ T10] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 424.745689][ T804] usb 5-1: config 0 interface 0 has no altsetting 0 [ 424.764440][ T804] usb 5-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 424.776433][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.794852][ T804] usb 5-1: config 0 descriptor?? [ 424.868333][ C1] usb 6-1: yurex_control_callback - control failed: -71 [ 424.885384][ T5730] usb 6-1: USB disconnect, device number 16 [ 424.897625][ T5730] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 424.904672][ T10] usb 4-1: device descriptor read/64, error -71 [ 425.205817][ T10] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 425.251110][ T804] elecom 0003:056E:00FD.000F: unknown main item tag 0x0 [ 425.260881][ T804] elecom 0003:056E:00FD.000F: unknown main item tag 0x0 [ 425.267881][ T804] elecom 0003:056E:00FD.000F: unknown main item tag 0x0 [ 425.283491][ T804] elecom 0003:056E:00FD.000F: hidraw0: USB HID v0.02 Device [HID 056e:00fd] on usb-dummy_hcd.4-1/input0 [ 425.407950][ T10] usb 4-1: device descriptor read/64, error -71 [ 425.611296][ T10] usb usb4-port1: attempt power cycle [ 425.867487][ T6460] usb 5-1: USB disconnect, device number 43 [ 426.027038][ T10] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 426.072780][ T10] usb 4-1: device descriptor read/8, error -71 [ 426.219563][ T804] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 426.369604][ T10] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 426.405036][ T10] usb 4-1: device descriptor read/8, error -71 [ 426.422550][ T804] usb 1-1: Using ep0 maxpacket: 16 [ 426.449246][ T804] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 426.463677][T11335] syzkaller0: entered promiscuous mode [ 426.472962][ T804] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 426.489911][T11335] syzkaller0: entered allmulticast mode [ 426.498672][ T804] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 426.526865][ T804] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 426.538575][ T10] usb usb4-port1: unable to enumerate USB device [ 426.554844][ T804] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 426.573699][T11339] usb usb7: selecting invalid altsetting 6 [ 426.586854][ T804] usb 1-1: config 0 has no interface number 0 [ 426.601320][ T804] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 426.625170][ T804] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 426.644600][ T804] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 426.667258][ T804] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 426.699481][ T804] usb 1-1: config 0 interface 125 has no altsetting 0 [ 426.724357][ T804] usb 1-1: config 0 interface 125 has no altsetting 2 [ 426.741308][ T804] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 426.764633][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.796631][ T804] usb 1-1: Product: syz [ 426.814575][ T804] usb 1-1: Manufacturer: syz [ 426.825407][ T804] usb 1-1: SerialNumber: syz [ 426.845054][ T804] usb 1-1: config 0 descriptor?? [ 426.975324][ T804] usb 1-1: selecting invalid altsetting 2 [ 427.481264][ T4945] block nbd2: Possible stuck request ffff8880283a5080: control (read@0,1024B). Runtime 240 seconds [ 427.495726][ T4945] block nbd2: Possible stuck request ffff8880283a5240: control (read@1024,1024B). Runtime 240 seconds [ 427.506887][ T4945] block nbd2: Possible stuck request ffff8880283a5400: control (read@2048,1024B). Runtime 240 seconds [ 427.518373][ T4945] block nbd2: Possible stuck request ffff8880283a55c0: control (read@3072,1024B). Runtime 240 seconds [ 427.578248][ T30] audit: type=1400 audit(1779513592.723:736): avc: denied { create } for pid=11325 comm="syz.0.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 427.594016][T11326] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-304); Ignoring new local tt entry: 80:00:00:00:00:85 [ 428.111490][ T804] get_1284_register timeout [ 428.258481][ C0] usb 1-1: async_complete: urb error -104 [ 428.264320][ C0] usb 1-1: async_complete: urb error -104 [ 428.270080][ C0] usb 1-1: async_complete: urb error -104 [ 428.275857][ C0] usb 1-1: async_complete: urb error -104 [ 428.365784][T11357] netlink: 'syz.4.1554': attribute type 1 has an invalid length. [ 428.814267][ T5730] usb 1-1: USB disconnect, device number 62 [ 429.169663][ T1221] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 429.277214][ T804] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 429.341110][ T1221] usb 4-1: Using ep0 maxpacket: 32 [ 429.347627][ T1221] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.358859][ T1221] usb 4-1: too many endpoints for config 0 interface 0 altsetting 252: 255, using maximum allowed: 30 [ 429.370049][ T1221] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.381545][ T1221] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.391558][ T1221] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 429.405515][ T1221] usb 4-1: config 0 interface 0 has no altsetting 0 [ 429.412157][ T1221] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 429.423325][ T1221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.426306][ T10] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 429.441965][ T1221] usb 4-1: config 0 descriptor?? [ 429.462696][ T804] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 429.478681][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.490432][ T804] usb 5-1: config 0 descriptor?? [ 429.609436][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 429.617520][ T10] usb 6-1: config 0 has no interface number 0 [ 429.623682][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 429.634704][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 429.644490][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 429.653928][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.664720][ T10] usb 6-1: config 0 descriptor?? [ 429.676729][ T10] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 429.714960][ T5730] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 429.719121][ T804] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 429.731037][ T804] [drm:udl_init] *ERROR* Selecting channel failed [ 429.748482][ T804] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 429.765951][ T804] [drm] Initialized udl on minor 2 [ 429.784410][ T804] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 429.797555][ T804] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 429.816015][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 429.829792][ T804] usb 5-1: USB disconnect, device number 44 [ 429.841647][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 429.921239][ T5730] usb 1-1: Using ep0 maxpacket: 16 [ 429.982456][T11375] iowarrior 6-1:0.1: Error -90 while submitting URB [ 430.160215][T10779] usb 6-1: USB disconnect, device number 17 [ 430.508149][ T6283] block nbd3: Possible stuck request ffff888028415080: control (read@0,1024B). Runtime 240 seconds [ 430.519359][ T6283] block nbd3: Possible stuck request ffff888028415240: control (read@1024,1024B). Runtime 240 seconds [ 430.535492][ T6283] block nbd3: Possible stuck request ffff888028415400: control (read@2048,1024B). Runtime 240 seconds [ 430.550281][ T6283] block nbd3: Possible stuck request ffff8880284155c0: control (read@3072,1024B). Runtime 240 seconds [ 