last executing test programs: 5m41.613938923s ago: executing program 1 (id=1068): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@redirect_dir_off}, {@userxattr}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000009c0)="58000000140019234083598082e59a49e8aefc0b45ff810500000000070058000b480400945f640094272d702d00f9e50000004c8537db9600f854c8a4487c", 0x3f}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r2]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x3}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x226}], 0x1}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) r7 = dup(r5) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000280)={0x7, r4, 0x2, {0x9, 0x8}, 0xe}, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000380)={"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"}) 5m41.264561674s ago: executing program 0 (id=1069): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000140)={0x0, &(0x7f0000000080)=""/136}) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'}) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, 0x0, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[r3], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) 5m41.262788885s ago: executing program 4 (id=1070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) close(0xffffffffffffffff) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000000000000e006"]) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c980128876340860cc070111ffe80000000000000ffffa1dce408db9d13"], 0xffdd) 5m41.243830489s ago: executing program 2 (id=1071): r0 = syz_io_uring_complete(0x0) write$sysctl(r0, &(0x7f0000000000)='3\x00', 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7b, 0x3, "f6a6946c9832508c"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000100)="1876d433", 0x4}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x48400, 0x0) r5 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) read$dsp(r4, &(0x7f00000011c0)=""/4117, 0x200021d5) creat(&(0x7f0000000000)='./file0\x00', 0xc2) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x2, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='udf\x00', 0x1000000, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e0000000104000003"], 0x50) r7 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r7) 5m40.022037732s ago: executing program 0 (id=1073): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x1, 'lo\x00', {}, 0x8000}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000240)=0x210) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@abs={0x1}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000040)=0x888b, 0x4) connect$unix(r2, &(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0xce42, 0xc0000) ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000340)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0xe8, 0x178, 0x178, 0xe8, 0x178, 0x1a0, 0x230, 0x230, 0x1a0, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x1, 0x2, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) 5m38.89544446s ago: executing program 3 (id=1075): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000680001002abd7000020000000a00000000000000060007000200000008000500", @ANYRES32=r2, @ANYBLOB="14000880040008800c000280"], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x9, 0xc0, 0x7, 0x2000, r0, 0x9, '\x00', r2, 0xffffffffffffffff, 0x5, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xe, @loopback}, 0x1c) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="13000000100000003b0000000000000020"], 0x50) r8 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) setresuid(0xee01, 0xee00, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) fcntl$setlease(r8, 0x400, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r9, &(0x7f0000002140)={0x2020}, 0x2100) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x2) syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x5, 0xf989, 'Y'}]}}}}}}}}, 0x0) 5m38.343160715s ago: executing program 0 (id=1076): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x2, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x6, 0x0) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f00000000c0)={{0x2, 0x1, 0x26e4, 0x4, 0x1}, 0x397, [0x3, 0x8, 0x0, 0x6, 0x2, 0x8001, 0xfff, 0x6, 0x432, 0x9, 0x7, 0x4, 0xbae, 0x6, 0x3, 0x0, 0x3, 0x8, 0x1, 0x7c, 0x101, 0x5, 0xf, 0xfffffffe, 0xfac, 0x25, 0x3, 0x3, 0x6, 0x40, 0x9380, 0x3, 0x873, 0x6, 0x1, 0x80000000, 0x7, 0x7, 0x40, 0x38b, 0xf, 0x80, 0x0, 0x8, 0x2, 0x5, 0x85, 0x4, 0xff, 0xf21, 0x6, 0x5, 0xb, 0xffffff81, 0x1a3, 0x5, 0x0, 0x4, 0xc133, 0x1ff, 0x9, 0x1, 0x4c, 0x7ff, 0xfffffffb, 0x4, 0x3, 0x6, 0x5, 0x5, 0x50, 0x7, 0x2, 0x7, 0xb4b, 0x1, 0x6, 0x7858e30e, 0x4, 0x0, 0x8, 0x9, 0x7, 0x7fff, 0x2ad, 0x6f70, 0x1, 0x5, 0xd, 0x6075f774, 0x3, 0x9, 0x0, 0x4, 0x7fffffff, 0x7f, 0x9, 0xe, 0x1, 0xfffffffe, 0x8, 0xee4, 0x3, 0x5, 0x1ff, 0x5, 0x10001, 0x1, 0x7, 0x0, 0x1000, 0x8, 0x1, 0x95b, 0x5, 0x1, 0x8000, 0x9, 0x80, 0xff, 0x7, 0x8000, 0xa0180358, 0xfff, 0x3, 0x2, 0x9, 0x2, 0xffffff24, 0xa, 0x2, 0x3, 0x8001, 0x6, 0xd6, 0xf24, 0x2, 0x5, 0xfff, 0x7, 0x9, 0x5c, 0x2, 0x10001, 0xd02, 0x676, 0x21, 0x1000, 0xfd, 0x4, 0x70000, 0x5, 0x6, 0x5, 0x8, 0xb, 0x4105eb8, 0x30, 0x8, 0x40, 0xd, 0xfeb5, 0x719, 0x8, 0xe, 0x6, 0x9, 0x80000001, 0xfffffff8, 0xf8, 0x6, 0x11e0948f, 0x5, 0x3, 0x7, 0x2, 0x8000, 0xa99, 0x4, 0x927, 0x7, 0x8, 0x6f2d, 0x5, 0x8, 0xb3a, 0x5, 0x6cc, 0xfffffff7, 0xfffffbff, 0x70f, 0x9, 0x18000, 0x7, 0x0, 0x3, 0x0, 0x5, 0x7, 0x2, 0x5, 0x1, 0x10000, 0x29, 0x3, 0xc1e, 0x1, 0x420e, 0x3, 0x9, 0x5, 0x7, 0x1000, 0xa3de, 0x1, 0x55ea5490, 0x7, 0x453292dc, 0x4, 0xe42, 0x7ff, 0x200, 0x4, 0x9, 0x6, 0x3a4e6ae0, 0x10001, 0x8001, 0x8001, 0xb, 0x3, 0xc2b, 0xfffffffd, 0x8, 0x3, 0x400, 0xd90c, 0x800, 0xf60, 0x6, 0x8, 0x5, 0x5a5, 0x3, 0xffffffff, 0x2, 0x5, 0x4a, 0x3, 0x6, 0x81, 0xfffffffe, 0x8, 0x7, 0x7, 0x4, 0x6f7, 0x80, 0x7, 0x1, 0x5, 0x8, 0x0, 0x6, 0xda5, 0x8, 0x7, 0x1, 0x400, 0x1, 0x0, 0x2, 0x5, 0xffff, 0x10, 0x1000, 0x7ff, 0x0, 0xc4, 0x7fffffff, 0xef, 0x2, 0x10001, 0x7f, 0x0, 0x6, 0x9, 0x2, 0x6d9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x1, 0xf, 0x3, 0xa5, 0xfffffffb, 0x7, 0x0, 0xfffffffe, 0x0, 0x87, 0xff, 0xffffff2a, 0x8, 0x81, 0x9, 0x9, 0x101, 0x8, 0x5, 0xb, 0x1, 0x7, 0x3, 0x400, 0x0, 0x8, 0x4, 0x4, 0x3, 0x1, 0x1f, 0xb, 0x0, 0xffffffff, 0x1, 0x8, 0x9e, 0x6, 0x4882, 0x10001, 0x1, 0x9, 0x3, 0x6, 0x0, 0x9, 0x7ff, 0x3, 0x1ff, 0x40, 0xa, 0x1, 0x8, 0xcfa, 0xc0000000, 0x80, 0x80000001, 0xff, 0x9, 0x74bd, 0x0, 0x3af0b9f5, 0xb155, 0x9, 0x3c7, 0x1, 0x2, 0x2, 0x7, 0x2, 0x401, 0x1, 0x8, 0xcb, 0x4, 0x7, 0x4, 0x7, 0x101, 0x7872, 0x8, 0x6, 0x0, 0x7, 0xe, 0x3, 0xffff, 0x9, 0x8, 0x7, 0x6, 0x2eeb, 0x0, 0x3, 0x581, 0x1e6, 0x1, 0x3, 0x9, 0x4, 0x0, 0xffffff00, 0x9, 0x10000, 0x0, 0x7, 0x9, 0x3, 0x800, 0x7, 0x4, 0x0, 0xffffff40, 0x84e, 0xfffffffb, 0x8, 0x8, 0x10, 0xaf4, 0x2, 0x101, 0x200, 0x33be, 0x10, 0xd0, 0xc731235, 0xda, 0x0, 0x9, 0x7fffffff, 0x5, 0x3, 0x7, 0x101, 0x8, 0x394e, 0x200, 0x4, 0x6, 0x7, 0x7, 0x0, 0x8, 0x1, 0xe, 0xd0, 0x7, 0x200, 0xfb78, 0x40, 0x200, 0xffffff44, 0x9, 0x1ff, 0x1, 0x8, 0x8, 0x1, 0xa29, 0x7, 0xfff, 0x7489, 0x0, 0x2, 0x3, 0x0, 0x6, 0x54c7, 0x80000000, 0x5, 0x5, 0xd, 0x4, 0x3, 0x200, 0x4, 0x6, 0x7f, 0x3, 0x477d, 0xf, 0x100, 0x6, 0x267c, 0xa, 0x2, 0x10000, 0x2, 0x5, 0xfffffffb, 0x3, 0x7ff, 0x8, 0x6, 0x4c, 0x7, 0x8c, 0x200, 0x5, 0xfffffffe, 0x0, 0x5, 0x3, 0x5ad, 0x6, 0x9, 0x4, 0x9, 0x91a, 0x3ff, 0x8, 0x8, 0x7, 0x1000, 0x4658, 0xfffffffa, 0x891, 0xc, 0x0, 0x0, 0x1, 0x40, 0x8001, 0x101, 0x4, 0x5, 0x4, 0x240, 0x1, 0x7c, 0x6, 0x80000001, 0x800, 0x8, 0x5, 0x1, 0x200, 0xd, 0x3, 0x9, 0x4, 0x7fffffff, 0x9, 0xe6, 0x101, 0x8, 0x800, 0x7, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfff, 0xa563, 0x1e, 0x200, 0x0, 0x8, 0x7, 0x7, 0x1, 0x8, 0x9, 0xffffffff, 0x2f, 0x400000, 0x1, 0x6, 0x1ff, 0x3d4b, 0x1, 0x7, 0x1, 0x4, 0xac43, 0x6, 0xe7, 0x0, 0x6, 0x9, 0x800, 0x5, 0x3ff, 0x0, 0x3, 0xfffffff6, 0x4, 0x5, 0x9, 0x0, 0x8, 0x0, 0x0, 0x1000, 0xcb54, 0xffff0001, 0x8d000000, 0x9ed, 0xfffffff8, 0x10000, 0x7, 0x80000000, 0x1, 0x2, 0x1, 0x2, 0x1, 0x81, 0x0, 0x4, 0xc, 0x5, 0x9, 0xffffffff, 0x2, 0x5b9, 0x3, 0x0, 0x8, 0x7, 0x5, 0x9, 0x1, 0x5, 0x101, 0x4bb0, 0x6, 0xd, 0x4, 0xa, 0xfffffff9, 0xc88, 0x6, 0xff, 0x8, 0x0, 0x6, 0x6, 0x6, 0x0, 0x8, 0x9c, 0x2, 0xfffffffa, 0xc12, 0x9, 0xfffffff8, 0x1, 0x5, 0x2e99, 0x68, 0x9, 0x5, 0x8d, 0x4, 0x680ce563, 0x3, 0x6000000, 0x7757a759, 0x9676, 0x4, 0x1ff, 0x2, 0x0, 0x7, 0x594, 0x8, 0x0, 0x3, 0x8, 0x9, 0x8, 0x1, 0x8000, 0x6, 0x667, 0x6, 0x81, 0x8000, 0x6, 0x6, 0x8, 0x8001, 0x7fff, 0x5, 0x5ad, 0x100, 0x10000, 0x1, 0x5, 0x0, 0x189, 0x7fff, 0xf5, 0x7ff, 0xfffffff8, 0x73a, 0x4, 0x5d7, 0xfffffffd, 0x8, 0x5, 0x0, 0xc8, 0x5595229a, 0x0, 0x4, 0xc000000, 0x9, 0x1, 0x5, 0x8001, 0x1, 0x8, 0x81, 0x3, 0xbb61, 0x9, 0x0, 0x0, 0xa, 0xf, 0x2c00000, 0x8, 0xa, 0x200, 0x8, 0x9, 0x1, 0x5, 0x9, 0xf, 0x9, 0x4, 0x6, 0x40, 0x140, 0x2, 0xfffffff9, 0xe451, 0x3, 0xe, 0x6, 0x1, 0xff, 0x6, 0x0, 0x0, 0x6, 0x80000001, 0x2, 0x3, 0x24, 0xfffffffe, 0x0, 0xe1bd, 0xfffff9a4, 0x9, 0xe, 0x200, 0xfff, 0x100, 0x2, 0x6, 0x95b, 0x45b, 0x4, 0x7, 0x4, 0x7, 0x6, 0x4, 0xba, 0x9a5, 0x7ff, 0x8001, 0x6, 0x8, 0x8, 0x0, 0x3, 0x6, 0x4, 0x7, 0x10001, 0x3, 0x1, 0x400, 0x9, 0x2, 0x0, 0x35a, 0xdc18, 0xf2f, 0x9, 0x7f, 0xda37, 0x5, 0x800, 0x1, 0x8, 0xe0000000, 0x5, 0x7, 0xfffff3ee, 0x439, 0x2, 0x9, 0x100, 0x8, 0x70000000, 0x5, 0x8, 0x9, 0x0, 0x80, 0x80, 0x8, 0x0, 0xda2a, 0x80000001, 0x9bea, 0x556, 0x7, 0x0, 0x9, 0x1, 0x1, 0xfffeffff, 0xffff, 0x37, 0xd30, 0x7ac, 0x87, 0x3, 0x9, 0x0, 0x1, 0x2, 0x5, 0x3, 0xfff, 0x9, 0x496, 0x401, 0x7f, 0x3, 0xfffffff8, 0x6, 0x8, 0x3, 0xa, 0x5, 0x1, 0x3, 0x5, 0x0, 0x0, 0x1000, 0xc, 0xf, 0x3, 0x7f, 0x6, 0xffffffff, 0x10000, 0x1, 0x7, 0x2, 0x0, 0xf359498, 0x8, 0x4, 0x8, 0xc3f, 0xa5, 0x54, 0x95, 0x0, 0x3, 0x6, 0x1000, 0x8, 0x7, 0x5, 0x6, 0x3, 0x8, 0x3, 0xc000000, 0x3, 0x6, 0xb2e6, 0x2, 0x8, 0x9, 0x7fff, 0xc, 0x4, 0x1, 0x930d, 0x4, 0x1, 0x3ff, 0x125, 0x4, 0x9, 0x1, 0xb8, 0x3c88765c, 0x7fff, 0x3, 0x4510, 0x1b09, 0xffff8001, 0x6, 0x6, 0x0, 0x10001, 0x5, 0x0, 0x9, 0x248c, 0x9, 0x400, 0x200, 0x8, 0xff, 0x3, 0x4ed, 0x0, 0x1, 0x1, 0xb, 0x430a, 0x40, 0xfffffffe, 0x4, 0x3d4, 0xd54, 0x6, 0x6, 0x4, 0x6, 0x1000, 0x6, 0xf4, 0xfffffff7, 0xfffffff9, 0x2000000, 0xfffffff8, 0xe42, 0x0, 0x10, 0xa01, 0x1, 0xa9, 0xd, 0x80000000, 0x5, 0x40, 0xdab6, 0xfffffffd, 0x1, 0x40, 0x9, 0x9, 0x0, 0x7a6, 0x9fa, 0x7, 0x63, 0x7, 0x9, 0xe8d3, 0x4, 0x439, 0x9, 0x9a5, 0xf, 0x1, 0x2, 0x1, 0x7f, 0x3, 0x5572, 0xd8a6, 0x100, 0x3, 0x1, 0x80, 0x2bc63198, 0xcd, 0x5, 0x10001, 0x0, 0x1ff, 0x9, 0xfffff0f3, 0x8, 0x0, 0x1, 0x90, 0x4718, 0x0, 0x80, 0x6, 0x7, 0x10000, 0x1, 0x8, 0x1, 0x8, 0x3, 0xf821, 0x7ff, 0x4, 0x988b, 0x3, 0x5c, 0x40, 0x9, 0x7, 0x512126d4, 0x7, 0x1, 0x8001, 0x6, 0x1000]}) 5m38.038116156s ago: executing program 0 (id=1077): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$swradio(0x0, 0x1, 0x2) mkdir(0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) link(&(0x7f0000000280)='./file0\x00', 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000480)={0x0, 'virt_wifi0\x00', {0x2}, 0xe80}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) 5m38.015785572s ago: executing program 1 (id=1078): syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585cf"], 0x0) mount$bpf(0x0, 0x0, 0xffffffffffffffff, 0x40, &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESDEC, @ANYBLOB=',dirsync,seclabel,smackfsdef=,fowner>', @ANYRESDEC, @ANYBLOB="2c02e7ab16163dcbe633e1914efa1ad6f8419724f29c4c4e4db5eb7935317719124d26fc426e590b9f79cd8aab9fc9cb7e1c5af4ff90188ef2ae06c324ccef73b6a429a1"]) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001900010000000000000000000a000000780000000006000008001e00000000000c0009"], 0x30}}, 0x0) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000340), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x4005, 0x8, 0xfffffff7, 0x4888, r1, 0x9, '\x00', 0x0, r2, 0x3, 0x2, 0x2, 0xc, @void, @value, @void, @value}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) setgid(0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0xa) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="2b63707573657420c5302dc6d43bfafecba2135547819df763fa577ce60de286307b4e3f36dcd3ed80d9246b43e225beadf6245b0be1d2642c8514b64346fd1b77e49773f6f29b60e67127615ede2b624650d3e9bab3392e0842d9ee82771b4a59c9206228f1602264b11da77f98f519423fda7ee1f630aa"], 0x8) 5m37.97865369s ago: executing program 4 (id=1079): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee9, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x80801}, 0x0) fanotify_init(0x34, 0x1) 5m37.211710197s ago: executing program 3 (id=1080): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009"], 0x0) r1 = epoll_create1(0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) r3 = memfd_secret(0x0) fchmod(r3, 0x134) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xfff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x21008, 0x3, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) setfsgid(0xffffffffffffffff) syz_open_dev$midi(0x0, 0x3, 0x88c02) io_setup(0x3, 0x0) eventfd(0x0) memfd_create(&(0x7f0000000000)='.\x00', 0x1) unshare(0x60400) pselect6(0x40, &(0x7f0000000180)={0xfc, 0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x100000001}, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 5m37.160844138s ago: executing program 2 (id=1081): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) stat(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f4", 0xa}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x700000000000000) 5m36.981968419s ago: executing program 0 (id=1082): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x7c5, 0x1, 0x3, 0xd59f80, 0x8, 0x9, 0xb, 0xc, 0x7, 0x80, 0xe72, 0xb0c, 0x8, 0x35, 0x27, {0x6fc, 0x8001}, 0x3, 0xed}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000300)={0x40, 0x3, 0x3, '\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000500000003000000130000050a000000230000000500000001000000005f5f5f00"], 0x0, 0x35, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) io_setup(0x6, &(0x7f0000000840)) add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = socket$igmp6(0xa, 0x3, 0x2) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000440), 0x2008, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000280), 0xb, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000100)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000500)={0x0, r6, 0x0, 0x0, 0x0, 0x7, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000640)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r8, 0x7, 0x0, 0x0, 0x0, [], [0x800fd, 0x5, 0x40, 0x10], [0x0, 0x0, 0xa, 0xfffffff5], [0x80000000000bf0, 0x8000000000000, 0xf95000000000, 0x8000]}) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, &(0x7f00000002c0), 0x4) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) 5m36.714484038s ago: executing program 2 (id=1083): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x0, 0x4, 0x0, &(0x7f0000000100)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xf) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0xfff, 0x17d, 0x8, 0x7}, 'syz1\x00', 0x6}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x7) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT=0x0], 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = fsopen(&(0x7f0000000080)='smb3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000180)=0x1) syz_usb_control_io(r2, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x10080, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 5m35.641467288s ago: executing program 4 (id=1084): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000140)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80084121, &(0x7f0000000040)) unshare(0x8010000) 5m35.453319492s ago: executing program 1 (id=1085): r0 = socket$inet(0x2, 0x1, 0x687c) bind$inet(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) getpid() mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) mount$nfs4(&(0x7f0000000100)='overlay\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="776f726b7200002c6c6f7765726469722c2a2c6f7665886c6179002c002c6c6f7765726469722c6673757569643d350f6660353536642d373261632d343533312d343633322d62330030646534622c7375626a5f726f6c653d3a3a23217d262d5d2c646f6e745f6d6561737572652c7063723d30303030303030303030303030303030303031382c686173682c7375626a5f726f6c653d2a212e2c003aa7c333fbc4"]) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x4, 0x180, 0xb, 0x5, 0x100, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 5m34.32422515s ago: executing program 1 (id=1086): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000200)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f2374f8f83b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x47}], 0x1, 0x0, 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000640)="a6dd10154eae5588333a0309e91cc5e16af5c44251b238d99a74e4f558447fa635c685f062d42da23f0e6bc75fdd8c28021bde9a93296cff2c129a29b07a1f85be5ee592ea12733bac889db86e1268033b2973c5091a4af73afa050019e1e8ec2f0c12eef8870d5e041c98919e5523d4f6494df85607d4a2b06e7cef02df24ed431a0539757f4d324a10b509fb037ce369211b9097419da127af0ece4bae11c7ecf3cca9b9db37151223be609f8098696b4b7e09b75687e1dca8b700e395a1d41320c986c733851c5bf3b0bbad2285cbdc5be094c5ef984495c98cfb8db4195fb7e96b19408606358ecc47663e819fa3eac7f97bdfe0047993352b3e46ecebf87b32760bd6ce3d49968289945632afb5bab6cd0572a35a3310de0d4f5af07c16d3e27c6e1a194d8ee0f65dfc35762203d428c2a8ca104b77b46da04be3f62249189c6c9caaaeaaed8b0cca03e77549c87c745e883c8ecf69f999c51b48a78d82d69f3ff7345472d9fa862bae5cd3c9698c36f28b554331bed72960024b761a7a3e3d997c6bf37ce0f02617aec379665df22bec814ae14470a9f0f1b16a2cf14fb095b82f9c466e117a97023883585bdd4da624599f958df08bf7a6e2bdfab57663ed83cc8c0294195394f2161ed1373d90c4447a573a7a0c595f6afaac13c9975e886417bb56462fc05b3b2381ebbb49319d99629e1e6651df07b69eda145254730926f721e156ac37092025b06320e96f0e3d130870c8ddde1c22484900d2af30991afb74cc82b62640c743b58b38c5bbf12b1400decc8bb46bf91c4a94937dfc4b5d3d3d927ffacdf555247c70f59c0118aa9f7c632fb9764e55e978db25efa68c8aac37921702a3fca2ae380d88f7779be190aa6c2e0c4ede7c83f2db7aff301227556083e571cd42f1c0dfd89e1c961cd82ca5d8f3a8f38b50c728e2fe25bbd7bdd693bd1cf1f947a85fc4d2302d78245bc149e63ea80c80971b196c448ae960951de0acf3910c23894538e1ceacbfb1e5dad460a54487cf84f5f542be7b5795fdb9f9a56dc41c0e6965fd29f633b97918fb5959f86edece2987d192b3a73cfd47533dd63478749d67561e737ebea0f213dd4ea9c23254ef0903ba52383409389404478d8c23d08fd8cf6acfcbae0b102ee0ea0c11177fb23c54f7cfeaefae260b6b9a07145a57fcd1389de9377d44f6c63c1d410c132ff8339b11676970cf7723816eb9adc63c00e3ac1b2890e0a67392fc5091c627e0b14cfc9eb4235bd9f409fca9f8fb0f03abdbb1fa15de4e27f3bbf265acfa9adf6d8ed4b60121b6b803b982db50c57eb5be8e383d72ab7b991a60fa656227158bbe63f107515506cdb71b8f16bcc0382e372ff3efe3d5d0c1dcebeb60126bcbba6d26d5bb525c0ce9592e50ce5041966b9f7e476e5c9fb1a64416489a3e1517b50ebfd491ef78a7c871a8b542c76b7305e007addf2d70004e6056e6e9cac6bf701b802550d4e9e2ab24bea0e0e3c216c7470528d5f28fc9f84db3ec3fc19ae5833a8985e2346629376f28ea37313cd272bbd5bd40b2181b8d4889aa8a0058f3610e9aac4df03eaa876beee81d73ed441c501de4ff3150d87f0c8a2cf137978be35e482daceed7c07ac16f07c9d248ec68a8f40288d679df4d04080ada7683b07afdc725458e92db998430f884e5a6c88f34910a45ab9e23cf63a335e60b0a3ccc0aa707136361510823c7988d7d65ca122e6d9bfe9049cda1af47c5fc44c80e17abbb22cf69e206e2e8314b6e4684390eab2d05ad596ff229c286d428c1f93421bc66a72a6d825b89631baa06b7300e5e5e6e84a7c11cf0cb2433f29c807078f39cfc201924b75960e37d3792dd5cd2e2f960b8071e80a99390ff930086284ae64b3cfb6a936ee65ef507ac91ac86b6f4eda086aed8671fa3506b81432f9f1aa19c42a750f35a5419d49bc780be79cd91c964b91fcbaedf9d9b493d92e0a642332653d83637655a111311d1ba7d5a671abb2db3fc789de2d1a8a15a13daeac79ea4fcebd172c627065870a311efd0dbac4b35650f7d0cd7d260c04d3990f8d6c0c3d0a272ae1c6e9af2e412ef94d1463cb0b7c32fa44407c59a20172a53a4467b5e2b0c5022ec23c1ababf1bdf853cbbaf25cb637aeb80af99eda97f869e163a69c80e407cf0f28f5e2446124ee3faef3b0f4a419d5e81c75e95e810c2dccbccdc25075d6fcc8e9a7e6b449af5cb99fb02390eb04eff579364ccede49fea8164009cf1b0b632b6a02c1e1cde4411d93e96592ab580944142a753ea2eba7c43cc5b4c13275267f30914c06ad49afa2a4fba84a22d5c0f4a8b56fba8492467de9e811efb48d08ad59045c3b2a2055f76d89394e28cbc5015da8c4ff50935463dea2a44110e763a2d552fa92d98b50ad5d8274623c9ee98e53708f02fba46ae232e947f783554d279343c048dec127d41426dea7cfd4c3879b7b251fd549861fb4a585dd64b20664bec834a2e9ea723f0cee7060b3e3c9023928cab5866741a9cdc88118a244ca89518e29965f7c9e31709838a7c590a6f2de8b99182b6d2f2b0cb99bb808077a27f0403c82ebfe72f7deea3a5d4f061fca6a98efacb08e776bd04a6b456055e6f6d76267983d25cd37b6c16d0e7c757a56542c88950a8edd763f4f500cbd18da65cd78451f445a1cb5229b333869f392174a54c43fa22eb9279641f8c964468c1a548b33a74d61ee1960e349caf7d30eb241ea03ef3bb1489fddb8c635b8bc39ac5f53b07191fd1a0b57cc432aefe84f824625be7cd6082b6a4efac51cb230f83da7280b5783b91d3774fc4d00164e032dc52e8cfddbbe6769083a7ab7de07391d98af8cf7d953a4ee3a70d339d9dc4fe936676a8fb6c4d439deb1eb5c3225a9f10892986dc775381c5619fee6271f50a15bb14f77cff07574f23368db1973ac148dd16fab08bf3f7668bc705ee7ac4c82ec8b6054ac3ea2b8733d1546ae71f2428b1544e069a9e14325c3a6217c0e0df0ef753cff90a60631de534152154b84a34b3771eabaf8cd8b6aef44f4259200f6dab7d6c72c7226d882e5eba90e66bc7bbf31080deeffe758d7b9d2e4cd543c0650a15a12f04c0a045969b264d65afe78b402cbd0d37dcedc89424a728ec2014dd7d591535d38c156d00b8d75a016688014922b6cc585abcf66f744e8f17224a0f217e390e9c937072086ec028e1ffc5d312169b71e30b6d4f24288a382a40897c65dafdd8b2eb78291deb1e3213c7f243b30f9431a067131bc521328fa1bb4fd619895931131586a069d10813c7547e4e51cfa2e38f6c5899bd1db38afdcfb488fb3f145f48edff41bee99d511ee110a4b202d4a3e1e7eafa7e39ec82a77742c6a55cbca47ab52af0ba7dc496647975f7f180c9c7c2ed877ca16fa07e2bb3e632ee4509c58e924da4505a74dfca0b9f137173ac2c59e6a05c3bd433aaf2e302614aeddb99c666ab7a243fe3239b44a1468b8399737be83c1c6c7782fd950b053a53d98d55eb1f40d2cd94f088a6927cfc61df4d6ad7aede4f20444f768322db3d4d8d2ce9a7fac41115ec0a82f7e8c792c26be30f2d8e397eb6a50e3d59dd13d473411a56867d0938db978405fbb5068ea77ce40daa5390f4ed409a1cc70bfc54afaadd04c4671c02b826fc558f3585b256def184d2f69cc67539e26d03fa20d12721ad6ed9f5fcec41588b93fe9fa93f71caaca99987d1a65ef2773b160d74871b5b0e30e12585c609240d0eed3697cbf03c292407fc7a8c80a8e0369b6e8f311cf8fdb8cf1a3caaa32f2147b8fd0cb359e8f585c975f8c96b5648ff94823a6", 