last executing test programs: 5m11.02822936s ago: executing program 2 (id=2925): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000500)="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", 0xf000}, {0x0, 0x55}], 0x2) r0 = syz_io_uring_setup(0x10f, 0x0, &(0x7f00000003c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r0, 0x47f5, 0x2000000, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x8600, 0x0) creat(0x0, 0xecf86c37d53049cc) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x400c0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x6a040000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 5m9.969626838s ago: executing program 2 (id=2984): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x3c2f7da1, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\a\x00\x00\x00', @ANYRES32=r1, @ANYBLOB, @ANYRES64], 0x20) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x25dfdbfb, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r7, 0x0, 0x0) 5m8.473554815s ago: executing program 2 (id=2987): socket(0x2, 0x2, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x4000000008800004) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x9, 0x1, 0x3, 0x1}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='environ\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x30, r4, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xfffffffc, 0xfffff50f, 0x1, 0x4}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4090}, 0x20004810) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffd, 0x0, 0x4e24, 0x9, 0x2, 0x0, 0x20, 0x2f, 0x0, 0xee00}, {@in=@local, 0x22, 0x32}, @in6=@remote, {0x0, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x4, 0x6}, {0x100000003, 0xa, 0xcc, 0x4}, {0x7, 0x0, 0x9}, 0x0, 0x3505, 0x2, 0x0, 0x1, 0x8}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x60, "efad0c"}}]}, 0x140}}, 0x4804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x0) 5m7.226340256s ago: executing program 2 (id=2991): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x1) umount2(&(0x7f0000000080)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r1, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x59) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x2) 5m7.05529758s ago: executing program 2 (id=2992): syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000001080)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000ac0)={0x0, 0xd0}, &(0x7f0000000b00)=0x8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xe, 0xc, 0x32315241, 0x5, 0x568d, 0x3, 0x2, 0x8, 0x1, 0x1, 0x1}}) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x78) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ptrace$pokeuser(0x6, r0, 0x5f96, 0x45a5) 5m6.347078534s ago: executing program 2 (id=2994): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r2, &(0x7f00000001c0)=""/95, 0x5f) 5m5.473436413s ago: executing program 