430.598288][ T1221] elecom 0003:056E:00FD.0010: unknown main item tag 0x0 [ 431.084814][ T1221] elecom 0003:056E:00FD.0010: unknown main item tag 0x0 [ 431.092039][ T1221] elecom 0003:056E:00FD.0010: unknown main item tag 0x0 [ 431.105677][ T1221] elecom 0003:056E:00FD.0010: hidraw0: USB HID v0.02 Device [HID 056e:00fd] on usb-dummy_hcd.3-1/input0 [ 431.119900][ T5730] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 431.129489][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.138263][ T5730] usb 1-1: Product: syz [ 431.142455][ T5730] usb 1-1: Manufacturer: syz [ 431.147374][ T5730] usb 1-1: SerialNumber: syz [ 431.156023][ T5730] usb 1-1: config 0 descriptor?? [ 431.208221][T11387] usb 4-1: USB disconnect, device number 54 [ 431.267401][T11388] fido_id[11388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 431.470197][ T10] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 431.716497][ T5730] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 431.725063][ T10] usb 6-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 431.750745][ T10] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 431.765447][ T10] usb 6-1: Product: syz [ 431.773400][ T5730] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 431.788017][ T10] usb 6-1: Manufacturer: syz [ 431.795395][ T5730] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 431.805818][ T10] usb 6-1: SerialNumber: syz [ 431.821993][ T10] usb 6-1: config 0 descriptor?? [ 431.822717][ T5730] usb 1-1: media controller created [ 431.862591][ T5730] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 432.024420][ T5730] zl10353_read_register: readreg error (reg=127, ret==0) [ 432.031529][ T5730] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 432.040362][ T5730] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 432.056099][ T5730] usb 1-1: USB disconnect, device number 63 [ 432.401138][T11409] netlink: 'syz.3.1567': attribute type 21 has an invalid length. [ 432.409075][T11409] IPv6: NLM_F_CREATE should be specified when creating new route [ 432.417284][T11409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 432.424531][T11409] IPv6: NLM_F_CREATE should be set when creating new route [ 432.431787][T11409] IPv6: NLM_F_CREATE should be set when creating new route [ 432.438982][T11409] IPv6: NLM_F_CREATE should be set when creating new route [ 432.458950][T11409] netlink: 'syz.3.1567': attribute type 21 has an invalid length. [ 432.467028][T11409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 432.535500][T10779] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 432.568479][ T10] peak_usb 6-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 432.595999][ T5730] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 432.667653][T11403] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 432.678953][T11403] netlink: 'syz.6.1565': attribute type 2 has an invalid length. [ 432.687394][T11403] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1565'. [ 432.720201][T10779] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 432.731960][T10779] usb 5-1: config 0 has no interface number 0 [ 432.743214][T10779] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 432.762891][T10779] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 432.783872][ T10] peak_usb 6-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 432.792367][T10779] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 432.867795][ T10] peak_usb 6-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 432.876648][T10779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.897805][T10779] usb 5-1: config 0 descriptor?? [ 432.912459][T11400] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 433.150645][T11414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 433.605386][T10779] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 433.616228][ T10] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 433.638672][ T10] usb 6-1: USB disconnect, device number 18 [ 433.755044][ T29] usb 5-1: USB disconnect, device number 45 [ 434.076664][ T5730] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 434.260359][ T5730] usb 1-1: not running at top speed; connect to a high speed hub [ 434.270468][ T5730] usb 1-1: config 192 has an invalid interface number: 48 but max is 0 [ 434.278942][ T5730] usb 1-1: config 192 has an invalid descriptor of length 44, skipping remainder of the config [ 434.290058][ T5730] usb 1-1: config 192 has no interface number 0 [ 434.296766][ T5730] usb 1-1: config 192 interface 48 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 434.313793][ T5730] usb 1-1: config 192 interface 48 has no altsetting 0 [ 434.322589][ T5730] usb 1-1: New USB device found, idVendor=0403, idProduct=fc0c, bcdDevice= 0.7a [ 434.345557][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=250, SerialNumber=3 [ 434.354658][ T5730] usb 1-1: Product: syz [ 434.358988][ T5730] usb 1-1: SerialNumber: syz [ 434.586763][T11419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1570'. [ 434.618185][T11419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1570'. [ 434.654894][ T29] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 434.671756][ T5730] ftdi_sio 1-1:192.48: FTDI USB Serial Device converter detected [ 434.682068][ T5730] usb 1-1: Detected SIO [ 434.688047][ T5730] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 434.702149][ T5730] usb 1-1: USB disconnect, device number 64 [ 434.711431][ T5730] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 434.722242][ T5730] ftdi_sio 1-1:192.48: device disconnected [ 434.825620][ T29] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 434.835456][ T29] usb 4-1: config 0 has no interface number 0 [ 434.842613][ T29] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 434.855169][ T29] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 434.866157][ T29] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 434.875506][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.966682][ T29] usb 4-1: config 0 descriptor?? [ 434.972740][T11431] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 434.983418][ T29] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 435.689264][ T29] usb 4-1: USB disconnect, device number 55 [ 436.136289][T11443] usb usb7: selecting invalid altsetting 6 [ 436.850021][T11460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1581'. [ 436.868188][T11460] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 437.136395][T11468] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 437.144194][ T29] usb 1-1: new low-speed USB device number 65 using dummy_hcd [ 437.152614][T11468] netlink: 'syz.4.1582': attribute type 2 has an invalid length. [ 437.160716][T11468] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1582'. [ 437.386519][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 8 [ 437.397761][ T29] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 437.407247][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.423483][ T29] usb 1-1: config 0 descriptor?? [ 437.429783][T11460] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 437.901331][ T29] aquacomputer_d5next 0003:0C70:F0B6.0011: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.0-1/input0 [ 437.946075][ T6460] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 438.280535][ T6460] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 438.834738][T11484] blktrace: Concurrent blktraces are not allowed on sg0 [ 438.851078][ T6460] usb 4-1: config 0 has no interface number 0 [ 438.857954][ T6460] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 438.871984][ T6460] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 438.882058][ T6460] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 438.892802][ T6460] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.903063][ T6460] usb 4-1: config 0 descriptor?? [ 438.909818][ T30] audit: type=1400 audit(1779513603.322:737): avc: denied { read } for pid=11458 comm="syz.0.1581" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 438.936838][ T6460] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 438.950415][ T30] audit: type=1400 audit(1779513603.322:738): avc: denied { ioctl } for pid=11458 comm="syz.0.1581" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0xaec1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 439.043004][ T30] audit: type=1400 audit(1779513603.434:739): avc: denied { shutdown } for pid=11485 comm="syz.5.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 439.199601][T11479] iowarrior 4-1:0.1: Error -90 while submitting URB [ 439.257066][ T10] usb 4-1: USB disconnect, device number 56 [ 439.294641][T11493] blktrace: Concurrent blktraces are not allowed on sg0 [ 440.194617][ T6460] usb 1-1: reset low-speed USB device number 65 using dummy_hcd [ 440.818958][T11514] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 440.942700][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 440.959617][T11514] netlink: 'syz.0.1592': attribute type 2 has an invalid length. [ 440.986751][T11514] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1592'. [ 441.227199][T11521] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.405640][ T5730] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 441.483711][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 441.493582][ T10] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 441.504321][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.512935][ T10] usb 6-1: Product: syz [ 441.517639][ T10] usb 6-1: Manufacturer: syz [ 441.522717][ T10] usb 6-1: SerialNumber: syz [ 441.532335][ T10] usb 6-1: config 0 descriptor?? [ 441.592014][ T5730] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 441.600304][ T5730] usb 4-1: config 0 has no interface number 0 [ 441.609209][ T5730] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 441.631246][ T5730] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 441.658430][ T29] usb 1-1: USB disconnect, device number 65 [ 441.668043][ T5730] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 441.691702][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.721767][T10779] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 441.724981][ T5730] usb 4-1: config 0 descriptor?? [ 441.744618][T11512] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 441.758467][ T5730] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 441.882611][ T30] audit: type=1400 audit(1779513606.101:740): avc: denied { append } for pid=11526 comm="syz.6.1601" name="dvr0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 441.945547][T10779] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 441.955291][T10779] usb 5-1: config 0 has no interface number 0 [ 441.966929][T10779] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 441.987582][ T10] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 442.006414][T10779] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 442.026920][ T10] usb 6-1: USB disconnect, device number 19 [ 442.035126][T10779] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 442.048385][T10779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.068302][ T804] usb 4-1: USB disconnect, device number 57 [ 442.103111][T10779] usb 5-1: config 0 descriptor?? [ 442.124568][T11523] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 442.170735][T10779] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 442.294955][T11538] comedi comedi3: pcl818: I/O base address or length out of range [ 442.847362][ T804] usb 5-1: USB disconnect, device number 46 [ 442.847390][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 443.789350][ T29] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 444.667984][ T29] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 444.735056][ T29] usb 6-1: config 0 has no interface number 0 [ 444.785118][ T29] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 444.898772][ T29] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 444.924898][ T29] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 444.934366][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.984921][ T29] usb 6-1: config 0 descriptor?? [ 445.053985][T11549] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 445.180005][ T29] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 445.561180][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.567627][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.576128][ T4945] block nbd4: Possible stuck request ffff8880284a0000: control (read@0,1024B). Runtime 240 seconds [ 445.587359][ T4945] block nbd4: Possible stuck request ffff8880284a01c0: control (read@1024,1024B). Runtime 240 seconds [ 445.598553][ T4945] block nbd4: Possible stuck request ffff8880284a0380: control (read@2048,1024B). Runtime 240 seconds [ 445.605876][ T804] usb 6-1: USB disconnect, device number 20 [ 445.611774][ T4945] block nbd4: Possible stuck request ffff8880284a0540: control (read@3072,1024B). Runtime 240 seconds [ 446.059281][ T29] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 446.198357][ T804] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 446.241358][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 446.264400][ T29] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 446.275058][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.283219][ T29] usb 4-1: Product: syz [ 446.287421][ T29] usb 4-1: Manufacturer: syz [ 446.292083][ T29] usb 4-1: SerialNumber: syz [ 446.322206][ T29] usb 4-1: config 0 descriptor?? [ 446.368880][ T804] usb 1-1: Using ep0 maxpacket: 8 [ 446.390071][ T804] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 446.403388][ T804] usb 1-1: config 179 has no interface number 0 [ 446.410799][ T804] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 446.432849][ T804] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 446.446003][ T804] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 446.457790][ T804] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 446.472341][ T804] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 446.488373][ T804] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 446.499518][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.535772][T11583] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 446.796717][ T29] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 446.854200][ T29] usb 4-1: USB disconnect, device number 58 [ 446.916459][ T10] usb 1-1: USB disconnect, device number 66 [ 446.922457][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 446.922508][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 447.194035][ T804] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 