0xa8f}], 0x1}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m34.199403626s ago: executing program 3 (id=1087): syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500002800000000002c9078ac1414bbac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780004"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') r1 = socket$xdp(0x2c, 0x3, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffe60, &(0x7f00000002c0)=0x400001000000002) read$msr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000500)={0x40000000, 0x3, "95bf62ab5e3970e827c1099e0ae4bdf7649e223b205d47f03da7f44b1b860ce5", 0x2, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0x4, 0x81, 0x3, [0x1, 0x4, 0x8000, 0xa6]}) close(r1) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) write$midi(r4, &(0x7f0000000440)="97904d559ddaf5cbdc5c4feb8c1c8dfb98d7ea3e696c5d78bd9aa167c7c13734addc1ef72caf89ba76150be2f6413db282b5f6c6f51304e43690393183166a61cc4d5902f8fa3b3e82596ceaf12db304b7cbcc3162986184087a15e2a1bef9ac8afbe4f25204cafc3b156b97a910851cd7bb32718613484d5e12df29a439d7deed5396c5272268e8c91b7913e65730f1d9b910", 0x93) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) pread64(r0, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) 5m34.168847697s ago: executing program 0 (id=1088): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = socket$inet_udp(0x2, 0x2, 0x0) accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xec4, &(0x7f00000004c0)={0x0, 0x6dd3, 0x400, 0x1, 0x1a5}, &(0x7f0000000540)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) r6 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe) keyctl$read(0xb, r6, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYMLINKAT={0x26, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0/file0\x00'}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x1) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5m33.300540763s ago: executing program 1 (id=1089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000099717040bbca2e9c318041000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) faccessat(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) epoll_create1(0x80000) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r4, r5, 0x0) syz_emit_ethernet(0x32, &(0x7f0000004ec0)=ANY=[@ANYBLOB="bbbb86bbbbbba96987853fda080045000090780000000000000000120088be000000080200"/50], 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000080), 0x4) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5m31.610162466s ago: executing program 4 (id=1090): r0 = openat$ptmx(0xffffff9c, &(0x7f00000003c0), 0x181002, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001540)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x5, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xb5, 0xb3, 0xa, 0x40, 0xc45, 0x60a8, 0xb555, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x67, 0xd1, 0x84}}]}}]}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000280)='\x02\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\xfaC\x93\xc0S\xaf\f\x1a\fEik\x86\x15\xab\x909\xf8i\xc0\xa7\xa9\xb1\xbe\xc7\x1d\xe0\x18\xd2\xbaG|\xd5fC\x8d\t\x00/I\x8b\xbf\x94\xf4\x96[us\x96\x90\x8d\x9d\xfb\xdc\x7f0&\xab\x17@)\xf1\xc3Q\xb2M :\xaa\x99G\xdd\xa9E6A]@>\f\xb1n\x1a\x8c\xc6e7{@\x90\x8fz\xfcf\x88\x15A\x0e\xbf\xb8\xff\xa8\xb9\xab\x83>\xf9I0\xdd\x93#\x1e\x00\xed#\xc9\xd0Uk\xa6b\xa6/\x15\x92\xc6,p\xc9\xce\xe1\xc3\xd5\x89Lw\x17\x16\x18\xddh\xc8\x81w\x1e\x7f\xc7\x16\xe5\x96\x03\t\xc3\x94\xc7\xeb\xd6.\xfa\xb3\xe0\x1f\xa9\x19\xfaS\x1f[T\x1e\xc5nX\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=0\xc3\xbc\xfd\xce~\xe3\xcaO\"\xbb\xd1\x15\xf2y\xb91\x1d\xab\xeaO\x19\rH4\xc2\xe4\x922~K^K`55\xb7\xd1\n\xba\xb7,\xdb\xc2\x86\xc30bnc\x06\x06q\xe9\x97\fHA<\x94`\xf7H?\x86\xb8C9\b\x18vFWRdNee\xf1A\x06\x8f\x97\x99\xa5A\xfa\x94IfB\xa9\xf5\xd8\x83\xc5\b\x0eL\\Z\x80](f6D\x1a\xf7si\xa4l\xa8\x0f\xcc\xa1\xef\x1bCq\x0e\xf87\xfc\xce\x96cm\x83\x05S\x01Zj`dP:d\xba\x02\x14\xaa\x051\xd7\x87\x1b\xcb\xa2.\x89\x16CRx\x9b\x04\x1f\x8fA\t<\x99/\'tk\xcb\xd7|\x0f\xc9m\x95\x9a\n\v&\xca\xcd\x11\xec\xfd\x17a$.\xe9\x14\x8f\n\x15\x8d\rJ\x99\x8a\x87\x81\xc4S\x85L\xe5w\xa1\xbf\x91Q&6\x8e\xd1\x02\x19K\xd3\xab\xe5\xdc\xac\x05\x8dQ\xf4\x1aa\x86\xbc6\\\x06\xdf\x84\x00+F|\xa6\xc4\xab\x00G\xd0\x14N+\xf9\x84i?C\x81\x8eu\xd3\xcbg\xb7\a\xd9\x9a*\x17>\xac\x9d\x9d\xf6\t\xd8b\x19\x8a\x1e&\xde\x87-%\xf3\x8a2L\x1cQ2\f\x94\xf7\xf9\xadI\xedU\xabr\xe2\xe1\xc2{\b\xa8\xc2\n4\x0f\'\xed\xcc\xd7qG\xa7p\x8ct\xe3/l\v\x93\x8a\x95R\xd6\x19L\x85\x80\x18\x15\xcezn\xa8,i\xf1\x91@\xc0\xb1\a\xfd\xec\x95>\b(\xfa~O\xfd\xe2\a6b\x97\xc6$?;\x8eJ/P\x9d\x17\xaaU\xc4\b') syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSBRK(r0, 0x5427) 5m29.237775455s ago: executing program 2 (id=1091): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000197c0)=""/102400, 0x19000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="010025bd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="6a00330080000000ffffffffffff0802110000005050505050500004fbffffffffffffff7c000200010003010d0406000000000700050300000025"], 0x88}}, 0x0) syz_open_dev$sndctrl(0x0, 0x5, 0x32c00) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1326e11edf947442}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x1000000000000002, 0x822b01) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r4, &(0x7f0000000000)=""/24, 0x18) getdents64(r4, &(0x7f0000000140)=""/56, 0x38) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x41, 0x0, 0x0, 0xad, 0x0, &(0x7f0000000540)="6237ea76a99f1cb66ebd252b7b95139a94ebaf9c9d887302c9056f019edc758989770610205b52a3ecf567d8950f2f726f2e02720c214208051ceefb1c5b94a0570e433db8eb9e59a3fdfdda5e611e51941acde5c4c42d413e0610052faf0badb97669a60e8b9d47c6051c8b30208e6c28e5547e08049b499378594ce8b56e3c8286b5482947abd880cbe18fef47a013da68534cb2286a768c3e88f13fc7c72cc947a465f21c84a807aab2f497", 0x0, 0x0, 0x10}, 0x3a) 5m27.157887215s ago: executing program 3 (id=1092): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x76dc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000280)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x0, 'dummy0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0xc0045103, &(0x7f0000000040)) time(0xfffffffffffffffc) socket$nl_rdma(0x10, 0x3, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) 5m25.266104374s ago: executing program 2 (id=1093): openat$sequencer(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f00000001c0)={0xfffffffffffffffb}) syz_emit_ethernet(0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000051000703afffe8000000000000000000000000000bbff02000000000000000000000000000186009078010000000000000000000002190aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad94579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x80010, r1, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) r2 = io_uring_setup(0x7e90, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) close_range(r2, 0xffffffffffffffff, 0x0) 5m24.171265151s ago: executing program 3 (id=1094): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000240)={0xf, 0x1, 0x2, 0x0, 0xe}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 5m19.93692433s ago: executing program 4 (id=1095): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000050005000100000000002b000003000100"/46], 0x34}}, 0x0) ioctl$TIOCSBRK(r0, 0x5427) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0xffffff7e, 0x2, 0x1c, 0x200, &(0x7f0000000040)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) 5m19.538047979s ago: executing program 2 (id=1096): r0 = socket$inet(0x2, 0x1, 0x687c) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000540)="2fdca0972840a41d8f08c8e1177d5488", 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) mount$nfs4(&(0x7f0000000100)='overlay\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="776f726b7200002c6c6f7765726469722c2a2c6f7665886c6179002c002c6c6f7765726469722c6673757569643d350f6660353536642d373261632d343533312d343633322d62330030646534622c7375626a5f726f6c653d3a3a23217d262d5d2c646f6e745f6d6561737572652c7063723d30303030303030303030303030303030303031382c686173682c7375626a5f726f6c653d2a212e2c003aa7c333fbc4"]) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x4, 0x180, 0xb, 0x5, 0x100, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x19) 5m19.427555841s ago: executing program 1 (id=1097): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009"], 0x0) r1 = epoll_create1(0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) r3 = memfd_secret(0x0) fchmod(r3, 0x134) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xfff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x21008, 0x3, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) setfsgid(0xffffffffffffffff) syz_open_dev$midi(0x0, 0x3, 0x88c02) io_setup(0x3, 0x0) eventfd(0x0) memfd_create(&(0x7f0000000000)='.\x00', 0x1) unshare(0x60400) pselect6(0x40, &(0x7f0000000180)={0xfc, 0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x100000001}, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 5m13.980433733s ago: executing program 32 (id=1088): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = socket$inet_udp(0x2, 0x2, 0x0) accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xec4, &(0x7f00000004c0)={0x0, 0x6dd3, 0x400, 0x1, 0x1a5}, &(0x7f0000000540)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) r6 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe) keyctl$read(0xb, r6, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYMLINKAT={0x26, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0/file0\x00'}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x1) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5m13.010244278s ago: executing program 3 (id=1099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0xf000, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 5m10.534684801s ago: executing program 4 (id=1100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x65757100, 0x717565}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="5401000010003306000000000000000000000000000000000000000000000000e00000010000000000000000000000000000080100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000010000000032000000fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000002000400610000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000001c000400010000030000000020010000000000ee0000000000000000"], 0x154}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000140)={0x1, 0x0, @ioapic={0x100000, 0x2, 0xf, 0xfa80, 0x0, [{0xae, 0xff, 0xfe, '\x00', 0x8}, {0x7, 0x13, 0x7, '\x00', 0x9}, {0x4, 0x2, 0xc, '\x00', 0xb}, {0x40, 0x81, 0x81, '\x00', 0x5}, {0x7, 0x5f, 0x9, '\x00', 0x4}, {0x81, 0xff, 0x81, '\x00', 0x5}, {0x6, 0x3, 0x6, '\x00', 0x7}, {0xf, 0xf8, 0xff}, {0x90, 0x22, 0x3, '\x00', 0x7}, {0x4, 0x7, 0x3, '\x00', 0x8}, {0x6, 0x1f, 0xfe, '\x00', 0x4}, {0xc, 0x0, 0x8}, {0x6, 0x8, 0x4, '\x00', 0x8}, {0x8, 0x9, 0xc}, {0x1, 0x2, 0x8, '\x00', 0xfa}, {0xb, 0x0, 0x5, '\x00', 0x1}, {0x2, 0x81, 0x4, '\x00', 0x4}, {0x8, 0x2, 0xc4, '\x00', 0xe}, {0x2, 0x70, 0x4, '\x00', 0x1}, {0x4, 0x6, 0x6, '\x00', 0x8}, {0xfb, 0x8, 0x5, '\x00', 0x5}, {0x3, 0x10, 0x0, '\x00', 0xb9}, {0x0, 0xd, 0x3, '\x00', 0x7}, {0xa6, 0x3, 0x3, '\x00', 0xa}]}}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4e8, 0x198, 0x268, 0xa0, 0xa0, 0x268, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4c, 0xe, @remote, 0x4e21}}}, {{@ip={@multicast2, @private=0xa010102, 0xffffffff, 0xffffff00, 'macvtap0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x11, 0x0, 0x10}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0xa, 0x5, [0x38, 0x3, 0x3d, 0x19, 0x28, 0x31, 0x20, 0x3d, 0x1b, 0x12, 0xf, 0x37, 0x39, 0x6, 0x34, 0x3f], 0x2, 0x7, 0x81}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x8, 0x10, [0x2b, 0x2f, 0x36, 0x1e, 0x36, 0x36, 0x29, 0x39, 0x12, 0x8, 0x16, 0xb, 0x3, 0x25, 0x2e, 0x21], 0x1, 0x1, 0xff}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@inet=@ipcomp={{0x30}, {[0x4d4, 0x4d2], 0x1}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xc, @initdev={0xac, 0x1e, 0x5, 0x0}, 0x4e23}}}, {{@ip={@rand_addr=0x64010100, @multicast2, 0xffffffff, 0xffffff00, 'nr0\x00', 'team_slave_1\x00', {0xff}, {}, 0x6, 0x0, 0x43}, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@addrtype={{0x30}, {0x0, 0x89, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 5m0.588864919s ago: executing program 33 (id=1097): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009"], 0x0) r1 = epoll_create1(0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) r3 = memfd_secret(0x0) fchmod(r3, 0x134) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xfff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x21008, 0x3, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) setfsgid(0xffffffffffffffff) syz_open_dev$midi(0x0, 0x3, 0x88c02) io_setup(0x3, 0x0) eventfd(0x0) memfd_create(&(0x7f0000000000)='.\x00', 0x1) unshare(0x60400) pselect6(0x40, &(0x7f0000000180)={0xfc, 0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x100000001}, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 4m52.946613514s ago: executing program 34 (id=1096): r0 = socket$inet(0x2, 0x1, 0x687c) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000540)="2fdca0972840a41d8f08c8e1177d5488", 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) mount$nfs4(&(0x7f0000000100)='overlay\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="776f726b7200002c6c6f7765726469722c2a2c6f7665886c6179002c002c6c6f7765726469722c6673757569643d350f6660353536642d373261632d343533312d343633322d62330030646534622c7375626a5f726f6c653d3a3a23217d262d5d2c646f6e745f6d6561737572652c7063723d30303030303030303030303030303030303031382c686173682c7375626a5f726f6c653d2a212e2c003aa7c333fbc4"]) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x4, 0x180, 0xb, 0x5, 0x100, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x19) 4m51.905778145s ago: executing program 5 (id=1098): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000002000010000000000000000000a008000000000030000000014000200fc02"], 0x30}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r1}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x28, 0x4, 0x0, 0x0, 0x42}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="04400000000000003c0012800b000100697036746e6c00002c00028014000300200100000000000000000060252bc02319000000000114000200fc020000000000000000"], 0x5c}}, 0x0) fsopen(&(0x7f0000000040)='hostfs\x00', 0x1) 4m37.135856902s ago: executing program 35 (id=1099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0xf000, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 4m30.463402917s ago: executing program 36 (id=1100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f00000029c0)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34393b6d1a0890e0878f0e1ac6e7049b076d959b449a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169f94288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc8245bb5be42451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088200000000000091eda8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c00000000b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4cb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa88af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b20000634073c9c58c89d9e99c81769177c6ea94f88a4facfd4d735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e0000000000000000cb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a89e2abf113a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933607002b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc268c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d625ff36270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x65757100, 0x717565}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="5401000010003306000000000000000000000000000000000000000000000000e00000010000000000000000000000000000080100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000010000000032000000fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000002000400610000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000001c000400010000030000000020010000000000ee0000000000000000"], 0x154}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000140)={0x1, 0x0, @ioapic={0x100000, 0x2, 0xf, 0xfa80, 0x0, [{0xae, 0xff, 0xfe, '\x00', 0x8}, {0x7, 0x13, 0x7, '\x00', 0x9}, {0x4, 0x2, 0xc, '\x00', 0xb}, {0x40, 0x81, 0x81, '\x00', 0x5}, {0x7, 0x5f, 0x9, '\x00', 0x4}, {0x81, 0xff, 0x81, '\x00', 0x5}, {0x6, 0x3, 0x6, '\x00', 0x7}, {0xf, 0xf8, 0xff}, {0x90, 0x22, 0x3, '\x00', 0x7}, {0x4, 0x7, 0x3, '\x00', 0x8}, {0x6, 0x1f, 0xfe, '\x00', 0x4}, {0xc, 0x0, 0x8}, {0x6, 0x8, 0x4, '\x00', 0x8}, {0x8, 0x9, 0xc}, {0x1, 0x2, 0x8, '\x00', 0xfa}, {0xb, 0x0, 0x5, '\x00', 0x1}, {0x2, 0x81, 0x4, '\x00', 0x4}, {0x8, 0x2, 0xc4, '\x00', 0xe}, {0x2, 0x70, 0x4, '\x00', 0x1}, {0x4, 0x6, 0x6, '\x00', 0x8}, {0xfb, 0x8, 0x5, '\x00', 0x5}, {0x3, 0x10, 0x0, '\x00', 0xb9}, {0x0, 0xd, 0x3, '\x00', 0x7}, {0xa6, 0x3, 0x3, '\x00', 0xa}]}}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4e8, 0x198, 0x268, 0xa0, 0xa0, 0x268, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4c, 0xe, @remote, 0x4e21}}}, {{@ip={@multicast2, @private=0xa010102, 0xffffffff, 0xffffff00, 'macvtap0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x11, 0x0, 0x10}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0xa, 0x5, [0x38, 0x3, 0x3d, 0x19, 0x28, 0x31, 0x20, 0x3d, 0x1b, 0x12, 0xf, 0x37, 0x39, 0x6, 0x34, 0x3f], 0x2, 0x7, 0x81}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x8, 0x10, [0x2b, 0x2f, 0x36, 0x1e, 0x36, 0x36, 0x29, 0x39, 0x12, 0x8, 0x16, 0xb, 0x3, 0x25, 0x2e, 0x21], 0x1, 0x1, 0xff}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@inet=@ipcomp={{0x30}, {[0x4d4, 0x4d2], 0x1}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xc, @initdev={0xac, 0x1e, 0x5, 0x0}, 0x4e23}}}, {{@ip={@rand_addr=0x64010100, @multicast2, 0xffffffff, 0xffffff00, 'nr0\x00', 'team_slave_1\x00', {0xff}, {}, 0x6, 0x0, 0x43}, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@addrtype={{0x30}, {0x0, 0x89, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 2m34.173920907s ago: executing program 5 (id=1098): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000002000010000000000000000000a008000000000030000000014000200fc02"], 0x30}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r1}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x28, 0x4, 0x0, 0x0, 0x42}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="04400000000000003c0012800b000100697036746e6c00002c00028014000300200100000000000000000060252bc02319000000000114000200fc020000000000000000"], 0x5c}}, 0x0) fsopen(&(0x7f0000000040)='hostfs\x00', 0x1) 2m34.147479569s ago: executing program 8 (id=1103): creat(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x3d8, {0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r7}, 