32 (id=2994): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r2, &(0x7f00000001c0)=""/95, 0x5f) 4m46.554858524s ago: executing program 5 (id=3035): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00ecc1cefc1893cacdeb72000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff854ee3e9b7227c3f000000000000000000000000000000000000000000000000000000000000000000000000feffffff00"/144]}, 0x108) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r6, 0x40305828, &(0x7f0000000200)={{r0}, "94365e3897f9956a1f4a25101206b90155ada6bcd510f70d5223c2a6c22b8c3b2c625efa5f9ca0da7c0cee3f4d5dcb666aaaef502967f72000938911603036cf35b4510deeac535808a6acca63eb0dce3ca160d3bd6ffb1651c26b8001022aeb2330375e078f81dfa0e663c9992663cf951edd5b2e9591de5e29c1b35d7c8a222ec0fee83e64ff2a8853ed73a0ecde4ae8598ef39c2dac74471cb718df387927cd58827e3ce5cf57dcdf69a29c36ec845106a59f29c840446b2ad9aea0763b12f605e938d6682b804c183af35dbec08ad98f2ef75fdd7e270b83d9a1ee0ff884e54ea2ce610df936c1db1bbfe001c4679b27f816d6abd05d0fe83cc4f7b2d80a97c2d0713016243cfe954da350ccdaffbc90ede40b4dd3e0cda49e98ec645418cffeb60f9d3273a98ff58565a26d0218f3dc41cc3ad3f2e3cd7fbf7175ab3a7081b4289f7aba01ccf8f8109b0f1bc382818c2e06338084f5f27b649fe7dd82e810c4f0dff03ed54f968238ab1bd171eedf96698615483fc8c9fa5b4a334b497d6f4dfb83a5b9047a14897c61b153739596d7884035c976b294ab6e72c8cbd41453af7f34172b84492fe6f6d2c12865ebcfeb8748d8c26c30e2ad88f2908ffa60baffbde4b2a2b4c50c0aa07b1595d6a8d44855bbbaf145ab47cf61c4bdd0507f04f9e100dec3469dbcfd2fca530d776f0baa1e56c5bf0bee12e4f53ac328bc82f76385bd68ab1274866cbebb7a66406dfba6332b610c12fea8ae305eae869c624f218b9f8754e25f531e05c942b8ae7af16cf41b4a4740fa38b48d30473da57e6f648705b9f7caa21aa542f6f1cb32f09e302451b1aeb149abc94e89ac3c3c57b8dfc4c600c9eaa440188b77a6a0dfd795b781c6f0e74c28735829fad6a70d9e513d91c922b523bcd4b839a9a8ffb2b3275e9d24ea9dda040e9e9bdc92e722a94ae7e476ec88217f584176d15dd59910b6b4823ca31342d50c9a67f8d5eb14891c064a8fd85aa20d1646762219f45f907e975bec7a448113efcdbdfdf7a0b80569d231931fba1cceff354302b09c1b38d892ec7e2e8b388dba73160f03cc3545c78d285a3b9516e8cd7b879170b0ac0e889d03af85a8ef7e9e5f1b5f31b6783772e5df09938d8c5e16e3a18e1d6e1075f27e18eb7c057bede22dbff3d83b3c94c9943b5529447d02d553736d310ba441a6687a5eb08a54d98b566a3aa9cad5cab36ea15468d6eab0def96c9f56863cf8e8a6c3d013d3a9b748dfb078dbfab9aed64cc71ef86490db1df8becc68d9c0017a9209cb9c1599f13b9429af54e26f346850fe17deeb69d2fc1e39abf75669a43679ed18f6717e14fbbde15eaedfbeaad4a794737b7963d858444582ca46daf320868c5fd818226b077290aa6e6271cedd791a00a57ebe959c6b2f6e516b364edcf113665d966cb17a6da70bcd85b06fe758c704a9b2d46774b146d83769b804304fd6011ca8c5f995566e18216b10660d4682b5523a6efb883fdb30f5085f4d80c8a099fbd939d42e78a85f5e6dee146fd37ef7aec3a337eb12f7120150aa483fe7ea0015353390e7cb8e3795ee8d9ca52c25e309c2ffda454a12e4a0e937d070e69903607ad4925e0e581a25f2e98c1a73454a24f532fdd54da9f3318a74ab1bcb681166395fc88faa2905090d582f