447.413042][ T804] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 447.421558][ T804] usb 6-1: config 0 has no interface number 0 [ 447.428149][ T804] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 447.445384][ T804] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 447.456585][ T804] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 447.466147][ T804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.482313][ T804] usb 6-1: config 0 descriptor?? [ 447.493639][T11592] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 447.506689][ T804] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 447.780543][T10779] usb 6-1: USB disconnect, device number 21 [ 447.887750][ T804] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 447.990139][T11610] fuse: Bad value for 'group_id' [ 447.995298][T11610] fuse: Bad value for 'group_id' [ 448.059067][ T804] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 448.068164][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.078221][ T804] usb 1-1: config 0 descriptor?? [ 448.119355][T11612] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 448.127301][T11612] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 448.306571][ T804] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 448.314547][ T804] [drm:udl_init] *ERROR* Selecting channel failed [ 448.327212][ T804] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 448.333946][ T804] [drm] Initialized udl on minor 2 [ 448.340343][ T804] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 448.351287][ T804] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 448.359291][T10779] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 448.370701][ T804] usb 1-1: USB disconnect, device number 67 [ 448.376813][T10779] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 448.677633][ T29] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 448.840593][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 448.853195][ T29] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 448.876505][ T29] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 448.916406][ T29] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 448.923147][T11616] Attempt to restore checkpoint with obsolete wellknown handles [ 448.933525][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 448.958527][ T29] usb 4-1: Product: syz [ 448.962835][ T29] usb 4-1: Manufacturer: syz [ 448.968024][ T29] usb 4-1: SerialNumber: syz [ 450.796717][ T29] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 450.900219][ T29] usb 4-1: USB disconnect, device number 59 [ 450.926228][ T29] usblp0: removed [ 451.222437][T11387] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 451.424933][T11387] usb 6-1: Using ep0 maxpacket: 16 [ 451.435406][T11387] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 451.444600][T11387] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.453489][T11387] usb 6-1: Product: syz [ 451.458214][T11387] usb 6-1: Manufacturer: syz [ 451.463625][T11387] usb 6-1: SerialNumber: syz [ 451.472884][T11387] usb 6-1: config 0 descriptor?? [ 451.974441][T11387] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 452.088811][T11387] usb 6-1: USB disconnect, device number 22 [ 452.761444][ T804] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 452.899978][ T9] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 452.922663][ T804] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 452.931977][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.941566][ T804] usb 1-1: config 0 descriptor?? [ 453.061883][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 453.070289][ T9] usb 6-1: config 0 has no interface number 0 [ 453.079926][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 453.099438][T11667] fuse: Bad value for 'group_id' [ 453.106181][T11667] fuse: Bad value for 'group_id' [ 453.106780][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 453.122364][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 453.131547][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.141628][ T9] usb 6-1: config 0 descriptor?? [ 453.149536][T11665] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 453.160721][ T9] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 453.190656][ T804] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 453.198748][ T804] [drm:udl_init] *ERROR* Selecting channel failed [ 453.211480][ T804] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 453.218252][ T804] [drm] Initialized udl on minor 2 [ 453.225535][ T804] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 453.234564][ T804] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 453.241964][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 453.251552][ T804] usb 1-1: USB disconnect, device number 68 [ 453.257680][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 453.435544][ T9] usb 6-1: USB disconnect, device number 23 [ 453.809682][ T6283] block nbd0: Possible stuck request ffff8880282d5080: control (read@0,1024B). Runtime 270 seconds [ 453.809755][ T4945] block nbd5: Possible stuck request ffff8880284d7000: control (read@0,1024B). Runtime 240 seconds [ 453.820638][ T6283] block nbd0: Possible stuck request ffff8880282d5240: control (read@1024,1024B). Runtime 270 seconds [ 453.832097][ T4945] block nbd5: Possible stuck request ffff8880284d71c0: control (read@1024,1024B). Runtime 240 seconds [ 453.842247][ T6283] block nbd0: Possible stuck request ffff8880282d5400: control (read@2048,1024B). Runtime 270 seconds [ 453.853191][ T4945] block nbd5: Possible stuck request ffff8880284d7380: control (read@2048,1024B). Runtime 240 seconds [ 453.883420][ T6283] block nbd0: Possible stuck request ffff8880282d55c0: control (read@3072,1024B). Runtime 270 seconds [ 453.895201][ T4945] block nbd5: Possible stuck request ffff8880284d7540: control (read@3072,1024B). Runtime 240 seconds [ 454.314020][T11691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.374086][ T804] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 454.584875][ T804] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 454.606380][ T804] usb 5-1: config 0 has no interface number 0 [ 454.621222][ T804] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 454.641642][ T804] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 454.662673][ T804] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 454.682868][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.704519][ T804] usb 5-1: config 0 descriptor?? [ 454.722109][T11687] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 454.740012][ T804] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 455.033658][ T5730] usb 5-1: USB disconnect, device number 47 [ 455.039669][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 455.844672][ T6283] block nbd1: Possible stuck request ffff888028337000: control (read@0,1024B). Runtime 270 seconds [ 455.855486][ T6283] block nbd1: Possible stuck request ffff8880283371c0: control (read@1024,1024B). Runtime 270 seconds [ 455.866535][ T6283] block nbd1: Possible stuck request ffff888028337380: control (read@2048,1024B). Runtime 270 seconds [ 455.877552][ T6283] block nbd1: Possible stuck request ffff888028337540: control (read@3072,1024B). Runtime 270 seconds [ 456.313774][T11715] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 