last executing test programs: 10m37.177939462s ago: executing program 32 (id=480): bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x808) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 10m0.446555599s ago: executing program 2 (id=600): syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x23, &(0x7f0000000100), &(0x7f0000000200)=0x14) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x23, &(0x7f0000000100), &(0x7f0000000200)=0x14) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = fsopen(&(0x7f0000000680)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000300)='acl\x00\x9a\v\x9e\xd4\x10\x18\xe6\xca\xf1\x0f\xc8H\xc8#A@\x9a\xe4r\x89h8\x1b\xab\x84<\x85\xe5\x88j_<(nW4\xe4\xbb\xe9PF\x1b|\xc4\xa1\xa0\x9e\x81\xa0lZS\'\x8f\x91\xf7\x03\xa2\x8cd\x1f\xd3y\xce\x1asj\x98\xb5\x95\xdf\x915\a\x97=\xa9\xe7A\x12\xc2\xf5_\x11\b\x00\x00\x00\x00\x00\x00\x00\x1c\x1e:^\xdeNT\xe8O\xe8\x1ez\x9e\xc8\x8eo@Ti\xf6\xe5F\x0fv\xf1H\xdf\xf1\xe1\x9en\xc1\xd1\xca\xca\x89\"\xe4\x9c\xe6\xc2\xd8\xaa\xf6\f>\x19\x15t=\x1eXp\xba~\xb8xd>\x92LO\x06\xa3\xfdS\x01\xd1GE\x0f\x98L\x99#\xef5\xed[H\x104\xcd\xe23l\xd1\x9fc5\x87\xb4\xd7\xf6\xecr)\x0f\xc7\xe4\x1d[\x82\xc3\x18\xa4{\xecF\x81\xdb', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xffffffffffffff9c) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000300)='acl\x00\x9a\v\x9e\xd4\x10\x18\xe6\xca\xf1\x0f\xc8H\xc8#A@\x9a\xe4r\x89h8\x1b\xab\x84<\x85\xe5\x88j_<(nW4\xe4\xbb\xe9PF\x1b|\xc4\xa1\xa0\x9e\x81\xa0lZS\'\x8f\x91\xf7\x03\xa2\x8cd\x1f\xd3y\xce\x1asj\x98\xb5\x95\xdf\x915\a\x97=\xa9\xe7A\x12\xc2\xf5_\x11\b\x00\x00\x00\x00\x00\x00\x00\x1c\x1e:^\xdeNT\xe8O\xe8\x1ez\x9e\xc8\x8eo@Ti\xf6\xe5F\x0fv\xf1H\xdf\xf1\xe1\x9en\xc1\xd1\xca\xca\x89\"\xe4\x9c\xe6\xc2\xd8\xaa\xf6\f>\x19\x15t=\x1eXp\xba~\xb8xd>\x92LO\x06\xa3\xfdS\x01\xd1GE\x0f\x98L\x99#\xef5\xed[H\x104\xcd\xe23l\xd1\x9fc5\x87\xb4\xd7\xf6\xecr)\x0f\xc7\xe4\x1d[\x82\xc3\x18\xa4{\xecF\x81\xdb', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xffffffffffffff9c) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x5, 0x6}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0xe0586f4}}, {@version_u}]}}) 9m58.166234545s ago: executing program 2 (id=609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x23, 0x2, 0x0, &(0x7f0000000040)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000020c0)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r5}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000280)=[{0x84, 0x77, 0x0, 0x0, @time={0x401, 0x100003}, {0xfd}, {0x7, 0x1}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x4, 0x3, @tick, {0xfd}, {}, @note={0xfa}}, {0x6, 0x3, 0x9, 0xff, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @queue={0x2b, {0x7ff, 0x8009}}}], 0x54) 9m56.443074208s ago: executing program 2 (id=614): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0, 0x12}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000002200)={0xa, 0x16, &(0x7f0000000800)=ANY=[@ANYRES64=r1], 0x0, 0x8}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000002840)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) r4 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f00000004c0)={0x0, @null, @netrom={'nr', 0x0}, 0xfffffe4c, 'syz1\x00', @default, 0x5, 0x1, [@bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000005a80)={0x2, 0x0, {&(0x7f00000003c0)=""/110, 0x6e, 0x0, 0x1, 0x2}}, 0x48) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000040)=@id, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f00000001c0)={0x2020}, 0x2020) recvmmsg(r7, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1, &(0x7f0000000e40)=""/105, 0x69}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) timer_settime(r6, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) 9m53.94677257s ago: executing program 2 (id=619): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40), 0x0, 0x0, 0x0, 0x40041}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 9m53.624831418s ago: executing program 2 (id=621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000001480)=ANY=[@ANYBLOB="18000000000000000000000000000000000000000000000074a69b4bb74d788c1a71f473d4ed1d58965b329115f28e553feb4a75a088e1389c6072c9490e7243ce354896bb"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x1f4}}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc25c4110, 0x0) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc43", 0xf) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r5, 0x4142, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001700)={&(0x7f0000001780)=ANY=[@ANYBLOB="ba93cf1fcc7115b7a82b5e650cd230356eaa0e0091be8af26201e74f03912855d0babd7a3b76d2f7bf86e808a126dec9039e31c4a6cc2e55a2b6e89d3d7d4637e18fcf21251ed989bfb938c88121c2ac833324f12062b1825ffcaaa8ba7f96a7ffac6443", @ANYRES16=r8, @ANYBLOB="010028bd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x40010) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000000000000000000a0000010900010073797a31000000001c000480180001800d00010073796e70726f787900000000040002800900020073797a3200000000140000001100010000000000000000000100000a000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r9 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000011d80)=@newtfilter={0x840, 0x2c, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff1}, {0x9, 0xfff1}, {0xfff3, 0x7}}, [@f_rsvp6={{0xa}, {0x810, 0x2, [@TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x0, 0x1, 0x21, 0x6, 0x4, 0x9, 0xa, 0x6, 0x3, 0xe23f, 0x243c, 0x58b, 0x1000, 0x2, 0x5, 0x6, 0x80000000, 0x1, 0x80000000, 0x7, 0x1, 0x7, 0xc7, 0x7, 0x5, 0x7, 0x200, 0x7, 0x7, 0xde7, 0x3, 0x88f00000, 0x30000000, 0x2, 0x6, 0x3, 0x5, 0xd3a, 0x3, 0x5, 0x4, 0x0, 0x0, 0x6, 0x39f0, 0x72, 0x7, 0x0, 0x28, 0x91, 0x4, 0x2, 0xffff, 0x3, 0x7, 0x1, 0xcc9, 0x6, 0x10000, 0x0, 0x1, 0x2, 0x9, 0xfffffffb, 0x7, 0x1, 0x0, 0x9a, 0xe25, 0x5, 0x9, 0x80, 0x200, 0xffff, 0x0, 0x7ff, 0x4027, 0xa, 0x1, 0x4, 0x8, 0x700, 0x0, 0xe97, 0x5, 0x0, 0x4, 0x6, 0x0, 0x10001, 0x4, 0x7, 0xb36, 0xe, 0x6, 0x6, 0x9, 0x7, 0x8000, 0x2, 0x3, 0x20, 0x0, 0x0, 0x101, 0x7, 0x13, 0x10, 0x2, 0xc, 0x5, 0x7, 0x4, 0xfffffffa, 0x9, 0x1, 0x1, 0x8, 0x81, 0x2, 0x0, 0xa, 0xffffffff, 0x6, 0x6, 0x8, 0x8, 0x8, 0x6a0ff34, 0xfffffff8, 0x0, 0x3, 0x7, 0x36, 0x401, 0xfffffff5, 0xac4, 0x5, 0x40, 0x80000000, 0x1, 0x85f, 0x3, 0x8, 0xfffffffc, 0x0, 0x4, 0x3, 0x5, 0x3, 0x300000, 0x1, 0x0, 0x8cb, 0x0, 0x9a89, 0x3, 0x0, 0xd, 0xfffffff8, 0xffff, 0xfffff1b5, 0x94f, 0x7, 0x2, 0x45, 0x8, 0x7, 0x2, 0x7fff, 0x2, 0x401, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x6, 0x3, 0x1, 0x6, 0xffffffff, 0x1ff, 0x9, 0x951e, 0x10000, 0x2, 0x7fffffff, 0x6, 0x3, 0x6, 0x9, 0x1, 0x7, 0x3, 0x9, 0x2, 0x3, 0x4, 0x5, 0xa, 0x7d8, 0xff, 0x6, 0x2, 0x5, 0x11, 0x2e0c, 0x1ff, 0x0, 0x8, 0x6, 0x4, 0x3, 0x80000000, 0x9, 0x4, 0x5, 0xd, 0x6899, 0x2d87, 0x2, 0x8, 0x8, 0x8, 0x5, 0x4, 0x9, 0x1, 0x3, 0x6, 0x9, 0xff, 0x2000, 0x4, 0x75, 0x1, 0x4, 0x4, 0x0, 0xd, 0x5, 0x433, 0x9, 0x4, 0x5, 0x7ff, 0x200, 0x84, 0xfffffffb, 0x6, 0x5, 0x7, 0x7ff, 0x80000001]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x964, 0x2, 0x5, 0x0, 0x3, 0x24000000, 0x3, 0x8, 0x307, 0x6, 0x80, 0x3, 0x3, 0x8000, 0x832b, 0x6, 0x10000, 0x0, 0x0, 0x5, 0x5, 0x1, 0x6, 0x93c, 0xf75f, 0x7, 0x7f, 0x0, 0x2800000, 0x6, 0x9, 0x3, 0xa, 0x6, 0x7, 0x3, 0x0, 0xaa3, 0x2, 0x101, 0x3, 0x9, 0x1, 0xe, 0x4, 0xfffffc01, 0x101, 0x8, 0x2, 0x3, 0x4, 0xffff, 0x7fffffff, 0x6, 0x5, 0x4a, 0xbcc, 0xff, 0x8, 0x5, 0xff, 0xff, 0x6, 0x9b4, 0x3, 0x2, 0x2, 0x1, 0x2, 0x0, 0x0, 0x0, 0x4, 0x81, 0x4, 0x8, 0x10000, 0x74f, 0x5, 0x7fffffff, 0x2, 0x4, 0x8, 0xfffffffa, 0x80, 0x1000, 0x400, 0x7, 0xd2a, 0x3, 0x400, 0x1b, 0x400, 0x4, 0x8, 0x10000, 0x1ff, 0x1, 0xad99, 0xff, 0xb, 0x3, 0x2, 0xa99, 0x4, 0xa, 0x6608, 0x5, 0x3, 0x4, 0x101, 0x7, 0x7, 0x21, 0x8, 0x8, 0x2, 0x1020, 0xc, 0x0, 0x5, 0x7fffffff, 0xffffffff, 0x9, 0xc, 0x1, 0x7ff, 0x9, 0x1, 0xff, 0x8, 0x7, 0xc, 0x5, 0x6, 0x8000, 0xc, 0x8, 0x37, 0x55, 0x4, 0x4, 0xefaf, 0x80000001, 0x4, 0x6, 0x0, 0x3, 0x1, 0x1, 0x9, 0xd25e, 0xc, 0x5a44, 0xd3, 0x3, 0x8, 0x6, 0x2, 0x4, 0x2d, 0xab, 0x6, 0xffff, 0x5, 0xb, 0x5, 0xffff6e32, 0x4, 0x800, 0xffff, 0x3, 0x1ff, 0x3da9, 0x6, 0x8, 0x2, 0x6, 0xf, 0x5, 0x78, 0x0, 0x7, 0x200000, 0xfff, 0x8001, 0x5, 0x1ff, 0xb, 0x7968a3e5, 0x5, 0x9, 0x7fff, 0x2, 0x81, 0x0, 0x100, 0x0, 0xfff, 0x6, 0x4, 0x10, 0x1ff, 0x7f, 0x9, 0x7, 0x10, 0x3, 0x3b, 0x2, 0xfffffff8, 0x9, 0x2, 0xffff7597, 0xc, 0x8, 0xfffffffb, 0x1, 0x2, 0xc, 0x9, 0x65c, 0xd, 0x7, 0x7, 0x5, 0x5, 0x2, 0x5, 0x0, 0x1, 0x0, 0x5, 0x9, 0x4, 0x1, 0x5, 0x3, 0x1, 0x7, 0x21f, 0x24000000, 0x2, 0x8, 0x9, 0x4, 0x4bf, 0x1, 0x1, 0x6d9, 0x1, 0x0, 0x4, 0x0, 0x9]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x20044010}, 0x81) recvmmsg$unix(r9, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000003c0)=""/4116, 0x1014}], 0x1}}], 0x1, 0x10000, 0x0) 9m50.621707741s ago: executing program 2 (id=631): syz_clone3(&(0x7f0000000400)={0x45000400, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x10}, &(0x7f0000000300)=""/211, 0xd3, &(0x7f00000001c0)=""/74, &(0x7f0000000100)=[0xffffffffffffffff], 0x1}, 0x58) prlimit64(r0, 0x9, &(0x7f0000000140)={0x80000000, 0x100000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r3, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) 9m35.51635054s ago: executing program 33 (id=631): syz_clone3(&(0x7f0000000400)={0x45000400, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x10}, &(0x7f0000000300)=""/211, 0xd3, &(0x7f00000001c0)=""/74, &(0x7f0000000100)=[0xffffffffffffffff], 0x1}, 0x58) prlimit64(r0, 0x9, &(0x7f0000000140)={0x80000000, 0x100000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r3, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) 1m45.790792733s ago: executing program 3 (id=1928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x0, &(0x7f0000000180)}) fstatfs(0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0xa6) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000002700)=ANY=[@ANYRES64=r2], 0x1118) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000100000908000240000000060900010073797a300000000028000000000a030000000000000000000100000a0900010073797a3000000000080002"], 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') openat$autofs(0xffffffffffffff9c, 0x0, 0x10000, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000340)={0x2, @sliced={0xa, [0x9, 0x8001, 0x400, 0x6, 0xa63, 0x1, 0x1, 0x8, 0xf42, 0x886d, 0x1ff, 0x7, 0x5, 0x6, 0x7, 0x3a, 0xcc, 0xffff, 0x4, 0xff, 0x0, 0x7, 0x0, 0x6, 0x3, 0x8000, 0x7, 0xe, 0x5, 0x8, 0xa6, 0xe0c, 0x8, 0x9, 0x310, 0x0, 0x1, 0x401, 0x7, 0x6, 0x6, 0x7fff, 0x3, 0xfffa, 0x7, 0x1660, 0x0, 0x2], 0x8}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004340)=""/102376, 0x18fe8) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)}], 0x1}, 0xff0f000000008080) getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtaction={0x1a0, 0x30, 0x53b, 0x0, 0x25dfdbfe, {0x9}, [{0x18c, 0x1, [@m_ife={0x188, 0x15, 0x0, 0x0, {{0x7}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xc781}]}, @TCA_IFE_SMAC={0xa, 0x4, @random="aab293796516"}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x1000, 0x4, 0x7, 0x3}}}, @TCA_IFE_DMAC={0xa, 0x3, @random="bbe398e60ffc"}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x10000, 0x9, 0x7, 0x4bd9, 0x7}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x7, 0xffffffffffffffff, 0x4, 0x6}, 0x1}}]}, {0xaf, 0x6, "a8a7ebc2671b1f5ba02100e94360dc7a00a4557d22ad85cc25a9dfacf628c5e5fceb23b30ddd7de3d566eda8f67cfaf8829c09b79ba2051293cd644c4078383888b83d08b10aae84f6cff5488355789cdf23ad45c86c18cfb845b3e58e6f1010b8301b28eacc660c917d55acc23b062a20632f2d4f847c369b0ff73847bb147d106a6c8544bebddcde8c7cef7b7eb7d370aa2f1ec6bf3bd2d4cce6dfc902c624e8b4beb14600e41201cea1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1a0}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c"], 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000060a010400000000000000000a0000030900010035f03af23ccfff2a18000480140001800a0001006c696d6974000000040002800900020073797a3200000000050007402e0000001400000011a1010000000000000000000100000ada1dc83debf2672b96859901da2d149b62282935822f54802d7893c72182efbcda9d33209255ff33b0866ac7344bdecf69b5a3"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) read$FUSE(r3, &(0x7f00000006c0)={0x2020}, 0x2020) 1m44.748728093s ago: executing program 3 (id=1931): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000000709007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='rss_stat\x00', r0, 0x0, 0x2000000000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000006b119a00000000008510000002000000850000000800"/48], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 1m43.837208819s ago: executing program 3 (id=1932): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) semget$private(0x0, 0x2, 0x3d2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd28, 0xfffffffc, {0x1b}}, 0x14}, 0x1, 0x0, 0x0, 0x8015}, 0x0) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}, 0x0) close(r4) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={r5, 0x800, 0x3a, 0x3, 0x3, 0x2, 0x2, 0x8001, {0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x401, 0xfffffa70, 0x9, 0x1, 0x5}}, &(0x7f0000000040)=0xb0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1m39.235015472s ago: executing program 6 (id=1940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1m39.020193086s ago: executing program 5 (id=1941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x0, &(0x7f0000000180)}) fstatfs(0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0xa6) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000002700)=ANY=[@ANYRES64=r2], 0x1118) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000100000908000240000000060900010073797a300000000028000000000a030000000000000000000100000a0900010073797a3000000000080002"], 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') openat$autofs(0xffffffffffffff9c, 0x0, 0x10000, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000340)={0x2, @sliced={0xa, [0x9, 0x8001, 0x400, 0x6, 0xa63, 0x1, 0x1, 0x8, 0xf42, 0x886d, 0x1ff, 0x7, 0x5, 0x6, 0x7, 0x3a, 0xcc, 0xffff, 0x4, 0xff, 0x0, 0x7, 0x0, 0x6, 0x3, 0x8000, 0x7, 0xe, 0x5, 0x8, 0xa6, 0xe0c, 0x8, 0x9, 0x310, 0x0, 0x1, 0x401, 0x7, 0x6, 0x6, 0x7fff, 0x3, 0xfffa, 0x7, 0x1660, 0x0, 0x2], 0x8}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004340)=""/102376, 0x18fe8) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)}], 0x1}, 0xff0f000000008080) getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtaction={0x1a0, 0x30, 0x53b, 0x0, 0x25dfdbfe, {0x9}, [{0x18c, 0x1, [@m_ife={0x188, 0x15, 0x0, 0x0, {{0x7}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xc781}]}, @TCA_IFE_SMAC={0xa, 0x4, @random="aab293796516"}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x1000, 0x4, 0x7, 0x3}}}, @TCA_IFE_DMAC={0xa, 0x3, @random="bbe398e60ffc"}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x10000, 0x9, 0x7, 0x4bd9, 0x7}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x7, 0xffffffffffffffff, 0x4, 0x6}, 0x1}}]}, {0xaf, 0x6, "a8a7ebc2671b1f5ba02100e94360dc7a00a4557d22ad85cc25a9dfacf628c5e5fceb23b30ddd7de3d566eda8f67cfaf8829c09b79ba2051293cd644c4078383888b83d08b10aae84f6cff5488355789cdf23ad45c86c18cfb845b3e58e6f1010b8301b28eacc660c917d55acc23b062a20632f2d4f847c369b0ff73847bb147d106a6c8544bebddcde8c7cef7b7eb7d370aa2f1ec6bf3bd2d4cce6dfc902c624e8b4beb14600e41201cea1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1a0}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c"], 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000060a010400000000000000000a0000030900010035f03af23ccfff2a18000480140001800a0001006c696d6974000000040002800900020073797a3200000000050007402e0000001400000011a1010000000000000000000100000ada1dc83debf2672b96859901da2d149b62282935822f54802d7893c72182efbcda9d33209255ff33b0866ac7344bdecf69b5a3"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) read$FUSE(r3, &(0x7f00000006c0)={0x2020}, 0x2020) 1m38.892758668s ago: executing program 6 (id=1942): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000080)=@raw={0xfe, 0x1, "2fbc854ab559"}) write$input_event(r2, &(0x7f0000000580)={{0x0, 0x2710}, 0x5, 0x3ff, 0x8e}, 0x18) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000002100), 0xa040c4, &(0x7f00000003c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)="ade59c35b90d2a59e0626a0bf8b80ab2a893bd2fe60ea79f9d6f0341a05c75f664689d5a126f2d4ebc1dead0d163a808d1436dd92b10c40adc677957bae4cbc19cb8e592fec83630787bfa6be5ef1c168574254d13a431f2dcd62b5b2b1f1d9daf8974e218092b131706fa1698f40668060000000000002272ca814c0000000000000000", 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1709000000000000000001000000050007000000000008000900fc00000008000a0000000000060002000105000000001f000000000000000000000000000000000014002000fe8000000000000000000000000000bb"], 0x5c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r7, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x8010) r8 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0xc0, 0x700, 0x5, 0x4, {{0x28, 0x4, 0x1, 0x8, 0xa0, 0x68, 0x0, 0x2, 0x4, 0x0, @local, @multicast1, {[@timestamp_addr={0x44, 0x24, 0xda, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0xa}, 0x6}, {@rand_addr=0x64010101, 0x10}, {@local, 0x34c}, {@multicast2, 0xb}]}, @rr={0x7, 0x1f, 0x4, [@multicast1, @rand_addr=0x64010101, @broadcast, @broadcast, @rand_addr=0x64010101, @private=0xa010100, @multicast2]}, @ssrr={0x89, 0x13, 0x49, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x34, 0x25, 0x3, 0x6, [{@rand_addr=0x64010100, 0x2}, {@broadcast, 0x6}, {@multicast2, 0x3}, {@remote, 0x2}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x80}]}]}}}}}) 1m38.782814779s ago: executing program 5 (id=1943): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) 1m38.531452706s ago: executing program 0 (id=1944): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000000709007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='rss_stat\x00', r0, 0x0, 0x2000000000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000006b119a00000000008510000002000000850000000800"/48], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 1m38.069599267s ago: executing program 6 (id=1945): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000408117980840000102030109022400010102a002090400"], 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x37, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xf3, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000900)={0x800, 0x8, 0x9, 0x7, @vifc_lcl_ifindex=r3, @broadcast}, 0x10) (async) sendmsg$kcm(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='$', 0x1}, {&(0x7f0000001340)="ef", 0x1}], 0x2}, 0x20000005) (async) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0xffffffdf, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x10f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x85, 0x30, 0x10, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x8000, 0x3, 0x1, {0x22, 0x953}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8b, 0x2, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x3, 0xc7, 0x6}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x8, 0x6, 0x2, 0xbf, 0x4}, 0x4d, &(0x7f0000000200)={0x5, 0xf, 0x4d, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x81, 0x8, 0x8000}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x8, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "f98ba1a3f33c5814a0ce997ba063c831"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "3cd4099c611afdd53712f81aefa48d47"}, @ssp_cap={0xc, 0x10, 0xa, 0xb, 0x0, 0x0, 0xf00, 0x1000}]}, 0x6, [{0xad, &(0x7f0000000280)=@string={0xad, 0x3, "e8bdd707f653e85258ad6acf11b58cc8b17be111c7b7afa50faa3c48ad93e8d14968c68e420fb78d751c9c2e9231d7197c8011567278659d0bd5263c678fc8ae138ce6aa295bbf37dc706ecaaa7aa90315aa88274c2e1221ef25d525ae717d569051d96d644962a49034051c4543f66ffc12922de4a7fe71ccdea3d7f365c3654a4628f0fa65ea2667c9594eb9af551dc9b19ddfde4aa3f4bef694f88bb0e79d0f14a1e3d8ceb6f62fd51b"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44a}}, {0xa6, &(0x7f0000000340)=@string={0xa6, 0x3, "daeabd73db4a0fcb4c585bb57962250c8b9c9fbb0f73840e638e16ccdca81e8bf3b367c902252e7606e448a98a836d238994f2f23e792c38d9144d616de241daece9e995292a95b093e9d81cc958a09411623c990c81febece51fabc13b8295303b46d18093cfd705422a2fca7ac5b7e777f47a6a6bccb76d9d4f14f681ac3a947c9ee15edae9d5b01a4c96e9d55db9901d2c962ccce882e2c8d4331921c19c7a0485d67"}}, {0xba, &(0x7f0000000400)=@string={0xba, 0x3, "60d2f3f49a9ced9e85b20a05098c25f22a7b9ce88ad546e8b3fc4bcbac4a1c01602cc8eca83e3b19f81992388d47cbe0f6a493edd11e4a0913dadec639cda85103834183ea1241abb07b937c4ffac3d4d6fde19ad0f123ae0d51db626656a0784be262aa6b1ba01e4d19d14649e0671ee1933df06b89d6e5cceb52681676994c741fcedd7f33f0532ae72a49812d8e7561788e3784a41463ddc35a30c19ffde8b1c13d1ec9c5285ea518725ef1b26baa1f8b7c1006b0b435"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2401}}]}) (async) close_range(r0, r4, 0x2) (async) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f00000005c0)=0x9) 1m37.915240616s ago: executing program 0 (id=1947): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000001300)={'nr0\x00'}) (fail_nth: 5) 1m37.912283237s ago: executing program 3 (id=1948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x5) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x7) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000280)={{&(0x7f00007bb000/0x2000)=nil, 0x2000}, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r1 = socket(0x26, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x5, 0x3, 0x0, 0x2}, 0x10) write(r1, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@nat={'nat\x00', 0x1b, 0x5, 0x3a0, 0xa8, 0x150, 0xffffffff, 0x260, 0x150, 0x308, 0x308, 0xffffffff, 0x308, 0x308, 0x5, &(0x7f0000000300), {[{{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @multicast1, @empty, @gre_key=0xff, @icmp_id=0x68}}}}, {{@ip={@loopback, @remote, 0xff000000, 0xffffff00, 'bond_slave_1\x00', 'caif0\x00', {}, {0xff}, 0x6, 0x1}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @private=0xa010101, @broadcast, @icmp_id=0x64, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x0, 0x2, 0x5, 0x6, 0x1], 0x2, 0x6}}}, @common=@icmp={{0x28}, {0xe, "cabd"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @local, @dev={0xac, 0x14, 0x14, 0x2c}, @gre_key=0xc, @gre_key=0x83}}}}, {{@ip={@rand_addr=0x64010102, @local, 0xff000000, 0xff000000, 'netdevsim0\x00', 'macvtap0\x00', {}, {}, 0xe9, 0x1, 0x40}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @empty, @broadcast, @icmp_id=0x68, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x8001) 1m37.910630486s ago: executing program 5 (id=1949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getrlimit(0xd, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)={[{0x2b, 'cpuacct'}, {0x4c, 'hugetlb'}]}, 0x12) r5 = accept4$phonet_pipe(r3, &(0x7f0000001600), &(0x7f0000001640)=0x10, 0x80000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001680)={{0x1, 0x1, 0x18, r2, {0xee00, 0xee01}}, './file0\x00'}) r7 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) statx(0xffffffffffffff9c, &(0x7f0000001780)='./file0\x00', 0x1000, 0x40, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$inet6(0xa, 0x2, 0x7fff) sendmmsg$unix(r2, &(0x7f0000004540)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000040)="9f7e43267535c894", 0x8}, {&(0x7f0000000280)}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000004640)="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", 0x14b}, {&(0x7f0000001400)="da3b6a96d708a3c39c2bbb81f7846f95c6ae6d064f4ca78c7ee765a2dd33443254c1f09edfbb248bbe85a90140eb29172b01ba0058a67908176a64b39917e643592dbb448d6c911520989e5788cfb899a23882bd622a06cd224701f2b265a0d2fab7a8b539bf91f06b21a3ff193b0de90a98bc9a0640a304fe42fa5562c3273eebbc862f3910c85b", 0x88}, {&(0x7f00000014c0)="7c5a8a9c1751d037ec193b1c1a000a9f62a8a30b47e3b30c2368015e28dc38668a25bdba99ba07ca91b9f2a664cb91088b3fe7617c55d59f7124c6ab4a1c6b72380197244974b9f4f057a5698cd68b56425204e98ecc1b1ac29f641c5fb904484cd7031760f5a33f423073534394891eaa46420c918d4a200c83036a0eccd73e1b5f6b", 0x83}], 0x6, &(0x7f00000018c0)=[@rights={{0x38, 0x1, 0x1, [r2, r4, r3, r5, r2, r2, r2, r2, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, r6, r7}}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r2]}}, @rights={{0x18, 0x1, 0x1, [r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, r8, r9}}}], 0xc0, 