0x6) ioctl$SIOCSIFHWADDR(r6, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) syz_fuse_handle_req(r3, &(0x7f0000006340)="b31c8430e2e856e4d513f6038b594a4cf8b712cc20e3d9687f596968a8ab6d3ae91a411bd6e9c4c9e2db5ac139eedec62e6a30d42113e8e6f9f77ed30d68d07afdc477310ce42be8ec39abc353c171d984f9da1543201b6894743bef9757c1cfde68716f7a2564be40d6b4392b8bfc3459870e6524e9ccd3efc1a03887dc9b3f48a2b105a727636023926601904c5feb8071abe51602032003864f1c8894ac1e608f6902b94bfdf10cbdc540e1684596ccc86f092121d87c87f782c85710896e9319921962db650ed3a5fe61559f247f5051d123aee5cea859d64e6ea0421328bda439e3a7aab088e2aa908823e155fce87bcb13630d3088e0a91529f359d68580469c67d3beee2b7d7c46403b876cbe464430cdce52cd142ac535b8a1b2e19a4538623a39631dbd8fdd41d16c4ef5d34d23050bbe077006898677d30e4523cc1e01407da1ed125b4d00051b8c17de2df26a60b3965a9b761ab5bf9fdc53ca4b0e0a0e250405fd9ff49237e0f4aa0af0a0abafcc96f628ab75c5be18afaedb5ac02ecf6584b93369100c33e57dc9bdcfb3ed4daaab698f1553c0880e7b8ea2d86395da349661b1d3f6ed6ac75445a8f86c35b55e0459c5587aca2a58e430c0f5bf138a9476f4044dd75f4cc27e5730d87a1357413bcf858c1c87d79923d2129373d275ca9dd8b0a1c76497bbd47e589bf10544249236e610c428ea5616af293617239068fddf0ed87d36040d26e133573fbbe91fa82529cdc5ecc2e917a599c6f4adaa4eeabd05062dc579664d8d28835f62b37e148419ec3962571dc04f068771ddc3869b17f0accfe8748555b5d59026b14e65bcb77375c713dde1de0be3924a769b429cec3f708910b94bf927a0c20321d72f08dd6e7df85dfadf8c62e4f40be2c686b65ac00a86d086f8078d7409c4f103f0786da02d618fdf414d4e44ba932a1f598fd6527b4efe83dcd0ed6826d23eab1d54b1c9454832dd021e15148660dda52f836918062f2e0356e4e1641a7dce78ae7d42c8f40e7797d39e1996787a2c18fe699f2fa81e828968e682be92051fb78ccda1f8b42817801f50809db82a5a08fe708f27f3ce8a68cbbf5c46f5fe872db289d55c96cf00ff5c1eaf50c770d1d44cfa0d33fd72c34e18893c25ea17c5d05833b8655edd7c331aa961b5e62799465a28c40cfc97c9eb7afe164cee023df12693cb9fd155e51168df2c3a56d6c3182123aae2f0f10d5318694bca2ad67b44699569016936bec85afedac2e6fa655c1093269afe5b392e662e8235321810ee858d26614a90fea3953d2a5a920b056fa5dd8bc8ee2d67aa6c582c7b3725f4deb5b42a4c6c310e9d602f9a397631e163af225250bed87f13d1ac2906b5320faa3b26ab148dcbed47b304bf3b25494c33fd68b0acd900415d159d5ce94a66c8d6c468f8b48369a79105f6885b2128e0534eee7e75efa292ded465f97909eee0b90d5836e8a2bef8e24dfb80520608891ba3a78e2233f61cc27eb44e88cadac813101b7f9a4f844a5c71eb9bcf98bc8d906e31e4592cc27437089901fca7ec6cbed8900fd5d1248120012a284c641193a5ee06a2a41c075af3384913847a11c0e2c0464d78a8ddb4f66bbe0311bfd881c92e279a6f2e2eb02516e8265e2148aee37095ad12d460b257efb63409a70fdb96899c7ed331320584f84a12ba8043596b2b5c510190010a4889783cbec6aec0377aa2f39bd67dea5a9788d05d3d9808116c8d90cf481bd25e9f33911e1197f8966196e7b69b5d52e64e4179c9ff164c3dab6a08de0d68e083ab63e2167d748522659aba740381ec8361f25eaf2e5fd3fda7ffb8c4bd227f94fcea7980dae7930f3d76703c17d0c14ec62e609acfd4813799e56f8231ab8eef61974ac703f6f3c77caf4b28b8d20db343f4a92ed5b774195d102a9881434394888936ba2702f46b2e68b802a35b8d4ce05e711d4beb3f452fc46239741d07b711e89adaf54be60ddcce7a4aeb6b2bcd80a7e3ed2885a9dafde68cf94caa62cace789e0d86bb8e080c35a2a9aa9e4b2d550503220ce400012a553b4f2916446e6325856991445c7b8ed53f42f39e5423b2d443669541f22acce3a35cd294464558714ab658a2f419a492288f2a824a398c2169c43621857d2387f831479901e723799b0cd40585f11b3733f60b74134cdbd7df193c71533ad790e627a5111f4db3fc2cd5e010c38320f950769c3c35504125f12fb2ea92cf36e98afd0805177553866986e41c077ea04a9249827309a38dbd81942dcccdb72f7563ce915f6412a9cb50cb57b50bc208dc85193a142217f9810240a807bb01c365505ac09c3ddb4860b07726d507e2ecbee7962f91e0856b5f7064b4bd5ff6285c68c9ce35c89db81c777ca9b616170be140b9bbc1e26b64cf7445f9f27967981b0b73ce2bbe4d577e5167349f8aef07cdfa585783097cb776a9ff7b51261dc2dc4de71fa795c0e2b6e5023f160a21516653d28b82ba5d2d7fcf6cfe068665ae51a5fdefdcd939f0c02b10d311b80f1aa25b2a644d1df93236341c4f2e70b04e6c38c3f815bd9cc41795a5c7fca8cddcca2cbca4906bb6d58359696de8212f11b1c899916f9bd484d34302c7aa80f3661d9f255b5beb66b6cc4f699d3059b3e8a828a0b162f6b4066fd4fe09b2ef3351eaea66507ee3c605087a7f2b2ab3b2c2c0a0423bb9a91e027301dd283b17f87733a2682b82eb040aa9fb804ca80ca0c85c401841bd81411cb626745ba784dca67485219cdce90b92624a4d341ed074273579c2fdff566bf49b8a9b48ee5da8cf511eafce5c789eabc89b9d5273e4bab36a066e755e3b1a6451509f4b615e03ec3c2638534b741567c5a30e87e8f00808dd5f9f7ced4d88d5cc8c56278d0e929b50fb4f9b3b092f3ef3e337f5d413e36555f28440a8bb811fb79fc560acaaff868daf2b614d397071077e2ae7ba2674b18027fe51ebd6c427203ab20c6201c6c13a40f21bdba827f6ee9779244c28a37b5e4fe6bf5c430fdf51d8246f222275ea1c9f3315c4afd18be688106f5cedc6c4371190786fcc97c231dd5b90eeaed4ac12363d7f710aeb43f3a3b3c7ba0b4de10231ab6e43f73f8b732fdf9c5326adea5ba5c38b4a610eff9e4a5440285fb4510a43178100ef92d7e32ea1033fe0d850ad4fb4d61f174fecf7db32a203ef210d20abde4c0b38c1ff5c40c2725956d1789a00360055e3a67ad5b6055caa5887605505f56e1be82d31df424dc59d00fce949971b615f58b1584a128548a1f5a7aea7c3ca7b598861ad905a18d680c31bb05fae49074a2572f7c9b61a1786ca6cdbd375cfd3f70d1b26560abd41f2dc78db0452b2800b480343f78c39b892c7af17673730cff41499e822ff6b8bdd5c4246d688b333dc567645136d2852e0d371e122df9749d26174e9218c500d172aca91f0f4b620e425a21a1c9b4b43b21ec08575acc7ac1a468fbf86f66a5e47ae716b81288d065aa9ad0bdaddcc10f6070f5513fb562682fe687ed49c5407305cb09e3b71939665c7f49b526259ccb6f2a298f1ef8b6e803d19c3eed4046ebafc6754b089d6613810426afbdc8c6a7ffa1f2db8b242f48197005da14911ade186fefce677a2d257277b8f7c2c766b95122832630b941ab7cb4d4ce2e65a73a64ac4f8cc569126f3f8342a492dad8bbb3a7685b7ce23a843658ac44868017c768ab7a8020cc81a470c75e1ca6592a531fae4553ba4cea0cd941dd0cf4db4c6c725630013b6d26bd923538ccc59f4409ec0c198385ac95cef5d752de5d9cdd5fcdf5afe914e41e48343d27b674b730a348cdb4ab9ee45a1f6a84dc255cea7ad4578dffac568c7a255413d7e56001bb687eb29d0bb68e7ea4a6989ffe3fe4cef336bf22bf547101bd5538a4e07e40cb0f4f720e8b0cce90362fc892678adf2487b8b9eb5ce2e6efc786c810d66a19bbf7907de6a865bf71958779bb59adb79e0912ce57ad37c3e8c558f979fa8f68a3a0c96d80840fdf8a3c1eafe5ebd1e2fb64b6d62d58117e2b33107b7442814885e63c858e5a3aba29d5eb4f8916a0ba007e28db21185edce798ce9e05f7b4dc5acd4feea0caef87ae403753d5423172b30a52ee32dec57052ef97fec67e2559656bc6ed30ac3dd312cf43bd1e3e7e4307503b97120468262148162553ee4fff0549f69bb2d73602138f29e6a2986248d65e6ac68e09c6c6e50e9faec454f8e873975f5904732f637bcb7ee2a5f7dc28bf913c931ff596e9cc440c0af9c6c0c512cc3a44d140a8d91e37c493cabda57f224dbbe8810dc66ecce280417a6c1c4f1a4663b10136195db8942082b0704d000e26dea736092136251c30682769367ec6fe7a082f8752aa2c08bbd0d6b3bfcfdba96bd341379d3935d6ab58550c117eae6a9ee0654c50c8663f14bcaa6192c83435bcb1c086e7a0cdaaea01ff46df676200202bb6bc4c7e14f118d4781a98cfba632d3fad08450cad20b7e05b9819a82c042cd6047398171bcf947cbcf4d3cc83da18066a0605503252529651a11946fecaf7a3f28ef6a2aa5790c269ea7e67c67de5711be3a3c7a6944677f348e18cabf5fcb01a3846b0d3ce507cabb9304554e5ed8f5a3fd056111e00a7af6b972022abad462695a22cb8b21b6ee94763ae14e0c1da3de634c7214264ec5a4f74e6226b0b60942fe2208e37776c76c756872361d4636d67b283830ca7f8681081f8787cd96ba2ec87afdacba4c056675e0561fdbd9cb784085457814160c145047adf1b1b6a5e5e063d6f659f4dbfefeb360667247a3d4823409ffcf72583148b4ebfc4a3935a363659465514a56bacfe6d7074ce77c8ee7025437dfa82cef7833c7073d0adc3ace7cf48bbc0addc3d7b151cd2ea4a3e15f1b35a3c3b18bf4e4d69a2c05f9650a4b03f262da1ebacf25b19c527a628bc515bde4b68f596ba2eb6c925165c863bfb6b5207ede82bba34bb94870ed43f9eefa899a06bbd16fad10295b11bc32e3b9802f32554cb1ed62daeae706e32bf5a8ebbc364ded77f5d294678f81b7c84b173f848564b291774bc984b349d21896a5ae6d73f1de63bb17fafda2e72bad8d68ccb3e5f01ff5df044493199b51ff96149d643e3e6d6ae97272c60d1ac429eed605d168c1c251c2e76c426b88b03ac6824bcc32fffb709b9dc2ef58c6a2825b046a5ebd4b07fa7a5d02489759e6be99c8b6c6b7576bd4c0ea21bb56bfa7cfe0f2b88ac3e0f5ec1367eb75ee5dc4711e560e61da5f41425a9edac298fabc34f868eee57e26ef8e57a4216719f5f82202d38458dea003f91227c69cd29e5435cd508df70df544d6db142fe713c5246099e71080872bfde33c3c3ecd7a8a3e4d8b32706c45934e87a0bde9d967fc9123d2430e8455577eb2cbfef74ad796802353e4131661b05914159cb910ce6dd8c8868554b9edcacb32c5066494431315d4bc1a10bba958f9a91e4e1b4f4b01c021518b6d2dc5c5fa9aeb987646bdd36fb369f03769f05ff55bfe5fad541519376808512378e58f0f87f5b935ce681c3eba7cc5a453b0a975c2dc11063525750dd859d72da38f88cb8e7b827c8ad065efa1ed6242b47271a4713a35ca78db319973472078fe02d7f7010164af9867a0136956feb9e55834531d4058523b290a425f097b9df7e44e9947bf9f590d63642f2dc5663919be30eb5ab3e10e9ea31e86d1c4b552e12fec9e70c55348f6ee50cf009b6764040c4435daa714ee8f9ba82fe12fea4ea5100945d97b849484056cf5f72d1e4700e72f763882f1b0939d51f80ce869a2f7cdf00ac4b601094c6134363c883c3a7438cc4c87d611c0ac0431570ec2b6a4aac2652a68562f7876600833a3dad2bba0831176e8fcc6825d4ca1fe655c55ac6db6ddd6eb2e92c73cd5cde1838047d6a8dc982087d3be3ee9173a34d55f2b3317458f0d31dad70ea81d51239a41258b1393ae7daa92c0169625216485b68bc780f3e0dc8de3adfcd792a05b884a4df1e1bfc428b9e86da61b2017dadaeca2cbece453a5efba0348aa02cb8c9e6473d95a43ec4813a5c2e8f0664a23c9f67c2cf0712904ab44d59d645d4bee66c47c3f15c224d8b2d8b0c93753b2c2ee57aac93f634d86907882d6868957dd284a1ecfcdcbff989d7e9decae7afd8ff8cbb27726a1eb298860488d8232f186c65c7561afed11c6e6d9e5e81c118695d02498bcc2a035b089c414df3a37437fe2413223ea3e10ecca254008df73f22c06e7e85610f802c342e7f31059f4cdc5524a6f6b0d1e0ff2ec88e8a395aaae956708d401c372a8cbe68d375382fc2d0ef1f070e6dc703e392b7ff5265aaadd727426af5350d88e4969430906d46995d5cd76edf4b7e0e93cdaed900112f1ca0963da6dc5d771cf4c1e721e3c0e375fd157a090f67c955a168200c1386d200fa3e575921668e20f7ac496224cb85555ec112b38319f62159a3fe10f4d7996f6bf35873c7a42edb925da16874930d7671c19ec118f2173b76ac7e9cabdff90ccb7e6a3e716b41b6447573dd8aa4f13a92b545e05cc35568c45dd6a6ee731a1b8c34a7caf57909b8c818b3a22dcd66de1873037889cc906d50f579db2a37be36624aecd90d833f484ea684fbac40e4c69e95a252fe93e406e3b45339887aeabedd9adbced6738fe29d4a9ed913405cae0ea1ea44348398fbf30a1f74de457b3543bd1a7941ba8429aa78f5bf86c8662dd814d46e14fd7624f76452fc566537668fa3222225bab95b7d46a6db4cdd7dfd34d89aab015a170925620ddb10754496c343182d3a83c0ba28bf0590e6955bf43aae50b00a5a9175fb90d84acb871dab9dba29cf2b9257f3ea37eeddee7e019f17e0983791e3a0715720e48bda36948b24109bcb8fd747519a625ca3175bfcb1c6a1b597d415aa06478ec1a26c81099367322d18af53d5f5b388ab208d3447d901f87c7bcc51ab4743e593c03592f892fcfdedb00c800168d6688d974382dd2c18e6fcd9c5ea3328c2269053b683f0cdb61b50d9d558a296af79b8ec11bb9a032b336231d9c5549c40fae8ed5ae468b5fb00eb66006e86e3f48f4b5d7881b9a32377d04ca7f5ab92f64cdd063d8df798fe469359df247d925915e39401f5b203bba45a28d3079bb87a35c53114a7785753b565dab74874a3b78e45730330381585d24a169b0187a45ce0be67f69133332b8d0945f517d3760c8fc168a802106b087528f91a9990ebb19910eeff0d8aa2355587648518f095433e52c84ccdac81909e299b23493cf8b9ba7e6039f95ce6f02e0ae70e624691a280e0e66df1e6686489e5b03295853fa9b1a9900816a3b3cc5a7c442feb2d3da4f55e185333096a649bcef6a223cb7815450529674c8fa8aa73257e3517a0879e45f41af8b7be93730bfbad9d3ab176e47610a76f3bc72637d30e57bae38e1cb5049d06aab1b271290e897532a0dbe7e97e5a759526c81bfe1040ddcfd73dea397b4879571244963e90a981fdb32b5156bc5f6c0eecb48f9e8773209c62fa2903090ee871615586f93df99a6e403467adc70323c87e758bd2a05b9bd12f2b222d52a045206ccf1b57ffeb1e336b3ccaea6f8c27ddef68901e2aa74ea3c3f51e2268645dbc6d0acf7acff098beac1216074109733d81547fd4b8cb542ee40365a7cf5b650595ed878540ee1531afe842328acbbc6d8b9d84228e4911428a896f67888f881e09b5cba464920e27c06c846e9971284ef7be2d8af0575ecdf97555ea71f81c7563fe564a601af993df1de8066fe860ac025b25c590249b01732074ff9fa6adeba714c92eb44ecaa9563ad1f248d4c2a9a354bf7f16be95f53409a25067059e087252d102faea16c8030ff010c9df0efd47e00aa18f6a7eeaa059dacb0fa86117a8efdfc300c95cf5f10f3b23ebf659ccda174087e49409f8f53438f6f9247ba57221a8f3a2fcf3817cb2117efa58ddc32805bd61fb59ca42a10d95e0cdf38e2d8fe3244468437a564f7c6f43f799790534c45e74d0aab7d1334fc9944cc41cb375a6ea422edf5655a6985056662741f648d909049e86d32d1525e4d203e373ce8df6a5f94b7763bae3664b0878777e95a8abeb112bc917271865afb2c161bde5fb895ecba49b7aa80ae23f0058e22215d24aee844547296bda70c068f7465652826abfafab50573096a2ca26a92faec48f6ad1239b087ea5c693dfc740612805b31db94b4e0d60b9b0bc2ef755807cda981afd5428692f2e689aae3614d4c7b6bbdb5316ad3cf7a9ac173e40ebb707aceedf27a2c1587430840db44fb0f2a11b8f5b405f1169c6aad4dd1da7417ec9a27d9e2fb93480ccdacf66fb9cc773aff017ce344e0b8d478d7e025442303a026ad21f81bbb798efed40788f7842e00aea5abbcd8c6e7b090815aafd90a7608c8b2901798aadbaa07580d8b5a2f6ab57beb5642108ffacba4e59e000445e2bb153371e04c0909a2b37aff198a36cd633eb906826bb11b487c3393e7cf0cc449f4f4a6b5e079708ba6eab609a0e5bbdf7c7f359d02f625a88c9441ca34b24a3a3d1f0068d3df8bc92d1ca060a52b6214da87a4b0f35b5a9204f124b02793878a02fb3d098b9929cdb6a3f169690ef6205d0d8ee556d6f21fcfe3c40910e2e7570ca01d190f34b484e7ada1116cde78992beb1a7fddbf18bf1ca6b56000d1483ac44604eca570da76f0aa4772d74bcef773bf54e911aa34b48cfeabf77b56bc660f7d0226fc3b88a67e7d748cd63faa141bb5aa1e28275048ed0ec8b9c6b6eacace501ab43a2206873fe3c4e91e6c523160ebcc1f51c87a14c2d37a247b00bc47e8fb462c61c52b9ff6b5bffc0de47dc5931465b627d141ae06ab40f35903ce5eb68bfeedcf755c985bb0302d2c9b4d8f814e624bd8ce6fd6e50f70bb70025ada430910c6e6ea64587adef38fea72e986221c8960fc8b55c677648050e82ca34c6e654656c3b0edcc048b4c20dd3daf65e9ba912ac4d451d34d64c7e16ef731187d82bb762aaa4888dd76f0ca9884474c80334c1814c439278d51da447bffd865e121992db98d46031c86e4b2d506e4c895f62299a08647e512fb6d37e830529ca0f56f2a2b973c269b16a88f58c9a338d2cd333490cf0b034040f0589b92af25e308a7254b3daf94502ee90db5d6e1fc83c3041fa551bf71348db59f5e3559ec5839cec8b39ad447c1b94233f0f23bbc4964df8b0d199aa376d6db04201185a473b50c8072a06040830d33387887047c036147d7b4b726ed1ab55f0937a3a416411165fbf5b479762ff39acbeadab8d6c6994b2056e1b6083e18dff8d4cd2effb994fdd66a052e0840777d0a86b68fe20574e7b107dff8690098721b2da187a359907071a43560f7be046d67c72ad7ad97b31fbe6d5053d51d1f41247de3bf846b819b1ff79f8e67432db27f6fde13b3ec86d28d8913204af540360b465c91e6c4d3ffae32ca53fd890364d645df51afa92fdbc5011eb70b0a601fb8714021b0d9f0e643684454f2b0e2525d37142bdb10fe8885e464fdcc3a068ee9defd10a64288b0aa907fc7af1c7c008ceb2c2ccdacad22df72e74f61466cb0be8aad594a3a4b8adbc696c01921ea62b143cb26a05a1dd335a7c2e94e4e4cc7f9ee6352d2cc1e1682fabb3e66d0df9f7e768ad404020e31b7c36fc83b4aa91716cba722a0d20dc6ade58281acbdfd15eddc5293c2131e4b25a7acb435b3816bd70e5514456d0462b7276478531a30c59eb77b3008f1bcdb4940130b46062ebfdd6a22051ab6a87a06a8d1a8cdb410ae2c976769e2a1f4e198ab4d6606cbc37d9aab132a811933dc953d77e025d641611348f5c27aa155fdc482849da16251e5d3ce77f7ce3165a505704aa79482fa2bb83db98ca1e32508fa08a16ce1438a26ce5d10790dfda92b41122a6819521eb863f0c2c6a59c65215030d765d9ab89b3e8bd3dc9cdc21cd74e77ae0eea77eefc09872de52b176e7f1baad29a00591143fe43f3f009a801431f735757397c38597cd0d05fd596d13dbbd3b92c73f3867efdb4cf762d3dd0d6e45197b78af48cdd080806646b04b198d4c77f26f782980136fe61f706771f9fbdc608ec3842e6b9e45e12d118a7b4dc166f4d5192097a39fc415b92721a57b7d0fdb98a3a39a1faaab822f9cbb402c8d1e85fd9e6e6930882f9c56623779fca4c9ed955a77d49cd04503af530f601e4e47435e0e0bd485c8eb4cf991c0b12c7a1f9e27b5ca6d0b8adfea5248f8251231355c41fc4b3c41fa89bfc3df8227f44009a9609af0ff50a96ac71c36693cf37b55533755d5a8929fec081a98b789c13541a84d5efdd105ff9c70eed73fc9de2d86d2fba184a97a76e4aa9ddbe1bfeb1e760ffc44ae3ac6f7a126fce0007308627837023913f0b213779e176a25e467bce3b9a6948eff4126a2ae19c23db60b049cca0f9fdf7a54a67b561519eb68f8c5f6b879947e2e54a4401250251244b554780af563a8409e0a847b0e59d36bd36d6d1adb32271a9f8af86165f94804c0e7b3fc6f4d4e450b7c652dbc2cbd87bafae53690b97e3fc81e5d48c877a42c2c472f8520e0929e920db596580623458b80c49ec89fb1082e7130ae5d88bd8e65b07b50429828a66ae22cf03c0db37fd58cce4fd92d3d461f0b61005dfdfec0417f04d019dd4728d90b5aad7f3dd997064742c35584c9ebb9d72f382fc4be0766096d8b8263740c2e32e70bedc1ed9a2a3532214c33d13754fe427d64ac1e324f9ba89cce107d5097acd8a8c7ccbaa33729952eb8a75b0f86f11fa408712087f97aca5a17414d1a3dccfa7f3ae5e40b2af27f7da8b70ecf3afd2959a8d680c36ab37310588f35925e38e38f12eab52676ac89ed7e9d272dd85b179a6867b6f74790a8ffe21a6a8f0a6ad7ffd439d6557306013f750e961c259c0ccb646c77d7150772e7a618e30e5327f47cb92ff99e17f8a7ae58a51f0e2cd7fee2b7d2817106f28599b7e93754a7f296f9c57f3e290b758c03f3f622485106745c9cf75dd00ce402cbee47867dde4ea7c7628567eb750b5caa3a81b1e4091e1f09f07e9de7e54d9aa0d161694fb4a51418d9e075ea81859795414cc07f96fe2d4954e5f70fcb5f81742d87702321eebe165ce6d4028249351937bf0fddfa0273e4ef20f9be1e9c7ccc848e4fedaf62f92a4cbffae1bd3b1307b905124319ca4dd9567abfc228b1c57b2f3d5079461f97b7359a866be1e0b36f5506b9fc9a0f6fd07f136dcd98eee38c16829dd9415ff92ef49e4c1ea42b5a5f846109bbb5ad18e1b211efe15a0fd000cf4478eac290e211d54fd5609d0bbfec7c143747a2a33a4491db64aef28ff3ad01f0e5bd18b142fd3c9b4e64de740d60cbdef3c6efa063fcf31d73ff10bf71eb51324b3dc4b62420794a7f08daf21a93856c775e8c2b97604f16a18432a4908d9acd1043f1ceb4670023b42978a9dc5330826997c0f55371a1877edb9b0cd5ea2d69f32b51b3fe59570855cc8c99af6a915add9f2e92ef1c044bb7258187194ee67ee7d8d954afe322b8b7fff5515fc2514e7a09b4ceab28fefac760fb2ab6a57b2d11408600d63bab4404d9f75ae30", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xffffffffffffffda, 0xc, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) 2m34.135808665s ago: executing program 7 (id=1102): r0 = socket$inet(0xa, 0x801, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x32d) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) listen(r0, 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000003000000f4ff0000ad0000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m13.17729844s ago: executing program 6 (id=1101): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_MCE_KILL(0x41555856, 0x0, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x17}, @loopback}}}], 0x20}, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x0, 0x0, 0x6}}, 0x14) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000380)=ANY=[@ANYBLOB="380100001a0001000000000000000000ac1414aa000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x138}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) splice(r8, 0x0, r10, 0x0, 0x80, 0x2) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 5 (id=1098): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000002000010000000000000000000a008000000000030000000014000200fc02"], 0x30}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r1}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x28, 0x4, 0x0, 0x0, 0x42}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="04400000000000003c0012800b000100697036746e6c00002c00028014000300200100000000000000000060252bc02319000000000114000200fc020000000000000000"], 0x5c}}, 0x0) fsopen(&(0x7f0000000040)='hostfs\x00', 0x1) kernel console output (not intermixed with test programs): .133200][ T8506] ? __pfx_lock_release+0x10/0x10 [ 301.138222][ T8506] ? trace_lock_acquire+0x14e/0x1f0 [ 301.143437][ T8506] ? __fget_files+0x206/0x3a0 [ 301.148122][ T8506] __sys_sendmsg+0x16e/0x220 [ 301.152719][ T8506] ? __pfx___sys_sendmsg+0x10/0x10 [ 301.157887][ T8506] do_syscall_64+0xcd/0x250 [ 301.162386][ T8506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.168274][ T8506] RIP: 0033:0x7fa86df7ff19 [ 301.172679][ T8506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.192293][ T8506] RSP: 002b:00007fa86ecee058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.200701][ T8506] RAX: ffffffffffffffda RBX: 00007fa86e145fa0 RCX: 00007fa86df7ff19 [ 301.208678][ T8506] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000003 [ 301.216654][ T8506] RBP: 00007fa86ecee0a0 R08: 0000000000000000 R09: 0000000000000000 [ 301.224632][ T8506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.232599][ T8506] R13: 0000000000000000 R14: 00007fa86e145fa0 R15: 00007fff0db38e38 [ 301.240602][ T8506] [ 301.324941][ T5866] usb 5-1: device descriptor read/64, error -71 [ 301.634785][ T5866] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 301.787302][ T5866] usb 5-1: device descriptor read/64, error -71 [ 301.864892][ T3069] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 301.867179][ T8520] 9pnet_fd: Insufficient options for proto=fd [ 301.983791][ T5866] usb usb5-port1: attempt power cycle [ 302.058473][ T3069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.103268][ T3069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.114701][ T3069] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 302.125092][ T3069] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.144386][ T3069] usb 4-1: config 0 descriptor?? [ 302.448811][ T5866] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 302.887735][ T5866] usb 5-1: device descriptor read/8, error -71 [ 303.983947][ T3069] hid-led 0003:27B8:01ED.0007: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 304.002284][ T3069] hid-led 0003:27B8:01ED.0007: ThingM blink(1) initialized [ 304.724760][ T3069] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 304.875041][ T3069] usb 3-1: Using ep0 maxpacket: 8 [ 304.888745][ T3069] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 304.908936][ T3069] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.917533][ T5894] usb 4-1: USB disconnect, device number 11 [ 304.937620][ T3069] usb 3-1: Product: syz [ 304.941926][ T3069] usb 3-1: Manufacturer: syz [ 304.949599][ T3069] usb 3-1: SerialNumber: syz [ 304.969082][ T3069] usb 3-1: config 0 descriptor?? [ 304.985398][ T3069] gspca_main: se401-2.14.0 probing 047d:5003 [ 305.399701][ T3069] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 305.411313][ T3069] se401 3-1:0.0: probe with driver se401 failed with error -71 [ 305.433846][ T3069] usb 3-1: USB disconnect, device number 19 [ 306.432782][ T30] kauditd_printk_skb: 134 callbacks suppressed [ 306.432798][ T30] audit: type=1400 audit(1733959277.564:952): avc: denied { read } for pid=8574 comm="syz.4.700" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 306.466710][ T8576] fuse: Bad value for 'fd' [ 306.516469][ T30] audit: type=1400 audit(1733959277.614:953): avc: denied { open } for pid=8574 comm="syz.4.700" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 306.600855][ T8579] nfs4: Unknown parameter 'workr' [ 306.685219][ T30] audit: type=1400 audit(1733959277.644:954): avc: denied { ioctl } for pid=8574 comm="syz.4.700" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 306.762935][ T8581] nfs4: Unknown parameter 'workr' [ 306.995415][ T5920] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 307.597956][ T5920] usb 5-1: config 1 interface 0 altsetting 188 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 308.134220][ T5920] usb 5-1: config 1 interface 0 altsetting 188 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 308.145339][ T5920] usb 5-1: config 1 interface 0 has no altsetting 0 [ 308.154751][ T5920] usb 5-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.40 [ 308.164121][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.187443][ T5920] usb 5-1: Product: ѕ [ 308.221933][ T5920] usb 5-1: Manufacturer: 뙈珉桨㲫倨޺尯濂퉒荦單迣㸈ሹ若끓碘ଞ픬K캮뗰靽穨ꨨ艎퍎殿ﰏ梓曢瘨ᯗ䵱ꪵ쓊䢳佈꼽ࣤꌮ쉰詜薖儠ᮃ쁛췓燧䮏걕鱀癛㗕鑍猳䬘北䭞ꯥ尼鑴⨱⿼⊠䓸찾蝥ዼ开喝嚗︣䝜ᢺ恙虸㕊喣剙᣽秳텙劫澹學৏욡Ꮦ☵䧽큥뤵ꑊ作ᗶ⮞㳀⮯纂맷㣴垐쥤峼獯 [ 308.256001][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.308651][ T5920] usb 5-1: SerialNumber: 澪疆˕눤쮩栗ទ棅ኞ㿱⮑㎣⪾ꆻ缫幏纰ꙟ뢛㷔痠そ>郎胋돷ᩭ쪢몢벑駎팊拄胜졞긊︩㊦뤨⟢ [ 308.341345][ T30] audit: type=1400 audit(1733959279.464:955): avc: denied { write } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.424683][ T30] audit: type=1400 audit(1733959279.464:956): avc: denied { remove_name } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.458726][ T30] audit: type=1400 audit(1733959279.464:957): avc: denied { add_name } for pid=5172 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.780227][ T8584] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 308.794629][ T8584] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 308.933889][ T8603] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 308.933889][ T8603] [ 308.964696][ T30] audit: type=1400 audit(1733959280.054:958): avc: denied { mount } for pid=8602 comm="syz.0.708" name="/" dev="hugetlbfs" ino=17320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 308.988051][ T30] audit: type=1400 audit(1733959280.064:959): avc: denied { remount } for pid=8602 comm="syz.0.708" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 309.113066][ T30] audit: type=1400 audit(1733959280.234:960): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 309.442831][ T5920] usbhid 5-1:1.0: can't add hid device: -71 [ 309.449446][ T5920] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 309.481892][ T5920] usb 5-1: USB disconnect, device number 19 [ 309.675530][ T30] audit: type=1400 audit(1733959280.784:961): avc: denied { ioctl } for pid=8610 comm="syz.0.710" path="socket:[17347]" dev="sockfs" ino=17347 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 309.699995][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.611317][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 311.611335][ T30] audit: type=1400 audit(1733959282.744:963): avc: denied { getopt } for pid=8628 comm="syz.0.715" lport=35743 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 311.734063][ T8649] fuse: Bad value for 'fd' [ 312.829530][ T5864] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 313.175539][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 313.186643][ T5864] usb 4-1: config 0 has an invalid interface number: 61 but max is 1 [ 313.195468][ T5864] usb 4-1: config 0 has an invalid interface number: 98 but max is 1 [ 313.228643][ T5864] usb 4-1: config 0 has no interface number 0 [ 313.249451][ T5864] usb 4-1: config 0 has no interface number 1 [ 313.288262][ T5864] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 313.298163][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.313669][ T5864] usb 4-1: Product: syz [ 313.321886][ T5864] usb 4-1: Manufacturer: syz [ 313.333145][ T5864] usb 4-1: SerialNumber: syz [ 313.353520][ T5864] usb 4-1: config 0 descriptor?? [ 313.404712][ T5866] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 313.497114][ T5864] viperboard 4-1:0.61: version 0.00 found at bus 004 address 012 [ 313.516987][ T5864] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 313.527670][ T8671] FAULT_INJECTION: forcing a failure. [ 313.527670][ T8671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.544871][ T5864] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 313.557479][ T5866] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 313.569240][ T8671] CPU: 0 UID: 0 PID: 8671 Comm: syz.4.728 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 313.579856][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 313.589922][ T8671] Call Trace: [ 313.593210][ T8671] [ 313.596148][ T8671] dump_stack_lvl+0x16c/0x1f0 [ 313.600844][ T8671] should_fail_ex+0x497/0x5b0 [ 313.605556][ T8671] _copy_from_user+0x2e/0xd0 [ 313.610166][ T8671] copy_msghdr_from_user+0x99/0x160 [ 313.615397][ T8671] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 313.621235][ T8671] ___sys_sendmsg+0xff/0x1e0 [ 313.625849][ T8671] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.631078][ T8671] ? __pfx_lock_release+0x10/0x10 [ 313.636121][ T8671] ? trace_lock_acquire+0x14e/0x1f0 [ 313.641350][ T8671] ? __fget_files+0x206/0x3a0 [ 313.646042][ T8671] __sys_sendmsg+0x16e/0x220 [ 313.650651][ T8671] ? __pfx___sys_sendmsg+0x10/0x10 [ 313.655801][ T8671] do_syscall_64+0xcd/0x250 [ 313.660320][ T8671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.666225][ T8671] RIP: 0033:0x7f53be37ff19 [ 313.670644][ T8671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.690262][ T8671] RSP: 002b:00007f53bf199058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.698684][ T8671] RAX: ffffffffffffffda RBX: 00007f53be545fa0 RCX: 00007f53be37ff19 [ 313.706650][ T8671] RDX: 000000000000c000 RSI: 0000000020000400 RDI: 0000000000000003 [ 313.714613][ T8671] RBP: 00007f53bf1990a0 R08: 0000000000000000 R09: 0000000000000000 [ 313.722572][ T8671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.730533][ T8671] R13: 0000000000000000 R14: 00007f53be545fa0 R15: 00007fffa6624b28 [ 313.738507][ T8671] [ 313.741685][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.748387][ T5866] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 313.760579][ T5866] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 313.773074][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.804839][ T5864] viperboard 4-1:0.98: version 0.00 found at bus 004 address 012 [ 313.821446][ T5864] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 313.852346][ T5864] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 313.921293][ T5864] usb 4-1: USB disconnect, device number 12 [ 315.233881][ T8681] ebt_among: dst integrity fail: 100 [ 315.534683][ T5866] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 315.554306][ T5864] usb 1-1: USB disconnect, device number 14 [ 316.075650][ T5866] usb 4-1: device descriptor read/64, error -71 [ 316.314767][ T5866] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 316.424135][ T30] audit: type=1400 audit(1733959287.554:964): avc: denied { read } for pid=8692 comm="syz.4.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 316.447387][ T30] audit: type=1400 audit(1733959287.554:965): avc: denied { write } for pid=8692 comm="syz.4.734" path="socket:[18772]" dev="sockfs" ino=18772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 316.570371][ T5866] usb 4-1: device descriptor read/64, error -71 [ 316.684725][ T5894] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 316.685029][ T5866] usb usb4-port1: attempt power cycle [ 316.860032][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 316.870511][ T5894] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 316.882224][ T5894] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 316.891399][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.900582][ T5894] usb 5-1: Product: syz [ 316.905859][ T5894] usb 5-1: Manufacturer: syz [ 316.910471][ T5894] usb 5-1: SerialNumber: syz [ 316.925761][ T5894] usb 5-1: config 0 descriptor?? [ 316.945762][ T5894] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 316.955344][ T5865] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 317.074439][ T5866] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 317.137109][ T5865] usb 2-1: Using ep0 maxpacket: 8 [ 317.154856][ T5866] usb 4-1: device descriptor read/8, error -71 [ 317.169777][ T8710] FAULT_INJECTION: forcing a failure. [ 317.169777][ T8710] name failslab, interval 1, probability 0, space 0, times 0 [ 317.242576][ T8694] netlink: 48 bytes leftover after parsing attributes in process `syz.4.734'. [ 317.258011][ T30] audit: type=1400 audit(1733959288.374:966): avc: denied { nlmsg_read } for pid=8692 comm="syz.4.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 317.415512][ T5866] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 317.918031][ T5894] usb 5-1: USB disconnect, device number 20 [ 317.953561][ T8710] CPU: 1 UID: 0 PID: 8710 Comm: syz.2.739 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 317.964174][ T8710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 317.974217][ T8710] Call Trace: [ 317.977481][ T8710] [ 317.980398][ T8710] dump_stack_lvl+0x16c/0x1f0 [ 317.985073][ T8710] should_fail_ex+0x497/0x5b0 [ 317.989740][ T8710] ? fs_reclaim_acquire+0xae/0x150 [ 317.994845][ T8710] should_failslab+0xc2/0x120 [ 317.999513][ T8710] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 318.005827][ T8710] ? proc_sys_call_handler+0x4e0/0x5d0 [ 318.011297][ T8710] __cgroup_bpf_run_filter_sysctl+0x103/0xd00 [ 318.017363][ T8710] ? __pfx___cgroup_bpf_run_filter_sysctl+0x10/0x10 [ 318.023942][ T8710] ? __virt_addr_valid+0x5e/0x590 [ 318.028954][ T8710] ? __phys_addr_symbol+0x30/0x80 [ 318.033962][ T8710] ? __check_object_size+0x488/0x710 [ 318.039235][ T8710] proc_sys_call_handler+0x4e0/0x5d0 [ 318.044516][ T8710] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 318.050332][ T8710] ? splice_from_pipe_next+0x1f8/0x5d0 [ 318.055799][ T8710] iter_file_splice_write+0x90f/0x10b0 [ 318.061285][ T8710] ? __pfx_iter_file_splice_write+0x10/0x10 [ 318.067195][ T8710] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 318.072822][ T8710] ? splice_direct_to_actor+0x346/0xa40 [ 318.078361][ T8710] ? __pfx_iter_file_splice_write+0x10/0x10 [ 318.084245][ T8710] direct_splice_actor+0x18f/0x6c0 [ 318.089367][ T8710] splice_direct_to_actor+0x346/0xa40 [ 318.094740][ T8710] ? __pfx_direct_splice_actor+0x10/0x10 [ 318.100377][ T8710] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 318.106263][ T8710] ? __pfx___might_resched+0x10/0x10 [ 318.111545][ T8710] do_splice_direct+0x178/0x250 [ 318.116384][ T8710] ? __pfx_do_splice_direct+0x10/0x10 [ 318.121744][ T8710] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 318.127644][ T8710] do_sendfile+0xaed/0xe30 [ 318.132077][ T8710] ? __pfx_do_sendfile+0x10/0x10 [ 318.137012][ T8710] ? __fget_files+0x206/0x3a0 [ 318.141682][ T8710] __x64_sys_sendfile64+0x1da/0x220 [ 318.146869][ T8710] ? ksys_write+0x1ba/0x250 [ 318.151357][ T8710] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 318.157084][ T8710] do_syscall_64+0xcd/0x250 [ 318.161607][ T8710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.167491][ T8710] RIP: 0033:0x7fe4ba37ff19 [ 318.171914][ T8710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.191512][ T8710] RSP: 002b:00007fe4bb237058 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 318.199916][ T8710] RAX: ffffffffffffffda RBX: 00007fe4ba545fa0 RCX: 00007fe4ba37ff19 [ 318.207886][ T8710] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 318.215838][ T8710] RBP: 00007fe4bb2370a0 R08: 0000000000000000 R09: 0000000000000000 [ 318.223802][ T8710] R10: 000000000000023b R11: 0000000000000246 R12: 0000000000000001 [ 318.231781][ T8710] R13: 0000000000000000 R14: 00007fe4ba545fa0 R15: 00007ffdb1e59798 [ 318.239757][ T8710] [ 318.443006][ T5865] usb 2-1: config index 0 descriptor too short (expected 63180, got 27) [ 318.451518][ T5865] usb 2-1: config 54 has too many interfaces: 82, using maximum allowed: 32 [ 318.460286][ T5865] usb 2-1: config 54 has an invalid descriptor of length 28, skipping remainder of the config [ 318.470672][ T5865] usb 2-1: config 54 has 0 interfaces, different from the descriptor's value: 82 [ 318.487058][ T5866] usb 4-1: device descriptor read/8, error -71 [ 318.594957][ T5866] usb usb4-port1: unable to enumerate USB device [ 318.629825][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.636309][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.753401][ T5865] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice= 9.78 [ 318.762559][ T5865] usb 2-1: New USB device strings: Mfr=64, Product=2, SerialNumber=3 [ 318.770695][ T5865] usb 2-1: Product: syz [ 318.779423][ T5865] usb 2-1: Manufacturer: syz [ 318.784306][ T5865] usb 2-1: SerialNumber: syz [ 319.337758][ T5865] usb 2-1: USB disconnect, device number 15 [ 319.882420][ T8730] loop7: detected capacity change from 0 to 16384 [ 320.104749][ T8730] loop7: detected capacity change from 16384 to 16383 [ 320.442825][ T8727] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 320.669547][ T8727] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.679058][ T8727] buffer_io_error: 567 callbacks suppressed [ 320.679075][ T8727] Buffer I/O error on dev loop7, logical block 256, async page read [ 321.155086][ T5866] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 321.503796][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 321.517374][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 321.537172][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 321.560466][ T5866] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 321.571830][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.585836][ T5866] usb 1-1: Product: syz [ 321.590807][ T5866] usb 1-1: Manufacturer: syz [ 321.598731][ T5866] usb 1-1: SerialNumber: syz [ 321.608707][ T5866] usb 1-1: config 0 descriptor?? [ 321.629365][ T5866] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 321.718713][ T5866] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 322.545730][ T5866] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 322.552161][ T5866] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 322.620702][ T5866] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 322.690119][ T8726] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x800 phys_seg 128 prio class 0 [ 322.717598][ T5866] em28xx 1-1:0.0: No AC97 audio processor [ 322.725756][ T8726] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 322.738987][ T8726] Buffer I/O error on dev loop7, logical block 129, lost async page write [ 322.751761][ T5866] usb 1-1: USB disconnect, device number 15 [ 322.874626][ T5866] em28xx 1-1:0.0: Disconnecting em28xx [ 322.896309][ T8726] Buffer I/O error on dev loop7, logical block 130, lost async page write [ 323.097749][ T8726] Buffer I/O error on dev loop7, logical block 131, lost async page write [ 323.146003][ T5866] em28xx 1-1:0.0: Freeing device [ 323.152000][ T30] audit: type=1400 audit(1733959294.284:967): avc: denied { ioctl } for pid=8758 comm="syz.4.752" path="socket:[18893]" dev="sockfs" ino=18893 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 323.157901][ T8726] Buffer I/O error on dev loop7, logical block 132, lost async page write [ 323.194208][ T8726] Buffer I/O error on dev loop7, logical block 133, lost async page write [ 323.202872][ T8726] Buffer I/O error on dev loop7, logical block 134, lost async page write [ 323.211616][ T8726] Buffer I/O error on dev loop7, logical block 135, lost async page write [ 323.220689][ T8726] Buffer I/O error on dev loop7, logical block 136, lost async page write [ 323.440748][ T30] audit: type=1400 audit(1733959294.574:968): avc: denied { wake_alarm } for pid=8758 comm="syz.4.752" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 323.635330][ T3069] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 323.846211][ T3069] usb 2-1: config 0 has an invalid interface number: 121 but max is 1 [ 323.871936][ T3069] usb 2-1: config 0 has an invalid interface number: 70 but max is 1 [ 323.901080][ T3069] usb 2-1: config 0 has no interface number 0 [ 323.911204][ T3069] usb 2-1: config 0 has no interface number 1 [ 323.931518][ T3069] usb 2-1: config 0 interface 121 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 323.973543][ T3069] usb 2-1: config 0 interface 121 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 323.994766][ T3069] usb 2-1: config 0 interface 121 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 324.025612][ T3069] usb 2-1: config 0 interface 121 altsetting 0 bulk endpoint 0xC has invalid maxpacket 8 [ 324.054778][ T3069] usb 2-1: config 0 interface 121 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 324.082333][ T3069] usb 2-1: config 0 interface 121 altsetting 0 endpoint 0x9 has an invalid bInterval 127, changing to 10 [ 324.093861][ T3069] usb 2-1: New USB device found, idVendor=12d1, idProduct=0d71, bcdDevice=a6.b8 [ 324.121183][ T3069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.160598][ T3069] usb 2-1: config 0 descriptor?? [ 324.177181][ T8769] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 324.196834][ T3069] option 2-1:0.121: GSM modem (1-port) converter detected [ 324.214362][ T30] audit: type=1400 audit(1733959295.344:969): avc: denied { mount } for pid=8780 comm="syz.4.758" name="/" dev="gadgetfs" ino=20068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 324.267370][ T3069] option 2-1:0.70: GSM modem (1-port) converter detected [ 324.279270][ T8781] netlink: 56 bytes leftover after parsing attributes in process `syz.4.758'. [ 324.298756][ T30] audit: type=1400 audit(1733959295.394:970): avc: granted { setsecparam } for pid=8783 comm="syz.2.759" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 324.327526][ T8788] netlink: 72 bytes leftover after parsing attributes in process `syz.2.759'. [ 324.405599][ T3069] usb 2-1: USB disconnect, device number 16 [ 324.437867][ T3069] option 2-1:0.121: device disconnected [ 324.465923][ T3069] option 2-1:0.70: device disconnected [ 324.491452][ T8791] nfs4: Unknown parameter 'workr' [ 324.724739][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 324.886459][ T9] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 324.900795][ T9] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 324.921320][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 324.932623][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.240806][ T8803] fuse: Bad value for 'fd' [ 326.464898][ T8781] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 326.647811][ T5866] usb 1-1: USB disconnect, device number 16 [ 327.138569][ T8814] loop7: detected capacity change from 0 to 16384 [ 327.792759][ T30] audit: type=1400 audit(1733959298.364:971): avc: denied { connect } for pid=8811 comm="syz.1.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 327.912586][ T30] audit: type=1400 audit(1733959299.044:972): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 328.062688][ T8824] fuse: Bad value for 'fd' [ 328.644723][ T8817] loop7: detected capacity change from 16384 to 16383 [ 328.804723][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 329.270943][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 198, changing to 11 [ 329.298550][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 329.380777][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.394719][ T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 329.474397][ T9] usb 1-1: config 0 descriptor?? [ 329.615992][ T26] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 330.045104][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 330.316229][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 330.425338][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.486297][ T8846] ceph: No mds server is up or the cluster is laggy [ 330.555794][ T26] usb 3-1: device descriptor read/all, error -71 [ 330.898074][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 330.907661][ T9] apple 0003:05AC:0274.0008: hidraw0: USB HID v0.00 Device [HID 05ac:0274] on usb-dummy_hcd.0-1/input0 [ 330.918842][ T8] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 330.929446][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.938732][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 330.954814][ T9] usb 1-1: USB disconnect, device number 17 [ 330.970077][ T8] usb 2-1: config 0 descriptor?? [ 330.976341][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 331.248502][ T8860] nfs4: Unknown parameter 'workr' [ 331.373289][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 331.380190][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 331.973188][ T8861] fuse: Bad value for 'fd' [ 332.457880][ T26] usb 2-1: USB disconnect, device number 17 [ 332.526519][ T8866] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.780'. [ 332.713509][ T8873] input: syz1 as /devices/virtual/input/input10 [ 333.482107][ T8883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.823051][ T8899] overlayfs: overlapping lowerdir path [ 336.097261][ T8910] [U]  [ 336.231049][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 336.324694][ T5894] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 336.495363][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 336.502385][ T5894] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 336.615630][ T9] usb 5-1: config 7 has an invalid interface number: 241 but max is 2 [ 336.646854][ T9] usb 5-1: config 7 has an invalid interface number: 150 but max is 2 [ 337.249588][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.294944][ T9] usb 5-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 337.305465][ T9] usb 5-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 337.314217][ T9] usb 5-1: config 7 has an invalid interface number: 188 but max is 2 [ 337.322501][ T9] usb 5-1: config 7 has an invalid interface number: 94 but max is 2 [ 337.330756][ T9] usb 5-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 337.339927][ T9] usb 5-1: config 7 has an invalid descriptor of length 165, skipping remainder of the config [ 337.341436][ T5894] usb 4-1: config 0 has no interface number 0 [ 337.350687][ T9] usb 5-1: config 7 has 4 interfaces, different from the descriptor's value: 3 [ 337.350718][ T9] usb 5-1: config 7 has no interface number 0 [ 337.350737][ T9] usb 5-1: config 7 has no interface number 1 [ 337.350756][ T9] usb 5-1: config 7 has no interface number 2 [ 337.350772][ T9] usb 5-1: config 7 has no interface number 3 [ 337.364448][ T5894] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 337.366516][ T9] usb 5-1: config 7 interface 241 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 64 [ 337.380032][ T5894] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 337.385094][ T9] usb 5-1: config 7 interface 241 altsetting 6 bulk endpoint 0x6 has invalid maxpacket 1024 [ 337.391663][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.404198][ T9] usb 5-1: config 7 interface 241 altsetting 6 endpoint 0xC has invalid wMaxPacketSize 0 [ 337.490639][ T5894] usb 4-1: config 0 descriptor?? [ 337.527233][ T9] usb 5-1: config 7 interface 241 altsetting 6 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 337.538388][ T9] usb 5-1: config 7 interface 241 altsetting 6 bulk endpoint 0x5 has invalid maxpacket 32 [ 337.548440][ T9] usb 5-1: config 7 interface 241 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 337.559497][ T9] usb 5-1: config 7 interface 241 altsetting 6 has an endpoint descriptor with address 0x37, changing to 0x7 [ 337.571443][ T9] usb 5-1: config 7 interface 241 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 337.582412][ T9] usb 5-1: config 7 interface 241 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 337.593660][ T9] usb 5-1: config 7 interface 241 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 337.605068][ T9] usb 5-1: config 7 interface 241 altsetting 6 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 337.616323][ T9] usb 5-1: config 7 interface 241 altsetting 6 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 337.630635][ T9] usb 5-1: config 7 interface 150 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 337.641479][ T9] usb 5-1: config 7 