650197c3c266b8b3967e8b1b7b87d30d648ca1b0c59035159c4ba8e6e733ad2283fb3fede1e015bf2c873487ff8eb75461556d855ac7a1d631813f1c29d7e42b31b24faf15fbd4f724411b38a92016992d7a9e059e7f82cc333747c15674158035c168ffef7f16c4f3f13f04e0679567236a956b18ec88e102dba91bc34cf3d40a7bdeae5bbeb5dc400c79870c80fb8ffe6832fcfad34d5dc9453dd3d1ad0dc81fb15cc05318a83909717a58fb79a5c6a75c52ad82e7505eab0221fbdf369572d5674126962c1d010c6e5cfee741fc1639a8dcaa8cf9409d3a60a9449b1821aab650f02d90edd9eb76ff9c75893668db0b325fc2509fe3152a9541812e6e1e3e3f56219256e43b351c03175a10ae4fff97e05f484e1740430a01b834e65051867b06e00a86b040130e08eaff6c242c96c947cb52c18a985d9edd000f82b83c8ea0287466e9eba3bfcfef4ea7f5ead95fbe3b7decc4aeec108c4df1701b19547ee92c927df007527eeb6de23f17c0184bf923d95e716d941181d44feee49e116a0eb8dd11e47bc5e125475e73629e3f135a96dab6c77e2abc4ed0b7e7e97e4fd8081969d87bb869e9c9f8b48e3e07fceaba3317ba56bfc923a6b17d48deace88d1f6e61fc60574ec50ff1da5965973ac6c1ac695ece5b26b3577a867e69f7a70a5cbb5e2fe5faf5c9dd15919f4cfa65a17256e9ec07cac107631e5ffbe2774bd7af8a2a0e85f4d7cf2722a842d2d9b65e25295736c789742300aa3aac499e4af42cbcc3690a4df1868d1de6581e1d21c26d140941845b439e22662310f156b046090e92ef48f3886eab47d1319af7645859093adaa049b43369f8f457b54e193f6156ff40537c62838e17696cf7ef26b90b8bdc580d251ceec99453ca72c5e29c463910bb3f862dc199b65c4e7c9cf372c07b3e38d98652f6626564884b47c970c5aa45efb29b754efe6a09600700187d53a71e0758fd859d2110b90a02538832ab223206396d84bc14e6b55eb073130cf7b5d979e8e83950a1b80c9ea5586c4441a05bc41d843866c0d10193fe6486a6738fb858033257be0e1ae8624d5ac38553cf163c04af03cb78dd775b75883ef2330237adf5d65282d1491d8779674b8cc56750ed63e58a80915ca921ee46b4849d08674f624beb2be7376181713fc8d7125e429a2e5d46b99ebfdbac465a32bb7868d0e28f2c08b203edc9009fb935a3ae7a9b90bedc7ed03680530505044db11fc19e4d5794c06d84474c4fbd4975a1bfec9563094d392bf7b493c0ef9e5babe3128cd246d7e4cc9e99c5de07b92a949b34e228237c4521e6b10c5a7224a687ab43970a9e9eab029cefda25795c7f02a9e6240f0fab7c710a0450d1ca1b9f81558581a474ce7f069164d49afdc1de21c5d5c6bef4adc95e98ff2b6f3ce46bc7db1b5622424741863777b8eb114e3c8fbfdc6733116c1b20b6c3a8276a49447db86b896dfccdd2aa7cf62555075e155d6194fe9705449b6273aba2831eb32d0d382ec61f498998e2fa18da12199550113ffb374c495714c84178d6ad7cd7e13b2efc4a4964f064a9d8febbbe239231e245a37756d766fb30d5ab309bda56175bcd05b1631a33ff7e7b712d9ca44ff9796de22aa99a491a4e8a6a9f6a6dde0ce3b6c82d1abf4cec5c911ac48517a0e565ba7501d4c5ce458f1470ca5fd56b11839dd50f8271d7afaf1adb08c2a88c6307ddaa83ea8701213a1a065cd214a0158a8e863f31342b9946055ecfc397adb7e6bb6641c02aa28f18bcedb25036f0349e9d030d9f4547a42cc4fc8876b605553171210b09beb8963ff040d8c0ec2acb9036dde4c03197093d3170cdab7af27bf0a0eb72c3db808ae7903254d5c91b6b0d123b0ee6803e943d1a804948db8bf86fad93f3e3a381ef59b3fcabd977a03cc3a0f8543b7ea11523e229db23073f5c350a45394ef967bbdd8750593147618565e47d506c2c2ae8cd79f232a90325e2dcc21df21448a5b390db24931be258d39782d5318cf485740