0x15}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001980)="3246ff9f84f8873f340425ff049616514b40d11cfbfce232a16cb7a93d254fde2fbff65a1a441244b445382492b7daf17f531d4ffea27a85f98a7ae702721b8da201ef9acfc2eb72de5de15dd1dbf0b966efc26c35f325dec3cba6786048f76a194b4497f46050ff5e6419eca80cafbfb5e50998f2cebe20b24a69ad1352ed73587674176a79397dd0ec1c97f8cd37485b8bd2ed8cce712b0479694f90c1cd6e1e53fb62065aabd28a001e148f6d034a78346f809ea85a494c9f04f7f8dfd14607d3a8648c", 0xc5}, {&(0x7f0000001a80)="a58150a134254926c16220825212f88dc7129e3d35ac2249702e4bec8e2a90c085204f52f4f34df7b5d83cc446da85208dd9dbb83f3b283cb3f095b5942da7df0427b683b8478093c93089f9f4e6bbae7d20c1ac2f3da7dfac2fec549855867e", 0x60}, {&(0x7f0000001b00)="ee9556606cf82fca95bcc2e81e8b98f94548fbb8381a5c8b83da2360351fb4924579bc65c1f26e93f8250eaa4def343281cef5a19c03825b34a5368b49", 0x3d}, {&(0x7f0000001b40)="9a68b7ee61f7f0d69bd94764398e2a7f34af4771cc1f6ee952e5cad1d580a7eea9ef44c540b7ecff92c2b0bc450e5e373da47bd1a25628631109ec39f45e7bb6ba637b97b93ff48ec63f54eb4a2759f4142b3f6a5c64d7d0922fcab5831ad42e3969549a14da8ba97119f7f860b4271b8869acdd0268f0f74e25438d98bbac0b87030007", 0x84}, {&(0x7f0000001c00)="b4ae13f01fca2f2ca96d0998e0027fd0d408eb4bf4d063", 0x17}, {&(0x7f0000001c40)="ce61b63d5f6e7b2fabcbbbfe2deb5c83266500cb4ae8cf01da9b6a741fff10df61e798b692fa658e15a0410495192acf11863e1661bb84f2b53b7dc6439b22faaef3be3dac2bf1a0f0ac3e7d52e5d2d38568829708f10d17f0ac4dde5114343618e547eddcd49f563187692db6dee1c1bfb8961d20ed4af0e0ec8b187fc74f11eb8939f11f3dbee7f55f4fca5ffb8ff11c0ad16842a787cf55ad239ba3f0bb081895343791199598052ecafcbf04f416025be6b005848b83268f5449ae40459c21daff1f416e70c361edea67ce8482428b56c8f28a4ea314eb5274", 0xdb}, {&(0x7f0000001d40)="bf1356a0f5398d3bde831c976f921125fc9c49d06f252c167aba09bec2a9cb4d4039db0de25936ef5172b14594416f688a2bbba0a8bd1007d207098d2b617f7d8c91a86f8bc22d6b6a2113d3283286bd3d468c843009e5dee7f3b9a660c624e56c1ec35e7ef4ef9d7fcbcd3a5b0a9f1e536136d72f722e42e085ce988b42a509698b1a06fc4cc891eb01feac5bcbff13c06373bfc4f31cc82937abb805b220f3cd761820248e4dea8207b3c80b17b1790c980da4c1534daac1980b55946e7ff24008ad82ccc4d6d69faddd00fa12d0d572", 0xd1}, {&(0x7f0000001e40)="3138baed4d3acf9078f234439f5ccef0bcdda1dc2065ca8ac9e3742d74f4e492a71f8e2bc0558d32c26b0fbd2d718651977fdf8ae165c4a8988328840e648e27424c61f14de770568bcd0ec8df6018e08aaf19badcba0ff509ea02bf626b78456a47310682803d66c8ae169ea1f48056b48249ba79ecfe01eee0899a05f63d8671f3b324b99065a16be4df92454046935d4a21998dfae4d87090f2ce5376b7a361fdc5c3a66b16c20bbf9dd2fa22c3ec158fe0a9728c518996b8", 0xba}], 0x8, &(0x7f0000001f80)=[@cred={{0x1c, 0x1, 0x2, {r0, r8, r9}}}], 0x20, 0x4000004}}, {{&(0x7f0000001fc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003340)=[{&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000003040)="90b4fa0597de00de8733c5d4f8854044d1568081a00830fb4c6a25d69333663ccaa7d4b8c99afd6a601a09ee8296858c91eb8e61daa29633c936d86065266d840abbee1038db95507827", 0x4a}, {&(0x7f00000030c0)="68bef1a6b3c23436a12dbaa4eb6959707de5e3b30d8c638565510d06216591fc0fdc360b8b2d589fc7bbb9ecf06f9b1ebd11631d9440bdd4eb59bc2d9e2dd782f93f075be5769068da9fd27e67248d8e0b5186683bbb31c570e460e85593327dbb13756ea457c0", 0x67}, {&(0x7f0000003140)="e439e7b15cefd42d0ab9527d53c82bb2786f16bdee744eba23e842ed92e02411e3b42d44bd247d2c2b51c8f6cc06ec3e0968e5428d617038699a7535d3ab914e3e0b8be62c717faabd175ff8df8f27fe772fc3d2ee5b84ba48a9027a332bcf7103985110765c427412eba7564e705a6ebbcb6df2455cc04744ba63600911f080dd70127130c1d8cc9a93d3a98d40860102a5a2f06144de7e416ed62aac12c8791a0cac", 0xa3}, {&(0x7f0000003200)="0c8eb61631c756fbce1860c0725a7c0538c8cddc8f34440fe66284e58bfe306338c92c179a25ba7d9ea2bef00331c973bc53a481c7ee4c0db39c8ec860ab5cbf777eefb85ac919829687c0e8478ae96640abf7fd7122cb5ed4bd7f72682700ab828794968b1568eb73c6d90f62276cf3b617a13dc2c03d9fc0f8f0ab3fd25f870dfc966e25dd96d0a9cedec636f93f000d2b726f2bb6f097cfeaa0b168dd600fdca4afe0fe2afd9d7d660702791978f3eb7cdbc84ef5b12117c84852a38a1a07be4a4810bc749dcfaaed9324a55758348c74558e3c13610ce53f1c5f9ee9f1d074c0e609488ba62b486ca812d7d7d622bcc63a881374f5eb", 0xf8}, {&(0x7f0000003300)="d8627c75286e280ef568dbc28b12a6004dd2802ec53950600c97b3675e2bca64cbe648eeb06c749375b048fede0d50c39eee79", 0x33}], 0x6, 0x0, 0x0, 0x20000000}}, {{&(0x7f00000033c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000044c0)=[{&(0x7f0000003440)="6fd82728a20314b56b3e12c47d6924a27a8effbbaf512bac52a0fb664b245f0589d5a731afe2c4a1d7fa240f87b8931fc4e3b430a62cb3c97efe4629041935357e7f9429f97c268fd8175558c615577be4b64570707b4c46ebc3874a529494", 0x5f}, {&(0x7f00000034c0)="7b617b2fd3f6459a5b1b2252135437bf01c841619feeb4d5084c21f5352e46a2bedcd390375e1092ff68c2e1328afe4f54c2e18da1c169637bd660b7c61d84081a4e4befa701a22b4a6209dd5b5c3f1c363779867734f8034855cd7add9980f3041dea554bf7aa51d7fae2b6d211709c0791fc153f525e49dd713a4c3b0763e523c2cce796d2bd2ba4aef7b02ff7d5ba5aef5eeac1d6101f3a599383582dc0333d855e15770ee629a8746d22af348a1ceaefa1bd10c1ecab371e5234805669d189ced40f129e07cfa6332f1900ee39cde58d9434c74f9f085e5cd9b3d02e447e6053d2651db6fa4771027da99afc23cb8c47c68745873b35d6cdd7b5cdb144fe38dcf7306494d1d429c8f5499106d0f6bb4f1efba23c1e4546dea3b6e89e699fab758e1a70021620c9be64c333f8ee83417ed5c43b773070190d6458505767941ffe90c054d7baa8648901d327f1d4759fe939eba10fdf023b2706b8bd5a873dbab39d8089f04d70f734d2a8432b8f32141be532a7ef81c45996442bc78e850d6cb17e903ae5a9b77d69e690da771bc4f20901e94734bcaffc186fdeb977827be5a25b07fd98ade741f61fcd0c6ca2b61f1ba192edd98b5c52169d7b1717104da8fc95a20be2411b70706eb3401709d130b59838daf8e6f57f12a7c28eb03738abf2de57d3b5c820ce472133cb762a44db73243f5be51a90365243db090ad54af32f4bdb3db1c54df95436fc58484044bae72d23dcb735cc3b75ec544e1adb77276b31e39c7a364255ce9637d6ad811dcf52a241e4ee005d4aced799f8b27883ad3bfbfb54148f85c9e022bbd4340ead058f79dd063f9b42f3b61d9581514e4fd61b190ce2e6aa3b1e5d79190df5198805fb153d6f3ec655bd192a08d689cd4d0ee8ab1d91b881812d1b7877b5c6dddad04d3f2052a349258dde21acae5f8036133df8a8ebe960071105f6ca3bf993b8b35f29d33bf59cf63d0f71fc678d5fa6d30a70ed89982a635635cc6f8c87b417dea512d5f4692b1e8caabcaabaa4fd2c93fd9c2e0b98248ba477c2d6b9646b91270add9f2de4d5027962cb79618caa67c93a899c4e410fc205a374f2109327bf3a94ed5b9c295cfc6b4c88b652c219ca128ef73fc1e386dbff6a8eec4388e7c105bca0f9323c82959e2e8267651a2be171a2b7bff8df35725fc77772961c7d05cb73c240828f496553a095ef6d19334689fcc0dd72d714c40be900ae9c5248099ff517bc48002cf019c11362b87695c5fe9415853f865f901422dc5d00c50d0fcbe4ade794c1289b8f9173c8ce1c5afdd8600d93f80c4cadae8eb2489e82d520204c2999b8caeb9b2e18beb425c2364d6c51dfb3c38866942a0fb7b428f6bf74c2b83c17dd0b5d83fa9b6094fe129520c95d354dbb9d20a988723a9722d669ef3594e6e362c84720a413567c4e3be051348312da38dbcb17f99830d7e50342ca826bcc7775d99d61d9a21e8c0a21e0cfbcd036f83ddd45cd6ddaffc9ce5c934a7fabc7d238a8d905eea72d1d9d7ac193b3e41374aefa5c51dcbf624dde905f075596e112a4136f6cc4a3a3807c6c677135164e00f248dd42ba899cee38ad5ded2eb7209c94a7a34f39f83e4ec877ca6f75d1d8b3377f4281bfb0f9e91039946517a0d5fa7440e3aa5eecbcd5107948ba4ac6df02fb2447f17bb14d48fdddca608c523e14d3934f4064cb24349aecd1ac3b39590b7f620509f8a832cba93e4b3c49818e4ff28ade24ae54178e3df643ce5d6ed5cdd05e8d8a9f7212165adcec656e087e87f004c2ad87a91fe8f7a20c7c2d2e3cd1ccc3cf59269bde9176e2f493b05d564dd0d4d108266a95976445aa16d4f259560fa03df397a512ab14be38bf74cfa52b6268fcd1772985ba6dcb8827471bd9d26a5c347d7cb17ee781090ce89e9183415883fcd5b4a839c3da88f72942df323054b4d5750f3895b314a42ba1062271ea2a4e44498e423feeb05178707b25f7e1801b83a3b9c8e582d7b039d02c15ca0bf0ba14e1b041175f043b1b0507ce5fced9aab24271d65e52f18e7e142d0d076292448a9a9111a1ba613023535d4c30b1ece7575b29647ac086e2f670a153f6a10cac531fcb0c0bea423f0449d05f07ced5511af3468ab218534a050eb20a556a8ff8f91c1c133be132b5d9c5c67c9c76943db2703c3af2bd6accc32cc957c7f49cb75efe71e54f0353ad3061e490111ad63769fc17dd1ebd8d23b96dce110a36616d23378ff83911bda9de021daa1c60c883128444b2c1a790d6bbbebb2eff3c9bb27dd891d32dcc22615a406cb06bbc1c239bf66ee47f1fc71c527a940e56a709f115ae182ec59fd4f573e8713d1bafc86f1cb1238e0b0e4a449bf71b42f82f8a5a20714be7e582fd9844ecb4408978054c0bf1a1128ef5ef6343719be9e104e1491676e61456dbbf59ffb32a7b0ef9aa6f8744242effd968bf1d510b7de9c4599037915367b3433850526b417a062d214e2d12cfc5f61b24d6a41be9a6597b0eb8fb78df0260c3919c0450d5920d508ed7ea75cd695b38befd15661705907009e47d163c616e8ca93c78ff6622634757a2c157a6a3b1f9429ee979e372df03a4b45b17512f6b5bb3d1f217dba4dfda95eef7c2a9a10e94edaa0f4c0a9b320d648a319a2e649bb84a9d52e9ecf8ffcb006a0ca3736f64a4af17f50a9ec2fd3b91ee2cc160037be4657233276cee65664746e5ad542adad95d0db4e8b717687e18c44194dba94879dad36be313f515638bbed79d23c9ce678b0981e37e3881e2fc0222bf99dbd6687ee68c8550cd1935b8b7be26af7bc86a7febfb05d69c663847efb81686641caf2be02f9877025f6ae0dc33f05a38ea8af372207e810c85f6e73530de53e624fa573fdcabe949743225c1fb6d4e3d5552510fb0325ddcf59f9519727b866f24bc68e15172b347b67c57613fa67ab622f46fa0ad1a525dc46ff3abc18d63b28df33846e7b9d8ea40b555bfa7a2a20447bfa6b9e0a422300f6ed38f0a13d5e4824149c76fd5c8a711c74a17fb6ed4202106850dca1c41b4ed9c835e687d89c373b751df79d99ab0dcd473faea449f7ec109071fdf01387724c7d36b7e74a58e3c97833c0fd292d37730012a4985469d50d94f959226111332b016089668705196f1c9e649ed93e9f49e0597f890a419fa9d85d1612194a7752327ce66d654741b9c5ff2d36c43f14c2ea864a1dca4927267f3c7d84bdb7031e9c5004e7ed83fbbe723385ed5be0b858b43f326d1f1e2dc135e9bb07895cb4d567b3c37e182a51814ab51c3daae6bd5a00f1c5d96a985488c7c86335cf09d0c0f0c8ef3930e2df95b45c10bef95588be5be21be905259cdb1cadc61d16031664f6d513787a402c7d85bab09b5372f819e46bd04d87d311d413e5e2e87db59181babc72d37d042adcb42fe0c313ea4fc453e44b50f203abcb5563a585c4c7ab38188ce123b730ada75dbf936bba61752b9b5cb2e2716b3222a4193891a6dc5e0dcbb33c478e9e1569a77a27f7f1f11de321a22ac0ad8d4f54508bef1e8af9125858c325959941ffd5f0fb9f8ce0ff90dbc6a0d7bbb012e4e79aa14db8b83ab6f64f3e9f87c85ec0b4c3b5faaec41f0d3bca79c9e7248a6a747f0a51bdd0d40ed818d65b3c0acc84b5bfaeb200145af01050e3a62e75d4a1098ffa657997714a41d8fc832e4fac635746dac1fab5e4f07edec407f4dcbf9b8edcd66408dfb1b4f731aef001277765425f1a6884b1ad5648c1069bf86c4fa5518e80bde67922ccf16b7b8388a47a1ee86228fd1e1cf91d56f7ceb6ea7eef2371c6bef185e8f0214eff000d119c1ae2ef5fb3ef431478d2f09403070b43fbaca812ebb9e58ecb6862548c0df040c98f46bf2b16952c27f8c2bf3b6a199980be7dba841bec0340cad6291839f35cd4b8c462481988c988c65987f7676f8d75629057eefba314534c0e128e88120493ec6d1b6b9e66e5efbdb718f3d6f3e19d6c65be2ce86bbff74a0e9c53e050fc3de97702d3a92afc602def31986f657d9a765d12c5b0cb5a8bbd228d37411b75c78e7708bd3139a8bc3434c8130a4d7766d2e293b46f7fa1b9038cced3bbf588d86e0dc252c3bfe9980a6936641c0f2f4548ab2c0a21e1d16682be0c8484b412cdd0f006aace68cd268ccdf33144fe210902e6a0c56ebc17edca1e2fe6f7e7dd5e74e7cdd77deaeb71ae7d311af9124728f60f8d15d0f5463aedc9d5b78b715b70793252c3871d5886d54cce24d985d352ada32ca203844abda9a38f321ee71db46d62ad9b473fd643052eca64792c0708a01e2817ddee5064c0dee6791b2e903b2cb05ffb5aa614897ed76ad561098d46c6808653fd454333fd897a453b5592070703dfe614da5ccdea7ba0b7149dee4b824a02f1e234240ec876a2673df8b77d607758a25291cafb6773d354f2f13e5aaf29185665e9745fb28363679ad2ac482b96a88e63239eaee4ce0698cad07fe34ced1814109493f860234f81a026dba40af849de1a364cc186d391a2b2fa98b3c750ea7c1465ea077855ba766f94aa946049b162b024a1086c98e237ebc4a768ed51ce31e05d9c9078e02c211c1099ac7b4529f59a82a2ac73aed071afe7c0f0c1f7c300a9f040257840c851bd8e0fe23b0fcc19c0107d6814a172362c8dc641362421af21302ff791f42ed7860536f9e80fd2076ae257336564e1fd846f2a4cd34fac09d0d9617cfbc36378c5a1d31c8d85ab9ce9196d4bf6acc4e46ed4e64084b197fbc2181b27a40383daba6162a70ff4822c8abbbcfa68507e19c6bb7e1a1dc856445566f5070979f26b7707951ac7ca84b6bd4bd93216db773a5b8c7008ade9c380ea132ad8ad8111e6f9c70e696a4fb0c14f0d04b1d7a1cbaef71db142012dcdfaa964b1f9f4041ae2ce28b2172ad00e2bb5bd221e4c3078c4c3e6fb8d76f40e10e261dda4953b7cae2d749d1576bfb491e1c9e5a709af5448203b65d247974f4be77bf9255a80335525c2a5a1e0d8a291797726cce36b821d5fee8712c8dbd53ad5d80e378644987a2e09ec4b39040b9f8a0cb1de74c31f17e9cd3e2cf96515a30cb12d450d4b1c6d6edfdf938f26133327395046c9c9f83d0ea90470bfba27af1123d706ff75eed3cb7c9943b3325cef2ba86b10466e77fd06b17a12b5280c600adb108dd94ec9993866e6aada6db3b0fa79f063ee745f6375044e5b9b4e1e81fc007fc6bb8110b29fed83771c8dcfd85b46e105545e483674e80290a36d41a2f5730bcd388a08f9a7ae8b21b959c0109c7450297dd7690dd3fc835140432674052a0cd4a1afa80397602f27241f8261447100c2729bd4378e9d57e9f28ed3c52685b255ca4930f46f0bef60da91756972244d7008fc22f64fbe767cf2db44b6f7538eaf12ade1f1a1fa72f75c8a3e955f76e07ac0687c844ed572d99cf735ebed26ad3abea0e43b388379a972135ab035af5d90e3ddbccc453fd0a19b4236cd23675ed897821ba5bb0e8b3f808bd3e7cf9e8bebb861bc0b6191cdcf67e4d18e1f5ba00d1475360e023dbb5212873f6752620e85e2bb4c4e0852a3b9ea7677948a6be6fc3741ed25054810dbd146eaf79b694c767370657f87763e1838a47991f0766e9518d838f2a7e78f12853589cc5eb26d742db693cfb525b898ea1fae2587817b69a37042e00579074b2bc4f9e3bfde5c23b018e9f3901768dd00e7a07c846f59be538472cdfe9cf6b239b35012c23b3799f785f82802104de08e988c2ece342e418413dee11f01d5a14d00f70a64197", 0x1000}], 0x2, &(0x7f0000004500)=[@rights={{0x24, 0x1, 0x1, [r10, r3, r3, r5, r3]}}], 0x28, 0x44001}}], 0x4, 0x8004) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto(r5, &(0x7f00000047c0)="86da5c2b9d021d61c03a300da68bb2a399ed77d6f641ccb79f8e806b5f512f1ff25582eda55bb097e325af486743cabbb17e90ff52fa5f98431e25f30a628981a4052f02f3bb729d462b072220a9d86558e62df3513b2dfb947b50803522626a7d034c59f262c16e87430aa1e87f11c5bdd272be4ed8efaee4734ea8094ae3c647b2f117ec4d583a9fa404efbc64312844873222e02ff80c88fe8fae502101de83309786e368dd8eef4f91594cb42e183352c8486a6b4d593c948f4658dd8d252dbd3eefdf134d8796ae2433c25fec39136bdf69a61b0cb77210", 0xda, 0x800, &(0x7f0000001340)=@phonet={0x23, 0x0, 0x1, 0x3}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0xea, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x8000) 1m37.244323147s ago: executing program 0 (id=1950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mprotect(&(0x7f0000513000/0x2000)=nil, 0x2000, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d00000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r9}, 0x18) r10 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r10, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0xfff5, 0x0, 0x0}], 0x2}) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m35.878897165s ago: executing program 5 (id=1952): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x3) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) close(r4) 1m34.953412998s ago: executing program 0 (id=1953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x0, &(0x7f0000000180)}) fstatfs(0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0xa6) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000002700)=ANY=[@ANYRES64=r2], 0x1118) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000100000908000240000000060900010073797a300000000028000000000a030000000000000000000100000a0900010073797a3000000000080002"], 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') openat$autofs(0xffffffffffffff9c, 0x0, 0x10000, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000340)={0x2, @sliced={0xa, [0x9, 0x8001, 0x400, 0x6, 0xa63, 0x1, 0x1, 0x8, 0xf42, 0x886d, 0x1ff, 0x7, 0x5, 0x6, 0x7, 0x3a, 0xcc, 0xffff, 0x4, 0xff, 0x0, 0x7, 0x0, 0x6, 0x3, 0x8000, 0x7, 0xe, 0x5, 0x8, 0xa6, 0xe0c, 0x8, 0x9, 0x310, 0x0, 0x1, 0x401, 0x7, 0x6, 0x6, 0x7fff, 0x3, 0xfffa, 0x7, 0x1660, 0x0, 0x2], 0x8}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004340)=""/102376, 0x18fe8) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)}], 0x1}, 0xff0f000000008080) getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtaction={0x1a0, 0x30, 0x53b, 0x0, 0x25dfdbfe, {0x9}, [{0x18c, 0x1, [@m_ife={0x188, 0x15, 0x0, 0x0, {{0x7}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xc781}]}, @TCA_IFE_SMAC={0xa, 0x4, @random="aab293796516"}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x1000, 0x4, 0x7, 0x3}}}, @TCA_IFE_DMAC={0xa, 0x3, @random="bbe398e60ffc"}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x10000, 0x9, 0x7, 0x4bd9, 0x7}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x7, 0xffffffffffffffff, 0x4, 0x6}, 0x1}}]}, {0xaf, 0x6, "a8a7ebc2671b1f5ba02100e94360dc7a00a4557d22ad85cc25a9dfacf628c5e5fceb23b30ddd7de3d566eda8f67cfaf8829c09b79ba2051293cd644c4078383888b83d08b10aae84f6cff5488355789cdf23ad45c86c18cfb845b3e58e6f1010b8301b28eacc660c917d55acc23b062a20632f2d4f847c369b0ff73847bb147d106a6c8544bebddcde8c7cef7b7eb7d370aa2f1ec6bf3bd2d4cce6dfc902c624e8b4beb14600e41201cea1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1a0}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c"], 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000060a010400000000000000000a0000030900010035f03af23ccfff2a18000480140001800a0001006c696d6974000000040002800900020073797a3200000000050007402e0000001400000011a1010000000000000000000100000ada1dc83debf2672b96859901da2d149b62282935822f54802d7893c72182efbcda9d33209255ff33b0866ac7344bdecf69b5a3"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) read$FUSE(r3, &(0x7f00000006c0)={0x2020}, 0x2020) 1m34.289660303s ago: executing program 6 (id=1955): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x234) 1m34.288579288s ago: executing program 5 (id=1956): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000000440)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x8be6, @dev={0xfe, 0x80, '\x00', 0xc}}, 0x1c) sendto$inet6(r1, &(0x7f0000000400)="17", 0x1, 0x40000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x42, 0xf9, 0x49, 0x1000}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r9 = accept4(r8, 0x0, 0x0, 0x80800) sendmmsg$alg(r9, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 1m34.273762197s ago: executing program 3 (id=1957): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x8, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000140)={0x1, 0x1, 0x10, 0x9, &(0x7f0000000000)=[{}]}) syz_emit_ethernet(0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', '', [{0x20, '/dev/kvm\x00'}, {}, {0x20, '/dev/kvm\x00'}]}, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r2, 0x0) socket$kcm(0x2, 0xa, 0x73) socket$kcm(0x2, 0xe6e5fee1b942d400, 0x2) close(0x3) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r5 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x0, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r5, 0x40fa, 0xd5d6, 0x2a, 0x0, 0x0) read$FUSE(r4, &(0x7f0000004ec0)={0x2020}, 0x2020) 1m34.102882835s ago: executing program 0 (id=1958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000001500009e000040"]) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "fe62f1", 0x10, 0x11, 0x0, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, {[], {0x4e23, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x9, 0x100, @val=0x80}}}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6, 0x0, 0x7}, 0x18) socket(0x28, 0x803, 0x0) syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0) mkdir(0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000040)="abd9", 0x2}], 0x2) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfs\x00', 0x8011, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) 1m34.036422918s ago: executing program 6 (id=1959): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000000709007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='rss_stat\x00', r0, 0x0, 0x2000000000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000006b119a00000000008510000002000000850000000800"/48], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 1m33.768142148s ago: executing program 6 (id=1960): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x14, 0x37, 0x1, 0x7fffc, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) prlimit64(0x0, 0xe, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffffffd) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x7, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001104000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x2004, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0xf, &(0x7f0000000000)={0x4, 0x10}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xff}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x1, 0x0, 0x0, 0x7, 0x6, 0x0, 0x10000}}, 0xe8) 1m33.230479976s ago: executing program 5 (id=1962): creat(&(0x7f0000000180)='./file1\x00', 0x88) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000080)='securityfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unlink(&(0x7f0000000180)='./file1\x00') mount(&(0x7f0000000000)=@nullb, &(0x7f0000000300)='./cgroup\x00', &(0x7f0000000080)='hfsplus\x00', 0x1010480, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x1000, 0x120) write$binfmt_elf64(r1, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x8c, 0x6, 0x5, 0x1, 0x35, 0x3, 0x6, 0x4, 0xa1, 0x40, 0x1b9, 0x8, 0x8, 0x38, 0x4, 0x9, 0x9, 0x5}, [{0x6474e551, 0x8, 0x3ff, 0x3, 0x8, 0xfffffffffffffffb, 0x2, 0xfffffffffffffffd}, {0x1, 0x6, 0x6, 0x81, 0x5, 0x6, 0x8, 0x8}, {0x70000000, 0xe, 0x9, 0x9, 0x102, 0x80, 0x7}, {0x1, 0x9, 0x2, 0x16, 0xee0, 0x7ff, 0x10000, 0x4}], "922835431b1327898be3efd92ccf41d9b2faa83fdc543959a79e23c024a50a110d318d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa43) 1m33.169084228s ago: executing program 0 (id=1963): mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8001}) r0 = add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x6, r0, 0xffffffffffffffff, 0xfffffffdfffffffc) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x500000000000000, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x14c}}, 0x4810) setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) mknod$loop(0x0, 0xfff, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) keyctl$read(0xb, 0x0, 0x0, 0x0) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000040)={r6, r6, r6}, &(0x7f0000001cc0)=""/194, 0xc2, &(0x7f00000000c0)={&(0x7f0000000000)={'crct10dif-generic\x00'}, 0x0, 0x58}) 1m33.038589986s ago: executing program 3 (id=1964): sendmsg$key(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xfffffffe, @local, 0x7f}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}]}, 0xa0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000001080)=0x3ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) inotify_init() r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001a280)=""/102384, 0xfffffe53) sched_setscheduler(0x0, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x0, @remote}]}) timer_settime(0x0, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000001100)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800403a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0100907800000000603571a60000000000000000000000000000ffffac1414bbfe88000000000000000000000000000106000000000000008524c8355d1523d65cc972e3a232ab964b48c4394fe96bd2900bb9701364c8cb611e2c97bc41712d0b011bbbbc1df1508ad8d53f3d251763ccc20879"], 0x0) r2 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r3 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f00000003c0)={0x1, 0x0, 0x101, 0x6, {0x9, 0x3, 0xf}}) landlock_restrict_self(r3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000300000003"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="0d0000007f000000040000000809000000000000", @ANYRES64=r4], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000007f2ff700a6dc9f6", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0xa400, 0x0) fallocate(r6, 0x41, 0x0, 0x4) socket$unix(0x1, 0x2, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) 1m9.481982871s ago: executing program 34 (id=1963): mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8001}) r0 = add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x6, r0, 0xffffffffffffffff, 0xfffffffdfffffffc) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x500000000000000, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x14c}}, 0x4810) setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) mknod$loop(0x0, 0xfff, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) keyctl$read(0xb, 0x0, 0x0, 0x0) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000040)={r6, r6, r6}, &(0x7f0000001cc0)=""/194, 0xc2, &(0x7f00000000c0)={&(0x7f0000000000)={'crct10dif-generic\x00'}, 0x0, 0x58}) 1m9.378461594s ago: executing program 35 (id=1960): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x14, 0x37, 0x1, 0x7fffc, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) prlimit64(0x0, 0xe, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffffffd) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x7, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001104000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x2004, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0xf, &(0x7f0000000000)={0x4, 