456.328435][T11715] netlink: 'syz.4.1657': attribute type 2 has an invalid length. [ 456.341089][T11715] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1657'. [ 457.224527][T11732] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.340672][ T804] usb 1-1: new low-speed USB device number 69 using dummy_hcd [ 458.508393][ T804] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 458.537853][ T804] usb 1-1: config 0 has no interface number 0 [ 458.559216][ T804] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 458.581235][ T804] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 458.595881][ T804] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 458.605793][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.616338][ T804] usb 1-1: config 0 descriptor?? [ 458.624103][T11746] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 458.732740][ T804] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 459.692238][T10779] usb 1-1: USB disconnect, device number 69 [ 459.698295][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 459.813796][T11768] xt_hashlimit: size too large, truncated to 1048576 [ 459.848825][T11768] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 459.862084][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1674'. [ 460.003378][ T4945] block nbd2: Possible stuck request ffff8880283a5080: control (read@0,1024B). Runtime 270 seconds [ 460.014631][ T4945] block nbd2: Possible stuck request ffff8880283a5240: control (read@1024,1024B). Runtime 270 seconds [ 460.028823][ T4945] block nbd2: Possible stuck request ffff8880283a5400: control (read@2048,1024B). Runtime 270 seconds [ 460.041534][ T4945] block nbd2: Possible stuck request ffff8880283a55c0: control (read@3072,1024B). Runtime 270 seconds [ 460.175725][T11775] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 462.667877][ T6283] block nbd3: Possible stuck request ffff888028415080: control (read@0,1024B). Runtime 270 seconds [ 462.678987][ T6283] block nbd3: Possible stuck request ffff888028415240: control (read@1024,1024B). Runtime 270 seconds [ 462.690120][ T6283] block nbd3: Possible stuck request ffff888028415400: control (read@2048,1024B). Runtime 270 seconds [ 462.701212][ T6283] block nbd3: Possible stuck request ffff8880284155c0: control (read@3072,1024B). Runtime 270 seconds [ 463.482221][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 463.635723][T11801] lo speed is unknown, defaulting to 1000 [ 463.714221][ T9] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.625769][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 464.635453][ T9] usb 5-1: string descriptor 0 read error: -22 [ 464.643969][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 464.653132][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.273647][T11832] xt_hashlimit: size too large, truncated to 1048576 [ 465.297422][T11832] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 465.484556][T11809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.745845][T11809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.402139][T11801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.422537][T11801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.014828][ T9] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 467.046932][ T9] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 467.075910][ T9] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 467.100185][ T9] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 467.122143][ T9] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 467.137642][ T9] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 467.156777][ T9] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 467.173522][ T9] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 467.189641][ T9] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 467.213633][ T9] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 467.390910][ T9] lenovo 0003:17EF:6047.0012: hidraw0: USB HID v0.01 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 467.455872][ T9] lenovo 0003:17EF:6047.0012: Failed to switch F7/9/11 mode: -71 [ 467.495853][ T9] lenovo 0003:17EF:6047.0012: Failed to switch middle button: -71 [ 467.526164][ T9] lenovo 0003:17EF:6047.0012: Fn-lock setting failed: -71 [ 467.559750][ T9] lenovo 0003:17EF:6047.0012: Sensitivity setting failed: -71 [ 467.625995][ T9] usb 5-1: USB disconnect, device number 48 [ 467.755785][T11868] FAULT_INJECTION: forcing a failure. [ 467.755785][T11868] name failslab, interval 1, probability 0, space 0, times 0 [ 467.830450][T11868] CPU: 1 UID: 0 PID: 11868 Comm: syz.5.1702 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.830480][T11868] Tainted: [L]=SOFTLOCKUP [ 467.830486][T11868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 467.830496][T11868] Call Trace: [ 467.830502][T11868] [ 467.830510][T11868] dump_stack_lvl+0x100/0x190 [ 467.830535][T11868] should_fail_ex.cold+0x5/0xa [ 467.830559][T11868] should_failslab+0xc2/0x120 [ 467.830579][T11868] __kmalloc_cache_noprof+0x7a/0x6f0 [ 467.830603][T11868] ? nf_tables_addchain.constprop.0+0x1067/0x1ca0 [ 467.830633][T11868] nf_tables_addchain.constprop.0+0x1067/0x1ca0 [ 467.830657][T11868] ? nft_chain_lookup+0x58d/0xa60 [ 467.830688][T11868] ? nft_chain_lookup+0x59c/0xa60 [ 467.830715][T11868] ? nft_trans_alloc+0x1d/0x2d0 [ 467.830738][T11868] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 467.830763][T11868] ? __pfx_nft_chain_lookup+0x10/0x10 [ 467.830789][T11868] ? __lock_acquire+0x4a5/0x2630 [ 467.830831][T11868] ? nla_strcmp+0xff/0x130 [ 467.830857][T11868] ? nft_table_lookup.part.0+0x1e3/0x230 [ 467.830884][T11868] nf_tables_newchain+0x17c3/0x2d30 [ 467.830907][T11868] ? __pfx_net_generic+0x1/0x10 [ 467.830934][T11868] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 467.830958][T11868] ? __nla_validate_parse+0x1e7/0x28b0 [ 467.830984][T11868] ? __pfx_nf_tables_newchain+0x10/0x10 [ 467.831008][T11868] ? __pfx___nla_validate_parse+0x10/0x10 [ 467.831039][T11868] ? __nla_parse+0x40/0x60 [ 467.831063][T11868] nfnetlink_rcv_batch+0x1410/0x2880 [ 467.831096][T11868] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 467.831131][T11868] ? avc_has_perm_noaudit+0x145/0x3b0 [ 467.831172][T11868] ? __nla_parse+0x40/0x60 [ 467.831196][T11868] nfnetlink_rcv+0x3bd/0x440 [ 467.831216][T11868] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 467.831242][T11868] netlink_unicast+0x585/0x850 [ 467.831270][T11868] ? __pfx_netlink_unicast+0x10/0x10 [ 467.831302][T11868] netlink_sendmsg+0x8b0/0xda0 [ 467.831335][T11868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.831364][T11868] ? __might_fault+0x80/0x140 [ 467.831396][T11868] ____sys_sendmsg+0x9e1/0xb70 [ 467.831419][T11868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.831443][T11868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.831479][T11868] ___sys_sendmsg+0x190/0x1e0 [ 467.831506][T11868] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.831563][T11868] __sys_sendmsg+0x170/0x220 [ 467.831583][T11868] ? __pfx___sys_sendmsg+0x10/0x10 [ 467.831614][T11868] ? rcu_is_watching+0x12/0xc0 [ 467.831646][T11868] do_syscall_64+0x10b/0xf80 [ 467.831672][T11868] ? clear_bhb_loop+0x40/0x90 [ 467.831694][T11868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.831713][T11868] RIP: 