interface 150 altsetting 9 endpoint 0x4 has an invalid bInterval 128, changing to 7 [ 337.649588][ T5894] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 337.653067][ T9] usb 5-1: config 7 interface 150 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 337.671340][ T9] usb 5-1: config 7 interface 150 altsetting 9 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 337.682775][ T9] usb 5-1: config 7 interface 150 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 337.693690][ T9] usb 5-1: config 7 interface 150 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 337.696274][ T8927] fuse: Bad value for 'fd' [ 337.704875][ T9] usb 5-1: too many endpoints for config 7 interface 188 altsetting 70: 173, using maximum allowed: 30 [ 337.720426][ T9] usb 5-1: config 7 interface 188 altsetting 70 has 0 endpoint descriptors, different from the interface descriptor's value: 173 [ 337.733970][ T9] usb 5-1: config 7 interface 94 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 337.747367][ T9] usb 5-1: config 7 interface 241 has no altsetting 0 [ 337.754164][ T9] usb 5-1: config 7 interface 150 has no altsetting 0 [ 337.761304][ T9] usb 5-1: config 7 interface 188 has no altsetting 0 [ 337.768503][ T9] usb 5-1: config 7 interface 94 has no altsetting 0 [ 338.469842][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice=2c.0b [ 338.479386][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.561699][ T9] usb 5-1: can't set config #7, error -71 [ 338.590202][ T9] usb 5-1: USB disconnect, device number 21 [ 339.188216][ T8938] nfs4: Unknown parameter 'workr' [ 340.356578][ T3069] usb 4-1: USB disconnect, device number 17 [ 340.555849][ T26] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 340.805659][ T26] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 340.829135][ T26] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 340.864705][ T26] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 340.888133][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.569168][ T8953] netlink: 240 bytes leftover after parsing attributes in process `syz.2.804'. [ 341.578245][ T8953] netlink: 240 bytes leftover after parsing attributes in process `syz.2.804'. [ 341.990681][ T8968] nfs4: Unknown parameter 'workr' [ 342.592054][ T8944] vivid-007: ================= START STATUS ================= [ 342.600197][ T8944] vivid-007: Generate PTS: true [ 342.605476][ T8944] vivid-007: Generate SCR: true [ 342.610660][ T8944] tpg source WxH: 640x360 (Y'CbCr) [ 342.616077][ T8944] tpg field: 1 [ 342.619551][ T8944] tpg crop: 640x360@0x0 [ 342.634311][ T8973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.808'. [ 342.916788][ T8975] fuse: Bad value for 'fd' [ 342.944220][ T8975] 9pnet_fd: Insufficient options for proto=fd [ 342.999903][ T8973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.241723][ T8944] tpg compose: 640x360@0x0 [ 344.217089][ T8944] tpg colorspace: 8 [ 344.223566][ T8973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.249348][ T8944] tpg transfer function: 0/0 [ 344.341146][ T8944] tpg Y'CbCr encoding: 0/0 [ 344.351941][ T8944] tpg quantization: 0/0 [ 344.360028][ T8944] tpg RGB range: 0/2 [ 344.364077][ T8944] vivid-007: ================== END STATUS ================== [ 344.368509][ T8973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.391684][ T8986] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 344.406041][ T8973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.600181][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 347.944736][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 347.951480][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 348.051300][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.195396][ T9019] fuse: Bad value for 'fd' [ 348.244650][ T9] usb 2-1: config 0 has no interface number 0 [ 348.461653][ T9] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 348.491162][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 348.500331][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.531272][ T9] usb 2-1: config 0 descriptor?? [ 348.561356][ T9] usb 2-1: can't set config #0, error -71 [ 348.591531][ T9] usb 2-1: USB disconnect, device number 18 [ 348.713334][ T9023] fuse: Bad value for 'fd' [ 349.234816][ T30] audit: type=1400 audit(1733959320.214:973): avc: denied { ioctl } for pid=9026 comm="syz.1.821" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 350.308538][ T9037] nfs4: Unknown parameter 'workr' [ 350.754490][ T9043] netlink: 32 bytes leftover after parsing attributes in process `syz.3.826'. [ 350.997241][ T26] usb 1-1: USB disconnect, device number 18 [ 351.060164][ T9049] overlayfs: failed to resolve './file1': -2 [ 351.161512][ T30] audit: type=1326 audit(1733959322.294:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f7b7ff19 code=0x7ffc0000 [ 351.314181][ T30] audit: type=1326 audit(1733959322.294:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f7b7ff19 code=0x7ffc0000 [ 351.514798][ T30] audit: type=1326 audit(1733959322.294:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fe3f7b7ff19 code=0x7ffc0000 [ 351.553762][ T30] audit: type=1326 audit(1733959322.294:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f7b7ff19 code=0x7ffc0000 [ 351.658570][ T30] audit: type=1326 audit(1733959322.294:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3f7b7ff19 code=0x7ffc0000 [ 351.772477][ T30] audit: type=1326 audit(1733959322.294:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f7b7ff19 code=0x7ffc0000 [ 351.914737][ T30] audit: type=1326 audit(1733959322.294:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f7b7ff19 code=0x7ffc0000 [ 352.012007][ T30] audit: type=1326 audit(1733959322.294:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3f7b7ff19 code=0x7ffc0000 [ 352.035647][ T30] audit: type=1326 audit(1733959322.294:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9050 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f7b7ff19 code=0x7ffc0000 [ 352.044841][ T26] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 352.277899][ T9065] Cannot find map_set index 0 as target [ 352.784726][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 352.808511][ T26] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 352.837678][ T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.887358][ T26] usb 4-1: config 0 has no interface number 0 [ 352.932126][ T26] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 352.977365][ T26] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 353.197905][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.413226][ T26] usb 4-1: config 0 descriptor?? [ 354.551093][ T26] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 354.634004][ T9086] netlink: 44 bytes leftover after parsing attributes in process `syz.2.835'. [ 355.192442][ T9101] netlink: 180 bytes leftover after parsing attributes in process `syz.0.837'. [ 355.346853][ T9101] tmpfs: Unknown parameter '5vʫ-' [ 356.210566][ T9124] nfs4: Unknown parameter 'workr' [ 356.849154][ T5894] usb 4-1: USB disconnect, device number 18 [ 357.054731][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 357.414212][ T9134] nfs4: Unknown parameter 'workr' [ 358.067518][ T8] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 358.087665][ T8] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 358.104843][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 358.254693][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.239239][ T9132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.843'. [ 359.319254][ T9159] nfs4: Unknown parameter 'workr' [ 359.390550][ T9157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.404362][ T9149] vivid-007: ================= START STATUS ================= [ 359.412315][ T9149] vivid-007: Generate PTS: true [ 359.417611][ T9149] vivid-007: Generate SCR: true [ 359.458884][ T9149] tpg source WxH: 640x360 (Y'CbCr) [ 359.474745][ T9149] tpg field: 1 [ 359.486086][ T9149] tpg crop: 640x360@0x0 [ 359.496221][ T9149] tpg compose: 640x360@0x0 [ 359.511920][ T9149] tpg colorspace: 8 [ 359.518929][ T9149] tpg transfer function: 0/0 [ 359.525116][ T9149] tpg Y'CbCr encoding: 0/0 [ 359.529633][ T9149] tpg quantization: 0/0 [ 359.546480][ T9149] tpg RGB range: 0/2 [ 359.556064][ T9149] vivid-007: ================== END STATUS ================== [ 359.702570][ T9170] netlink: 40 bytes leftover after parsing attributes in process `syz.0.849'. [ 359.866077][ T8] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 360.138510][ T8] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 360.214847][ T8] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 360.223956][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 360.328127][ T9186] fuse: Bad value for 'fd' [ 360.556096][ T8774] usb 2-1: USB disconnect, device number 19 [ 360.684298][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.065075][ T8774] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 361.165093][ T9195] vivid-007: ================= START STATUS ================= [ 361.173872][ T9195] vivid-007: Generate PTS: true [ 361.179301][ T9195] vivid-007: Generate SCR: true [ 361.184542][ T9195] tpg source WxH: 640x360 (Y'CbCr) [ 361.189845][ T9195] tpg field: 1 [ 361.193378][ T9195] tpg crop: 640x360@0x0 [ 361.197771][ T9195] tpg compose: 640x360@0x0 [ 361.202327][ T9195] tpg colorspace: 8 [ 361.207870][ T9195] tpg transfer function: 0/0 [ 361.212599][ T9195] tpg Y'CbCr encoding: 0/0 [ 361.217375][ T9195] tpg quantization: 0/0 [ 361.221595][ T9195] tpg RGB range: 0/2 [ 361.225705][ T9195] vivid-007: ================== END STATUS ================== [ 361.451642][ T8774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.546230][ T8774] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 361.686699][ T8774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.864622][ T9202] nfs4: Unknown parameter 'workr' [ 362.275278][ T8774] usb 2-1: config 0 descriptor?? [ 362.529236][ T8] usb 4-1: USB disconnect, device number 19 [ 362.689224][ T8774] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 362.699893][ T8774] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0009/input/input11 [ 362.808460][ T26] IPVS: starting estimator thread 0... [ 362.842116][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 362.842140][ T30] audit: type=1400 audit(1733959333.974:1086): avc: denied { write } for pid=9203 comm="syz.4.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 362.887988][ T8774] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 362.914792][ T9208] IPVS: using max 30 ests per chain, 72000 per kthread [ 363.094170][ T9212] 9pnet_fd: Insufficient options for proto=fd [ 363.462665][ T5864] usb 2-1: USB disconnect, device number 20 [ 363.497532][ T9213] ALSA: seq fatal error: cannot create timer (-22) [ 365.100120][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.862'. [ 365.724760][ T5864] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 366.084537][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 366.091932][ T5864] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 366.104246][ T5864] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 366.114295][ T5864] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 367.079308][ T8] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 367.091026][ T5864] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 367.100158][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.108462][ T5864] usb 5-1: Product: syz [ 367.112651][ T5864] usb 5-1: Manufacturer: syz [ 367.119352][ T9250] vivid-007: ================= START STATUS ================= [ 367.122469][ T9245] nfs4: Unknown parameter 'workr' [ 367.127337][ T9250] vivid-007: Generate PTS: [ 367.276981][ T9248] nfs4: Unknown parameter 'workr' [ 367.552207][ T9250] true [ 367.568529][ T9250] vivid-007: Generate SCR: true [ 367.755582][ T5864] usb 5-1: SerialNumber: syz [ 367.764736][ T9250] tpg source WxH: 640x360 (Y'CbCr) [ 367.770047][ T9250] tpg field: 1 [ 367.773445][ T9250] tpg crop: 640x360@0x0 [ 367.777717][ T9250] tpg compose: 640x360@0x0 [ 367.782144][ T9250] tpg colorspace: 8 [ 367.831744][ T9250] tpg transfer function: 0/0 [ 367.854936][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.856187][ T9250] tpg Y'CbCr encoding: 0/0 [ 367.876323][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.930991][ T9250] tpg quantization: 0/0 [ 368.168658][ T9250] tpg RGB range: 0/2 [ 368.231179][ T8] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 368.240407][ T9250] vivid-007: ================== END STATUS ================== [ 368.248832][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.281653][ T5864] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 368.388154][ T9258] 9pnet_fd: Insufficient options for proto=fd [ 368.671388][ T8] usb 1-1: config 0 descriptor?? [ 368.676660][ T5864] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 368.766473][ T5864] usb 5-1: USB disconnect, device number 22 [ 369.010350][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 369.087960][ T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 369.373648][ T8] usb 1-1: USB disconnect, device number 19 [ 369.574756][ T9270] 9pnet_fd: Insufficient options for proto=fd [ 369.780838][ T9274] [U]  [ 369.979969][ T30] audit: type=1400 audit(1733959341.114:1087): avc: denied { setopt } for pid=9275 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 370.307807][ T9288] netlink: 48 bytes leftover after parsing attributes in process `syz.0.875'. [ 370.701609][ T9294] nfs4: Unknown parameter 'workr' [ 371.042023][ T8678] udevd[8678]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.165041][ T30] audit: type=1400 audit(1733959342.244:1088): avc: denied { write } for pid=9295 comm="syz.2.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 371.466271][ T9302] fuse: Bad value for 'fd' [ 372.265580][ T9305] 9pnet_fd: Insufficient options for proto=fd [ 373.149291][ T30] audit: type=1400 audit(1733959344.234:1089): avc: denied { bind } for pid=9324 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 373.170072][ T26] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 373.335276][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 373.342179][ T26] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 373.379421][ T30] audit: type=1400 audit(1733959344.504:1090): avc: denied { read } for pid=9324 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 373.424525][ T26] usb 5-1: config 179 has no interface number 0 [ 373.453616][ T9331] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.886'. [ 373.454647][ T26] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 373.490770][ T30] audit: type=1400 audit(1733959344.624:1091): avc: denied { create } for pid=9332 comm="syz.0.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 373.532438][ T26] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 373.546768][ T30] audit: type=1400 audit(1733959344.624:1092): avc: denied { write } for pid=9332 comm="syz.0.888" path="socket:[21913]" dev="sockfs" ino=21913 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 373.695403][ T30] audit: type=1400 audit(1733959344.624:1093): avc: denied { nlmsg_read } for pid=9332 comm="syz.0.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 373.742262][ T26] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 373.754348][ T26] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 373.765996][ T26] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 373.779813][ T26] usb 5-1: config 179 interface 65 has no altsetting 0 [ 373.786825][ T26] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 373.795940][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.807183][ T9313] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 373.814487][ T9313] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 374.513868][ T9359] batadv_slave_0: entered promiscuous mode [ 374.545892][ T9359] SELinux: policydb string does not match my string SE Linux [ 374.554223][ T9359] SELinux: failed to load policy [ 374.578818][ T30] audit: type=1400 audit(1733959345.674:1094): avc: denied { load_policy } for pid=9315 comm="syz.1.883" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 375.505927][ T9373] nfs4: Unknown parameter 'workr' [ 375.529021][ T8] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 376.304913][ T5894] usb 5-1: USB disconnect, device number 23 [ 376.399121][ T8] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 376.483316][ T8] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 376.838299][ T9382] nfs4: Unknown parameter 'workr' [ 377.149026][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 377.164792][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.308529][ T9384] 9pnet_fd: Insufficient options for proto=fd [ 377.684517][ T9388] vivid-007: ================= START STATUS ================= [ 377.699902][ T9388] vivid-007: Generate PTS: true [ 377.708087][ T9388] vivid-007: Generate SCR: true [ 377.720288][ T9388] tpg source WxH: 640x360 (Y'CbCr) [ 377.738532][ T9388] tpg field: 1 [ 377.741963][ T9388] tpg crop: 640x360@0x0 [ 377.765114][ T9388] tpg compose: 640x360@0x0 [ 377.772874][ T9388] tpg colorspace: 8 [ 377.778962][ T9388] tpg transfer function: 0/0 [ 377.804993][ T8774] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 377.811397][ T9388] tpg Y'CbCr encoding: 0/0 [ 377.824901][ T9388] tpg quantization: 0/0 [ 377.829259][ T9388] tpg RGB range: 0/2 [ 377.833309][ T9388] vivid-007: ================== END STATUS ================== [ 377.909271][ T9393] fuse: Bad value for 'fd' [ 377.981307][ T8774] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 378.005935][ T8774] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 378.242953][ T9398] 9pnet_fd: Insufficient options for proto=fd [ 378.253012][ T8774] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 378.287059][ T8774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.706805][ T9401] [U]  [ 378.859278][ T9364] vivid-007: ================= START STATUS ================= [ 378.868525][ T9364] vivid-007: Generate PTS: true [ 378.873401][ T9364] vivid-007: Generate SCR: true [ 378.878273][ T9364] tpg source WxH: 640x360 (Y'CbCr) [ 378.883361][ T9364] tpg field: 1 [ 378.888275][ T9364] tpg crop: 640x360@0x0 [ 378.892545][ T9364] tpg compose: 640x360@0x0 [ 378.897362][ T9364] tpg colorspace: 8 [ 378.901162][ T9364] tpg transfer function: 0/0 [ 378.905872][ T9364] tpg Y'CbCr encoding: 0/0 [ 378.910717][ T9364] tpg quantization: 0/0 [ 378.915002][ T9364] tpg RGB range: 0/2 [ 378.919309][ T9364] vivid-007: ================== END STATUS ================== [ 379.118508][ T9405] vivid-007: ================= START STATUS ================= [ 379.128154][ T9405] vivid-007: Generate PTS: true [ 379.133222][ T9405] vivid-007: Generate SCR: true [ 379.138573][ T9405] tpg source WxH: 640x360 (Y'CbCr) [ 379.143810][ T9405] tpg field: 1 [ 379.147401][ T9405] tpg crop: 640x360@0x0 [ 379.151680][ T9405] tpg compose: 640x360@0x0 [ 379.156308][ T9405] tpg colorspace: 8 [ 379.160248][ T9405] tpg transfer function: 0/0 [ 379.165025][ T9405] tpg Y'CbCr encoding: 0/0 [ 379.169638][ T9405] tpg quantization: 0/0 [ 379.173891][ T9405] tpg RGB range: 0/2 [ 379.178226][ T9405] vivid-007: ================== END STATUS ================== [ 379.494662][ T5866] usb 3-1: USB disconnect, device number 22 [ 379.509469][ T9411] loop7: detected capacity change from 0 to 16384 [ 379.637341][ T5864] usb 4-1: USB disconnect, device number 20 [ 379.715271][ T9409] loop7: detected capacity change from 16384 to 16383 [ 380.430192][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.436901][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.441910][ T8774] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 381.068755][ T8774] usb 1-1: Using ep0 maxpacket: 16 [ 381.095356][ T9429] FAULT_INJECTION: forcing a failure. [ 381.095356][ T9429] name failslab, interval 1, probability 0, space 0, times 0 [ 381.108354][ T9429] CPU: 0 UID: 0 PID: 9429 Comm: syz.2.906 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 381.118965][ T9429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 381.129042][ T9429] Call Trace: [ 381.132336][ T9429] [ 381.135272][ T9429] dump_stack_lvl+0x16c/0x1f0 [ 381.139966][ T9429] should_fail_ex+0x497/0x5b0 [ 381.144668][ T9429] should_failslab+0xc2/0x120 [ 381.149427][ T9429] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 381.154817][ T9429] ? skb_clone+0x190/0x3f0 [ 381.159258][ T9429] skb_clone+0x190/0x3f0 [ 381.163508][ T9429] netlink_deliver_tap+0xabd/0xd30 [ 381.168632][ T9429] netlink_unicast+0x5e1/0x7f0 [ 381.173416][ T9429] ? __pfx_netlink_unicast+0x10/0x10 [ 381.178719][ T9429] netlink_sendmsg+0x8b8/0xd70 [ 381.183497][ T9429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.188801][ T9429] ____sys_sendmsg+0xaaf/0xc90 [ 381.193578][ T9429] ? copy_msghdr_from_user+0x10b/0x160 [ 381.199057][ T9429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.204359][ T9429] ___sys_sendmsg+0x135/0x1e0 [ 381.209046][ T9429] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.214258][ T9429] ? __pfx_lock_release+0x10/0x10 [ 381.219280][ T9429] ? trace_lock_acquire+0x14e/0x1f0 [ 381.224503][ T9429] ? __fget_files+0x206/0x3a0 [ 381.229202][ T9429] __sys_sendmsg+0x16e/0x220 [ 381.233799][ T9429] ? __pfx___sys_sendmsg+0x10/0x10 [ 381.238935][ T9429] do_syscall_64+0xcd/0x250 [ 381.243454][ T9429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.249349][ T9429] RIP: 0033:0x7fe4ba37ff19 [ 381.253757][ T9429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.273368][ T9429] RSP: 