0x10}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xff}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x1, 0x0, 0x0, 0x7, 0x6, 0x0, 0x10000}}, 0xe8) 1m9.303008026s ago: executing program 36 (id=1964): sendmsg$key(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xfffffffe, @local, 0x7f}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}]}, 0xa0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000001080)=0x3ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) inotify_init() r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001a280)=""/102384, 0xfffffe53) sched_setscheduler(0x0, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x0, @remote}]}) timer_settime(0x0, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000001100)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800403a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0100907800000000603571a60000000000000000000000000000ffffac1414bbfe88000000000000000000000000000106000000000000008524c8355d1523d65cc972e3a232ab964b48c4394fe96bd2900bb9701364c8cb611e2c97bc41712d0b011bbbbc1df1508ad8d53f3d251763ccc20879"], 0x0) r2 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r3 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f00000003c0)={0x1, 0x0, 0x101, 0x6, {0x9, 0x3, 0xf}}) landlock_restrict_self(r3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000300000003"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="0d0000007f000000040000000809000000000000", @ANYRES64=r4], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000007f2ff700a6dc9f6", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0xa400, 0x0) fallocate(r6, 0x41, 0x0, 0x4) socket$unix(0x1, 0x2, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) 1m8.982589279s ago: executing program 37 (id=1962): creat(&(0x7f0000000180)='./file1\x00', 0x88) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000080)='securityfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unlink(&(0x7f0000000180)='./file1\x00') mount(&(0x7f0000000000)=@nullb, &(0x7f0000000300)='./cgroup\x00', &(0x7f0000000080)='hfsplus\x00', 0x1010480, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x1000, 0x120) write$binfmt_elf64(r1, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x8c, 0x6, 0x5, 0x1, 0x35, 0x3, 0x6, 0x4, 0xa1, 0x40, 0x1b9, 0x8, 0x8, 0x38, 0x4, 0x9, 0x9, 0x5}, [{0x6474e551, 0x8, 0x3ff, 0x3, 0x8, 0xfffffffffffffffb, 0x2, 0xfffffffffffffffd}, {0x1, 0x6, 0x6, 0x81, 0x5, 0x6, 0x8, 0x8}, {0x70000000, 0xe, 0x9, 0x9, 0x102, 0x80, 0x7}, {0x1, 0x9, 0x2, 0x16, 0xee0, 0x7ff, 0x10000, 0x4}], "922835431b1327898be3efd92ccf41d9b2faa83fdc543959a79e23c024a50a110d318d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa43) 16.958478905s ago: executing program 4 (id=2071): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001d40)='/proc/sysvipc/sem\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001fc0)=[{&(0x7f0000000080)=""/4079, 0xfef}], 0x1, 0x2b, 0xfffffff5) 16.908263768s ago: executing program 9 (id=2073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x0, &(0x7f0000000180)}) fstatfs(0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0xa6) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000002700)=ANY=[@ANYRES64=r2], 0x1118) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000100000908000240000000060900010073797a300000000028000000000a030000000000000000000100000a0900010073797a3000000000080002"], 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') openat$autofs(0xffffffffffffff9c, 0x0, 0x10000, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000340)={0x2, @sliced={0xa, [0x9, 0x8001, 0x400, 0x6, 0xa63, 0x1, 0x1, 0x8, 0xf42, 0x886d, 0x1ff, 0x7, 0x5, 0x6, 0x7, 0x3a, 0xcc, 0xffff, 0x4, 0xff, 0x0, 0x7, 0x0, 0x6, 0x3, 0x8000, 0x7, 0xe, 0x5, 0x8, 0xa6, 0xe0c, 0x8, 0x9, 0x310, 0x0, 0x1, 0x401, 0x7, 0x6, 0x6, 0x7fff, 0x3, 0xfffa, 0x7, 0x1660, 0x0, 0x2], 0x8}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004340)=""/102376, 0x18fe8) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="89000000120081ae08060cdc030000017f03e3f70000000067e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df", 0x67}], 0x1}, 0xff0f000000008080) getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtaction={0x1a0, 0x30, 0x53b, 0x0, 0x25dfdbfe, {0x9}, [{0x18c, 0x1, [@m_ife={0x188, 0x15, 0x0, 0x0, {{0x7}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xc781}]}, @TCA_IFE_SMAC={0xa, 0x4, @random="aab293796516"}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x1000, 0x4, 0x7, 0x3}}}, @TCA_IFE_DMAC={0xa, 0x3, @random="bbe398e60ffc"}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x10000, 0x9, 0x7, 0x4bd9, 0x7}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x7, 0xffffffffffffffff, 0x4, 0x6}, 0x1}}]}, {0xaf, 0x6, "a8a7ebc2671b1f5ba02100e94360dc7a00a4557d22ad85cc25a9dfacf628c5e5fceb23b30ddd7de3d566eda8f67cfaf8829c09b79ba2051293cd644c4078383888b83d08b10aae84f6cff5488355789cdf23ad45c86c18cfb845b3e58e6f1010b8301b28eacc660c917d55acc23b062a20632f2d4f847c369b0ff73847bb147d106a6c8544bebddcde8c7cef7b7eb7d370aa2f1ec6bf3bd2d4cce6dfc902c624e8b4beb14600e41201cea1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1a0}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c"], 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000060a010400000000000000000a0000030900010035f03af23ccfff2a18000480140001800a0001006c696d6974000000040002800900020073797a3200000000050007402e0000001400000011a1010000000000000000000100000ada1dc83debf2672b96859901da2d149b62282935822f54802d7893c72182efbcda9d33209255ff33b0866ac7344bdecf69b5a3"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) read$FUSE(r3, &(0x7f00000006c0)={0x2020}, 0x2020) 16.558902831s ago: executing program 4 (id=2074): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004200ff9d7275c600fedbdf250500000008000200050000f3"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x101, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0xfd, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x68}, 0x1, 0x7}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) write$cgroup_devices(r5, &(0x7f0000001d00)=ANY=[@ANYRESDEC=r0], 0xa) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/consoles\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4080, 0xff0}], 0x1, 0x2b, 0x0) getdents64(r6, &(0x7f0000000140)=""/98, 0x62) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x1c, 0x1, 0x1, [r7, r7, 0xffffffffffffffff]}}], 0x20}}], 0x2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r8) 13.786352023s ago: executing program 4 (id=2078): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) unshare(0x22020400) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x0, 0x10a, 0x0, &(0x7f0000000400)="7b458d15ab2c51e3cbda7efd64439529d8c7302b044b8d974b929957032b94b5e682a71b23026832528a65edd3a617e713bf81421a86a755e115b6e443c7f0cd4a85a124e9d47ce0f6047b0a58ecaa739bbb110771f9fd12000000004670db9f6e22a9ce320d8874bbdc2638c5a5aa9a76c29f56bbe066934d4b610615d1ec0ad0ce0957ef0238e40a9bded7b95511700b0f41c79e421190fb1cd671c8cd321837418d9598da603b532e1c3618e73971baad4b16aa4756c508d780f23926230b90c556ac73fbb187d61d1d44bb0a3ea57e4d8ed0746c2e76cb7f8b5290855cfceab5809cc25b13fd061a70b63ecf73e85ab600"/266, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="99742b00000000dbdf051500000004fd0080"], 0x18}, 0x1, 0x0, 0x0, 0x895}, 0x20000000) listen(0xffffffffffffffff, 0x80000001) unshare(0x20000400) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000140)={0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e0301000000000064050000000000006916300000000000bf07000000000000260507000fff07206706000020000000470600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 13.672691244s ago: executing program 9 (id=2081): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000a0}, 0x4000004) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f00000003c0)=""/189) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$getregs(0xe, 0x0, 0x81, &(0x7f00000001c0)=""/132) ioctl$BLKFRASET(r2, 0x1264, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, &(0x7f0000000000), 0x0}, 0x20) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x200000) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000040)) 11.687968524s ago: executing program 1 (id=2084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000280)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (fail_nth: 2) 10.168220466s ago: executing program 1 (id=2085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc010000000000000008000000000000100002800500010006000000040003"], 0x58}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 9.435704421s ago: executing program 9 (id=2087): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x9b}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a47d48c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x100, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_HSR_VERSION={0x5, 0x6, 0x9}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @remote}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44804}, 0x0) 9.358545768s ago: executing program 1 (id=2088): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xff, 0x20000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x800180, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000140)={{r2, r3+10000000}, {0x0, 0x989680}}, &(0x7f0000000180)) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x11) syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x80000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000004}, 0x4040000) execveat(r4, &(0x7f0000000480)='./file0\x00', &(0x7f0000000600)={[&(0x7f00000004c0)='/dev/audio\x00', &(0x7f0000000500)='/\x00', &(0x7f0000000540)=',\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)=',$@+\'\x00']}, &(0x7f00000006c0)={[&(0x7f0000000640)='/dev/audio\x00', &(0x7f0000000680)='O&$\x00']}, 0x100) clock_gettime(0x0, &(0x7f0000000a80)={0x0, 0x0}) recvmmsg$unix(r4, &(0x7f0000000a40)=[{{&(0x7f0000000700)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000780)=""/2, 0x2}, {&(0x7f00000007c0)=""/51, 0x33}, {&(0x7f0000000800)=""/116, 0x74}, {&(0x7f0000000880)=""/224, 0xe0}], 0x4, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x1, 0x2, &(0x7f0000000ac0)={r7, r8+60000000}) r16 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b00)={r15, 0x0, 0x25, 0xe, @val=@netkit={@void, @value=r14}}, 0x1c) clock_gettime(0x0, &(0x7f0000000b80)={0x0, 0x0}) ppoll(&(0x7f0000000b40)=[{0xffffffffffffffff, 0x8258}, {r12, 0x5000}, {r13, 0x4}, {0xffffffffffffffff, 0x2c}, {r16, 0x300}, {r14, 0x232}, {r12, 0x8}], 0x7, &(0x7f0000000bc0)={r17, r18+10000000}, &(0x7f0000000c00)={[0x96]}, 0x8) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffff8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000005) ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r14, 0xc0e85667, &(0x7f0000000d40)={0x80000000, 0x100, "58396e0e41cdb886ab4a69187dd396eda62326f4a2ca5b594d2b1ecc17f49a27", 0x2, 0x3, 0x10000, 0x8, 0x1, 0x1, 0x5, 0x1534, [0x7ff, 0x0, 0xf, 0xa6c]}) r19 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000e40), 0x200000, 0x0) r20 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r19, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r20, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r21}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x20004) r22 = syz_open_dev$vcsu(&(0x7f0000001000), 0x4, 0x420000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r22, 0x40505330, &(0x7f0000001040)={{0x8, 0x2}, {0x90, 0xc}, 0x6, 0x7, 0xf6}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000010c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x4e21, 0x1, 0x4e20, 0x5, 0xa, 0x80, 0x80, 0x3a, 0x0, r10}, {0x9, 0xf81, 0x0, 0x3, 0x3, 0xe, 0xd, 0x6}, {0x1000, 0x7, 0x471c, 0x1}, 0x7327, 0x6e6bb6, 0x1, 0x0, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4d6, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x4, 0x2, 0x0, 0x6, 0x2, 0x1}}, 0xe8) sendmsg$AUDIT_USER_AVC(r12, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x38, 0x453, 0x4, 0x70bd27, 0x25dfdbff, "965fda138c481be8161a78573495547d9997714b4268db181e2f1458872a4c079a71675833", ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x88004}, 0x480c2) sched_rr_get_interval(r9, &(0x7f00000012c0)) 8.569367651s ago: executing program 9 (id=2090): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e310000000000000000000000080001"], 0xfc}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000300)=[{0x6, 0x9, 0x0, 0x9}]}) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d406383460953", @ANYRES32, @ANYRES64=r3], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socket$netlink(0x10, 0x3, 0x4) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x8, 0x0, r6, r7, 0x4000, '\x00', 0x1, 0x8, 0x100000000, 0x6, {0x6, 0x6}, {0x20000000000004}, {0x100000000, 0x9}, {0x8, 0xa04}, 0x4, 0x80000b, 0x4, 0x4}}}}) write$FUSE_INIT(r4, &(0x7f0000001200)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x0, 0x0, 0xc5ca, 0x1, 0x0, 0x0, 0x0, 0x2}}, 0x50) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6.5327724s ago: executing program 1 (id=2092): pipe2$9p(&(0x7f0000000200), 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="510003000000", 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x80, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r2, 0x4, 0x5, 0x5}, 0x50) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x9) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ptrace(0x10, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r4, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x23b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 6.375095509s ago: executing program 8 (id=2093): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fb}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socket(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000340)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6.307452076s ago: executing program 9 (id=2094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000280)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.157577338s ago: executing program 7 (id=2096): timer_create(0x2, 0x0, &(0x7f0000000280)=0x0) timer_settime(r0, 0x1, 0x0, 0x0) 3.152004556s ago: executing program 9 (id=2097): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r0 = syz_io_uring_setup(0x2f67, &(0x7f0000000240)={0x0, 0x70ef, 0x10100, 0x0, 0x299}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) preadv(0xffffffffffffffff, 0x0, 0x0, 0x78, 0xffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ioctl$PPPIOCSMRU1(r6, 0x40047452, &(0x7f00000002c0)=0x1c00000) r7 = dup3(r4, r5, 0x0) recvmmsg(r4, 0x0, 0x0, 0x32021, &(0x7f0000004cc0)={0x0, 0x3938700}) syz_clone(0x81400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f00000001c0)) r8 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, &(0x7f0000000080)={0x6, "96ab3f272339cf3935a8824943478cb18a5722d2da3a03f39b5eaee25558f362e7"}}) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0x4, 0x81, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x62}], 0x1}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 3.145973925s ago: executing program 8 (id=2098): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x234) 2.820515083s ago: executing program 8 (id=2099): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000003d0007ff0f0000000000000003"], 0x18}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000003d0007ff0f0000000000000003"], 0x18}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) 2.718451491s ago: executing program 7 (id=2100): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9, 0x50, r0, 0xf5e7b000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000240)={0x0, @aes128, 0x0, @desc1}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfff, 0x5, 0x51ca}, 0x0) unshare(0x2040400) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) (async) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0xe4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0xe4) epoll_create(0x4) (async) r4 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)) write$binfmt_script(r2, 0x0, 0x0) (async) write$binfmt_script(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$KVM_CAP_SYNC_REGS(r5, 0x4068aea3, &(0x7f0000000880)) (async) ioctl$KVM_CAP_SYNC_REGS(r5, 0x4068aea3, &(0x7f0000000880)) unlink(&(0x7f0000000080)='./file0\x00') openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x42180, 0x0) (async) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x42180, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x5, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x10000009, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x2c, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x7, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4df, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x2, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x5, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x10000009, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x2c, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x7, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4df, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x2, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(0x0, 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = timerfd_create(0x5, 0x80800) ioctl$TFD_IOC_SET_TICKS(r7, 0x40085400, &(0x7f00000001c0)=0x3) (async) ioctl$TFD_IOC_SET_TICKS(r7, 0x40085400, &(0x7f00000001c0)=0x3) 2.717758421s ago: executing program 1 (id=2101): mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) (async) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x418, 0x220, 0x110, 0x220, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @remote, @empty, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010101, @loopback, 0xf, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x34}, @rand_addr=0x64010101, 0xffffffff, 0xffffffff, 0xf, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x9, 0x6, 0x8001, 0x7, 0x6c28, 0x8f33, 'veth1_to_batadv\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x0, 0x23}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0xa010102, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000500)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r0, 0xe, 0x0, 0x6cb5, &(0x7f0000000540)=[0x0], 0x1, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0]}, 0x40) syz_open_dev$dri(&(0x7f0000000680), 0x77, 0x202000) (async) syz_open_dev$dri(&(0x7f0000000680), 0x77, 0x202000) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000700)="a9d1bf0ae1ff0ef0973ce708f4909b0ee5a556aa8d0cbd4fa56acd5edbadcdfa4a1a733ced", 0x25, 0x854, &(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e) r3 = openat$cgroup_ro(r0, &(0x7f00000007c0)='memory.events\x00', 0x0, 0x0) r4 = fcntl$getown(r1, 0x9) prlimit64(r4, 0x1, &(0x7f0000000800)={0x9, 0x80000001}, &(0x7f0000000840)) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000880)={0x6, 0x4, [0x141]}) (async) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000880)={0x6, 0x4, [0x141]}) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdirat(r0, &(0x7f0000000900)='./file0\x00', 0x80) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f0000000940)={0x3, 0x0, [{0x80000008, 0x8, 0x2, 0x9, 0xe, 0xf481}, {0x80000007, 0xfffffffa, 0x7, 0x3, 0x6, 0x6, 0x1}, {0x40000000, 0x9, 0x4, 0x60, 0x2, 0x3, 0x7}]}) (async) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f0000000940)={0x3, 0x0, [{0x80000008, 0x8, 0x2, 0x9, 0xe, 0xf481}, {0x80000007, 0xfffffffa, 0x7, 0x3, 0x6, 0x6, 0x1}, {0x40000000, 0x9, 0x4, 0x60, 0x2, 0x3, 0x7}]}) bpf$TOKEN_CREATE(0x24, &(0x7f00000009c0)={0x0, r5}, 0x8) (async) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f00000009c0)={0x0, r5}, 0x8) ioctl$KVM_CAP_HYPERV_VP_INDEX(r3, 0x4068aea3, &(0x7f0000000a00)) (async) ioctl$KVM_CAP_HYPERV_VP_INDEX(r3, 0x4068aea3, &(0x7f0000000a00)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) recvfrom$x25(r0, &(0x7f0000000a80)=""/218, 0xda, 0x40, &(0x7f0000000b80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000bc0)) r7 = openat(r2, &(0x7f0000000c00)='./file0\x00', 0x880, 0x60) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000c40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r7, 0xc01064c2, &(0x7f0000000c80)={0x0, 0x0, r8}) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000000d40)={0x4, 0x48, [0x5, 0x6, 0x9, 0x7fffffff], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x1) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x1) connect$inet(r7, &(0x7f0000000d80)={0x2, 0x4e22, @loopback}, 0x10) (async) connect$inet(r7, &(0x7f0000000d80)={0x2, 0x4e22, @loopback}, 0x10) connect$unix(r5, &(0x7f0000000dc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000e40)={0x3, 0x8000}) mknodat$loop(r8, &(0x7f0000000e80)='./file0\x00', 0x8021, 0x0) (async) mknodat$loop(r8, &(0x7f0000000e80)='./file0\x00', 0x8021, 0x0) 2.497136853s ago: executing program 7 (id=2102): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x100000000000000, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x144}}, 0x4810) 2.293847745s ago: executing program 4 (id=2103): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004200ff9d7275c600fedbdf250500000008000200050000f3"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x101, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0xb00, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x68}, 0x1, 0x7}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) write$cgroup_devices(r5, &(0x7f0000001d00)=ANY=[@ANYRESDEC=r0], 0xa) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/consoles\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4080, 0xff0}], 0x1, 0x2b, 0x0) getdents64(r6, &(0x7f0000000140)=""/98, 0x62) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x1c, 0x1, 0x1, [r7, r7, 0xffffffffffffffff]}}], 0x20}}], 0x2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r8) 2.070182322s ago: executing program 7 (id=2104): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000"], 0xfc}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000300)=[{0x6, 0x9, 0x0, 0x9}]}) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d406383460953", @ANYRES32, @ANYRES64=r3], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socket$netlink(0x10, 0x3, 0x4) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x8, 0x0, r6, r7, 0x4000, '\x00', 0x1, 0x8, 0x100000000, 0x6, {0x6, 0x6}, {0x20000000000004}, {0x100000000, 0x9}, {0x8, 0xa04}, 0x4, 0x80000b, 0x4, 0x4}}}}) write$FUSE_INIT(r4, &(0x7f0000001200)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x0, 0x0, 0xc5ca, 0x1, 0x0, 0x0, 0x0, 0x2}}, 0x50) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.80288059s ago: executing program 8 (id=2105): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0xfe07) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "6550c01b21986c5a", "9af8773dad5de4d5dcbd2727fc5b8a076499f3ffffffffffffff00", "0810186b", "fbd1e2072ea0edb6"}, 0x38) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0x5) pread64(r0, &(0x7f0000000140)=""/15, 0xf, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000001300)={'dummy0\x00', 0x1000}) 419.562342ms ago: executing program 4 (id=2106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x200000000000003c, &(0x7f0000000080)=ANY=[@ANYBLOB="18efffffffe8ffffff00eaff0000000495"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000007000046009d", @ANYBLOB="c770ee18914110e7c19b01ac039e"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x18, 0x11, 0x1, 0x270bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x8004) 178.135383ms ago: executing program 8 (id=2107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 172.849215ms ago: executing program 7 (id=2108): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_setup(0x449e, &(0x7f0000000140)={0x0, 0x8207, 0x2, 0x0, 0x251, 0x0, r1}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7fe}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00^\x00'], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x44880) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r2], 0x2c}}, 0x20044001) 106.928338ms ago: executing program 4 (id=2109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r1}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000009ec0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001440)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000014c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xffff, @empty, 0x3c17}, {0xa, 0x4e23, 0x8, @mcast2, 0x2}, r6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000180)={0xc, 0x8, 0xfa00, {&(0x7f0000000400)}}, 0x10) 87.000559ms ago: executing program 1 (id=2110): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x3) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) close(r4) 1.224325ms ago: executing program 7 (id=2111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 0s ago: executing program 8 (id=2112): pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xcc7}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000110) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x81082, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000300)={0x2}) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r8 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$yama_ptrace_scope(r8, &(0x7f0000000340)='2\x00', 0x2) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x2009, 0xffffffff9080edc4, 0xfffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000002c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x1}}, 0x30) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[], 0x24}], 0x1}, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') kernel console output (not intermixed with test programs): lid wMaxPacketSize 0 [ 550.644920][ T24] usb 7-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 550.799538][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.823469][ T24] usb 7-1: Product: syz [ 550.827925][ T24] usb 7-1: Manufacturer: syz [ 550.841898][ T24] usb 7-1: SerialNumber: syz [ 550.850710][ T24] usb 7-1: config 0 descriptor?? [ 551.088573][T10045] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 552.883230][ T9993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 552.954444][ T24] usb 7-1: USB disconnect, device number 4 [ 553.587065][T10055] loop2: detected capacity change from 0 to 7 [ 553.630523][T10055] Dev loop2: unable to read RDB block 7 [ 553.746426][T10055] loop2: unable to read partition table [ 553.784800][T10055] loop2: partition table beyond EOD, truncated [ 553.795872][T10064] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1096'. [ 554.300952][T10055] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 554.318724][T10059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.626573][T10071] netlink: zone id is out of range [ 554.632503][T10071] netlink: zone id is out of range [ 554.637703][T10071] netlink: zone id is out of range [ 554.643562][T10071] netlink: zone id is out of range [ 554.648750][T10071] netlink: zone id is out of range [ 554.654637][T10071] netlink: zone id is out of range [ 554.659825][T10071] netlink: zone id is out of range [ 554.665635][T10071] netlink: zone id is out of range [ 556.472433][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'. [ 557.549372][T10086] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1103'. [ 558.158537][T10099] bridge1: entered promiscuous mode [ 558.164890][T10099] bridge1: entered allmulticast mode [ 559.482702][T10099] team0: Port device bridge1 added [ 561.196607][T10133] loop2: detected capacity change from 0 to 7 [ 561.229369][T10133] Dev loop2: unable to read RDB block 7 [ 561.245392][T10127] overlayfs: upper fs does not support file handles, falling back to index=off. [ 561.269246][T10133] loop2: unable to read partition table [ 561.287875][T10133] loop2: partition table beyond EOD, truncated [ 561.320650][T10133] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 562.914234][T10146] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 564.284521][T10155] overlayfs: failed to clone upperpath [ 564.423393][ T8163] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 564.804115][ T8163] usb 4-1: Using ep0 maxpacket: 32 [ 564.989187][ T8163] usb 4-1: config 0 interface 0 has no altsetting 0 [ 565.000391][ T8163] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 565.581508][ T8163] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.641003][ T8163] usb 4-1: config 0 descriptor?? [ 568.198966][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.314976][ T8163] usbhid 4-1:0.0: can't add hid device: -71 [ 568.451211][ T8163] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 568.456956][T10201] netlink: 'syz.0.1133': attribute type 21 has an invalid length. [ 568.473213][T10201] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1133'. [ 568.486734][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1133'. [ 568.950655][ T8163] usb 4-1: USB disconnect, device number 18 [ 569.847992][ T7914] Bluetooth: hci2: Frame reassembly failed (-84) [ 570.057221][ T30] audit: type=1326 audit(1755881942.839:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10211 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71aef8ebe9 code=0x7ffc0000 [ 571.221721][ T6006] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 571.622043][ T30] audit: type=1326 audit(1755881942.909:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10211 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71aef8ebe9 code=0x7ffc0000 [ 571.851899][ T8937] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 572.347448][ T6006] usb 2-1: config 0 has an invalid interface number: 241 but max is 0 [ 573.934251][ T6006] usb 2-1: config 0 has no interface number 0 [ 574.791810][ T6006] usb 2-1: New USB device found, idVendor=ea6a, idProduct=daa1, bcdDevice=f1.60 [ 574.812149][ T6006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.866557][ T6006] usb 2-1: config 0 descriptor?? [ 574.882290][ T6006] usb 2-1: can't set config #0, error -71 [ 575.103186][ T6006] usb 2-1: USB disconnect, device number 19 [ 578.925970][T10258] tc_dump_action: action bad kind [ 578.967293][T10270] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 579.030679][T10270] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 579.069536][T10270] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 586.357063][T10331] tap0: tun_chr_ioctl cmd 1074025677 [ 586.381295][T10331] tap0: linktype set to 0 [ 587.731704][ T5923] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 587.881972][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 587.917604][ T5923] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 587.962604][ T5923] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 588.000637][ T5923] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 588.028289][ T5923] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 588.096949][ T5923] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 588.363147][ T5923] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.372644][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 588.423308][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 588.434587][ T5923] usb 7-1: config 0 descriptor?? [ 588.750263][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 588.770656][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.800520][ T9] usb 1-1: Product: ъ [ 588.813980][ T9] usb 1-1: Manufacturer: ь [ 588.818622][ T9] usb 1-1: SerialNumber: syz [ 589.369886][ T5923] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 589.859642][ T5915] usb 7-1: USB disconnect, device number 5 [ 590.744218][ T9] usb 1-1: USB disconnect, device number 24 [ 592.288001][T10402] overlayfs: failed to resolve './file1': -2 [ 592.630290][T10407] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 594.670966][T10420] kAFS: No cell specified [ 595.330932][T10431] vivid-000: disconnect [ 595.415486][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1200'. [ 595.462468][T10437] nfs4: Unknown parameter 'eneve1' [ 595.492826][T10437] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 595.555552][T10430] vivid-000: reconnect [ 595.677384][T10443] xt_nat: multiple ranges no longer supported [ 596.339791][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1200'. [ 596.910624][T10455] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 598.319873][T10461] af_packet: tpacket_rcv: packet too big, clamped from 3404 to 4294967286. macoff=82 [ 599.305293][T10478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1210'. [ 601.960086][T10508] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 602.058027][T10514] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 602.070106][ T30] audit: type=1326 audit(1755881974.859:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10512 comm="syz.1.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71aef8ebe9 code=0x50000 [ 602.635856][ T30] audit: type=1326 audit(1755881974.859:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10512 comm="syz.1.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71aef8ebe9 code=0x50000 [ 602.711943][ T30] audit: type=1326 audit(1755881974.859:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10512 comm="syz.1.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71aef8ebe9 code=0x50000 [ 602.821106][ T30] audit: type=1326 audit(1755881974.859:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10512 comm="syz.1.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71aef8ebe9 code=0x50000 [ 602.962833][ T30] audit: type=1326 audit(1755881974.859:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10512 comm="syz.1.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71aef8ebe9 code=0x50000 [ 603.012040][ T30] audit: type=1326 audit(1755881974.859:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10512 comm="syz.1.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71aef8ebe9 code=0x50000 [ 603.084724][ T30] audit: type=1326 audit(1755881974.859:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10512 comm="syz.1.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71aef8ebe9 code=0x50000 [ 603.131888][ T30] audit: type=1326 audit(1755881974.969:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10512 comm="syz.1.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71aef8ebe9 code=0x50000 [ 603.202248][ T30] audit: type=1326 audit(1755881974.969:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10512 comm="syz.1.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71aef8ebe9 code=0x50000 [ 603.662107][ T30] audit: type=1326 audit(1755881974.969:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10512 comm="syz.1.1223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71aef8ebe9 code=0x50000 [ 608.151624][T10568] vivid-002: disconnect [ 608.260778][T10567] vivid-002: reconnect [ 608.617761][T10577] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 609.856092][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1246'. [ 610.193362][ T30] kauditd_printk_skb: 250 callbacks suppressed [ 610.193422][ T30] audit: type=1326 audit(1755881982.989:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10589 comm="syz.6.1246" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0cbb8ebe9 code=0x0 [ 610.423922][T10597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1248'. [ 611.837624][T10612] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 611.837624][T10612] z,@qJ#"h/.W1ȱnNC"C׈E)8+' [ 611.902397][T10614] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 611.902397][T10614] z,@qJ#"h/.W1ȱnNC"C׈E)8+' [ 612.334165][T10622] netlink: 1010 bytes leftover after parsing attributes in process `syz.6.1255'. [ 612.377781][T10622] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 612.613369][T10630] netlink: 'syz.5.1259': attribute type 1 has an invalid length. [ 612.666872][T10630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 617.081366][T10669] xt_nat: multiple ranges no longer supported [ 617.462688][T10672] loop2: detected capacity change from 0 to 7 [ 617.596933][T10672] Dev loop2: unable to read RDB block 7 [ 617.630052][T10672] loop2: unable to read partition table [ 617.660069][T10672] loop2: partition table beyond EOD, truncated [ 617.691766][T10672] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 618.290680][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1275'. [ 629.811813][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.486658][T10772] Bluetooth: MGMT ver 1.23 [ 632.001834][T10775] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 632.074063][T10775] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.274452][T10775] syz.0.1299 (10775) used obsolete PPPIOCDETACH ioctl [ 636.837442][T10816] 9pnet: Could not find request transport: fd0x0000000000000004 [ 637.042212][ T2151] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 637.153815][T10835] FAULT_INJECTION: forcing a failure. [ 637.153815][T10835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.188693][T10835] CPU: 0 UID: 0 PID: 10835 Comm: syz.3.1318 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 637.188725][T10835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 637.188739][T10835] Call Trace: [ 637.188749][T10835] [ 637.188759][T10835] dump_stack_lvl+0x189/0x250 [ 637.188807][T10835] ? __pfx____ratelimit+0x10/0x10 [ 637.188832][T10835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 637.188865][T10835] ? __pfx__printk+0x10/0x10 [ 637.188903][T10835] ? __might_fault+0xb0/0x130 [ 637.188943][T10835] should_fail_ex+0x414/0x560 [ 637.188992][T10835] _copy_from_user+0x2d/0xb0 [ 637.189030][T10835] ___sys_recvmsg+0x12e/0x510 [ 637.189059][T10835] ? __pfx____sys_recvmsg+0x10/0x10 [ 637.189108][T10835] ? __fget_files+0x3a0/0x420 [ 637.189146][T10835] __x64_sys_recvmsg+0x198/0x260 [ 637.189170][T10835] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 637.189202][T10835] ? __pfx_ksys_write+0x10/0x10 [ 637.189227][T10835] ? rcu_is_watching+0x15/0xb0 [ 637.189257][T10835] ? do_syscall_64+0xbe/0x3b0 [ 637.189286][T10835] do_syscall_64+0xfa/0x3b0 [ 637.189310][T10835] ? lockdep_hardirqs_on+0x9c/0x150 [ 637.189339][T10835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.189362][T10835] ? clear_bhb_loop+0x60/0xb0 [ 637.189389][T10835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.189410][T10835] RIP: 0033:0x7f117578ebe9 [ 637.189430][T10835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.189450][T10835] RSP: 002b:00007f11765b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 637.189474][T10835] RAX: ffffffffffffffda RBX: 00007f11759b5fa0 RCX: 00007f117578ebe9 [ 637.189490][T10835] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 637.189505][T10835] RBP: 00007f11765b1090 R08: 0000000000000000 R09: 0000000000000000 [ 637.189522][T10835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.189535][T10835] R13: 00007f11759b6038 R14: 00007f11759b5fa0 R15: 00007ffc82886618 [ 637.189578][T10835] [ 637.252463][ T2151] usb 1-1: Using ep0 maxpacket: 32 [ 637.256403][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.283768][ T2151] usb 1-1: no configurations [ 637.287049][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.415006][ C0] hrtimer: interrupt took 223989941 ns [ 637.441845][ T2151] usb 1-1: can't read configurations, error -22 [ 637.515133][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.595210][ T2151] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 637.782005][ T2151] usb 1-1: Using ep0 maxpacket: 32 [ 637.798110][ T2151] usb 1-1: no configurations [ 637.809690][ T2151] usb 1-1: can't read configurations, error -22 [ 637.844855][ T2151] usb usb1-port1: attempt power cycle [ 639.491854][ T2151] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 639.575140][ T2151] usb 1-1: Using ep0 maxpacket: 32 [ 639.596410][ T2151] usb 1-1: no configurations [ 639.617795][ T2151] usb 1-1: can't read configurations, error -22 [ 639.781895][ T2151] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 639.802460][ T2151] usb 1-1: Using ep0 maxpacket: 32 [ 639.810375][ T2151] usb 1-1: no configurations [ 639.820437][ T2151] usb 1-1: can't read configurations, error -22 [ 639.914294][ T2151] usb usb1-port1: unable to enumerate USB device [ 640.892149][T10864] xt_nat: multiple ranges no longer supported [ 642.470336][T10868] 9pnet: Could not find request transport: fd0x0000000000000004 [ 643.071733][ T2151] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 643.171885][ T9564] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 643.303579][ T2151] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 643.329526][ T2151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.357836][ T9564] usb 1-1: Using ep0 maxpacket: 8 [ 643.357939][ T2151] usb 4-1: config 0 descriptor?? [ 643.378798][ T9564] usb 1-1: unable to get BOS descriptor or descriptor too short [ 643.386016][ T2151] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 643.397063][ T9564] usb 1-1: config 6 has an invalid interface number: 248 but max is 0 [ 643.400149][T10895] ======================================================= [ 643.400149][T10895] WARNING: The mand mount option has been deprecated and [ 643.400149][T10895] and is ignored by this kernel. Remove the mand [ 643.400149][T10895] option from the mount to silence this warning. [ 643.400149][T10895] ======================================================= [ 643.420068][ T9564] usb 1-1: config 6 has no interface number 0 [ 643.477765][ T9564] usb 1-1: config 6 interface 248 has no altsetting 0 [ 643.500754][ T9564] usb 1-1: string descriptor 0 read error: -22 [ 643.518322][ T9564] usb 1-1: New USB device found, idVendor=0af0, idProduct=6951, bcdDevice= 5.55 [ 643.541729][ T9564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.579680][ T9564] hso 1-1:6.248: Not our interface [ 643.607256][T10882] netlink: 'syz.3.1331': attribute type 2 has an invalid length. [ 643.665390][T10882] : entered promiscuous mode [ 643.956233][ T2151] gspca_sunplus: reg_w_riv err -71 [ 643.962174][ T2151] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 643.974615][ T2151] usb 4-1: USB disconnect, device number 19 [ 644.296040][T10908] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 644.312265][T10908] input: syz1 as /devices/virtual/input/input12 [ 644.439613][ T9564] usb 1-1: USB disconnect, device number 29 [ 645.664929][T10926] trusted_key: encrypted_key: hex blob is missing [ 646.814092][T10938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1348'. [ 646.870087][T10939] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1347'. [ 647.977035][ T2151] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 648.171721][ T2151] usb 4-1: Using ep0 maxpacket: 16 [ 648.192244][ T2151] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 648.210736][ T2151] usb 4-1: config 8 has no interface number 0 [ 648.220466][ T2151] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 648.320904][ T2151] usb 4-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 648.342899][ T2151] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 648.363846][ T2151] usb 4-1: config 8 interface 39 has no altsetting 0 [ 648.396867][ T2151] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 648.407251][ T2151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.426215][ T2151] usb 4-1: Product: syz [ 648.437330][ T2151] usb 4-1: Manufacturer: syz [ 648.448429][ T2151] usb 4-1: SerialNumber: syz [ 649.222521][ T2151] ipheth 4-1:8.39: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 649.242252][ T2151] ipheth 4-1:8.39: probe with driver ipheth failed with error -22 [ 649.948254][T10983] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 649.975740][T10983] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 650.835665][ T2151] usb 4-1: USB disconnect, device number 20 [ 651.434025][T11005] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 651.940561][T10996] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.037723][T11009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 652.045314][T11009] IPv6: NLM_F_CREATE should be set when creating new route [ 652.458374][T11013] netlink: 'syz.3.1370': attribute type 1 has an invalid length. [ 652.467133][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1370'. [ 653.617619][T10996] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.725804][ T2151] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 655.096345][T10996] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.192352][T11035] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 655.225334][ T2151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.326976][ T2151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.523478][ T2151] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 655.614645][ T2151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.668412][T11024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1373'. [ 655.883265][ T2151] usb 2-1: config 0 descriptor?? [ 656.085811][T10996] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.373353][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 656.487546][ T2151] megaworld 0003:07B5:0312.0008: unknown main item tag 0x3 [ 656.884718][ T2151] megaworld 0003:07B5:0312.0008: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.1-1/input0 [ 657.100745][ T2151] megaworld 0003:07B5:0312.0008: no inputs found [ 657.136269][ T2151] usb 2-1: USB disconnect, device number 20 [ 657.260593][T10996] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.496060][T11041] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1376'. [ 657.540870][T10996] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.810523][T10996] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.919619][T10996] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.286915][T11061] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 660.297045][T11083] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 660.898424][T11094] FAULT_INJECTION: forcing a failure. [ 660.898424][T11094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.290716][T11094] CPU: 1 UID: 0 PID: 11094 Comm: syz.1.1391 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 661.290747][T11094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 661.290761][T11094] Call Trace: [ 661.290769][T11094] [ 661.290779][T11094] dump_stack_lvl+0x189/0x250 [ 661.290810][T11094] ? __pfx____ratelimit+0x10/0x10 [ 661.290834][T11094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 661.290859][T11094] ? __pfx__printk+0x10/0x10 [ 661.290887][T11094] ? __might_fault+0xb0/0x130 [ 661.290922][T11094] should_fail_ex+0x414/0x560 [ 661.290951][T11094] _copy_from_user+0x2d/0xb0 [ 661.290983][T11094] __sys_bpf+0x1ed/0x860 [ 661.291020][T11094] ? __pfx___sys_bpf+0x10/0x10 [ 661.291067][T11094] ? ksys_write+0x22a/0x250 [ 661.291091][T11094] ? __pfx_ksys_write+0x10/0x10 [ 661.291109][T11094] ? rcu_is_watching+0x15/0xb0 [ 661.291141][T11094] __x64_sys_bpf+0x7c/0x90 [ 661.291172][T11094] do_syscall_64+0xfa/0x3b0 [ 661.291195][T11094] ? lockdep_hardirqs_on+0x9c/0x150 [ 661.291218][T11094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.291240][T11094] ? clear_bhb_loop+0x60/0xb0 [ 661.291267][T11094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.291288][T11094] RIP: 0033:0x7f71aef8ebe9 [ 661.291308][T11094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.291327][T11094] RSP: 002b:00007f71afda7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 661.291350][T11094] RAX: ffffffffffffffda RBX: 00007f71af1b6090 RCX: 00007f71aef8ebe9 [ 661.291366][T11094] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011 [ 661.291380][T11094] RBP: 00007f71afda7090 R08: 0000000000000000 R09: 0000000000000000 [ 661.291394][T11094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.291407][T11094] R13: 00007f71af1b6128 R14: 00007f71af1b6090 R15: 00007ffc51465988 [ 661.291442][T11094] [ 662.270234][T11104] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1394'. [ 662.383081][T11105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1395'. [ 662.690565][T11107] overlayfs: missing 'workdir' [ 665.933901][ T8163] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 666.284196][ T8163] usb 7-1: unable to get BOS descriptor or descriptor too short [ 666.320130][ T8163] usb 7-1: config 7 has an invalid interface number: 199 but max is 0 [ 666.340544][ T8163] usb 7-1: config 7 has no interface number 0 [ 666.376455][ T8163] usb 7-1: config 7 interface 199 