0033:0x7f7b4799ce59 [ 467.831729][T11868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.831746][T11868] RSP: 002b:00007f7b48784028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.831764][T11868] RAX: ffffffffffffffda RBX: 00007f7b47c15fa0 RCX: 00007f7b4799ce59 [ 467.831776][T11868] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 467.831786][T11868] RBP: 00007f7b48784090 R08: 0000000000000000 R09: 0000000000000000 [ 467.831797][T11868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 467.831807][T11868] R13: 00007f7b47c16038 R14: 00007f7b47c15fa0 R15: 00007ffcfffa39c8 [ 467.831832][T11868] [ 468.916194][T11888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.094473][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 469.967167][ T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 469.981774][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.057083][ T9] usb 4-1: config 0 descriptor?? [ 470.466860][T11903] vlan2: entered allmulticast mode [ 470.472077][T11903] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 470.662807][ T9] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 470.682121][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 470.732889][ T9] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 470.748597][T11905] FAULT_INJECTION: forcing a failure. [ 470.748597][T11905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.764983][ T9] [drm] Initialized udl on minor 2 [ 470.777468][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 470.788613][T11905] CPU: 0 UID: 0 PID: 11905 Comm: syz.6.1714 Tainted: G L syzkaller #0 PREEMPT(full) [ 470.788631][T11905] Tainted: [L]=SOFTLOCKUP [ 470.788635][T11905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 470.788641][T11905] Call Trace: [ 470.788645][T11905] [ 470.788650][T11905] dump_stack_lvl+0x100/0x190 [ 470.788669][T11905] should_fail_ex.cold+0x5/0xa [ 470.788685][T11905] _copy_from_user+0x2e/0xd0 [ 470.788704][T11905] drm_ioctl+0x520/0xc60 [ 470.788722][T11905] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 470.788740][T11905] ? __pfx_drm_ioctl+0x10/0x10 [ 470.788759][T11905] ? selinux_file_ioctl+0x13b/0x290 [ 470.788774][T11905] ? selinux_file_ioctl+0xb6/0x290 [ 470.788790][T11905] ? __pfx_drm_ioctl+0x10/0x10 [ 470.788804][T11905] __x64_sys_ioctl+0x18e/0x210 [ 470.788818][T11905] do_syscall_64+0x10b/0xf80 [ 470.788834][T11905] ? clear_bhb_loop+0x40/0x90 [ 470.788847][T11905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.788858][T11905] RIP: 0033:0x7f1c6f39ce59 [ 470.788868][T11905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.788878][T11905] RSP: 002b:00007f1c6d5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 470.788890][T11905] RAX: ffffffffffffffda RBX: 00007f1c6f615fa0 RCX: 00007f1c6f39ce59 [ 470.788896][T11905] RDX: 0000200000000240 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 470.788903][T11905] RBP: 00007f1c6d5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 470.788909][T11905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.788915][T11905] R13: 00007f1c6f616038 R14: 00007f1c6f615fa0 R15: 00007ffe6ee33918 [ 470.788928][T11905] [ 470.976762][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 470.995090][ T9] usb 4-1: USB disconnect, device number 60 [ 471.143108][T11909] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1715'. [ 471.615469][T11928] blktrace: Concurrent blktraces are not allowed on sg0 [ 474.779459][T11954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1731'. [ 474.802997][T11954] netlink: 'syz.3.1731': attribute type 2 has an invalid length. [ 474.811820][T11954] netlink: 'syz.3.1731': attribute type 11 has an invalid length. [ 474.821488][T11954] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1731'. [ 475.578595][ T30] audit: type=1400 audit(1779513637.618:741): avc: denied { listen } for pid=11966 comm="syz.0.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 475.624179][ T30] audit: type=1400 audit(1779513637.646:742): avc: denied { accept } for pid=11966 comm="syz.0.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 475.739421][T11972] FAULT_INJECTION: forcing a failure. [ 475.739421][T11972] name failslab, interval 1, probability 0, space 0, times 0 [ 475.754924][T11972] CPU: 1 UID: 0 PID: 11972 Comm: syz.4.1736 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.754955][T11972] Tainted: [L]=SOFTLOCKUP [ 475.754962][T11972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 475.754973][T11972] Call Trace: [ 475.754980][T11972] [ 475.754988][T11972] dump_stack_lvl+0x100/0x190 [ 475.755022][T11972] should_fail_ex.cold+0x5/0xa [ 475.755048][T11972] should_failslab+0xc2/0x120 [ 475.755069][T11972] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 475.755098][T11972] ? __alloc_skb+0x140/0x710 [ 475.755115][T11972] ? __alloc_skb+0x5b7/0x710 [ 475.755135][T11972] __alloc_skb+0x140/0x710 [ 475.755152][T11972] ? __alloc_skb+0x5b7/0x710 [ 475.755169][T11972] ? __pfx___alloc_skb+0x10/0x10 [ 475.755187][T11972] ? __pfx_nf_tables_abort+0x10/0x10 [ 475.755217][T11972] netlink_ack+0x117/0xb80 [ 475.755252][T11972] nfnetlink_rcv_batch+0x1d52/0x2880 [ 475.755286][T11972] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 475.755323][T11972] ? avc_has_perm_noaudit+0x145/0x3b0 [ 475.755365][T11972] ? __nla_parse+0x40/0x60 [ 475.755393][T11972] nfnetlink_rcv+0x3bd/0x440 [ 475.755412][T11972] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 475.755440][T11972] netlink_unicast+0x585/0x850 [ 475.755470][T11972] ? __pfx_netlink_unicast+0x10/0x10 [ 475.755503][T11972] netlink_sendmsg+0x8b0/0xda0 [ 475.755533][T11972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.755558][T11972] ? __might_fault+0x80/0x140 [ 475.755594][T11972] ____sys_sendmsg+0x9e1/0xb70 [ 475.755617][T11972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.755647][T11972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.755681][T11972] ___sys_sendmsg+0x190/0x1e0 [ 475.755709][T11972] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.755765][T11972] __sys_sendmsg+0x170/0x220 [ 475.755787][T11972] ? __pfx___sys_sendmsg+0x10/0x10 [ 475.755818][T11972] ? rcu_is_watching+0x12/0xc0 [ 475.755851][T11972] do_syscall_64+0x10b/0xf80 [ 475.755878][T11972] ? clear_bhb_loop+0x40/0x90 [ 475.755901][T11972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.755921][T11972] RIP: 0033:0x7f0d42d9ce59 [ 475.755938][T11972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.755956][T11972] RSP: 002b:00007f0d43d42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.755974][T11972] RAX: ffffffffffffffda RBX: 00007f0d43015fa0 RCX: 00007f0d42d9ce59 [ 475.755987][T11972] RDX: 0000000004000800 RSI: 0000200000000680 RDI: 0000000000000003 [ 475.755999][T11972] RBP: 00007f0d43d42090 R08: 0000000000000000 R09: 0000000000000000 [ 475.756010][T11972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 475.756026][T11972] R13: 00007f0d43016038 R14: 00007f0d43015fa0 R15: 00007ffdf741da28 [ 475.756052][T11972] [ 476.253457][ T30] audit: type=1400 audit(1779513638.245:743): avc: denied { read write } for pid=5611 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 476.278035][ T30] audit: type=1400 audit(1779513638.245:744): avc: denied { open } for pid=5611 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 476.303694][ T30] audit: type=1400 audit(1779513638.245:745): avc: denied { ioctl } for pid=5611 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 476.329460][ T30] audit: type=1400 audit(1779513638.282:746): avc: denied { create } for pid=11975 comm="syz.5.