002b:00007fe4bb237058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.281795][ T9429] RAX: ffffffffffffffda RBX: 00007fe4ba545fa0 RCX: 00007fe4ba37ff19 [ 381.289763][ T9429] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 381.297730][ T9429] RBP: 00007fe4bb2370a0 R08: 0000000000000000 R09: 0000000000000000 [ 381.305694][ T9429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.313653][ T9429] R13: 0000000000000000 R14: 00007fe4ba545fa0 R15: 00007ffdb1e59798 [ 381.321660][ T9429] [ 381.335355][ T8774] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 381.357688][ T9429] netlink: 'syz.2.906': attribute type 9 has an invalid length. [ 381.364832][ T8774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 381.365553][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.906'. [ 381.396724][ T8774] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 381.411031][ T8774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.426244][ T8774] usb 1-1: Product: syz [ 381.483751][ T8774] usb 1-1: Manufacturer: syz [ 381.648594][ T8774] usb 1-1: SerialNumber: syz [ 381.782259][ T9439] 9pnet_fd: Insufficient options for proto=fd [ 381.855803][ T8774] usb 1-1: config 0 descriptor?? [ 381.869693][ T8774] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 382.013611][ T8774] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 382.062797][ T9449] FAULT_INJECTION: forcing a failure. [ 382.062797][ T9449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.727524][ T9452] fuse: Bad value for 'fd' [ 382.906975][ T9449] CPU: 1 UID: 0 PID: 9449 Comm: syz.2.912 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 382.917604][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 382.927646][ T9449] Call Trace: [ 382.930919][ T9449] [ 382.933836][ T9449] dump_stack_lvl+0x16c/0x1f0 [ 382.938501][ T9449] should_fail_ex+0x497/0x5b0 [ 382.943167][ T9449] _copy_to_user+0x32/0xd0 [ 382.947577][ T9449] simple_read_from_buffer+0xd0/0x160 [ 382.952946][ T9449] proc_fail_nth_read+0x198/0x270 [ 382.957963][ T9449] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 382.963494][ T9449] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 382.969027][ T9449] vfs_read+0x1df/0xbe0 [ 382.973170][ T9449] ? __fget_files+0x1fc/0x3a0 [ 382.977832][ T9449] ? __pfx___mutex_lock+0x10/0x10 [ 382.982844][ T9449] ? __pfx_vfs_read+0x10/0x10 [ 382.987529][ T9449] ? __fget_files+0x206/0x3a0 [ 382.992217][ T9449] ksys_read+0x12b/0x250 [ 382.996466][ T9449] ? __pfx_ksys_read+0x10/0x10 [ 383.001215][ T9449] do_syscall_64+0xcd/0x250 [ 383.005701][ T9449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.011578][ T9449] RIP: 0033:0x7fe4ba37e92c [ 383.015973][ T9449] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 383.035567][ T9449] RSP: 002b:00007fe4bb216050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 383.043960][ T9449] RAX: ffffffffffffffda RBX: 00007fe4ba546080 RCX: 00007fe4ba37e92c [ 383.051909][ T9449] RDX: 000000000000000f RSI: 00007fe4bb2160b0 RDI: 0000000000000005 [ 383.059857][ T9449] RBP: 00007fe4bb2160a0 R08: 0000000000000000 R09: 0000000000000000 [ 383.067809][ T9449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.075756][ T9449] R13: 0000000000000001 R14: 00007fe4ba546080 R15: 00007ffdb1e59798 [ 383.083715][ T9449] [ 383.086725][ C1] vkms_vblank_simulate: vblank timer overrun [ 383.155639][ T8774] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 383.214304][ T8774] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 383.363779][ T8774] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 383.371224][ T8774] em28xx 1-1:0.0: No AC97 audio processor [ 383.672600][ T8774] usb 1-1: USB disconnect, device number 20 [ 383.679362][ T8774] em28xx 1-1:0.0: Disconnecting em28xx [ 383.687912][ T8774] em28xx 1-1:0.0: Freeing device [ 384.934731][ T3069] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 385.013877][ T9485] FAULT_INJECTION: forcing a failure. [ 385.013877][ T9485] name failslab, interval 1, probability 0, space 0, times 0 [ 385.029897][ T9485] CPU: 1 UID: 0 PID: 9485 Comm: syz.1.923 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 385.040520][ T9485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 385.050586][ T9485] Call Trace: [ 385.053866][ T9485] [ 385.056802][ T9485] dump_stack_lvl+0x16c/0x1f0 [ 385.061495][ T9485] should_fail_ex+0x497/0x5b0 [ 385.066188][ T9485] ? fs_reclaim_acquire+0xae/0x150 [ 385.071323][ T9485] should_failslab+0xc2/0x120 [ 385.076016][ T9485] __kmalloc_noprof+0xcb/0x510 [ 385.080807][ T9485] __list_lru_init+0xe8/0x4c0 [ 385.085517][ T9485] alloc_super+0x909/0xbd0 [ 385.089953][ T9485] sget_fc+0x116/0xc20 [ 385.094024][ T9485] ? cap_capable+0x1cf/0x240 [ 385.098653][ T9485] ? __pfx_set_anon_super_fc+0x10/0x10 [ 385.104130][ T9485] ? __pfx_ovl_fill_super+0x10/0x10 [ 385.109367][ T9485] get_tree_nodev+0x28/0x190 [ 385.113968][ T9485] vfs_get_tree+0x8f/0x380 [ 385.118389][ T9485] path_mount+0x14e6/0x1f20 [ 385.122908][ T9485] ? kmem_cache_free+0x152/0x4c0 [ 385.127855][ T9485] ? __pfx_path_mount+0x10/0x10 [ 385.132720][ T9485] ? putname+0x13c/0x180 [ 385.136983][ T9485] __x64_sys_mount+0x294/0x320 [ 385.141754][ T9485] ? __pfx___x64_sys_mount+0x10/0x10 [ 385.147058][ T9485] do_syscall_64+0xcd/0x250 [ 385.151572][ T9485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.157478][ T9485] RIP: 0033:0x7f6eed97ff19 [ 385.161898][ T9485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.181519][ T9485] RSP: 002b:00007f6eee6ee058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 385.189947][ T9485] RAX: ffffffffffffffda RBX: 00007f6eedb45fa0 RCX: 00007f6eed97ff19 [ 385.197928][ T9485] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 385.205914][ T9485] RBP: 00007f6eee6ee0a0 R08: 0000000020000280 R09: 0000000000000000 [ 385.213895][ T9485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 385.221875][ T9485] R13: 0000000000000000 R14: 00007f6eedb45fa0 R15: 00007ffc6a66ed88 [ 385.229872][ T9485] [ 385.233033][ C1] vkms_vblank_simulate: vblank timer overrun [ 385.620566][ T9486] nfs4: Unknown parameter 'workr' [ 385.803100][ T8774] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 385.874708][ T3069] usb 3-1: Using ep0 maxpacket: 8 [ 385.922127][ T3069] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 385.949566][ T3069] usb 3-1: config 179 has no interface number 0 [ 385.964738][ T3069] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 385.984006][ T3069] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 386.001346][ T3069] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 386.012913][ T3069] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 386.024411][ T3069] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 386.038065][ T3069] usb 3-1: config 179 interface 65 has no altsetting 0 [ 386.045180][ T3069] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 386.054482][ T3069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.067295][ T9480] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 386.074567][ T9480] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 386.100692][ T9488] loop7: detected capacity change from 0 to 16384 [ 386.218679][ T8774] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 386.234037][ T8774] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 386.254715][ T5864] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 386.261706][ T8774] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 386.281636][ T8774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.553896][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 386.624985][ T5864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.637665][ T5864] usb 2-1: config 0 has no interfaces? [ 386.698433][ T5864] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 386.738957][ T5864] usb 2-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 386.758680][ T5864] usb 2-1: Product: syz [ 386.764615][ T5864] usb 2-1: Manufacturer: syz [ 386.778830][ T5866] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 386.825785][ T5864] usb 2-1: config 0 descriptor?? [ 386.903790][ T9500] vivid-007: ================= START STATUS ================= [ 386.911967][ T9500] vivid-007: Generate PTS: true [ 386.918345][ T9500] vivid-007: Generate SCR: true [ 386.923504][ T9500] tpg source WxH: 640x360 (Y'CbCr) [ 386.928820][ T9500] tpg field: 1 [ 386.932369][ T9500] tpg crop: 640x360@0x0 [ 386.936795][ T9500] tpg compose: 640x360@0x0 [ 386.941305][ T9500] tpg colorspace: 8 [ 386.945265][ T9500] tpg transfer function: 0/0 [ 386.949958][ T9500] tpg Y'CbCr encoding: 0/0 [ 386.954455][ T9500] tpg quantization: 0/0 [ 386.958804][ T9500] tpg RGB range: 0/2 [ 386.962802][ T9500] vivid-007: ================== END STATUS ================== [ 387.374164][ T3069] usb 4-1: USB disconnect, device number 21 [ 387.381018][ T8] usb 3-1: USB disconnect, device number 23 [ 387.431604][ T8774] usb 2-1: USB disconnect, device number 21 [ 387.434932][ T9492] loop7: detected capacity change from 16384 to 16383 [ 387.468812][ T9488] I/O error, dev loop7, sector 14848 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 0 [ 387.494921][ T9488] I/O error, dev loop7, sector 14848 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.535085][ T9488] buffer_io_error: 119 callbacks suppressed [ 387.535102][ T9488] Buffer I/O error on dev loop7, logical block 1856, async page read [ 387.563035][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 387.582447][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 387.599482][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 387.631572][ T5866] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 387.641316][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.724411][ T30] audit: type=1326 audit(1733959358.854:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9504 comm="syz.2.928" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4ba37ff19 code=0x0 [ 388.331858][ T5866] usb 1-1: Product: syz [ 388.336168][ T5866] usb 1-1: Manufacturer: syz [ 388.340778][ T5866] usb 1-1: SerialNumber: syz [ 388.349204][ T5866] usb 1-1: config 0 descriptor?? [ 388.359539][ T5866] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 388.369123][ T5866] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 388.480007][ T30] audit: type=1326 audit(1733959359.614:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9504 comm="syz.2.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ba37ff19 code=0x7fc00000 [ 388.535081][ T9524] tc_dump_action: action bad kind [ 388.639747][ T9487] I/O error, dev loop7, sector 6400 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 388.650283][ T9487] Buffer I/O error on dev loop7, logical block 800, lost async page write [ 388.659452][ T9487] Buffer I/O error on dev loop7, logical block 801, lost async page write [ 388.668161][ T9487] Buffer I/O error on dev loop7, logical block 802, lost async page write [ 388.683055][ T9487] Buffer I/O error on dev loop7, logical block 803, lost async page write [ 388.691731][ T9487] Buffer I/O error on dev loop7, logical block 804, lost async page write [ 388.701941][ T9487] Buffer I/O error on dev loop7, logical block 805, lost async page write [ 388.710618][ T9487] Buffer I/O error on dev loop7, logical block 806, lost async page write [ 388.719730][ T9487] Buffer I/O error on dev loop7, logical block 807, lost async page write [ 388.728387][ T9487] Buffer I/O error on dev loop7, logical block 808, lost async page write [ 388.744181][ T9487] I/O error, dev loop7, sector 7424 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 388.762272][ T9487] I/O error, dev loop7, sector 8448 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 388.780164][ T9487] I/O error, dev loop7, sector 9472 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 388.797976][ T9487] I/O error, dev loop7, sector 10496 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 388.816207][ T9487] I/O error, dev loop7, sector 11520 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 388.833678][ T9487] I/O error, dev loop7, sector 12544 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 388.859474][ T9487] I/O error, dev loop7, sector 13568 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 389.085072][ T5866] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 389.091560][ T5866] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 389.099948][ T5866] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 389.108055][ T5866] em28xx 1-1:0.0: No AC97 audio processor [ 389.165097][ T5866] usb 1-1: USB disconnect, device number 21 [ 389.237243][ T5866] em28xx 1-1:0.0: Disconnecting em28xx [ 389.271790][ T5866] em28xx 1-1:0.0: Freeing device [ 390.214523][ T9546] nfs4: Unknown parameter 'workr' [ 391.805209][ T9555] nfs4: Unknown parameter 'workr' [ 392.736892][ T9564] fuse: Bad value for 'fd' [ 393.301193][ T9578] netlink: 156 bytes leftover after parsing attributes in process `syz.3.944'. [ 393.535083][ T8774] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 393.541960][ T9579] loop7: detected capacity change from 0 to 16384 [ 393.778975][ T8774] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.789223][ T8774] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.805823][ T8774] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 393.824857][ T9576] loop7: detected capacity change from 16384 to 16383 [ 393.831756][ T8774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 393.845114][ T8774] usb 1-1: SerialNumber: syz [ 393.945485][ T26] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 394.081648][ T9592] tmpfs: Unknown parameter '0x0000000000000005' [ 394.110442][ T8774] usb 1-1: skipping empty audio interface (v1) [ 394.140102][ T8774] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 394.188970][ T8774] usb 1-1: USB disconnect, device number 22 [ 394.195058][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 394.223086][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.268373][ T26] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 394.279070][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.302154][ T26] usb 5-1: Product: syz [ 394.314858][ T26] usb 5-1: Manufacturer: syz [ 394.326410][ T26] usb 5-1: SerialNumber: syz [ 394.352617][ T26] usb 5-1: config 0 descriptor?? [ 394.561947][ T7715] udevd[7715]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.603350][ T26] usb 5-1: Cannot retrieve CPort count: 0 [ 394.947728][ T26] usb 5-1: Cannot retrieve CPort count: -5 [ 394.947908][ T9597] nfs4: Unknown parameter 'workr' [ 394.953577][ T26] es2_ap_driver 5-1:0.0: probe with driver es2_ap_driver failed with error -5 [ 394.999134][ T26] usb 5-1: USB disconnect, device number 24 [ 396.134765][ T5134] Bluetooth: hci4: command 0x0406 tx timeout [ 397.736676][ T9626] nfs4: Unknown parameter 'workr' [ 398.400265][ T9627] nfs4: Unknown parameter 'workr' [ 398.883447][ T9629] dccp_invalid_packet: invalid packet type [ 398.899197][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 398.913007][ T9629] lo speed is unknown, defaulting to 1000 [ 398.922574][ T9629] lo speed is unknown, defaulting to 1000 [ 399.524162][ T9629] lo speed is unknown, defaulting to 1000 [ 399.604320][ T9642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.964'. [ 399.701065][ T9641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.153629][ T9660] nfs4: Unknown parameter 'workr' [ 401.693929][ T30] audit: type=1400 audit(1733959372.824:1097): avc: granted { setsecparam } for pid=9664 comm="syz.2.970" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 401.733637][ T9629] infiniband sz1: set active [ 401.739217][ T9629] infiniband sz1: added lo [ 401.746876][ T9629] sz1: rxe_create_cq: returned err = -12 [ 401.753189][ T9629] infiniband sz1: Couldn't create ib_mad CQ [ 401.771317][ T9629] infiniband sz1: Couldn't open port 1 [ 401.811480][ T26] lo speed is unknown, defaulting to 1000 [ 401.821850][ T9668] netlink: 72 bytes leftover after parsing attributes in process `syz.2.970'. [ 401.846712][ T30] audit: type=1400 audit(1733959372.984:1098): avc: granted { setsecparam } for pid=9666 comm="syz.4.971" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 401.890867][ T9629] RDS/IB: sz1: added [ 401.905181][ T9629] smc: adding ib device sz1 with port count 1 [ 401.922292][ T9629] smc: ib device sz1 port 1 has pnetid [ 401.930870][ T9670] netlink: 72 bytes leftover after parsing attributes in process `syz.4.971'. [ 401.952238][ T9629] lo speed is unknown, defaulting to 1000 [ 402.156040][ T9629] lo speed is unknown, defaulting to 1000 [ 402.226551][ T9629] lo speed is unknown, defaulting to 1000 [ 402.329322][ T9629] lo speed is unknown, defaulting to 1000 [ 402.432300][ T26] lo speed is unknown, defaulting to 1000 [ 402.467611][ T9629] lo speed is unknown, defaulting to 1000 [ 402.696082][ T5865] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 402.919016][ T9685] nfs4: Unknown parameter 'workr' [ 403.463310][ T5865] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 403.475213][ T5865] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 403.484411][ T5865] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 403.591975][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.315495][ T9703] vivid-007: ================= START STATUS ================= [ 404.324799][ T9703] vivid-007: Generate PTS: true [ 404.330065][ T9703] vivid-007: Generate SCR: true [ 404.335891][ T9703] tpg source WxH: 640x360 (Y'CbCr) [ 404.341362][ T9703] tpg field: 1 [ 404.345004][ T9703] tpg crop: 640x360@0x0 [ 404.349254][ T9703] tpg compose: 640x360@0x0 [ 404.353964][ T9703] tpg colorspace: 8 [ 404.358114][ T9703] tpg transfer function: 0/0 [ 404.362817][ T9703] tpg Y'CbCr encoding: 0/0 [ 404.685481][ T9703] tpg quantization: 0/0 [ 404.698554][ T9703] tpg RGB range: 0/2 [ 404.702608][ T9703] vivid-007: ================== END STATUS ================== [ 404.857551][ T5866] usb 1-1: USB disconnect, device number 23 [ 405.562268][ T30] audit: type=1400 audit(1733959376.694:1099): avc: granted { setsecparam } for pid=9717 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 405.594766][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 405.614921][ T9719] netlink: 72 bytes leftover after parsing attributes in process `syz.4.985'. [ 405.665574][ T9580] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 405.726667][ T9] usb 3-1: device descriptor read/64, error -71 [ 405.859950][ T9580] usb 2-1: Using ep0 maxpacket: 16 [ 405.933115][ T9580] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.985021][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 406.206903][ T9580] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.220092][ T9580] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 406.253132][ T9580] usb 2-1: config 0 interface 0 has no altsetting 0 [ 406.271526][ T9580] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 406.298343][ T9580] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.322932][ T9580] usb 2-1: config 0 descriptor?? [ 406.344757][ T9] usb 3-1: device descriptor read/64, error -71 [ 406.523838][ T9] usb usb3-port1: attempt power cycle [ 406.535146][ T9714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.550690][ T9714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.700371][ T9738] nfs4: Unknown parameter 'workr' [ 407.164788][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 407.445726][ T9741] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0 [ 407.927099][ T9] usb 3-1: device descriptor read/8, error -71 [ 407.977484][ T30] audit: type=1400 audit(1733959378.534:1100): avc: denied { shutdown } for pid=9712 comm="syz.1.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 408.758509][ T9762] netlink: 'syz.3.995': attribute type 4 has an invalid length. [ 409.169571][ T9580] usbhid 2-1:0.0: can't add hid device: -71 [ 409.177368][ T9580] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 409.215348][ T9762] infiniband sz1: set down [ 409.220124][ T5894] lo speed is unknown, defaulting to 1000 [ 409.227465][ T5894] lo speed is unknown, defaulting to 1000 [ 409.261283][ T9580] usb 2-1: USB disconnect, device number 22 [ 409.488776][ T9772] fuse: Bad value for 'fd' [ 409.993679][ T9783] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 410.163504][ T30] audit: type=1400 audit(1733959381.294:1101): avc: granted { setsecparam } for pid=9789 comm="syz.3.1004" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 410.183274][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 410.262761][ T9793] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1004'. [ 410.424955][ T9] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 410.436259][ T9] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 410.446328][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 410.486344][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.734740][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 411.755378][ T26] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 411.775053][ T9813] vivid-007: ================= START STATUS ================= [ 411.782900][ T9813] vivid-007: Generate PTS: true [ 411.793383][ T9813] vivid-007: Generate SCR: true [ 411.806146][ T9813] tpg source WxH: 640x360 (Y'CbCr) [ 411.825473][ T9813] tpg field: 1 [ 411.829466][ T9813] tpg crop: 640x360@0x0 [ 411.834225][ T9813] tpg compose: 640x360@0x0 [ 411.839274][ T9813] tpg colorspace: 8 [ 411.843550][ T9813] tpg transfer function: 0/0 [ 411.848726][ T9813] tpg Y'CbCr encoding: 0/0 [ 411.853711][ T9813] tpg quantization: 0/0 [ 411.858524][ T9813] tpg RGB range: 0/2 [ 411.862986][ T9813] vivid-007: ================== END STATUS ================== [ 411.934917][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 412.129406][ T30] audit: type=1400 audit(1733959383.264:1102): avc: denied { append } for pid=9806 comm="syz.0.1010" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 412.181290][ T26] usb 1-1: unable to get BOS descriptor or descriptor too short [ 412.298910][ T26] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 412.299056][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 412.537485][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 412.545593][ T9] usb 5-1: no configurations [ 412.552289][ T26] usb 1-1: can't read configurations, error -71 [ 412.553779][ T9] usb 5-1: can't read configurations, error -22 [ 412.681125][ T9819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.115514][ T5864] usb 3-1: USB disconnect, device number 27 [ 413.854935][ T9835] nfs4: Unknown parameter 'workr' [ 415.003896][ T30] audit: type=1326 audit(1733959385.934:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9844 comm="syz.0.1020" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3f7b7ff19 code=0x0 [ 415.165265][ T30] audit: type=1400 audit(1733959386.174:1104): avc: denied { accept } for pid=9820 comm="syz.1.