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 666.437645][ T8163] usb 7-1: config 7 interface 199 altsetting 1 endpoint 0x3 has invalid maxpacket 32, setting to 0 [ 666.465835][ T8163] usb 7-1: No eUSB2 isoc ep 3 companion for config 7 interface 199 altsetting 1 [ 666.499269][T11131] FAULT_INJECTION: forcing a failure. [ 666.499269][T11131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.540617][T11131] CPU: 1 UID: 0 PID: 11131 Comm: syz.3.1403 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 666.540650][T11131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 666.540664][T11131] Call Trace: [ 666.540672][T11131] [ 666.540682][T11131] dump_stack_lvl+0x189/0x250 [ 666.540713][T11131] ? __pfx____ratelimit+0x10/0x10 [ 666.540737][T11131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 666.540762][T11131] ? __pfx__printk+0x10/0x10 [ 666.540811][T11131] should_fail_ex+0x414/0x560 [ 666.540841][T11131] strncpy_from_user+0x36/0x290 [ 666.540881][T11131] bpf_raw_tp_link_attach+0x1ea/0x6b0 [ 666.540913][T11131] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 666.540952][T11131] ? __fget_files+0x2a/0x420 [ 666.540992][T11131] bpf_raw_tracepoint_open+0x19b/0x1f0 [ 666.541029][T11131] __sys_bpf+0x3cd/0x860 [ 666.541078][T11131] ? __pfx___sys_bpf+0x10/0x10 [ 666.541124][T11131] ? ksys_write+0x22a/0x250 [ 666.541146][T11131] ? __pfx_ksys_write+0x10/0x10 [ 666.541163][T11131] ? rcu_is_watching+0x15/0xb0 [ 666.541220][T11131] __x64_sys_bpf+0x7c/0x90 [ 666.541254][T11131] do_syscall_64+0xfa/0x3b0 [ 666.541278][T11131] ? lockdep_hardirqs_on+0x9c/0x150 [ 666.541300][T11131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.541323][T11131] ? clear_bhb_loop+0x60/0xb0 [ 666.541350][T11131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.541371][T11131] RIP: 0033:0x7f117578ebe9 [ 666.541390][T11131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.541410][T11131] RSP: 002b:00007f1176590038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 666.541433][T11131] RAX: ffffffffffffffda RBX: 00007f11759b6090 RCX: 00007f117578ebe9 [ 666.541449][T11131] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011 [ 666.541463][T11131] RBP: 00007f1176590090 R08: 0000000000000000 R09: 0000000000000000 [ 666.541477][T11131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.541490][T11131] R13: 00007f11759b6128 R14: 00007f11759b6090 R15: 00007ffc82886618 [ 666.541531][T11131] [ 666.752462][ T8163] usb 7-1: config 7 interface 199 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 8 [ 666.764749][ T8163] usb 7-1: config 7 interface 199 has no altsetting 0 [ 666.777850][ T8163] usb 7-1: string descriptor 0 read error: -22 [ 666.785160][ T8163] usb 7-1: New USB device found, idVendor=0c45, idProduct=6282, bcdDevice=cb.15 [ 666.795566][ T8163] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.817449][ T8163] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6282 [ 666.898197][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1405'. [ 667.356631][ T8163] gspca_sn9c20x: Write register 1000 failed -110 [ 667.469253][ T8163] gspca_sn9c20x: Device initialization failed [ 667.570799][ T8163] gspca_sn9c20x 7-1:7.199: probe with driver gspca_sn9c20x failed with error -110 [ 667.924772][ T8163] usb 7-1: USB disconnect, device number 6 [ 668.388660][T11149] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 668.396122][T11149] PKCS7: Only support pkcs7_signedData type [ 681.308254][T11234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1433'. [ 682.888442][T11240] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 682.895255][T11240] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 683.074661][ T6006] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 683.087385][T11240] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 683.097568][T11240] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 683.421788][ T6006] usb 1-1: Using ep0 maxpacket: 32 [ 683.458826][ T6006] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.533104][ T6006] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 683.595985][ T6006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.762578][ T6006] usb 1-1: config 0 descriptor?? [ 683.775701][ T6006] hub 1-1:0.0: USB hub found [ 684.048980][ T6006] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 684.683142][ T6006] hid-generic 0003:046D:C31C.0009: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 684.960580][T11282] xt_nat: multiple ranges no longer supported [ 686.238933][ T8163] usb 1-1: USB disconnect, device number 30 [ 686.401094][ T9564] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 686.594034][ T9564] usb 7-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config [ 686.624726][ T9564] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 686.654891][ T9564] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 686.665011][ T8163] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 686.675720][ T9564] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.685807][ T9564] usb 7-1: Product: syz [ 686.690192][ T9564] usb 7-1: Manufacturer: syz [ 686.699040][ T9564] usb 7-1: SerialNumber: syz [ 686.709377][ T9564] usb 7-1: config 0 descriptor?? [ 686.811809][ T8163] usb 4-1: device descriptor read/64, error -71 [ 686.898575][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1453'. [ 686.970550][T11305] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1453'. [ 687.018225][ T9564] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 687.039102][ T9564] usb 7-1: USB disconnect, device number 7 [ 687.051838][ T8163] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 687.211931][ T8163] usb 4-1: device descriptor read/64, error -71 [ 687.372386][ T8163] usb usb4-port1: attempt power cycle [ 687.903678][ T8163] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 688.396364][ T8163] usb 4-1: device descriptor read/8, error -71 [ 688.453353][T11315] vlan2: entered promiscuous mode [ 688.458673][T11315] vlan2: entered allmulticast mode [ 688.509060][T11315] hsr_slave_1: entered allmulticast mode [ 688.643603][ T8163] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 688.676867][ T8163] usb 4-1: device descriptor read/8, error -71 [ 688.709600][T11329] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1462'. [ 688.738166][T11331] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 688.849258][ T8163] usb usb4-port1: unable to enumerate USB device [ 689.682106][T11350] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 691.055097][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.129683][T11364] FAULT_INJECTION: forcing a failure. [ 692.129683][T11364] name failslab, interval 1, probability 0, space 0, times 0 [ 692.143055][T11364] CPU: 1 UID: 0 PID: 11364 Comm: syz.0.1469 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 692.143090][T11364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 692.143104][T11364] Call Trace: [ 692.143114][T11364] [ 692.143124][T11364] dump_stack_lvl+0x189/0x250 [ 692.143155][T11364] ? __pfx____ratelimit+0x10/0x10 [ 692.143180][T11364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 692.143205][T11364] ? __pfx__printk+0x10/0x10 [ 692.143242][T11364] ? ref_tracker_alloc+0x318/0x460 [ 692.143272][T11364] should_fail_ex+0x414/0x560 [ 692.143301][T11364] should_failslab+0xa8/0x100 [ 692.143327][T11364] kmem_cache_alloc_noprof+0x73/0x3c0 [ 692.143349][T11364] ? skb_clone+0x212/0x3a0 [ 692.143377][T11364] skb_clone+0x212/0x3a0 [ 692.143404][T11364] __netlink_deliver_tap+0x404/0x850 [ 692.143450][T11364] ? netlink_deliver_tap+0x2e/0x1b0 [ 692.143484][T11364] netlink_deliver_tap+0x19c/0x1b0 [ 692.143523][T11364] netlink_unicast+0x730/0x8e0 [ 692.143566][T11364] netlink_sendmsg+0x805/0xb30 [ 692.143597][T11364] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 692.143629][T11364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.143671][T11364] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 692.143693][T11364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.143726][T11364] __sock_sendmsg+0x21c/0x270 [ 692.143756][T11364] ____sys_sendmsg+0x505/0x830 [ 692.143809][T11364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 692.143856][T11364] ? import_iovec+0x74/0xa0 [ 692.143891][T11364] ___sys_sendmsg+0x21f/0x2a0 [ 692.143929][T11364] ? __pfx____sys_sendmsg+0x10/0x10 [ 692.144008][T11364] ? __fget_files+0x2a/0x420 [ 692.144032][T11364] ? __fget_files+0x3a0/0x420 [ 692.144070][T11364] __x64_sys_sendmsg+0x19b/0x260 [ 692.144115][T11364] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 692.144172][T11364] ? do_syscall_64+0xbe/0x3b0 [ 692.144201][T11364] do_syscall_64+0xfa/0x3b0 [ 692.144228][T11364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.144249][T11364] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 692.144270][T11364] ? clear_bhb_loop+0x60/0xb0 [ 692.144310][T11364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.144330][T11364] RIP: 0033:0x7f7ca778ebe9 [ 692.144349][T11364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.144368][T11364] RSP: 002b:00007f7ca853f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 692.144391][T11364] RAX: ffffffffffffffda RBX: 00007f7ca79b6180 RCX: 00007f7ca778ebe9 [ 692.144407][T11364] RDX: 0000000004048806 RSI: 0000200000000900 RDI: 0000000000000006 [ 692.144421][T11364] RBP: 00007f7ca853f090 R08: 0000000000000000 R09: 0000000000000000 [ 692.144435][T11364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.144448][T11364] R13: 00007f7ca79b6218 R14: 00007f7ca79b6180 R15: 00007ffcb938acd8 [ 692.144483][T11364] [ 692.631825][ T8163] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 694.337378][ T30] audit: type=1326 audit(1755882067.129:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11382 comm="syz.3.1475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f117578ebe9 code=0x0 [ 696.899669][T11390] 9pnet: p9_errstr2errno: server reported unknown error @cF S [ 696.963833][T11396] mac80211_hwsim hwsim5 : renamed from wlan1 [ 697.566956][T11403] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1479'. [ 697.581790][T11403] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1479'. [ 698.278233][T11423] FAULT_INJECTION: forcing a failure. [ 698.278233][T11423] name failslab, interval 1, probability 0, space 0, times 0 [ 698.291638][T11423] CPU: 1 UID: 0 PID: 11423 Comm: syz.0.1483 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 698.291666][T11423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 698.291680][T11423] Call Trace: [ 698.291690][T11423] [ 698.291699][T11423] dump_stack_lvl+0x189/0x250 [ 698.291729][T11423] ? __pfx____ratelimit+0x10/0x10 [ 698.291753][T11423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 698.291777][T11423] ? __pfx__printk+0x10/0x10 [ 698.291808][T11423] ? __pfx___might_resched+0x10/0x10 [ 698.291839][T11423] ? fs_reclaim_acquire+0x7d/0x100 [ 698.291870][T11423] should_fail_ex+0x414/0x560 [ 698.291899][T11423] should_failslab+0xa8/0x100 [ 698.291924][T11423] __kmalloc_noprof+0xcb/0x4f0 [ 698.291944][T11423] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 698.291976][T11423] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 698.292010][T11423] genl_family_rcv_msg_doit+0xb8/0x300 [ 698.292042][T11423] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 698.292069][T11423] ? rcu_is_watching+0x15/0xb0 [ 698.292093][T11423] ? cap_capable+0x11f/0x460 [ 698.292116][T11423] ? safesetid_security_capable+0xa9/0x1a0 [ 698.292142][T11423] ? bpf_lsm_capable+0x9/0x20 [ 698.292168][T11423] ? security_capable+0x7e/0x2e0 [ 698.292204][T11423] genl_rcv_msg+0x60e/0x790 [ 698.292234][T11423] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.292256][T11423] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 698.292306][T11423] netlink_rcv_skb+0x205/0x470 [ 698.292337][T11423] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.292362][T11423] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 698.292412][T11423] ? down_read+0x1ad/0x2e0 [ 698.292441][T11423] genl_rcv+0x28/0x40 [ 698.292461][T11423] netlink_unicast+0x75c/0x8e0 [ 698.292501][T11423] netlink_sendmsg+0x805/0xb30 [ 698.292530][T11423] ? finish_task_switch+0x18b/0x950 [ 698.292572][T11423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.292612][T11423] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 698.292633][T11423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.292665][T11423] __sock_sendmsg+0x21c/0x270 [ 698.292695][T11423] ____sys_sendmsg+0x505/0x830 [ 698.292735][T11423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 698.292779][T11423] ? import_iovec+0x74/0xa0 [ 698.292814][T11423] ___sys_sendmsg+0x21f/0x2a0 [ 698.292855][T11423] ? __pfx____sys_sendmsg+0x10/0x10 [ 698.292886][T11423] ? preempt_schedule_irq+0xde/0x150 [ 698.292967][T11423] __x64_sys_sendmsg+0x19b/0x260 [ 698.293003][T11423] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 698.293048][T11423] ? __pfx_ksys_write+0x10/0x10 [ 698.293075][T11423] ? do_syscall_64+0xbe/0x3b0 [ 698.293103][T11423] do_syscall_64+0xfa/0x3b0 [ 698.293129][T11423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.293149][T11423] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 698.293170][T11423] ? clear_bhb_loop+0x60/0xb0 [ 698.293197][T11423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.293218][T11423] RIP: 0033:0x7f7ca778ebe9 [ 698.293237][T11423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.293255][T11423] RSP: 002b:00007f7ca853f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.293277][T11423] RAX: ffffffffffffffda RBX: 00007f7ca79b6180 RCX: 00007f7ca778ebe9 [ 698.293293][T11423] RDX: 0000000004048806 RSI: 0000200000000900 RDI: 0000000000000006 [ 698.293307][T11423] RBP: 00007f7ca853f090 R08: 0000000000000000 R09: 0000000000000000 [ 698.293321][T11423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.293333][T11423] R13: 00007f7ca79b6218 R14: 00007f7ca79b6180 R15: 00007ffcb938acd8 [ 698.293368][T11423] [ 698.899865][T11428] overlayfs: failed to clone upperpath [ 699.564791][T11439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1487'. [ 699.580299][T11439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.592720][T11439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.693913][T11439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.946916][T11439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.471787][ T30] audit: type=1326 audit(1755882073.269:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11452 comm="syz.5.1491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdfd18ebe9 code=0x0 [ 700.513357][T11450] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 700.582434][T11459] 9pnet: p9_errstr2errno: server reported unknown error @cF S [ 700.644144][T11461] fuse: Bad value for 'fd' [ 700.759988][T11465] netlink: 'syz.1.1493': attribute type 4 has an invalid length. [ 700.865424][T11469] ubi31: attaching mtd0 [ 700.888512][T11469] ubi31: scanning is finished [ 700.896893][T11469] ubi31: empty MTD device detected [ 700.992009][T10359] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 701.059321][T11469] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 701.068856][T11469] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 701.079750][T11469] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 701.088791][T11469] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 701.110472][T11485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1497'. [ 701.129280][T11469] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 701.139932][T11469] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 701.153479][T11469] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2115160285 [ 701.155330][T10359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 701.166771][T11485] vlan0: entered promiscuous mode [ 701.186311][T11469] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 701.206521][T10359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 701.284348][T10359] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 701.302197][T11484] ubi31: background thread "ubi_bgt31d" started, PID 11484 [ 701.399493][T10359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.771969][T10359] usb 1-1: config 0 descriptor?? [ 701.819331][T11468] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 702.452672][T10359] usbhid 1-1:0.0: can't add hid device: -71 [ 702.459422][T10359] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 702.469937][T11499] netlink: 'syz.1.1502': attribute type 1 has an invalid length. [ 702.505416][T11499] netlink: 'syz.1.1502': attribute type 4 has an invalid length. [ 702.511372][T10359] usb 1-1: USB disconnect, device number 31 [ 702.534299][T11499] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1502'. [ 703.068765][ T30] audit: type=1326 audit(1755882075.859:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11519 comm="syz.5.1508" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdfd18ebe9 code=0x0 [ 703.176633][T11521] 9pnet: p9_errstr2errno: server reported unknown error @cF S [ 703.224788][T11523] fuse: Bad value for 'fd' [ 704.763041][T11550] xt_CT: You must specify a L4 protocol and not use inversions on it [ 704.964487][T11556] tipc: Can't bind to reserved service type 2 [ 704.997319][T11561] net_ratelimit: 148 callbacks suppressed [ 704.997338][T11561] openvswitch: netlink: IP tunnel dst address not specified [ 705.035335][T11563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1521'. [ 705.049382][T11561] xt_l2tp: missing protocol rule (udp|l2tpip) [ 705.281145][T11563] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1521'. [ 706.379813][T11580] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1526'. [ 706.444655][T11580] gretap0: entered promiscuous mode [ 706.715617][T11589] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 706.736029][T11589] overlayfs: failed to set xattr on upper [ 706.755862][T11589] overlayfs: ...falling back to redirect_dir=nofollow. [ 706.884617][T11594] netlink: 'syz.3.1530': attribute type 11 has an invalid length. [ 706.910072][T11594] netlink: 'syz.3.1530': attribute type 4 has an invalid length. [ 706.925328][T11594] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1530'. [ 707.042068][T11601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 710.162071][T11613] overlayfs: failed to resolve './file1': -2 [ 710.316906][T11618] sctp: [Deprecated]: syz.1.1537 (pid 11618) Use of int in max_burst socket option. [ 710.316906][T11618] Use struct sctp_assoc_value instead [ 711.754463][T11635] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1540'. [ 712.205587][T11641] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 715.426456][T11667] overlayfs: failed to resolve './file1': -2 [ 716.681889][ T5915] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 716.846580][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.882172][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.930679][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 716.952061][ T5915] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 716.962576][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.980747][ T5915] usb 2-1: config 0 descriptor?? [ 717.217513][ T5915] usbhid 2-1:0.0: can't add hid device: -71 [ 717.499448][ T5915] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 717.538462][ T5915] usb 2-1: USB disconnect, device number 21 [ 721.961824][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 722.219803][ T24] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 722.656810][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.707444][ T24] usb 1-1: config 0 descriptor?? [ 722.960500][ T24] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 723.752803][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 723.875446][ T24] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 723.917031][ T24] [drm] Initialized udl on minor 2 [ 723.970952][ T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 724.557956][ T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 724.580396][ T6006] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 724.626104][ T24] usb 1-1: USB disconnect, device number 32 [ 724.634953][ T6006] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 730.346586][T11796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1582'. [ 730.382125][T11796] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1582'. [ 730.469255][T11800] netlink: 'syz.0.1584': attribute type 21 has an invalid length. [ 730.529567][T11802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1586'. [ 730.542216][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1584'. [ 730.555206][T11802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1586'. [ 732.519122][T11835] netlink: 'syz.0.1590': attribute type 10 has an invalid length. [ 732.843773][T11833] overlayfs: failed to resolve './file1': -2 [ 732.894198][T11835] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 732.937159][T11835] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 733.058710][T11835] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 733.120662][T11841] netlink: 'syz.5.1594': attribute type 10 has an invalid length. [ 733.129042][T11841] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1594'. [ 733.140676][T11841] batman_adv: batadv0: Adding interface: virt_wifi0 [ 733.147843][T11841] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 733.174170][T11841] batman_adv: batadv0: Interface activated: virt_wifi0 [ 733.321784][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 733.511891][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 733.592776][ T24] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.686858][ T24] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.809283][ T24] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 733.889311][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 733.902237][ T24] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 733.918818][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.940804][ T24] usb 7-1: config 0 descriptor?? [ 734.388974][ T24] hid (null): global environment stack underflow [ 734.399046][ T24] hid (null): invalid report_count 107748025 [ 734.420894][ T24] hid (null): unknown global tag 0xd [ 734.429097][ T24] hid (null): invalid report_count -741437095 [ 736.112455][ T24] usb 7-1: USB disconnect, device number 8 [ 736.391807][ T5915] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 736.707290][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 736.787593][ T5915] usb 4-1: config 0 has an invalid interface number: 92 but max is 0 [ 736.797639][ T5915] usb 4-1: config 0 has no interface number 0 [ 736.811928][ T5915] usb 4-1: config 0 interface 92 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 736.837345][ T5915] usb 4-1: config 0 interface 92 has no altsetting 0 [ 737.053538][ T5915] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=a8.eb [ 737.159696][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.168833][ T5915] usb 4-1: Product: syz [ 737.176511][ T5915] usb 4-1: Manufacturer: syz [ 737.183283][ T5915] usb 4-1: SerialNumber: syz [ 737.191121][ T5915] usb 4-1: config 0 descriptor?? [ 737.197340][T11886] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 737.530340][ T5915] redrat3 4-1:0.92: Couldn't find all endpoints [ 737.541567][ T5915] usb 4-1: USB disconnect, device number 26 [ 738.288675][T11895] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 738.596933][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1614'. [ 738.688059][T11906] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1614'. [ 743.014942][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1626'. [ 743.188082][T11945] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1626'. [ 743.273992][T11952] No such timeout policy "syz1" [ 743.307545][T11956] No such timeout policy "syz1" [ 744.836761][T11975] loop2: detected capacity change from 0 to 7 [ 744.854493][T11973] overlayfs: failed to resolve './file1': -2 [ 744.860754][T11975] Dev loop2: unable to read RDB block 7 [ 744.904864][T11975] loop2: unable to read partition table [ 745.005594][T11975] loop2: partition table beyond EOD, truncated [ 745.061398][T11975] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 745.208295][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1635'. [ 745.481502][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1635'. [ 746.313861][T11999] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1639'. [ 746.335230][T11995] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1639'. [ 746.354404][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1642'. [ 746.428651][T11998] can: request_module (can-proto-0) failed. [ 746.449557][T12002] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1642'. [ 748.836029][T12028] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1647'. [ 749.723413][T12037] netlink: 'syz.5.1651': attribute type 4 has an invalid length. [ 749.931257][T12040] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 750.271989][T12042] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1649'. [ 751.420615][T12037] netlink: 'syz.5.1651': attribute type 4 has an invalid length. [ 751.737121][T12050] tmpfs: Unknown parameter 'quo' [ 752.511073][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.428063][T12055] overlayfs: workdir and upperdir must reside under the same mount [ 753.694277][T12070] syz_tun: entered allmulticast mode [ 753.706296][T12070] dvmrp8: entered allmulticast mode [ 753.762969][T12072] loop2: detected capacity change from 0 to 7 [ 753.826874][T12072] Dev loop2: unable to read RDB block 7 [ 753.854039][T12072] loop2: unable to read partition table [ 753.879512][T12072] loop2: partition table beyond EOD, truncated [ 753.900918][T12072] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 754.372844][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 754.432001][ T6006] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 754.624784][T12086] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 754.988734][T12069] syz_tun: left allmulticast mode [ 754.997838][ T6006] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.010324][T12069] dvmrp8: left allmulticast mode [ 755.017043][ T6006] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 755.033442][ T6006] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 755.047720][ T6006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.055563][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 755.069436][ T6006] usb 1-1: config 0 descriptor?? [ 755.093202][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.109244][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.125639][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 755.136493][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.177748][ T9] usb 2-1: config 0 descriptor?? [ 755.325340][ T6006] koneplus 0003:1E7D:2D51.