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 476.350465][ T30] audit: type=1400 audit(1779513638.282:747): avc: denied { write } for pid=11975 comm="syz.5.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 476.370500][ T6460] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 476.378165][ T30] audit: type=1400 audit(1779513638.301:748): avc: denied { ioctl } for pid=11973 comm="syz.4.1737" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 476.404302][ T30] audit: type=1400 audit(1779513638.385:749): avc: denied { prog_load } for pid=11979 comm="syz.3.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 476.446677][ T30] audit: type=1400 audit(1779513638.385:750): avc: denied { bpf } for pid=11979 comm="syz.3.1740" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 476.447356][T11981] sctp: [Deprecated]: syz.3.1740 (pid 11981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 476.447356][T11981] Use struct sctp_sack_info instead [ 476.540822][T11985] overlayfs: failed lookup in lower (newroot/69, name='file0', err=-40): overlapping layers [ 476.567381][ T6460] usb 5-1: Using ep0 maxpacket: 8 [ 476.574121][ T6460] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.629005][T11987] overlayfs: failed lookup in lower (newroot/69, name='file0', err=-40): overlapping layers [ 476.641336][T11985] overlayfs: failed lookup in lower (newroot/69, name='file0', err=-40): overlapping layers [ 476.653644][ T6460] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 476.674257][ T6460] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.719269][ T6460] usb 5-1: config 0 descriptor?? [ 476.828413][T11994] 9p: Bad value for 'rfdno' [ 476.870528][ T6460] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22 [ 477.903855][T11974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.947305][T11974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.955127][ T4945] block nbd4: Possible stuck request ffff8880284a0000: control (read@0,1024B). Runtime 270 seconds [ 477.967683][ T4945] block nbd4: Possible stuck request ffff8880284a01c0: control (read@1024,1024B). Runtime 270 seconds [ 477.980147][ T4945] block nbd4: Possible stuck request ffff8880284a0380: control (read@2048,1024B). Runtime 270 seconds [ 477.991628][ T4945] block nbd4: Possible stuck request ffff8880284a0540: control (read@3072,1024B). Runtime 270 seconds [ 478.071107][ T9] usb 5-1: USB disconnect, device number 49 [ 479.078393][ T31] INFO: task syz.1.1121:9745 blocked for more than 143 seconds. [ 479.117591][ T31] Tainted: G L syzkaller #0 [ 479.150709][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 479.180408][ T31] task:syz.1.1121 state:D stack:25592 pid:9745 tgid:9744 ppid:5610 task_flags:0x400040 flags:0x00080002 [ 479.210807][ T31] Call Trace: [ 479.218749][ T31] [ 479.223958][ T31] __schedule+0x1295/0x67a0 [ 479.233626][ T31] ? __pfx___schedule+0x10/0x10 [ 479.244322][ T31] ? find_held_lock+0x2b/0x80 [ 479.259045][ T31] ? schedule+0x2bf/0x390 [ 479.271875][ T31] schedule+0xdd/0x390 [ 479.280663][ T31] schedule_preempt_disabled+0x13/0x30 [ 479.292898][ T31] __mutex_lock+0xced/0x1b10 [ 479.303359][ T31] ? bdev_open+0x41a/0xe40 [ 479.318339][ T31] ? find_inode_fast+0x5e3/0x910 [ 479.332589][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 479.343702][ T31] ? find_inode_fast+0x1fa/0x910 [ 479.349906][ T31] ? bdev_open+0x41a/0xe40 [ 479.354424][ T31] bdev_open+0x41a/0xe40 [ 479.359038][ T31] ? iput+0x3a/0x40 [ 479.363068][ T31] blkdev_open+0x34e/0x4f0 [ 479.369467][ T31] do_dentry_open+0x6d8/0x1660 [ 479.374461][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 479.383533][ T31] vfs_open+0x82/0x3f0 [ 479.388065][ T31] path_openat+0x208c/0x31a0 [ 479.392759][ T31] ? __pfx_path_openat+0x10/0x10 [ 479.397777][ T31] do_file_open+0x20e/0x430 [ 479.402864][ T31] ? __pfx_do_file_open+0x10/0x10 [ 479.407989][ T31] ? alloc_fd+0x476/0x790 [ 479.413565][ T31] ? do_getname+0x191/0x390 [ 479.418178][ T31] do_sys_openat2+0x10d/0x1e0 [ 479.423202][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 479.428623][ T31] __x64_sys_openat+0x12d/0x210 [ 479.433859][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 479.439459][ T31] ? rcu_is_watching+0x12/0xc0 [ 479.445179][ T31] do_syscall_64+0x10b/0xf80 [ 479.449859][ T31] ? clear_bhb_loop+0x40/0x90 [ 479.455029][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.461006][ T31] RIP: 0033:0x7f507175d68e [ 479.465933][ T31] RSP: 002b:00007f507262eb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 479.475259][ T31] RAX: ffffffffffffffda RBX: 00007f507262f6c0 RCX: 00007f507175d68e [ 479.483437][ T31] RDX: 0000000000000000 RSI: 00007f507262ec00 RDI: ffffffffffffff9c [ 479.493604][ T31] RBP: 00007f507262ec00 R08: 0000000000000000 R09: 0000000000000000 [ 479.504762][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 479.513678][ T31] R13: 00007f5071a16038 R14: 00007f5071a15fa0 R15: 00007ffe6d4f47a8 [ 479.522081][ T31] [ 479.525538][ T31] [ 479.525538][ T31] Showing all locks held in the system: [ 479.544895][ T31] 2 locks held by kworker/u8:0/12: [ 479.568597][ T31] #0: ffff88801f36e940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 479.612011][ T31] #1: ffff8880b8524648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2f15/0x67a0 [ 479.648578][ T31] 1 lock held by khungtaskd/31: [ 479.657503][ T31] #0: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 479.667737][ T31] 3 locks held by kworker/u8:7/1039: [ 479.673053][ T31] #0: ffff88813fe94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 479.684400][ T31] #1: ffffc90005167d08 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 479.695817][ T31] #2: ffffffff8e7f1168 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 479.705974][ T31] 2 locks held by getty/5372: [ 479.710717][ T31] #0: ffff8880342a90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 479.720983][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 479.731317][ T31] 1 lock held by udevd/5618: [ 479.735963][ T31] #0: ffff88802831a350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 479.746813][ T31] 1 lock held by udevd/5625: [ 479.751506][ T31] #0: ffff88802821a350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 479.760875][ T31] 1 lock held by udevd/5631: [ 479.766215][ T31] #0: ffff88802821e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 479.775586][ T31] 1 lock held by udevd/6370: [ 479.780161][ T31] #0: ffff8880283d6350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 479.789516][ T31] 1 lock held by udevd/7632: [ 479.794110][ T31] #0: ffff88802831e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 479.803532][ T31] 1 lock held by udevd/7635: [ 479.808161][ T31] #0: ffff8880283d2350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 479.817514][ T31] 1 lock held by syz.1.1121/9745: [ 479.822507][ T31] #0: ffff88802821e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 479.831843][ T31] 1 lock held by syz.2.1300/10400: [ 479.837096][ T31] #0: ffff88802831a350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 479.846455][ T31] 1 lock held