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 415.214894][ T9851] 9pnet_fd: Insufficient options for proto=fd [ 415.345444][ T9839] SET target dimension over the limit! [ 415.410734][ T9839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1018'. [ 415.487334][ T30] audit: type=1400 audit(1733959386.524:1105): avc: denied { getopt } for pid=9832 comm="syz.3.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 415.602743][ T26] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 415.644746][ T5864] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 415.796178][ T5864] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 415.812472][ T5864] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 415.831843][ T5864] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 415.862397][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.944735][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 415.953249][ T26] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 415.969203][ T26] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 415.998341][ T26] usb 1-1: Product: syz [ 416.023749][ T26] usb 1-1: Manufacturer: syz [ 416.050310][ T26] usb 1-1: SerialNumber: syz [ 416.087124][ T26] usb 1-1: config 0 descriptor?? [ 416.284199][ T9871] vivid-007: ================= START STATUS ================= [ 416.292095][ T9871] vivid-007: Generate PTS: true [ 416.297669][ T9871] vivid-007: Generate SCR: true [ 416.303699][ T9871] tpg source WxH: 640x360 (Y'CbCr) [ 416.309047][ T9871] tpg field: 1 [ 416.312553][ T9871] tpg crop: 640x360@0x0 [ 416.316864][ T9871] tpg compose: 640x360@0x0 [ 416.321387][ T9871] tpg colorspace: 8 [ 416.325307][ T9871] tpg transfer function: 0/0 [ 416.329979][ T9871] tpg Y'CbCr encoding: 0/0 [ 416.334498][ T9871] tpg quantization: 0/0 [ 416.338793][ T9871] tpg RGB range: 0/2 [ 416.342786][ T9871] vivid-007: ================== END STATUS ================== [ 416.992808][ T9879] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1026'. [ 417.130889][ T26] usb 1-1: USB disconnect, device number 25 [ 417.340396][ T9] usb 3-1: USB disconnect, device number 28 [ 417.541291][ T30] audit: type=1400 audit(1733959388.674:1106): avc: granted { setsecparam } for pid=9897 comm="syz.0.1028" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 417.640534][ T9900] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1028'. [ 417.856479][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 417.983866][ T9913] nfs4: Unknown parameter 'workr' [ 418.061509][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.094122][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 418.201042][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.361896][ T9] usb 3-1: config 0 descriptor?? [ 418.465461][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 418.645296][ T9894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.672522][ T9894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.976326][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 418.989640][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 419.004901][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 419.015033][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 419.024926][ T5864] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 419.059365][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 419.179611][ T9924] nfs4: Unknown parameter 'workr' [ 419.354261][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 419.362714][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 419.373985][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 419.389958][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 419.468499][ T5864] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 419.529443][ T5864] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 419.547162][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 419.553966][ T5864] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 419.563883][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 419.572484][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.581376][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 419.591058][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 419.599325][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 419.627828][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 419.638747][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 419.655012][ T9] pwc: Registered as video103. [ 419.661364][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 419.720106][ T9] usb 3-1: USB disconnect, device number 29 [ 420.501024][ T9932] vivid-007: ================= START STATUS ================= [ 420.515845][ T9932] vivid-007: Generate PTS: true [ 420.520985][ T9932] vivid-007: Generate SCR: true [ 420.526647][ T9932] tpg source WxH: 640x360 (Y'CbCr) [ 420.532043][ T9932] tpg field: 1 [ 420.535778][ T9932] tpg crop: 640x360@0x0 [ 420.540224][ T9932] tpg compose: 640x360@0x0 [ 420.545113][ T9932] tpg colorspace: 8 [ 420.549492][ T9932] tpg transfer function: 0/0 [ 420.554606][ T9932] tpg Y'CbCr encoding: 0/0 [ 420.559531][ T9932] tpg quantization: 0/0 [ 420.564044][ T9932] tpg RGB range: 0/2 [ 420.726052][ T9932] vivid-007: ================== END STATUS ================== [ 420.871634][ T9938] nfs4: Unknown parameter 'workr' [ 421.490817][ T9940] netlink: 'syz.3.1035': attribute type 1 has an invalid length. [ 421.745088][ T9940] netlink: 134728 bytes leftover after parsing attributes in process `syz.3.1035'. [ 422.994933][ T9955] lo speed is unknown, defaulting to 1000 [ 423.858944][ T9960] fuse: Unknown parameter 'fd93VDsAIN' [ 424.064282][ T5864] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 424.117966][ T9] usb 2-1: USB disconnect, device number 23 [ 424.150683][ T30] audit: type=1400 audit(1733959395.284:1107): avc: denied { read write } for pid=9965 comm="syz.4.1043" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 424.290013][ T30] audit: type=1400 audit(1733959395.334:1108): avc: denied { open } for pid=9965 comm="syz.4.1043" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 424.329475][ T30] audit: type=1400 audit(1733959395.344:1109): avc: denied { map } for pid=9965 comm="syz.4.1043" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 424.365773][ T5864] usb 1-1: Using ep0 maxpacket: 32 [ 424.413431][ T30] audit: type=1400 audit(1733959395.344:1110): avc: denied { execute } for pid=9965 comm="syz.4.1043" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 424.464382][ T5866] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 424.487472][ T5864] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 424.501839][ T5864] usb 1-1: config 0 has no interface number 0 [ 424.558799][ T5864] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 424.571903][ T5864] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 424.581441][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.603345][ T5864] usb 1-1: config 0 descriptor?? [ 424.637029][ T5864] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 424.667907][ T5866] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 424.678881][ T5866] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 424.690080][ T5866] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 424.699858][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.002454][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'. [ 425.338649][ T9985] vivid-007: ================= START STATUS ================= [ 425.346828][ T9985] vivid-007: Generate PTS: true [ 425.351879][ T9985] vivid-007: Generate SCR: true [ 425.357647][ T9985] tpg source WxH: 640x360 (Y'CbCr) [ 425.362961][ T9985] tpg field: 1 [ 425.366571][ T9985] tpg crop: 640x360@0x0 [ 425.371017][ T9985] tpg compose: 640x360@0x0 [ 425.375645][ T9985] tpg colorspace: 8 [ 425.379573][ T9985] tpg transfer function: 0/0 [ 425.384322][ T9985] tpg Y'CbCr encoding: 0/0 [ 425.389106][ T9985] tpg quantization: 0/0 [ 425.393505][ T9985] tpg RGB range: 0/2 [ 425.397624][ T9985] vivid-007: ================== END STATUS ================== [ 425.594961][ T26] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 425.625459][ T9977] autofs: Unknown parameter '' [ 425.653401][ T30] audit: type=1400 audit(1733959396.784:1111): avc: denied { write } for pid=9984 comm="syz.4.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 425.785067][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 425.802037][ T26] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 426.020859][ T26] usb 2-1: config 0 has no interface number 0 [ 426.036779][ T26] usb 2-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 426.048317][ T26] usb 2-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 426.061843][ T26] usb 2-1: config 0 interface 48 has no altsetting 0 [ 426.248730][ T26] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 426.260913][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.271769][ T26] usb 2-1: Product: syz [ 426.278024][ T26] usb 2-1: Manufacturer: syz [ 426.283124][ T26] usb 2-1: SerialNumber: syz [ 426.349280][ T26] usb 2-1: config 0 descriptor?? [ 426.603118][ T9] usb 1-1: USB disconnect, device number 26 [ 426.619808][T10002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.652311][ T5864] usb 4-1: USB disconnect, device number 22 [ 426.690534][T10002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.712244][ T30] audit: type=1400 audit(1733959397.834:1112): avc: denied { setopt } for pid=10004 comm="syz.2.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 427.132466][T10012] lo speed is unknown, defaulting to 1000 [ 427.162579][T10014] [U]  [ 427.379623][ T26] rtl8150 2-1:0.48: couldn't reset the device [ 427.389174][ T26] rtl8150 2-1:0.48: probe with driver rtl8150 failed with error -5 [ 427.416748][T10018] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1056'. [ 427.429425][ T26] usb 2-1: USB disconnect, device number 24 [ 427.764713][T10030] fuse: Bad value for 'fd' [ 428.224459][ T5894] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 429.036309][ T5894] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 429.046562][ T5894] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 429.056899][ T5894] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 429.066300][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.447081][T10048] vivid-007: ================= START STATUS ================= [ 429.454966][T10048] vivid-007: Generate PTS: true [ 429.460179][T10048] vivid-007: Generate SCR: true [ 429.465499][T10048] tpg source WxH: 640x360 (Y'CbCr) [ 429.470774][T10048] tpg field: 1 [ 429.474187][T10048] tpg crop: 640x360@0x0 [ 429.478577][T10048] tpg compose: 640x360@0x0 [ 429.483059][T10048] tpg colorspace: 8 [ 429.487003][T10048] tpg transfer function: 0/0 [ 429.491752][T10048] tpg Y'CbCr encoding: 0/0 [ 429.496495][T10048] tpg quantization: 0/0 [ 429.501021][T10048] tpg RGB range: 0/2 [ 429.505249][T10048] vivid-007: ================== END STATUS ================== [ 430.226067][T10050] FAULT_INJECTION: forcing a failure. [ 430.226067][T10050] name failslab, interval 1, probability 0, space 0, times 0 [ 430.624741][T10050] CPU: 1 UID: 0 PID: 10050 Comm: syz.2.1062 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 430.635567][T10050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 430.645628][T10050] Call Trace: [ 430.648911][T10050] [ 430.651845][T10050] dump_stack_lvl+0x16c/0x1f0 [ 430.656533][T10050] should_fail_ex+0x497/0x5b0 [ 430.661220][T10050] ? fs_reclaim_acquire+0xae/0x150 [ 430.666357][T10050] should_failslab+0xc2/0x120 [ 430.671042][T10050] __kmalloc_noprof+0xcb/0x510 [ 430.675811][T10050] ? lockdep_init_map_type+0x16d/0x7d0 [ 430.681283][T10050] __list_lru_init+0xe8/0x4c0 [ 430.685979][T10050] alloc_super+0x8c4/0xbd0 [ 430.690412][T10050] ? __pfx_super_s_dev_test+0x10/0x10 [ 430.695795][T10050] sget_fc+0x116/0xc20 [ 430.699865][T10050] ? __pfx_super_s_dev_set+0x10/0x10 [ 430.705162][T10050] get_tree_bdev_flags+0x1bc/0x620 [ 430.710283][T10050] ? __pfx_hfsplus_fill_super+0x10/0x10 [ 430.715865][T10050] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 430.721498][T10050] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 430.727138][T10050] ? cap_capable+0x1cf/0x240 [ 430.731731][T10050] ? bpf_lsm_capable+0x9/0x10 [ 430.736435][T10050] vfs_get_tree+0x8f/0x380 [ 430.740856][T10050] path_mount+0x14e6/0x1f20 [ 430.745371][T10050] ? kmem_cache_free+0x152/0x4c0 [ 430.750398][T10050] ? __pfx_path_mount+0x10/0x10 [ 430.755256][T10050] ? putname+0x13c/0x180 [ 430.759510][T10050] __x64_sys_mount+0x294/0x320 [ 430.764284][T10050] ? __pfx___x64_sys_mount+0x10/0x10 [ 430.769587][T10050] do_syscall_64+0xcd/0x250 [ 430.774099][T10050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.779996][T10050] RIP: 0033:0x7fe4ba37ff19 [ 430.784415][T10050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.804053][T10050] RSP: 002b:00007fe4bb237058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 430.812473][T10050] RAX: ffffffffffffffda RBX: 00007fe4ba545fa0 RCX: 00007fe4ba37ff19 [ 430.820447][T10050] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000000 [ 430.828431][T10050] RBP: 00007fe4bb2370a0 R08: 0000000000000000 R09: 0000000000000000 [ 430.836402][T10050] R10: 0000000000008002 R11: 0000000000000246 R12: 0000000000000002 [ 430.844376][T10050] R13: 0000000000000000 R14: 00007fe4ba545fa0 R15: 00007ffdb1e59798 [ 430.852379][T10050] [ 430.954665][ T30] audit: type=1400 audit(1733959402.054:1113): avc: denied { ioctl } for pid=10052 comm="syz.1.1063" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 431.653240][T10062] lo speed is unknown, defaulting to 1000 [ 431.816688][T10059] FAULT_INJECTION: forcing a failure. [ 431.816688][T10059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.830425][T10059] CPU: 1 UID: 0 PID: 10059 Comm: syz.4.1066 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 431.841194][T10059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 431.851239][T10059] Call Trace: [ 431.854507][T10059] [ 431.857422][T10059] dump_stack_lvl+0x16c/0x1f0 [ 431.862105][T10059] should_fail_ex+0x497/0x5b0 [ 431.866806][T10059] _copy_from_user+0x2e/0xd0 [ 431.871384][T10059] generic_map_update_batch+0x391/0x5f0 [ 431.876940][T10059] ? __pfx_generic_map_update_batch+0x10/0x10 [ 431.882991][T10059] ? __fget_files+0x206/0x3a0 [ 431.887649][T10059] ? __pfx_generic_map_update_batch+0x10/0x10 [ 431.893701][T10059] bpf_map_do_batch+0x5a8/0x670 [ 431.898553][T10059] __sys_bpf+0x1ce4/0x49c0 [ 431.902953][T10059] ? __pfx_lock_release+0x10/0x10 [ 431.907963][T10059] ? __pfx___sys_bpf+0x10/0x10 [ 431.912710][T10059] ? vfs_write+0x306/0x1150 [ 431.917195][T10059] ? __mutex_unlock_slowpath+0x164/0x690 [ 431.922820][T10059] ? fput+0x67/0x440 [ 431.926698][T10059] ? ksys_write+0x1ba/0x250 [ 431.931177][T10059] ? __pfx_ksys_write+0x10/0x10 [ 431.936005][T10059] __x64_sys_bpf+0x78/0xc0 [ 431.940405][T10059] ? lockdep_hardirqs_on+0x7c/0x110 [ 431.945583][T10059] do_syscall_64+0xcd/0x250 [ 431.950066][T10059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.955941][T10059] RIP: 0033:0x7f53be37ff19 [ 431.960334][T10059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.979927][T10059] RSP: 002b:00007f53bf199058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 431.988322][T10059] RAX: ffffffffffffffda RBX: 00007f53be545fa0 RCX: 00007f53be37ff19 [ 431.996269][T10059] RDX: 0000000000000038 RSI: 0000000020000200 RDI: 000000000000001a [ 432.004234][T10059] RBP: 00007f53bf1990a0 R08: 0000000000000000 R09: 0000000000000000 [ 432.012205][T10059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.020160][T10059] R13: 0000000000000000 R14: 00007f53be545fa0 R15: 00007fffa6624b28 [ 432.028123][T10059] [ 432.121676][T10062] [U]  [ 432.160282][ T5894] usb 1-1: USB disconnect, device number 27 [ 432.290305][ T30] audit: type=1400 audit(1733959403.394:1114): avc: denied { ioctl } for pid=10071 comm="syz.0.1069" path="socket:[24722]" dev="sockfs" ino=24722 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 432.343725][T10069] overlayfs: conflicting options: userxattr,redirect_dir=on [ 432.475579][T10069] program syz.1.1068 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 433.516678][ T30] audit: type=1400 audit(1733959404.644:1115): avc: denied { relabelfrom } for pid=10074 comm="syz.4.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 433.544659][ T30] audit: type=1400 audit(1733959404.654:1116): avc: denied { relabelto } for pid=10074 comm="syz.4.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 433.592656][T10082] netdevsim netdevsim2: Direct firmware load for printk failed with error -2 [ 433.613418][T10082] netdevsim netdevsim2: Falling back to sysfs fallback for: printk [ 434.619147][T10111] syz.2.1071: attempt to access beyond end of device [ 434.619147][T10111] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 434.646470][T10111] syz.2.1071: attempt to access beyond end of device [ 434.646470][T10111] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 434.664722][T10111] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 434.774251][T10111] syz.2.1071: attempt to access beyond end of device [ 434.774251][T10111] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 435.148384][T10111] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 435.158244][T10111] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 435.166861][T10111] UDF-fs: Scanning with blocksize 512 failed [ 435.176917][T10111] syz.2.1071: attempt to access beyond end of device [ 435.176917][T10111] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 435.196321][T10111] syz.2.1071: attempt to access beyond end of device [ 435.196321][T10111] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 435.222215][T10111] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 435.232975][T10111] syz.2.1071: attempt to access beyond end of device [ 435.232975][T10111] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 435.256237][T10111] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 435.275484][T10111] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 435.284703][T10111] UDF-fs: Scanning with blocksize 1024 failed [ 435.291848][T10111] syz.2.1071: attempt to access beyond end of device [ 435.291848][T10111] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 435.305213][T10111] syz.2.1071: attempt to access beyond end of device [ 435.305213][T10111] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 435.318280][T10111] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 435.328857][T10111] syz.2.1071: attempt to access beyond end of device [ 435.328857][T10111] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 435.342063][T10111] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 435.360804][T10111] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 435.370480][T10111] UDF-fs: Scanning with blocksize 2048 failed [ 435.382296][T10111] syz.2.1071: attempt to access beyond end of device [ 435.382296][T10111] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 435.414161][T10111] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 435.424266][T10113] netlink: 'syz.3.1075': attribute type 2 has an invalid length. [ 435.432700][T10111] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 435.446220][T10111] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 435.456807][T10111] UDF-fs: Scanning with blocksize 4096 failed [ 435.467502][T10111] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 435.634834][T10072] [U] v3 [ 436.613147][ T5866] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 436.634917][ T5894] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 436.715811][ T26] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 436.770105][ T5866] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 436.784693][ T5866] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 436.800272][ T5894] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 436.801375][ T5866] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 436.811421][ T5894] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 436.823731][T10141] input: syz1 as /devices/virtual/input/input13 [ 436.839618][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.866138][ T26] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 436.881659][ T5894] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 436.902096][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.910642][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.920980][ T26] usb 1-1: config 0 descriptor?? [ 436.930631][ T26] cp210x 1-1:0.0: cp210x converter detected [ 437.114725][ T5864] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 437.125862][ T5866] usb 2-1: string descriptor 0 read error: -71 [ 437.132926][ T5866] hub 2-1:32.0: USB hub found [ 437.147392][ T5866] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 437.419244][ T5864] usb 3-1: Using ep0 maxpacket: 8 [ 437.476146][T10143] vivid-007: ================= START STATUS ================= [ 437.484220][T10143] vivid-007: Generate PTS: true [ 437.489485][T10143] vivid-007: Generate SCR: true [ 437.496238][T10143] tpg source WxH: 640x360 (Y'CbCr) [ 437.501630][T10143] tpg field: 1 [ 437.505210][T10143] tpg crop: 640x360@0x0 [ 437.509502][T10143] tpg compose: 640x360@0x0 [ 437.514155][T10143] tpg colorspace: 8 [ 437.521342][T10143] tpg transfer function: 0/0 [ 437.527010][T10143] tpg Y'CbCr encoding: 0/0 [ 437.531695][T10143] tpg quantization: 0/0 [ 437.538510][T10143] tpg RGB range: 0/2 [ 437.543492][T10143] vivid-007: ================== END STATUS ================== [ 437.579690][ T5866] usb 2-1: USB disconnect, device number 25 [ 437.927563][ T26] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 437.951524][ T26] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 437.981234][ T26] usb 1-1: cp210x converter now attached to ttyUSB0 [ 438.043715][ T26] usb 1-1: USB disconnect, device number 28 [ 438.082114][ T26] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 438.119586][ T26] cp210x 1-1:0.0: device disconnected [ 438.560863][T10150] nfs4: Unknown parameter 'workr' [ 438.955531][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 438.971285][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 438.982117][ T5864] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 438.991849][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 439.003027][ T5864] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 439.013232][ T5864] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 439.022450][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.149533][ T26] usb 4-1: USB disconnect, device number 23 [ 439.313226][ T5864] usb 3-1: config 0 descriptor?? [ 439.319426][T10141] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 439.389290][ T30] audit: type=1400 audit(1733959410.524:1117): avc: denied { accept } for pid=10156 comm="syz.0.