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 755.795707][ T5915] usb 1-1: USB disconnect, device number 33 [ 755.855274][ T9] ft260 0003:0403:6030.000C: unknown main item tag 0x7 [ 755.990377][ T9] ft260 0003:0403:6030.000C: chip code: 6424 8183 [ 756.113535][ T8163] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 756.193353][ T9] ft260 0003:0403:6030.000C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 756.296738][ T8163] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 756.335049][ T8163] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 756.358994][ T8163] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.388304][ T8163] usb 4-1: Product: syz [ 756.396752][ T8163] usb 4-1: Manufacturer: syz [ 756.405297][ T9] ft260 0003:0403:6030.000C: failed to retrieve status: -32, no wakeup [ 756.418795][ T8163] usb 4-1: SerialNumber: syz [ 756.427766][ T9] ft260 0003:0403:6030.000C: failed to retrieve status: -32 [ 756.474052][ T8163] usb 4-1: config 0 descriptor?? [ 757.559481][T12076] ft260 0003:0403:6030.000C: ft260_i2c_read: failed with -38 [ 757.578152][T12091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.592268][T12091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.065599][ T8163] powermate: unknown product id 0240 [ 758.669757][ T8163] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 758.690422][ C0] powermate: config urb returned -71 [ 758.696796][ C0] powermate: config urb returned -71 [ 758.703178][ C0] powermate: config urb returned -71 [ 758.708706][ C0] powermate: config urb returned -71 [ 758.855228][ T8163] usb 4-1: USB disconnect, device number 27 [ 758.861996][ C0] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 759.479567][ T6006] usb 2-1: USB disconnect, device number 22 [ 760.259924][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1672'. [ 760.269779][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1672'. [ 761.281962][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 761.766205][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.816621][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.871057][ T9] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 761.894446][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.134246][ T9] usb 1-1: config 0 descriptor?? [ 763.316677][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 763.322764][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 763.343866][ T9] usb 1-1: USB disconnect, device number 34 [ 763.420600][T12153] netlink: 'syz.1.1680': attribute type 10 has an invalid length. [ 763.506717][T12153] syz_tun: entered promiscuous mode [ 763.634175][T12153] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 763.879652][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 764.127130][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.161354][ T6006] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 764.211980][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.891811][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 764.911627][ T6006] usb 7-1: Using ep0 maxpacket: 8 [ 764.949053][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.950161][ T6006] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.965683][ T9] usb 4-1: config 0 descriptor?? [ 765.000534][ T6006] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.021582][ T6006] usb 7-1: config 0 interface 0 has no altsetting 0 [ 765.129106][ T6006] usb 7-1: New USB device found, idVendor=0000, idProduct=ea00, bcdDevice= 0.00 [ 765.146583][T12177] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1687'. [ 765.185054][ T6006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.342634][ T6006] usb 7-1: config 0 descriptor?? [ 765.503526][ T9] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 765.534224][ T9] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 765.700413][ T9] cp2112 0003:10C4:EA90.000D: Part Number: 0x00 Device Version: 0x4D [ 767.154709][ T9] cp2112 0003:10C4:EA90.000D: error reading lock byte: -71 [ 767.167644][ T9] usb 4-1: USB disconnect, device number 28 [ 767.744829][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1689'. [ 767.822539][ T6006] usbhid 7-1:0.0: can't add hid device: -71 [ 767.829572][ T6006] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 767.966639][ T6006] usb 7-1: USB disconnect, device number 9 [ 768.648756][T12202] overlayfs: failed to resolve './file1': -2 [ 768.829515][ T5915] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 769.744937][ T5915] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 769.778415][ T5915] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 769.819563][ T5915] usb 7-1: config 0 has no interface number 0 [ 769.834085][ T5915] usb 7-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 769.847974][ T5915] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 769.863953][ T5915] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 769.940401][ T5915] usb 7-1: config 0 interface 52 has no altsetting 0 [ 769.967519][ T5915] usb 7-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 769.988432][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 770.048526][ T5915] usb 7-1: Product: syz [ 770.067004][ T5915] usb 7-1: SerialNumber: syz [ 770.265765][ T5915] usb 7-1: config 0 descriptor?? [ 770.492357][T12221] /dev/nullb0: Can't open blockdev [ 770.619446][ T5915] input: syz (Stick) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.52/input/input15 [ 772.592614][ T30] audit: type=1326 audit(1755882145.389:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12197 comm="syz.6.1694" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0cbb8ebe9 code=0x0 [ 773.216586][ T9564] usb 7-1: USB disconnect, device number 10 [ 773.223091][ C0] synaptics_usb 7-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 773.289087][ T5190] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 773.760442][T12243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1706'. [ 774.606971][T12246] program syz.6.1705 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 774.618851][T12242] overlayfs: failed to resolve './file1': -2 [ 777.027485][T12275] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 778.346889][T12291] loop2: detected capacity change from 0 to 7 [ 778.466632][T12291] Dev loop2: unable to read RDB block 7 [ 778.674652][T12291] loop2: unable to read partition table [ 779.302754][T12291] loop2: partition table beyond EOD, truncated [ 779.314677][T12291] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 779.380140][T12296] FAULT_INJECTION: forcing a failure. [ 779.380140][T12296] name failslab, interval 1, probability 0, space 0, times 0 [ 779.431655][T12296] CPU: 1 UID: 0 PID: 12296 Comm: syz.1.1722 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 779.431686][T12296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 779.431700][T12296] Call Trace: [ 779.431709][T12296] [ 779.431719][T12296] dump_stack_lvl+0x189/0x250 [ 779.431749][T12296] ? __pfx____ratelimit+0x10/0x10 [ 779.431772][T12296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 779.431795][T12296] ? __pfx__printk+0x10/0x10 [ 779.431829][T12296] ? __pfx___might_resched+0x10/0x10 [ 779.431852][T12296] ? fs_reclaim_acquire+0x7d/0x100 [ 779.431884][T12296] should_fail_ex+0x414/0x560 [ 779.431912][T12296] should_failslab+0xa8/0x100 [ 779.431937][T12296] __kmalloc_cache_noprof+0x70/0x3d0 [ 779.431958][T12296] ? xt_rateest_tg_checkentry+0x1e4/0xb60 [ 779.431989][T12296] xt_rateest_tg_checkentry+0x1e4/0xb60 [ 779.432020][T12296] ? __pfx_xt_rateest_tg_checkentry+0x10/0x10 [ 779.432048][T12296] ? xt_find_target+0x1f3/0x240 [ 779.432098][T12296] xt_check_target+0x3c3/0xa90 [ 779.432122][T12296] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 779.432148][T12296] ? __pfx_xt_check_target+0x10/0x10 [ 779.432173][T12296] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 779.432206][T12296] ? xt_find_target+0x1f3/0x240 [ 779.432247][T12296] translate_table+0x186b/0x2040 [ 779.432303][T12296] ? __pfx_translate_table+0x10/0x10 [ 779.432336][T12296] ? __might_fault+0xb0/0x130 [ 779.432378][T12296] ? _copy_from_user+0x94/0xb0 [ 779.432413][T12296] do_ip6t_set_ctl+0x970/0xce0 [ 779.432452][T12296] ? rcu_is_watching+0x15/0xb0 [ 779.432475][T12296] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 779.432527][T12296] ? __pfx___mutex_lock+0x10/0x10 [ 779.432551][T12296] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 779.432596][T12296] nf_setsockopt+0x26c/0x290 [ 779.432630][T12296] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 779.432660][T12296] do_sock_setsockopt+0x179/0x1b0 [ 779.432697][T12296] __x64_sys_setsockopt+0x13f/0x1b0 [ 779.432736][T12296] do_syscall_64+0xfa/0x3b0 [ 779.432758][T12296] ? lockdep_hardirqs_on+0x9c/0x150 [ 779.432780][T12296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.432802][T12296] ? clear_bhb_loop+0x60/0xb0 [ 779.432828][T12296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.432846][T12296] RIP: 0033:0x7f71aef8ebe9 [ 779.432862][T12296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.432880][T12296] RSP: 002b:00007f71afdc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 779.432902][T12296] RAX: ffffffffffffffda RBX: 00007f71af1b5fa0 RCX: 00007f71aef8ebe9 [ 779.432918][T12296] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 779.432932][T12296] RBP: 00007f71afdc8090 R08: 00000000000003d0 R09: 0000000000000000 [ 779.432945][T12296] R10: 0000200000001c40 R11: 0000000000000246 R12: 0000000000000001 [ 779.432959][T12296] R13: 00007f71af1b6038 R14: 00007f71af1b5fa0 R15: 00007ffc51465988 [ 779.432993][T12296] [ 781.012019][ T6006] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 781.029191][T12325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1729'. [ 781.179885][ T6006] usb 7-1: Using ep0 maxpacket: 8 [ 781.187283][ T6006] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 781.196965][ T6006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.257411][ T6006] pvrusb2: Hardware description: Terratec Grabster AV400 [ 781.276596][ T6006] pvrusb2: ********** [ 781.304361][ T6006] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 781.315951][ T6006] pvrusb2: Important functionality might not be entirely working. [ 781.329610][ T6006] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 781.341901][ T6006] pvrusb2: ********** [ 781.537570][ T2344] pvrusb2: Invalid write control endpoint [ 781.841836][ T6006] usb 7-1: USB disconnect, device number 11 [ 782.124917][ T2344] pvrusb2: Invalid write control endpoint [ 782.147019][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 782.172508][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 782.187814][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 782.244355][ T2344] pvrusb2: Device being rendered inoperable [ 782.257432][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 782.267435][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 782.280533][ T2344] pvrusb2: Attached sub-driver cx25840 [ 782.301938][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 782.324920][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 782.407857][T12363] FAULT_INJECTION: forcing a failure. [ 782.407857][T12363] name failslab, interval 1, probability 0, space 0, times 0 [ 782.421853][T12363] CPU: 0 UID: 0 PID: 12363 Comm: syz.3.1740 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 782.421878][T12363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 782.421890][T12363] Call Trace: [ 782.421898][T12363] [ 782.421905][T12363] dump_stack_lvl+0x189/0x250 [ 782.421930][T12363] ? __pfx____ratelimit+0x10/0x10 [ 782.421949][T12363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 782.421970][T12363] ? __pfx__printk+0x10/0x10 [ 782.422000][T12363] ? __pfx___might_resched+0x10/0x10 [ 782.422020][T12363] ? fs_reclaim_acquire+0x7d/0x100 [ 782.422046][T12363] should_fail_ex+0x414/0x560 [ 782.422072][T12363] should_failslab+0xa8/0x100 [ 782.422095][T12363] __kmalloc_cache_noprof+0x70/0x3d0 [ 782.422114][T12363] ? gen_new_estimator+0x1d9/0x9e0 [ 782.422142][T12363] gen_new_estimator+0x1d9/0x9e0 [ 782.422171][T12363] ? xt_rateest_tg_checkentry+0x1e4/0xb60 [ 782.422195][T12363] ? __pfx_gen_new_estimator+0x10/0x10 [ 782.422216][T12363] ? __kasan_kmalloc+0x93/0xb0 [ 782.422239][T12363] ? __raw_spin_lock_init+0x45/0x100 [ 782.422267][T12363] xt_rateest_tg_checkentry+0x34e/0xb60 [ 782.422295][T12363] ? __pfx_xt_rateest_tg_checkentry+0x10/0x10 [ 782.422320][T12363] ? xt_find_target+0x1f3/0x240 [ 782.422356][T12363] xt_check_target+0x3c3/0xa90 [ 782.422377][T12363] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 782.422401][T12363] ? __pfx_xt_check_target+0x10/0x10 [ 782.422423][T12363] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 782.422455][T12363] ? xt_find_target+0x1f3/0x240 [ 782.422491][T12363] translate_table+0x186b/0x2040 [ 782.422541][T12363] ? __pfx_translate_table+0x10/0x10 [ 782.422570][T12363] ? __might_fault+0xb0/0x130 [ 782.422607][T12363] ? _copy_from_user+0x94/0xb0 [ 782.422639][T12363] do_ip6t_set_ctl+0x970/0xce0 [ 782.422673][T12363] ? rcu_is_watching+0x15/0xb0 [ 782.422693][T12363] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 782.422739][T12363] ? __pfx___mutex_lock+0x10/0x10 [ 782.422760][T12363] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 782.422817][T12363] nf_setsockopt+0x26c/0x290 [ 782.422865][T12363] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 782.422894][T12363] do_sock_setsockopt+0x179/0x1b0 [ 782.422929][T12363] __x64_sys_setsockopt+0x13f/0x1b0 [ 782.422964][T12363] do_syscall_64+0xfa/0x3b0 [ 782.422986][T12363] ? lockdep_hardirqs_on+0x9c/0x150 [ 782.423007][T12363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.423027][T12363] ? clear_bhb_loop+0x60/0xb0 [ 782.423052][T12363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.423071][T12363] RIP: 0033:0x7f117578ebe9 [ 782.423089][T12363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.423106][T12363] RSP: 002b:00007f11765b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 782.423127][T12363] RAX: ffffffffffffffda RBX: 00007f11759b5fa0 RCX: 00007f117578ebe9 [ 782.423142][T12363] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 782.423154][T12363] RBP: 00007f11765b1090 R08: 00000000000003d0 R09: 0000000000000000 [ 782.423166][T12363] R10: 0000200000001c40 R11: 0000000000000246 R12: 0000000000000001 [ 782.423179][T12363] R13: 00007f11759b6038 R14: 00007f11759b5fa0 R15: 00007ffc82886618 [ 782.423211][T12363] [ 782.802120][T12366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 785.782972][T12395] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 786.040439][ T5915] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 786.227427][ T5915] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 786.237656][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.260766][ T5915] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 786.279422][ T5915] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 786.299249][ T5915] usb 7-1: Manufacturer: syz [ 786.323547][ T5915] usb 7-1: config 0 descriptor?? [ 786.622002][ T5915] rc_core: IR keymap rc-hauppauge not found [ 786.766590][ T5915] Registered IR keymap rc-empty [ 786.949184][ T5915] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 786.965619][ T5915] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input16 [ 787.317578][T12419] rc rc0: two consecutive events of type space [ 789.491714][ T9564] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 789.595630][ T8163] usb 7-1: USB disconnect, device number 12 [ 789.641910][ T9564] usb 4-1: device descriptor read/64, error -71 [ 789.699343][T12444] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1757'. [ 790.318892][ T9564] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 790.614185][ T9564] usb 4-1: device descriptor read/64, error -71 [ 790.828936][ T9564] usb usb4-port1: attempt power cycle [ 791.478015][ T9564] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 791.528783][T12461] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1762'. [ 791.596680][ T9564] usb 4-1: device descriptor read/8, error -71 [ 791.765060][ T30] audit: type=1326 audit(1755882164.559:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12478 comm="syz.0.1766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ca778ebe9 code=0x0 [ 791.859277][T12480] 9pnet: p9_errstr2errno: server reported unknown error @cF S [ 791.883667][T12483] FAULT_INJECTION: forcing a failure. [ 791.883667][T12483] name failslab, interval 1, probability 0, space 0, times 0 [ 791.909587][T12484] fuse: Bad value for 'fd' [ 791.932672][T12483] CPU: 0 UID: 0 PID: 12483 Comm: syz.6.1767 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 791.932698][T12483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 791.932710][T12483] Call Trace: [ 791.932719][T12483] [ 791.932727][T12483] dump_stack_lvl+0x189/0x250 [ 791.932754][T12483] ? __pfx____ratelimit+0x10/0x10 [ 791.932786][T12483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 791.932807][T12483] ? __pfx__printk+0x10/0x10 [ 791.932836][T12483] ? __pfx___might_resched+0x10/0x10 [ 791.932861][T12483] should_fail_ex+0x414/0x560 [ 791.932885][T12483] should_failslab+0xa8/0x100 [ 791.932908][T12483] __kmalloc_noprof+0xcb/0x4f0 [ 791.932926][T12483] ? sock_kmalloc+0xd6/0x160 [ 791.932948][T12483] sock_kmalloc+0xd6/0x160 [ 791.932969][T12483] af_alg_alloc_areq+0x8d/0x260 [ 791.932990][T12483] skcipher_recvmsg+0x356/0x11c0 [ 791.933029][T12483] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 791.933050][T12483] ? __lock_acquire+0xab9/0xd20 [ 791.933068][T12483] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 791.933086][T12483] ? security_socket_recvmsg+0x7e/0x2e0 [ 791.933104][T12483] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 791.933152][T12483] sock_recvmsg+0x22c/0x270 [ 791.933182][T12483] ____sys_recvmsg+0x1c9/0x460 [ 791.933210][T12483] ? __pfx_____sys_recvmsg+0x10/0x10 [ 791.933245][T12483] ? import_iovec+0x74/0xa0 [ 791.933277][T12483] ___sys_recvmsg+0x1b5/0x510 [ 791.933301][T12483] ? __pfx____sys_recvmsg+0x10/0x10 [ 791.933347][T12483] ? __fget_files+0x3a0/0x420 [ 791.933380][T12483] __x64_sys_recvmsg+0x198/0x260 [ 791.933401][T12483] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 791.933431][T12483] ? __pfx_ksys_write+0x10/0x10 [ 791.933446][T12483] ? rcu_is_watching+0x15/0xb0 [ 791.933473][T12483] ? do_syscall_64+0xbe/0x3b0 [ 791.933499][T12483] do_syscall_64+0xfa/0x3b0 [ 791.933520][T12483] ? lockdep_hardirqs_on+0x9c/0x150 [ 791.933539][T12483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.933559][T12483] ? clear_bhb_loop+0x60/0xb0 [ 791.933583][T12483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.933601][T12483] RIP: 0033:0x7fd0cbb8ebe9 [ 791.933618][T12483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 791.933636][T12483] RSP: 002b:00007fd0cca13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 791.933670][T12483] RAX: ffffffffffffffda RBX: 00007fd0cbdb5fa0 RCX: 00007fd0cbb8ebe9 [ 791.933685][T12483] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 791.933697][T12483] RBP: 00007fd0cca13090 R08: 0000000000000000 R09: 0000000000000000 [ 791.933728][T12483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.933740][T12483] R13: 00007fd0cbdb6038 R14: 00007fd0cbdb5fa0 R15: 00007ffc8b7b06d8 [ 791.933775][T12483] [ 792.843833][T12492] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 792.929668][T12493] netlink: 'syz.6.1769': attribute type 3 has an invalid length. [ 792.938425][T12493] netlink: 'syz.6.1769': attribute type 1 has an invalid length. [ 792.947235][T12493] netlink: 216 bytes leftover after parsing attributes in process `syz.6.1769'. [ 792.957389][T12493] NCSI netlink: No device for ifindex 33022 [ 793.290080][T12494] hub 8-0:1.0: USB hub found [ 793.297466][T12494] hub 8-0:1.0: 1 port detected [ 801.521281][ T30] audit: type=1326 audit(1755882174.309:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12539 comm="syz.6.1781" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0cbb8ebe9 code=0x0 [ 801.681647][T12543] 9pnet: p9_errstr2errno: server reported unknown error @cF S [ 802.113912][T12564] fuse: Bad value for 'fd' [ 803.317466][T12580] tipc: Enabling of bearer rejected, failed to enable media [ 803.782470][T12596] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 805.176168][T12610] kAFS: No cell specified [ 806.279639][ T30] audit: type=1326 audit(1755882179.069:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12624 comm="syz.0.1801" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ca778ebe9 code=0x0 [ 806.368124][T12626] 9pnet: p9_errstr2errno: server reported unknown error @cF S [ 806.440201][T12588] 9pnet_fd: Insufficient options for proto=fd [ 806.515211][T12628] fuse: Bad value for 'fd' [ 806.821926][T12638] kvm: apic: phys broadcast and lowest prio [ 807.864546][T12645] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 808.055638][T12647] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1809'. [ 809.028934][T12665] program syz.1.1810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 809.465541][ T9564] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 809.570660][T12676] overlayfs: failed to resolve './file1': -2 [ 809.687070][ T9564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.741018][ T9564] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 809.786155][ T9564] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 809.801519][ T9564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.848468][ T9564] usb 4-1: Product: syz [ 809.892874][ T9564] usb 4-1: Manufacturer: syz [ 809.912349][ T9564] usb 4-1: SerialNumber: syz [ 810.006573][T12685] x_tables: duplicate underflow at hook 3 [ 810.825301][T12694] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 811.849408][T12694] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 812.938083][T12708] vxcan3: entered allmulticast mode [ 813.953160][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.970050][ T9564] cdc_mbim 4-1:1.0: failed to get mac address [ 813.979375][ T9564] cdc_mbim 4-1:1.0: bind() failure [ 814.001385][ T9564] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 814.036892][T12722] overlayfs: failed to resolve './file1': -2 [ 814.047059][ T9564] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 814.079038][ T9564] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 814.139673][ T9564] usb 4-1: USB disconnect, device number 33 [ 814.466820][T12736] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 817.047672][T12780] overlayfs: failed to resolve './file1': -2 [ 817.418165][T12789] overlayfs: failed to resolve './file1': -2 [ 821.248571][T12831] overlayfs: failed to resolve './file0': -2 [ 822.326872][T12839] overlayfs: failed to resolve './file1': -2 [ 825.673271][T12882] fuse: Bad value for 'fd' [ 825.796929][T12884] overlayfs: failed to resolve './file0': -2 [ 827.027859][T12893] overlayfs: failed to resolve './file1': -2 [ 829.473568][T12913] fuse: Bad value for 'rootmode' [ 829.481731][ T5915] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 829.751781][ T5915] usb 7-1: Using ep0 maxpacket: 16 [ 829.765226][ T5915] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 829.780284][T12929] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1894'. [ 829.795759][ T5915] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 829.811947][ T5915] usb 7-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 830.545137][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.558356][ T5915] usb 7-1: config 0 descriptor?? [ 830.627536][T12931] overlayfs: failed to resolve './file1': -2 [ 830.892012][T12942] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 831.557348][ T5915] usbhid 7-1:0.0: can't add hid device: -71 [ 831.574136][ T5915] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 831.616876][ T5915] usb 7-1: USB disconnect, device number 13 [ 832.533338][T12956] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 835.089793][T13001] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 835.682319][T13006] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1914'. [ 837.068005][ T6006] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 837.888476][ T6006] usb 4-1: Using ep0 maxpacket: 16 [ 838.155972][ T6006] usb 4-1: config 255 has an invalid interface number: 47 but max is 0 [ 838.164552][ T6006] usb 4-1: config 255 has no interface number 0 [ 838.170907][ T6006] usb 4-1: config 255 interface 47 has no altsetting 0 [ 838.288237][ T6006] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b1.fc [ 838.301004][ T6006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.318544][ T6006] usb 4-1: Product: syz [ 838.323570][ T6006] usb 4-1: Manufacturer: syz [ 838.328606][ T6006] usb 4-1: SerialNumber: syz [ 840.095292][ T6006] legousbtower 4-1:255.47: interrupt endpoints not found [ 840.361966][ T6006] usb 4-1: USB disconnect, device number 34 [ 840.537039][T13054] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1928'. [ 847.081503][T13102] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1941'. [ 847.271924][T13108] input: syz0 as /devices/virtual/input/input17 [ 847.389825][T13110] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1942'. [ 848.702728][ T5915] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 849.053813][ T5915] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 851.519464][T13147] overlayfs: failed to clone upperpath [ 851.580158][ T5915] usb 7-1: string descriptor 0 read error: -71 [ 851.599129][T13146] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1953'. [ 851.629920][ T5915] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 851.686598][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.739607][ T5915] usb 7-1: can't set config #1, error -71 [ 851.767708][ T5915] usb 7-1: USB disconnect, device number 14 [ 852.742144][T13172] loop2: detected capacity change from 0 to 7 [ 852.798938][T13172] Dev loop2: unable to read RDB block 7 [ 852.828967][T13172] loop2: unable to read partition table [ 852.857591][T13172] loop2: partition table beyond EOD, truncated [ 852.911929][T13172] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 875.442429][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.513411][T13190] overlayfs: failed to resolve './file1': -2 [ 878.119848][T13194] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 878.150107][T13194] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 878.161945][T13194] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 878.171981][T13194] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 878.182086][T13194] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 878.244771][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 878.254405][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 878.266200][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 878.276030][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 878.285061][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 878.635664][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 878.652357][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 878.663038][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 878.673120][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 878.685868][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 878.923101][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 878.933451][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 878.953520][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 878.964919][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 878.975264][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 879.173643][T13194] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 879.184052][T13194] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 879.193744][T13194] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 879.202696][T13194] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 879.210452][T13194] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 879.919520][T13208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1975'. [ 880.088016][ T7912] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.156051][ T7912] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 880.423061][ T5846] Bluetooth: hci2: command tx timeout [ 880.513917][T13214] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 880.548546][ T7912] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.596562][ T7912] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 880.811765][ T5846] Bluetooth: hci3: command tx timeout [ 881.114070][ T5846] Bluetooth: hci4: command tx timeout [ 881.357792][ T5846] Bluetooth: hci6: command tx timeout [ 881.419854][ T7912] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.475074][ T7912] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 882.491650][ T5846] Bluetooth: hci2: command tx timeout [ 882.503771][ T7912] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.516179][ T7912] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 882.620511][T13224] IPVS: Error joining to the multicast group [ 882.891471][ T5846] Bluetooth: hci3: command tx timeout [ 882.904956][T13193] chnl_net:caif_netlink_parms(): no params data found [ 883.118138][T13202] chnl_net:caif_netlink_parms(): no params data found [ 883.131663][ T5846] Bluetooth: hci4: command tx timeout [ 883.371715][ T5846] Bluetooth: hci6: command tx timeout [ 883.648610][ T7912] bond1 (unregistering): (slave gretap1): Releasing active interface [ 883.826697][ T7912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 883.839629][ T7912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 883.850429][ T7912] bond0 (unregistering): Released all slaves [ 883.887928][ T7912] bond1 (unregistering): Released all slaves [ 883.916587][ T7912] bond2 (unregistering): Released all slaves [ 883.976066][T13193] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.994585][T13193] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.002613][T13193] bridge_slave_0: entered allmulticast mode [ 884.012623][T13193] bridge_slave_0: entered promiscuous mode [ 884.021390][T13198] chnl_net:caif_netlink_parms(): no params data found [ 884.100392][T13202] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.108505][T13202] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.108629][T13249] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1981'. [ 884.117286][T13202] bridge_slave_0: entered allmulticast mode [ 884.136920][ T30] audit: type=1326 audit(1755882256.929:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13248 comm="syz.1.1981" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71aef8ebe9 code=0x0 [ 884.138179][T13202] bridge_slave_0: entered promiscuous mode [ 884.173756][T13202] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.182229][T13202] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.189827][T13202] bridge_slave_1: entered allmulticast mode [ 884.198789][T13202] bridge_slave_1: entered promiscuous mode [ 884.207232][T13193] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.215641][T13193] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.224180][T13193] bridge_slave_1: entered allmulticast mode [ 884.233195][T13193] bridge_slave_1: entered promiscuous mode [ 884.246385][T13251] 9pnet: p9_errstr2errno: server reported unknown error @cF S [ 884.276258][ T7912] : left promiscuous mode [ 884.367495][ T7912] IPVS: stopping master sync thread 12395 ... [ 884.397311][T13202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.409880][T13202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.425610][T13193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.435902][T13205] chnl_net:caif_netlink_parms(): no params data found [ 884.499222][T13193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.576511][ T5846] Bluetooth: hci2: command tx timeout [ 884.638970][T13202] team0: Port device team_slave_0 added [ 884.675668][T13193] team0: Port device team_slave_0 added [ 884.716784][T13202] team0: Port device team_slave_1 added [ 884.729024][T13193] team0: Port device team_slave_1 added [ 884.761172][T13198] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.768378][T13198] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.792096][T13198] bridge_slave_0: entered allmulticast mode [ 884.799498][T13198] bridge_slave_0: entered promiscuous mode [ 884.824343][T13198] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.838875][T13198] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.847192][T13198] bridge_slave_1: entered allmulticast mode [ 884.869770][T13198] bridge_slave_1: entered promiscuous mode [ 884.971598][ T5846] Bluetooth: hci3: command tx timeout [ 885.039484][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1982'. [ 885.086636][ T7912] hsr_slave_0: left promiscuous mode [ 885.093337][ T7912] hsr_slave_1: left promiscuous mode [ 885.103024][ T7912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 885.110821][ T7912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 885.157825][ T7912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 885.166503][ T7912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 885.211457][ T5846] Bluetooth: hci4: command tx timeout [ 885.309862][T13263] hub 8-0:1.0: USB hub found [ 885.322430][T13263] hub 8-0:1.0: 1 port detected [ 885.325154][ T7912] veth1_macvtap: left promiscuous mode [ 885.343649][ T7912] veth0_macvtap: left promiscuous mode [ 885.349618][ T7912] veth1_vlan: left promiscuous mode [ 885.355773][ T7912] veth0_vlan: left promiscuous mode [ 885.467910][ T5846] Bluetooth: hci6: command tx timeout [ 886.297285][ T7912] team0 (unregistering): Port device team_slave_1 removed [ 886.345069][ T7912] team0 (unregistering): Port device team_slave_0 removed [ 886.355601][ T7922] smc: removing ib device syz! [ 886.661470][ T5846] Bluetooth: hci2: command tx timeout [ 886.753962][T13202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.761516][T13202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.788421][T13202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.835812][T13205] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.844012][T13205] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.851834][T13205] bridge_slave_0: entered allmulticast mode [ 886.859372][T13205] bridge_slave_0: entered promiscuous mode [ 886.910757][T13202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.918664][T13202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.947251][T13202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.997509][T13193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.051643][ T5846] Bluetooth: hci3: command tx timeout [ 887.213946][T13193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.240750][T13193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.289785][T13193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.308706][T13193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.320048][ T5846] Bluetooth: hci4: command tx timeout [ 887.352059][T13193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.428845][T13205] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.466113][T13205] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.551306][ T5846] Bluetooth: hci6: command tx timeout [ 887.561505][T13205] bridge_slave_1: entered allmulticast mode [ 887.683552][T13205] bridge_slave_1: entered promiscuous mode [ 887.850865][T13198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.945992][T13198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.264621][T13198] team0: Port device team_slave_0 added [ 888.382521][T13205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.454415][T13205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.735914][T13198] team0: Port device team_slave_1 added [ 888.885886][T13202] hsr_slave_0: entered promiscuous mode [ 888.935976][T13202] hsr_slave_1: entered promiscuous mode [ 888.972258][T13202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 888.979871][T13202] Cannot create hsr debugfs directory [ 889.025341][T13270] loop2: detected capacity change from 0 to 7 [ 889.040637][T13270] Dev loop2: unable to read RDB block 7 [ 889.047800][T13270] loop2: unable to read partition table [ 889.060093][T13270] loop2: partition table beyond EOD, truncated [ 889.069218][T13270] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 889.197416][T13193] hsr_slave_0: entered promiscuous mode [ 889.226306][T13193] hsr_slave_1: entered promiscuous mode [ 889.240541][T13193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 889.249205][T13193] Cannot create hsr debugfs directory [ 889.316578][T13205] team0: Port device team_slave_0 added [ 889.336711][T13198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.349417][T13198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.389949][T13198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.406045][T13198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.413759][T13198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.440881][T13198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.479677][T13205] team0: Port device team_slave_1 added [ 889.623826][T13205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.630826][T13205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.694663][T13205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.827214][T13205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.836463][T13205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.863693][T13205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.043145][T13198] hsr_slave_0: entered promiscuous mode [ 890.071106][T13198] hsr_slave_1: entered promiscuous mode [ 890.077910][T13198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 890.093020][T13198] Cannot create hsr debugfs directory [ 890.452199][ T7912] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.484679][T13205] hsr_slave_0: entered promiscuous mode [ 890.492435][T13205] hsr_slave_1: entered promiscuous mode [ 890.499348][T13205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 890.511272][T13205] Cannot create hsr debugfs directory [ 890.896356][T13287] fuse: Bad value for 'group_id' [ 890.904283][T13287] fuse: Bad value for 'group_id' [ 891.057399][ T7912] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.223026][ T7912] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.315452][ T7912] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.153912][ T7912] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.276798][ T7912] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.310715][T13193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.358054][ T7912] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.383699][T13310] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 892.393811][T13202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.417191][T13193] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.446158][ T7912] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.531889][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.539120][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.556566][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.563795][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 892.620353][T13202] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.670308][T13202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 892.682227][T13202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 893.304194][T13198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.344073][T13198] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.370380][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.377611][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.388335][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.395534][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.456291][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.463687][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.506128][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.513325][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.548159][ T30] audit: type=1326 audit(1755882266.339:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13314 comm="syz.1.1990" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71aef8ebe9 code=0x0 [ 893.716040][T13205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.836947][ T7912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.928721][T13205] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.983001][ T7912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.026570][ T7914] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.033811][ T7914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.053858][ T7914] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.061068][ T7914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.078409][T13202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 894.149046][ T7912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.256050][ T7912] bond0: (slave netdevsim0): Releasing backup interface [ 894.266828][T13315] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 894.288759][ T7912] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 894.291482][T13315] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 894.304048][ T7912] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 894.319878][T13315] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 894.324807][ T7912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.370347][T13315] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 894.395218][T13315] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 894.424683][T13315] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 894.438775][T13205] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 894.454901][T13315] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 894.462614][T13315] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 894.497578][T13193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 894.519237][T13315] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 894.592847][T13315] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 894.624085][T13315] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 894.640696][T13198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 894.654281][T13315] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 894.848627][ T7912] bridge_slave_1: left allmulticast mode [ 894.885316][ T7912] bridge_slave_1: left promiscuous mode [ 894.912050][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.942717][ T7912] bridge_slave_0: left allmulticast mode [ 894.948407][ T7912] bridge_slave_0: left promiscuous mode [ 894.969233][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.025723][ T7912] bridge_slave_1: left allmulticast mode [ 895.033595][ T7912] bridge_slave_1: left promiscuous mode [ 895.039912][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.057137][ T7912] bridge_slave_0: left allmulticast mode [ 895.070146][ T7912] bridge_slave_0: left promiscuous mode [ 895.078611][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.095051][ T7912] bridge_slave_1: left allmulticast mode [ 895.100708][ T7912] bridge_slave_1: left promiscuous mode [ 895.107153][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.311515][ T5915] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 895.483660][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 895.491108][ T5915] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 895.504588][ T5915] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 895.514188][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 895.527977][ T7912] team0: Port device bridge1 removed [ 895.533469][ T5915] usb 2-1: Product: syz [ 895.533487][ T5915] usb 2-1: Manufacturer: syz [ 895.533502][ T5915] usb 2-1: SerialNumber: syz [ 895.542667][ T5915] usb 2-1: config 0 descriptor?? [ 895.556669][T13349] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 895.615389][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 895.694619][ T7912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 895.705968][ T7912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 895.717931][ T7912] bond0 (unregistering): Released all slaves [ 895.824843][T13349] block nbd1: NBD_DISCONNECT [ 895.830432][T13349] block nbd1: Send disconnect failed -22 [ 895.848806][T13349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.857755][T13349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.867249][ T7912] bond1 (unregistering): Released all slaves [ 895.875263][T13348] block nbd1: Disconnected due to user request. [ 895.882478][T13348] block nbd1: shutting down sockets [ 895.894613][ T5892] usb 2-1: USB disconnect, device number 23 [ 896.247663][ T7912]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 896.257902][ T7912]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 896.267878][ T7912]  (unregistering): Released all slaves [ 896.425274][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 896.500825][ T7912] bridge0 (unregistering): left promiscuous mode [ 896.510961][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 896.651169][ T8937] Bluetooth: hci6: command 0x0c1a tx timeout [ 896.780702][ T7912] bond0 (unregistering): left promiscuous mode [ 896.787014][ T7912] bond_slave_0: left promiscuous mode [ 896.792887][ T7912] bond_slave_1: left promiscuous mode [ 896.808421][T13352] vivid-003: disconnect [ 896.833535][ T7912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 896.847872][ T7912] bond_slave_0: left allmulticast mode [ 896.855717][T13352] vivid-003: reconnect [ 896.860683][ T7912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 896.870316][ T7912] bond_slave_1: left allmulticast mode [ 896.877462][ T7912] bond0 (unregistering): Released all slaves [ 896.930350][T13202] veth0_vlan: entered promiscuous mode [ 897.129426][T13202] veth1_vlan: entered promiscuous mode [ 897.163054][ T7912] : left promiscuous mode [ 897.241793][T13205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.288283][T13360] binder: 13359:13360 ioctl c0306201 2000000003c0 returned -14 [ 897.338163][T13202] veth0_macvtap: entered promiscuous mode [ 897.498159][T13202] veth1_macvtap: entered promiscuous mode [ 897.528530][T13193] veth0_vlan: entered promiscuous mode [ 897.777606][ T8937] Bluetooth: hci2: command 0x0c1a tx timeout [ 898.068450][T13369] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 898.138897][T13193] veth1_vlan: entered promiscuous mode [ 898.193539][T13202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.236593][T13202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.290054][T13198] veth0_vlan: entered promiscuous mode [ 898.458233][T13193] veth0_macvtap: entered promiscuous mode [ 898.493878][ T8937] Bluetooth: hci3: command 0x0c1a tx timeout [ 898.508547][T13198] veth1_vlan: entered promiscuous mode [ 898.571026][ T8937] Bluetooth: hci4: command 0x0c1a tx timeout [ 898.630134][T13193] veth1_macvtap: entered promiscuous mode [ 898.631887][T13375] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1997'. [ 898.735452][ T8937] Bluetooth: hci6: command 0x0c1a tx timeout [ 899.139946][T13193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.245585][T13193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.295405][T13181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.325963][T13205] veth0_vlan: entered promiscuous mode [ 899.332301][T13181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.432078][ T7912] hsr_slave_0: left promiscuous mode [ 899.458087][ T7912] hsr_slave_1: left promiscuous mode [ 899.641287][ T7912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.651167][ T7912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.772682][ T7912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 899.780979][ T7912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.799544][ T7912] batman_adv: batadv0: Removing interface: virt_wifi0 [ 899.852210][ T8937] Bluetooth: hci2: command 0x0c1a tx timeout [ 899.901129][ T7912] hsr_slave_0: left promiscuous mode [ 899.914162][ T7912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.922271][ T7912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.931666][ T7912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 899.940229][ T7912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.959592][ T7912] hsr_slave_0: left promiscuous mode [ 899.966464][ T7912] hsr_slave_1: left promiscuous mode [ 900.029235][ T7912] veth1_macvtap: left promiscuous mode [ 900.035487][ T7912] veth0_macvtap: left promiscuous mode [ 900.042334][ T7912] veth1_vlan: left promiscuous mode [ 900.047678][ T7912] veth0_vlan: left promiscuous mode [ 900.057448][ T7912] veth1_macvtap: left promiscuous mode [ 900.063145][ T7912] veth0_macvtap: left promiscuous mode [ 900.069141][ T7912] veth1_vlan: left promiscuous mode [ 900.075389][ T7912] veth0_vlan: left promiscuous mode [ 900.084281][ T7912] veth1_macvtap: left promiscuous mode [ 900.089924][ T7912] veth0_macvtap: left promiscuous mode [ 900.095991][ T7912] veth1_vlan: left promiscuous mode [ 900.364948][ T7912] veth0_vlan: left promiscuous mode [ 900.581575][ T8937] Bluetooth: hci3: command 0x0c1a tx timeout [ 900.653442][ T8937] Bluetooth: hci4: command 0x0c1a tx timeout [ 900.811184][ T8937] Bluetooth: hci6: command 0x0c1a tx timeout [ 901.190787][ T7912] team0 (unregistering): Port device team_slave_1 removed [ 901.229999][ T7912] team0 (unregistering): Port device team_slave_0 removed [ 902.003118][ T7912] team0 (unregistering): Port device team_slave_1 removed [ 902.045371][ T7912] team0 (unregistering): Port device team_slave_0 removed [ 902.778004][ T7912] team0 (unregistering): Port device team_slave_1 removed [ 902.826112][ T7912] team0 (unregistering): Port device team_slave_0 removed [ 903.199647][T13205] veth1_vlan: entered promiscuous mode [ 903.226081][T13382] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 903.279333][T13198] veth0_macvtap: entered promiscuous mode [ 903.315067][T13198] veth1_macvtap: entered promiscuous mode [ 903.344478][ T6053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.346153][T13384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2000'. [ 903.357899][ T6053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.381755][ T30] audit: type=1326 audit(1755882276.169:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13383 comm="syz.1.2000" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71aef8ebe9 code=0x0 [ 903.489927][T13385] 9pnet: p9_errstr2errno: server reported unknown error @cF S [ 903.519035][T13205] veth0_macvtap: entered promiscuous mode [ 903.546877][T13198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.586410][T13205] veth1_macvtap: entered promiscuous mode [ 903.622479][T12129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.630334][T12129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.661718][T13198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.711113][T13390] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.1968'. [ 904.194757][T13205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 904.306148][T13205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 904.349091][T13181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.376166][T13181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.410698][T13394] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 904.596512][T13397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2003'. [ 905.220725][T12129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.281054][T12129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.463889][ T6053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.527613][ T6053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.762791][ T8937] Bluetooth: hci2: unexpected event for opcode 0x0c7d [ 906.855216][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.876169][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.192731][T13410] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 907.275346][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.461819][ T7912] IPVS: stop unused estimator thread 0... [ 907.495483][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.719164][T13420] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2007'. [ 907.738088][T13422] veth1_to_bond: entered allmulticast mode [ 907.752602][T13422] veth1_to_bond: entered promiscuous mode [ 907.826560][T13424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1970'. [ 907.861685][T13419] veth1_to_bond: left promiscuous mode [ 907.868406][T13419] veth1_to_bond: left allmulticast mode [ 907.964803][T13429] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1970'. [ 908.642902][T13431] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2009'. [ 908.785809][ T30] audit: type=1326 audit(1755882281.569:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13430 comm="syz.7.2009" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0cc98ebe9 code=0x0 [ 908.886358][T13435] 9pnet: p9_errstr2errno: server reported unknown error @cF S [ 909.065673][T13440] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 909.869218][ T8937] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 909.878749][ T8937] Bluetooth: hci2: Injecting HCI hardware error event [ 909.895572][ T8937] Bluetooth: hci2: hardware error 0x00 [ 910.140040][T13455] netlink: 'syz.9.2014': attribute type 10 has an invalid length. [ 910.194899][T13455] bond0: (slave bond_slave_0): Releasing backup interface [ 910.698092][T13464] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 911.532869][T13475] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.2021'. [ 911.932317][ T8937] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 912.245465][T13487] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 913.287386][T13502] Cannot find add_set index 0 as target [ 915.415468][T13519] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2033'. [ 915.597481][T13520] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.2034'. [ 919.241570][ T6006] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 919.547352][ T6006] usb 10-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 919.579750][T13555] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2044'. [ 919.641032][ T30] audit: type=1326 audit(1755882292.399:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13554 comm="syz.7.2044" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0cc98ebe9 code=0x0 [ 919.725560][T13556] 9pnet: p9_errstr2errno: server reported unknown error @cF S [ 919.764598][ T6006] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.773157][ T6006] usb 10-1: Product: syz [ 919.777620][ T6006] usb 10-1: Manufacturer: syz [ 919.782596][ T6006] usb 10-1: SerialNumber: syz [ 919.810412][ T6006] usb 10-1: config 0 descriptor?? [ 919.868002][T13559] xt_nat: multiple ranges no longer supported [ 920.510313][ T6006] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 920.969681][ T6006] usb 10-1: USB disconnect, device number 2 [ 922.718018][T13586] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2052'. [ 923.555631][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2058'. [ 923.582717][ T30] audit: type=1326 audit(1755882296.369:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13600 comm="syz.4.2058" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc30f8ebe9 code=0x0 [ 923.611631][ T6556] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 923.688450][T13603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 923.692210][T13604] 9pnet: p9_errstr2errno: server reported unknown error @cF S [ 923.732110][T13603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 923.781034][ T6556] usb 9-1: Using ep0 maxpacket: 32 [ 923.792410][ T6556] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 923.800961][ T6556] usb 9-1: config 0 has no interface number 0 [ 923.826494][ T6556] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 923.877155][ T6556] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.898388][ T6556] usb 9-1: Product: syz [ 923.908605][ T6556] usb 9-1: Manufacturer: syz [ 923.916589][ T6556] usb 9-1: SerialNumber: syz [ 923.926747][ T6556] usb 9-1: config 0 descriptor?? [ 923.938852][ T6556] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 924.145830][ T6556] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 924.175235][ T6556] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 925.213462][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 925.214745][ T6006] usb 9-1: USB disconnect, device number 2 [ 925.282980][ T6006] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 925.342272][ T6006] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 925.399079][ T6006] quatech2 9-1:0.51: device disconnected [ 927.810297][T13640] overlayfs: missing 'lowerdir' [ 928.192906][T13643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2068'. [ 929.344124][T13656] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2072'. [ 929.432433][ T30] audit: type=1326 audit(1755882302.209:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13655 comm="syz.7.2072" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0cc98ebe9 code=0x0 [ 929.531171][T13663] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.2073'. [ 930.400156][T13665] 9pnet: p9_errstr2errno: server reported unknown error @cF S [ 933.977095][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2078'. [ 935.083174][T13709] FAULT_INJECTION: forcing a failure. [ 935.083174][T13709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 935.096884][T13709] CPU: 1 UID: 0 PID: 13709 Comm: syz.1.2084 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 935.096913][T13709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 935.096926][T13709] Call Trace: [ 935.096936][T13709] [ 935.096945][T13709] dump_stack_lvl+0x189/0x250 [ 935.096976][T13709] ? __pfx____ratelimit+0x10/0x10 [ 935.097000][T13709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 935.097024][T13709] ? __pfx__printk+0x10/0x10 [ 935.097052][T13709] ? __might_fault+0xb0/0x130 [ 935.097086][T13709] should_fail_ex+0x414/0x560 [ 935.097114][T13709] _copy_from_user+0x2d/0xb0 [ 935.097145][T13709] get_itimerspec64+0x19e/0x2f0 [ 935.097189][T13709] ? __pfx_get_itimerspec64+0x10/0x10 [ 935.097238][T13709] __x64_sys_timer_settime+0x142/0x240 [ 935.097272][T13709] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 935.097320][T13709] ? do_syscall_64+0xbe/0x3b0 [ 935.097349][T13709] do_syscall_64+0xfa/0x3b0 [ 935.097374][T13709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.097394][T13709] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 935.097415][T13709] ? clear_bhb_loop+0x60/0xb0 [ 935.097441][T13709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.097462][T13709] RIP: 0033:0x7f71aef8ebe9 [ 935.097481][T13709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.097500][T13709] RSP: 002b:00007f71afd86038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 935.097523][T13709] RAX: ffffffffffffffda RBX: 00007f71af1b6180 RCX: 00007f71aef8ebe9 [ 935.097539][T13709] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000000 [ 935.097552][T13709] RBP: 00007f71afd86090 R08: 0000000000000000 R09: 0000000000000000 [ 935.097566][T13709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.097578][T13709] R13: 00007f71af1b6218 R14: 00007f71af1b6180 R15: 00007ffc51465988 [ 935.097612][T13709] [ 935.683430][ T9564] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 936.003688][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2085'. [ 936.018552][T13713] netlink: 'syz.1.2085': attribute type 3 has an invalid length. [ 936.173310][ T9564] usb 8-1: device descriptor read/64, error -71 [ 936.601895][ T9564] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 936.824903][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.224582][ T9564] usb 8-1: device descriptor read/64, error -71 [ 937.341413][ T9564] usb usb8-port1: attempt power cycle [ 938.235025][ T9564] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 939.313607][T13731] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2090'. [ 939.342333][ T9564] usb 8-1: device descriptor read/8, error -71 [ 939.366129][ T30] audit: type=1326 audit(1755882312.159:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13730 comm="syz.9.2090" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f403238ebe9 code=0x0 [ 939.738815][T13736] Bluetooth: MGMT ver 1.23 [ 941.623628][T13742] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 943.150982][ T6556] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 943.384452][ T6556] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 943.414756][ T6556] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 943.471025][ T6556] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 943.526579][ T6556] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.577478][T13757] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 943.604873][ T6556] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 944.651724][T13777] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2104'. [ 944.773862][ T30] audit: type=1326 audit(1755882317.559:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13776 comm="syz.7.2104" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0cc98ebe9 code=0x0 [ 945.006116][T13783] 9pnet: p9_errstr2errno: server reported unknown error @cF S [ 945.514222][ T6556] usb 10-1: USB disconnect, device number 3 [ 945.620480][T13788] 9pnet: p9_errstr2errno: server reported unknown error pA [ 946.402253][T13807] [ 946.404656][T13807] ====================================================== [ 946.411702][T13807] WARNING: possible circular locking dependency detected [ 946.418760][T13807] 6.16.0-syzkaller #0 Not tainted [ 946.423828][T13807] ------------------------------------------------------ [ 946.430872][T13807] syz.8.2112/13807 is trying to acquire lock: [ 946.436953][T13807] ffff8880253ef988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 946.447988][T13807] [ 946.447988][T13807] but task is already holding lock: [ 946.455372][T13807] ffff8880253efa30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0 [ 946.464997][T13807] [ 946.464997][T13807] which lock already depends on the new lock. [ 946.464997][T13807] [ 946.475417][T13807] [ 946.475417][T13807] the existing dependency chain (in reverse order) is: [ 946.484450][T13807] [ 946.484450][T13807] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 946.492320][T13807] lock_acquire+0x120/0x360 [ 946.497373][T13807] __mutex_lock+0x182/0xe80 [ 946.502428][T13807] refcount_dec_and_mutex_lock+0x30/0xa0 [ 946.508728][T13807] nbd_config_put+0x2c/0x790 [ 946.513875][T13807] nbd_release+0xfe/0x140 [ 946.518763][T13807] bdev_release+0x533/0x650 [ 946.523816][T13807] blkdev_release+0x15/0x20 [ 946.528868][T13807] __fput+0x449/0xa70 [ 946.533403][T13807] fput_close_sync+0x119/0x200 [ 946.538748][T13807] __x64_sys_close+0x7f/0x110 [ 946.543982][T13807] do_syscall_64+0xfa/0x3b0 [ 946.549036][T13807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.555479][T13807] [ 946.555479][T13807] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 946.563347][T13807] lock_acquire+0x120/0x360 [ 946.568402][T13807] __mutex_lock+0x182/0xe80 [ 946.573453][T13807] __del_gendisk+0x129/0x9e0 [ 946.578596][T13807] del_gendisk+0xe8/0x160 [ 946.583488][T13807] nbd_dev_remove_work+0x47/0xe0 [ 946.588989][T13807] process_scheduled_works+0xade/0x17b0 [ 946.595080][T13807] worker_thread+0x8a0/0xda0 [ 946.600200][T13807] kthread+0x70e/0x8a0 [ 946.604803][T13807] ret_from_fork+0x3fc/0x770 [ 946.609935][T13807] ret_from_fork_asm+0x1a/0x30 [ 946.615231][T13807] [ 946.615231][T13807] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 946.623695][T13807] validate_chain+0xb9b/0x2140 [ 946.629001][T13807] __lock_acquire+0xab9/0xd20 [ 946.634212][T13807] lock_acquire+0x120/0x360 [ 946.639241][T13807] down_write+0x96/0x1f0 [ 946.644021][T13807] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 946.650304][T13807] nbd_start_device+0x16c/0xac0 [ 946.655690][T13807] nbd_genl_connect+0x135b/0x18f0 [ 946.661255][T13807] genl_family_rcv_msg_doit+0x215/0x300 [ 946.667356][T13807] genl_rcv_msg+0x60e/0x790 [ 946.672397][T13807] netlink_rcv_skb+0x205/0x470 [ 946.677698][T13807] genl_rcv+0x28/0x40 [ 946.682210][T13807] netlink_unicast+0x75c/0x8e0 [ 946.687509][T13807] netlink_sendmsg+0x805/0xb30 [ 946.692817][T13807] __sock_sendmsg+0x21c/0x270 [ 946.698030][T13807] ____sys_sendmsg+0x505/0x830 [ 946.703337][T13807] ___sys_sendmsg+0x21f/0x2a0 [ 946.708559][T13807] __x64_sys_sendmsg+0x19b/0x260 [ 946.714041][T13807] do_syscall_64+0xfa/0x3b0 [ 946.719080][T13807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.725512][T13807] [ 946.725512][T13807] other info that might help us debug this: [ 946.725512][T13807] [ 946.735748][T13807] Chain exists of: [ 946.735748][T13807] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 946.735748][T13807] [ 946.749947][T13807] Possible unsafe locking scenario: [ 946.749947][T13807] [ 946.757401][T13807] CPU0 CPU1 [ 946.762793][T13807] ---- ---- [ 946.768172][T13807] lock(&nbd->config_lock); [ 946.772790][T13807] lock(&disk->open_mutex); [ 946.779943][T13807] lock(&nbd->config_lock); [ 946.787066][T13807] lock(&set->update_nr_hwq_lock); [ 946.792285][T13807] [ 946.792285][T13807] *** DEADLOCK *** [ 946.792285][T13807] [ 946.800443][T13807] 3 locks held by syz.8.2112/13807: [ 946.805641][T13807] #0: ffffffff8f5701f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 946.813850][T13807] #1: ffffffff8f570008 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 946.822839][T13807] #2: ffff8880253efa30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0 [ 946.832891][T13807] [ 946.832891][T13807] stack backtrace: [ 946.839046][T13807] CPU: 0 UID: 0 PID: 13807 Comm: syz.8.2112 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 946.839066][T13807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 946.839078][T13807] Call Trace: [ 946.839086][T13807] [ 946.839094][T13807] dump_stack_lvl+0x189/0x250 [ 946.839119][T13807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 946.839138][T13807] ? __pfx__printk+0x10/0x10 [ 946.839161][T13807] ? print_lock_name+0xde/0x100 [ 946.839183][T13807] print_circular_bug+0x2ee/0x310 [ 946.839206][T13807] check_noncircular+0x134/0x160 [ 946.839229][T13807] validate_chain+0xb9b/0x2140 [ 946.839264][T13807] __lock_acquire+0xab9/0xd20 [ 946.839282][T13807] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 946.839306][T13807] lock_acquire+0x120/0x360 [ 946.839321][T13807] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 946.839347][T13807] ? kernfs_add_one+0xf0/0x520 [ 946.839371][T13807] down_write+0x96/0x1f0 [ 946.839392][T13807] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 946.839415][T13807] ? __pfx_down_write+0x10/0x10 [ 946.839437][T13807] ? kernfs_add_one+0xf0/0x520 [ 946.839460][T13807] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 946.839485][T13807] ? sysfs_add_file_mode_ns+0x238/0x300 [ 946.839502][T13807] ? sysfs_add_file_mode_ns+0x259/0x300 [ 946.839522][T13807] nbd_start_device+0x16c/0xac0 [ 946.839545][T13807] ? __nla_parse+0x40/0x60 [ 946.839565][T13807] ? device_create_file+0xf4/0x1c0 [ 946.839591][T13807] nbd_genl_connect+0x135b/0x18f0 [ 946.839616][T13807] ? __pfx_nbd_genl_connect+0x10/0x10 [ 946.839642][T13807] ? __nla_parse+0x40/0x60 [ 946.839664][T13807] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 946.839689][T13807] genl_family_rcv_msg_doit+0x215/0x300 [ 946.839712][T13807] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 946.839740][T13807] genl_rcv_msg+0x60e/0x790 [ 946.839761][T13807] ? __pfx_genl_rcv_msg+0x10/0x10 [ 946.839778][T13807] ? __pfx_nbd_genl_connect+0x10/0x10 [ 946.839805][T13807] netlink_rcv_skb+0x205/0x470 [ 946.839829][T13807] ? __pfx_genl_rcv_msg+0x10/0x10 [ 946.839847][T13807] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 946.839878][T13807] ? down_read+0x1ad/0x2e0 [ 946.839900][T13807] genl_rcv+0x28/0x40 [ 946.839916][T13807] netlink_unicast+0x75c/0x8e0 [ 946.839942][T13807] netlink_sendmsg+0x805/0xb30 [ 946.839971][T13807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 946.840001][T13807] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 946.840019][T13807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 946.840044][T13807] __sock_sendmsg+0x21c/0x270 [ 946.840066][T13807] ____sys_sendmsg+0x505/0x830 [ 946.840096][T13807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 946.840127][T13807] ? import_iovec+0x74/0xa0 [ 946.840152][T13807] ___sys_sendmsg+0x21f/0x2a0 [ 946.840180][T13807] ? __pfx____sys_sendmsg+0x10/0x10 [ 946.840222][T13807] ? __fget_files+0x2a/0x420 [ 946.840241][T13807] ? __fget_files+0x3a0/0x420 [ 946.840270][T13807] __x64_sys_sendmsg+0x19b/0x260 [ 946.840299][T13807] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 946.840331][T13807] ? rcu_is_watching+0x15/0xb0 [ 946.840351][T13807] ? do_syscall_64+0xbe/0x3b0 [ 946.840373][T13807] do_syscall_64+0xfa/0x3b0 [ 946.840391][T13807] ? lockdep_hardirqs_on+0x9c/0x150 [ 946.840409][T13807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.840427][T13807] ? clear_bhb_loop+0x60/0xb0 [ 946.840447][T13807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.840464][T13807] RIP: 0033:0x7efd6f38ebe9 [ 946.840481][T13807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 946.840496][T13807] RSP: 002b:00007efd701dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 946.840514][T13807] RAX: ffffffffffffffda RBX: 00007efd6f5b6090 RCX: 00007efd6f38ebe9 [ 946.840527][T13807] RDX: 0000000024000110 RSI: 0000200000000180 RDI: 0000000000000007 [ 946.840539][T13807] RBP: 00007efd6f411e19 R08: 0000000000000000 R09: 0000000000000000 [ 946.840550][T13807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 946.840561][T13807] R13: 00007efd6f5b6128 R14: 00007efd6f5b6090 R15: 00007ffe2fac4f68 [ 946.840580][T13807] [ 947.285183][ T8937] block nbd0: Receive control failed (result -32)