by syz.6.1746/11992: [ 479.851822][ T31] #0: ffffffff9060e2a0 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0xab/0x150 [ 479.861183][ T31] [ 479.863532][ T31] ============================================= [ 479.863532][ T31] [ 479.873946][ T31] NMI backtrace for cpu 0 [ 479.873961][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 479.873980][ T31] Tainted: [L]=SOFTLOCKUP [ 479.873985][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 479.873993][ T31] Call Trace: [ 479.873999][ T31] [ 479.874004][ T31] dump_stack_lvl+0x100/0x190 [ 479.874027][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 479.874046][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 479.874066][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 479.874085][ T31] sys_info+0x141/0x190 [ 479.874099][ T31] watchdog+0xcb1/0x1030 [ 479.874120][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 479.874139][ T31] ? __pfx_watchdog+0x10/0x10 [ 479.874163][ T31] ? __kthread_parkme+0x18c/0x230 [ 479.874183][ T31] ? kthread+0x13a/0x450 [ 479.874199][ T31] ? __pfx_watchdog+0x10/0x10 [ 479.874213][ T31] kthread+0x370/0x450 [ 479.874230][ T31] ? __pfx_kthread+0x10/0x10 [ 479.874247][ T31] ret_from_fork+0x72b/0xd50 [ 479.874266][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 479.874285][ T31] ? __switch_to+0x800/0x1100 [ 479.874306][ T31] ? __pfx_kthread+0x10/0x10 [ 479.874324][ T31] ret_from_fork_asm+0x1a/0x30 [ 479.874352][ T31] [ 479.874374][ T31] Sending NMI from CPU 0 to CPUs 1: [ 480.005614][ C1] NMI backtrace for cpu 1 [ 480.005632][ C1] CPU: 1 UID: 0 PID: 7697 Comm: kworker/u8:16 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.005653][ C1] Tainted: [L]=SOFTLOCKUP [ 480.005658][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 480.005667][ C1] Workqueue: iou_exit io_ring_exit_work [ 480.005688][ C1] RIP: 0010:__lock_acquire+0x38b/0x2630 [ 480.005707][ C1] Code: 00 31 f6 eb a5 45 31 c0 e9 f9 fc ff ff 90 e8 ec 02 12 03 85 c0 74 10 44 8b 15 e1 a9 f3 0e 45 85 d2 0f 84 51 0f 00 00 90 31 c0 <48> 8b 54 24 68 65 48 2b 15 f0 f4 26 12 0f 85 65 1c 00 00 48 83 c4 [ 480.005720][ C1] RSP: 0018:ffffc900058c74b0 EFLAGS: 00000006 [ 480.005744][ C1] RAX: 0000000000000001 RBX: ffff8880756c5608 RCX: 0000000000000003 [ 480.005753][ C1] RDX: 0000000044bc3dcd RSI: 00000000dc01dc3b RDI: 000000008561d4ed [ 480.005762][ C1] RBP: ffff8880756c4a00 R08: 00000000a95ff8b2 R09: 0000000000000007 [ 480.005771][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 480.005780][ C1] R13: 0000000000000007 R14: 0000000000000003 R15: 69423b0f44bc3dcd [ 480.005789][ C1] FS: 0000000000000000(0000) GS:ffff88812446a000(0000) knlGS:0000000000000000 [ 480.005804][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 480.005813][ C1] CR2: 00007fda641ea2f8 CR3: 000000002ec9e000 CR4: 00000000003526f0 [ 480.005822][ C1] Call Trace: [ 480.005827][ C1] [ 480.005837][ C1] lock_acquire+0x1b1/0x370 [ 480.005854][ C1] ? unwind_next_frame+0xbd/0x2090 [ 480.005874][ C1] ? unwind_next_frame+0x3be/0x2090 [ 480.005895][ C1] ? unwind_next_frame+0x3be/0x2090 [ 480.005915][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 480.005931][ C1] unwind_next_frame+0xd1/0x2090 [ 480.005949][ C1] ? unwind_next_frame+0xbd/0x2090 [ 480.005968][ C1] ? ret_from_fork+0x72b/0xd50 [ 480.005986][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 480.006001][ C1] arch_stack_walk+0x94/0xf0 [ 480.006020][ C1] ? ret_from_fork+0x72b/0xd50 [ 480.006037][ C1] ? __io_req_caches_free+0x1a6/0x220 [ 480.006056][ C1] stack_trace_save+0x8e/0xc0 [ 480.006070][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 480.006084][ C1] ? __io_req_caches_free+0x1a6/0x220 [ 480.006104][ C1] ? kasan_save_stack+0x3f/0x50 [ 480.006121][ C1] ? kasan_save_stack+0x30/0x50 [ 480.006133][ C1] kasan_save_stack+0x30/0x50 [ 480.006144][ C1] ? kasan_save_stack+0x30/0x50 [ 480.006156][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 480.006173][ C1] ? kmem_cache_free+0x433/0x6c0 [ 480.006191][ C1] ? __io_req_caches_free+0x1a6/0x220 [ 480.006209][ C1] ? io_req_caches_free+0x20/0x40 [ 480.006228][ C1] ? io_ring_exit_work+0x418/0xd40 [ 480.006240][ C1] ? process_one_work+0xa0e/0x1980 [ 480.006256][ C1] ? worker_thread+0x5ef/0xe50 [ 480.006271][ C1] ? kthread+0x370/0x450 [ 480.006286][ C1] ? ret_from_fork+0x72b/0xd50 [ 480.006312][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 480.006330][ C1] kmem_cache_free+0x433/0x6c0 [ 480.006349][ C1] __io_req_caches_free+0x1a6/0x220 [ 480.006370][ C1] io_req_caches_free+0x20/0x40 [ 480.006389][ C1] io_ring_exit_work+0x418/0xd40 [ 480.006400][ C1] ? do_raw_spin_lock+0x128/0x260 [ 480.006421][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 480.006434][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 480.006453][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 480.006473][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 480.006495][ C1] ? rcu_is_watching+0x12/0xc0 [ 480.006517][ C1] process_one_work+0xa0e/0x1980 [ 480.006537][ C1] ? __pfx_process_one_work+0x10/0x10 [ 480.006556][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 480.006570][ C1] worker_thread+0x5ef/0xe50 [ 480.006589][ C1] ? kthread+0x13a/0x450 [ 480.006604][ C1] ? __pfx_worker_thread+0x10/0x10 [ 480.006619][ C1] kthread+0x370/0x450 [ 480.006634][ C1] ? __pfx_kthread+0x10/0x10 [ 480.006649][ C1] ret_from_fork+0x72b/0xd50 [ 480.006665][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 480.006681][ C1] ? rcu_is_watching+0x12/0xc0 [ 480.006700][ C1] ? __switch_to+0x800/0x1100 [ 480.006719][ C1] ? __pfx_kthread+0x10/0x10 [ 480.006735][ C1] ret_from_fork_asm+0x1a/0x30 [ 480.006757][ C1] [ 480.412866][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 480.419716][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 480.430370][ T31] Tainted: [L]=SOFTLOCKUP [ 480.434669][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 480.444695][ T31] Call Trace: [ 480.447954][ T31] [ 480.450861][ T31] dump_stack_lvl+0x100/0x190 [ 480.455516][ T31] vpanic+0x552/0x970 [ 480.459474][ T31] ? __pfx_vpanic+0x10/0x10 [ 480.463952][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 480.470079][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 480.476217][ T31] panic+0xd1/0xe0 [ 480.479919][ T31] ? __pfx_panic+0x10/0x10 [ 480.484313][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 480.490437][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 480.496564][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 480.502698][ T31] ? watchdog.cold+0x1ec/0x234 [ 480.507434][ T31] ? watchdog+0xcc1/0x1030 [ 480.511827][ T31] watchdog.cold+0x1fd/0x234 [ 480.516391][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 480.522174][ T31] ? __pfx_watchdog+0x10/0x10 [ 480.526825][ T31] ? __kthread_parkme+0x18c/0x230 [ 480.531831][ T31] ? kthread+0x13a/0x450 [ 480.536046][ T31] ? __pfx_watchdog+0x10/0x10 [ 480.540702][ T31] kthread+0x370/0x450 [ 480.544744][ T31] ? __pfx_kthread+0x10/0x10 [ 480.549318][ T31] ret_from_fork+0x72b/0xd50 [ 480.553884][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 480.558971][ T31] ? __switch_to+0x800/0x1100 [ 480.563628][ T31] ? __pfx_kthread+0x10/0x10 [ 480.568196][ T31] ret_from_fork_asm+0x1a/0x30 [ 480.572953][ T31] [ 480.576314][ T31] Kernel Offset: disabled [ 480.580611][ T31] Rebooting in 86400 seconds..