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 439.891737][ T8548] udevd[8548]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 441.414775][ T5827] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 441.812670][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.819118][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.168497][ T26] usb 3-1: USB disconnect, device number 30 [ 461.724697][T10192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1095'. [ 463.122461][T10196] nfs4: Unknown parameter 'workr' [ 466.584733][ T26] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 466.746276][ T26] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 466.756664][ T26] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 466.774337][T10194] tipc: Started in network mode [ 467.736307][ T26] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 467.745682][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.149865][T10194] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 472.814993][T10194] tipc: Enabled bearer , priority 0 [ 472.843994][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 472.851272][ T26] usb 2-1: can't set config #27, error -32 [ 474.915084][ T3069] usb 2-1: USB disconnect, device number 26 [ 474.920297][ T9] tipc: Node number set to 11578026 [ 476.934844][ T5827] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 479.421340][T10199] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 479.435949][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 502.938348][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.944906][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 516.240847][ T5827] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 521.235006][T10220] Bluetooth: hci5: Opcode 0x0c03 failed: -4 [ 542.454865][ T5827] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 544.541083][T10226] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 546.614827][ T5827] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 550.725515][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 551.924712][T10227] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 551.997739][T10223] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 553.215012][ T5827] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 553.230023][T10223] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 559.427129][T10223] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 559.436670][T10223] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 559.444489][T10223] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 559.452766][T10223] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 559.460315][T10223] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 561.494838][T10223] Bluetooth: hci6: command tx timeout [ 567.701702][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.708062][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.714794][ T30] audit: type=1400 audit(1733959534.764:1118): avc: denied { mounton } for pid=10228 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 576.539948][T10223] Bluetooth: hci6: command tx timeout [ 579.562219][T10223] Bluetooth: hci6: command tx timeout [ 581.565248][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 581.575793][ T5827] Bluetooth: hci6: command tx timeout [ 582.544907][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 582.567959][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 583.577191][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 583.587602][ T5827] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 584.560087][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 586.614901][T10223] Bluetooth: hci0: command tx timeout [ 588.874701][T10223] Bluetooth: hci0: command tx timeout [ 591.699785][T10223] Bluetooth: hci0: command tx timeout [ 594.256557][T10223] Bluetooth: hci0: command tx timeout [ 610.522777][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 610.525174][T10253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 611.550085][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 611.564479][T10253] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 611.572752][T10253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 611.578610][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 611.581987][T10253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 611.668056][T10253] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 613.045046][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 613.055672][T10253] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 613.067244][ T5827] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 614.110579][ T5134] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 615.105064][T10243] Bluetooth: hci3: Opcode 0x0c39 failed: -110 [ 615.154814][ T5827] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 615.160105][T10223] Bluetooth: hci1: Opcode 0x0c38 failed: -110 [ 616.134911][T10253] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 616.145830][T10223] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 616.158399][T10223] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 616.166904][T10223] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 616.179606][T10223] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 617.226258][T10223] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 617.227343][T10253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 617.234023][T10223] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 617.249226][T10223] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 617.256895][T10223] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 618.214843][T10255] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 618.223083][T10247] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 619.258592][T10256] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 620.294978][T10223] Bluetooth: hci1: command tx timeout [ 622.374892][T10223] Bluetooth: hci1: command tx timeout [ 624.454863][T10223] Bluetooth: hci1: command tx timeout [ 625.825108][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.834832][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.534949][T10223] Bluetooth: hci1: command tx timeout [ 643.101078][ T6254] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.848419][ T6254] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.280823][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.289445][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.329341][T10253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 690.374751][T10223] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 690.381932][T10253] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 690.386020][T10258] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 691.447899][T10253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 691.450778][T10258] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 691.455037][T10253] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 691.474336][T10258] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 691.483553][T10253] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 691.483657][T10258] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 692.455639][T10275] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 692.499088][T10258] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 692.507089][T10258] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 692.514385][T10258] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 692.524838][T10253] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 692.532682][T10253] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 693.564911][T10253] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 693.575545][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 695.654705][T10223] Bluetooth: hci0: Opcode 0x0c39 failed: -110 [ 698.230073][T10223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 698.238353][T10223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 698.247318][T10223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 698.256369][T10223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 698.263857][T10223] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 698.273138][T10223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 699.241517][ T6254] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.275739][T10223] Bluetooth: hci4: command tx timeout [ 701.278670][T10253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 701.301547][T10253] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 702.269148][ T5827] Bluetooth: hci4: command tx timeout [ 703.264380][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 703.277630][T10243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 703.291219][T10258] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 704.248476][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 704.257398][T10258] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 704.266570][ T5827] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 704.285339][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 705.246135][T10258] Bluetooth: hci4: command tx timeout [ 705.294795][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 706.255525][T10223] Bluetooth: hci0: command tx timeout [ 706.275152][ T5827] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 706.282506][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 706.285724][T10276] lo speed is unknown, defaulting to 1000 [ 707.265965][ T5827] Bluetooth: hci4: command tx timeout [ 708.304824][ T5827] Bluetooth: hci0: command tx timeout [ 708.311336][T10253] Bluetooth: hci1: command tx timeout [ 709.335030][T10253] Bluetooth: hci3: command tx timeout [ 710.374856][T10253] Bluetooth: hci1: command tx timeout [ 710.380327][T10253] Bluetooth: hci0: command tx timeout [ 711.424793][T10223] Bluetooth: hci3: command tx timeout [ 713.439520][T10223] Bluetooth: hci0: command tx timeout [ 713.439557][T10253] Bluetooth: hci1: command tx timeout [ 714.454971][T10253] Bluetooth: hci3: command tx timeout [ 716.499506][T10253] Bluetooth: hci1: command tx timeout [ 717.574806][T10223] Bluetooth: hci3: command tx timeout [ 718.655488][ T6254] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.176399][T10278] lo speed is unknown, defaulting to 1000 [ 750.094554][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.100959][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 756.182816][ T6254] bridge_slave_1: left allmulticast mode [ 758.224791][ T6254] bridge_slave_1: left promiscuous mode [ 759.270221][ T6254] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.260301][ T6254] bridge_slave_0: left allmulticast mode [ 762.266112][ T6254] bridge_slave_0: left promiscuous mode [ 762.275350][ T6254] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.260565][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 763.271770][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 763.280364][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 764.247390][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 764.256920][ T5827] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 764.266041][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 766.295012][T10253] Bluetooth: hci5: command tx timeout [ 769.274154][ T5827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 770.296593][ T5827] Bluetooth: hci5: command tx timeout [ 770.346322][T10223] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 770.355626][T10223] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 770.367493][T10223] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 770.375256][T10223] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 770.385870][T10223] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 772.414748][ T5827] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 772.430662][T10223] Bluetooth: hci5: command tx timeout [ 774.514884][T10223] Bluetooth: hci6: command tx timeout [ 775.414792][T10253] Bluetooth: hci5: command tx timeout [ 776.534779][T10253] Bluetooth: hci6: command tx timeout [ 778.544699][T10223] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 778.548066][T10253] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 778.566084][T10223] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 778.579249][T10223] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 779.576427][T10253] Bluetooth: hci6: command tx timeout [ 779.615469][T10223] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 779.623523][T10223] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 781.595073][T10223] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 781.622495][T10223] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 781.630686][T10223] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 782.617221][ T5827] Bluetooth: hci6: command tx timeout [ 783.654908][T10253] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 783.664798][T10258] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 786.694838][T10308] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 789.779268][T10223] Bluetooth: hci7: command tx timeout [ 792.774859][T10223] Bluetooth: hci7: command tx timeout [ 795.665070][T10223] Bluetooth: hci7: command tx timeout [ 797.734830][ T5827] Bluetooth: hci7: command tx timeout [ 810.495119][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.535230][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.815458][T10223] Bluetooth: hci4: command 0x0406 tx timeout [ 818.943700][T10258] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 819.900563][ T5827] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 819.976845][ T5827] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 820.850587][ T5827] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 820.863545][ T5827] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 821.856532][T10258] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 825.841680][T10223] Bluetooth: hci8: command tx timeout [ 828.839975][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 828.844798][T10253] Bluetooth: hci1: command 0x0406 tx timeout [ 828.846043][T10243] Bluetooth: hci8: command tx timeout [ 830.865299][T10253] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 831.844714][T10253] Bluetooth: hci8: command tx timeout [ 831.844751][T10258] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 831.889335][T10258] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 831.898544][T10258] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 831.907966][T10258] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 831.915319][T10258] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 832.857084][T10253] Bluetooth: hci3: command 0x0406 tx timeout [ 835.858575][T10223] Bluetooth: hci8: command tx timeout [ 837.847072][ T5827] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 837.875099][ T5827] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 838.836809][T10223] Bluetooth: hci9: command tx timeout [ 838.873106][T10223] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 838.882439][T10223] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 838.904900][T10223] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 839.896822][T10223] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 840.935534][T10223] Bluetooth: hci9: command tx timeout [ 841.975314][T10223] Bluetooth: hci10: command tx timeout [ 843.015927][T10223] Bluetooth: hci9: command tx timeout [ 844.072971][T10223] Bluetooth: hci10: command tx timeout [ 845.104700][T10243] Bluetooth: hci9: command tx timeout [ 845.155481][T10223] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 846.135728][T10223] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 846.199048][T10223] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 846.211383][T10223] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 846.222541][T10223] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 846.230099][T10223] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 847.175758][T10243] Bluetooth: hci10: command tx timeout [ 847.229291][T10243] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 848.204813][T10243] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 849.165447][T10243] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 849.176738][T10243] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 849.185287][T10243] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 849.195232][T10243] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 850.134967][T10253] Bluetooth: hci10: command tx timeout [ 850.135012][T10243] Bluetooth: hci11: command tx timeout [ 852.295825][T10253] Bluetooth: hci11: command tx timeout [ 852.301426][T10253] Bluetooth: hci12: command tx timeout [ 852.340030][ T6254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 854.635055][T10253] Bluetooth: hci11: command tx timeout [ 854.635063][T10223] Bluetooth: hci12: command tx timeout [ 854.645108][ T6254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 856.076960][ T6254] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 856.984867][T10253] Bluetooth: hci11: command tx timeout [ 856.990421][T10223] Bluetooth: hci12: command tx timeout [ 859.096282][ T31] INFO: task syz-executor:10284 blocked for more than 145 seconds. [ 859.104315][ T31] Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 859.289416][ T6254] bond0 (unregistering): Released all slaves [ 859.314717][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 859.323433][ T31] task:syz-executor state:D stack:25568 pid:10284 tgid:10284 ppid:1 flags:0x00004004 [ 860.283834][T10223] Bluetooth: hci12: command tx timeout [ 860.289525][ T31] Call Trace: [ 860.305065][ T31] [ 860.308037][ T31] __schedule+0xe58/0x5ad0 [ 860.312494][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 860.317768][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 860.322994][ T31] ? __pfx___schedule+0x10/0x10 [ 863.635169][ T31] ? schedule+0x298/0x350 [ 863.639572][ T31] ? __pfx_lock_release+0x10/0x10 [ 865.695988][ T31] ? __mutex_trylock_common+0x78/0x250 [ 865.701521][ T31] ? lock_acquire+0x2f/0xb0 [ 865.706595][ T31] ? schedule+0x1fd/0x350 [ 865.711000][ T31] schedule+0xe7/0x350 [ 865.715460][ T31] schedule_preempt_disabled+0x13/0x30 [ 865.724928][ T31] __mutex_lock+0x62b/0xa60 [ 865.731033][ T31] ? add_one_compat_dev+0x112/0x720 [ 865.745160][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 866.703616][ T31] ? rdma_dev_init_net+0x2a7/0x530 [ 866.709260][ T31] ? add_one_compat_dev+0x112/0x720 [ 866.755422][ T31] add_one_compat_dev+0x112/0x720 [ 866.764775][ T31] rdma_dev_init_net+0x2b2/0x530 [ 867.735192][ T31] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 867.740719][ T31] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 867.786682][ T31] ops_init+0x1df/0x5f0 [ 867.790899][ T31] setup_net+0x21f/0x860 [ 867.805163][ T31] ? __pfx_setup_net+0x10/0x10 [ 868.799140][ T31] ? down_read_killable+0xcc/0x380 [ 868.815107][ T31] ? __pfx_down_read_killable+0x10/0x10 [ 868.824957][ T31] ? __raw_spin_lock_init+0x3a/0x110 [ 868.835034][ T31] ? debug_mutex_init+0x37/0x70 [ 868.845016][ T31] copy_net_ns+0x2b4/0x6b0