185ecec11aa35b61f41f9625c7805058a1c6dc60bdf495b5ece8b589101ce81497dde706a190b0ebffd3966ce5eefa8e6306de10ec7f63d82c87cf8db7f486fa6816656191b8a42d47624ea487f6e5790fa991fbe62f3599bf8473887980e6e2eb182ccba0a6084d0d37f2c311b8a688addd157fa9b5c8d0174092caaa76aba332fca66521c6b2c75765bedf36bad081442824198c71a74d176218fe7915a861b4b64cc5197a73d30e2d8f90393499d2d3d46ef852d4752d48b04b5352be40726d16ce8bd27b430fb9f082c65a79ac2cbe68b50456d4cbc15a094b3351bcc1138d3ada5608f5dbfe6fae21455b0c88c5c791c75515c31331b0b883c3c9de187aea9b637acb1336a1392ba227be4094eb57a5c9a68e88c71e51b8b42c74cddafde88d82bea9d102ba10145e12ff7fdfe56f4ad794ac03066dbc5ae9c80015d6d23575d09855dc16faa64f22592249996f91021d1c3f8286df99da43ea9946bcbe8abbe1e365e47591310fa1bfe56de9e829e7ce2a1251be421a5e3029d08cb3a8265e693ff86fe646bacf8f4b3abc9a4d5398b9d7af332f5bafbb58c211f05f30e731145d9457e002f37b7e2b98920724209feb50341cc46da34f0783e4a3776612ac5bda58b8278c3f5960d74eec223f867a92cd4e7f34467d984c85dfdb1d8f43bb437cb37e93c5c0113578eb5a6b3a26a28826f7cfa6ad22109c994934506a6dcc36451dc55a0e1affe6cdfbd8d3a3baa558fae4dedf60a0ce7f5a11cf92d31df5580a1a745c17b2a54d93c2f07ba362ee209734b2276101e52b20e59e0ca784927567d70a30c28f9b8c3e525b5ee4848ea79ecde3158f180967f1a18999a1ce6fd327cf9ae47aff20000b6af9af6e75571cafd7fbaa5279e698b1dccd7271b600fe6fbad34dbe25b0bb1608db1b16aef46f45bf5c3812ce7a4d473fb1a6f263b8fa4b80535076cdee6fd0c907696eea792d0a7cc9e19f876703f7ac8f84e24c4d5b8bf64c59c1a5a602193c9b3c2543281bf58021984edcc2241b5dea9f552c3cdfc493f1468bac2c677340b05c61a767d4cfee5acbab27e90fae8e83cc1fe0737791a17b92a4dab1b0c5dde317243eccc4991982f292be5653498c4c5b40ba79312b7627de99613384d9c3bdec513bc2f9bedee645b620fde89f50841408ee3d44398d00b0971f233a762d7e63c4495bf79b3aea4bf18b136f460c6ad6397fe7f972b1f4845ebaba2116323674f157880651b086a94623a35c74d935e787fc0815b670eab5ca66d8098831acb2e1cc9da5aa72b1310a090f78cb3befad409c8f9cc521c656ee61f0c37f90c921480470d539ce0732fa4101c8f92775c5e41adc6c92fee25b12af2926e9559677beda0a777dedb48e741fd5dfd2a5f0335273ac6814657668430e6c0d5ed7e827e2fde6048ef7b35ce63704fe89739ff14392cbb57917de6dbf26a604a84095b7fcafdbc3bbae65d945f3e235a569554929d08aa71d41411f21fc2f3d9235ae7bd1cb5d467faaaa6e4c31adc964a4e14d301c7f3fbd3d72bc15c75676c3f9bbbe3aab66643bf923bdd2b7abbc83ba8dd8c1907f91056084e856e171e16b1ee01e80eec8e2de418165351d2a1432e5d50982e6af8220d60c9e6beb61471f7554e95a761c9f4a78a84bb7bf81f8ef263e54377441f57cb4b383c0a5853dcb168ac431df441e6aa837457ef7c9f265092a7aefa7d7a894d4b282221a411d33f2c6d44b4b377c348ea934d50937eaf3a6d8183dcfc87a22413b62a424dafbd8bdb116e256e2e21770ad8936bd5ba34d108eea8babf82194e2582a1ac4a6d5b790dcfedbccbfd62232f97de5262a9db137c587f44a0b57c9f808278efbf5fb7240957a9c51ec80273ed98febf4103a8b7cc503a80eab21da70e1260a6899210a150142f497f13f2e07f91de40ed6f50557c5dbaeae230805a79bd8888478618a66c1a2079e5508ba98532796bd34bb6da76a30d90a2ff458f6102ac678a203d7f0d2264545e05e61072bc2bf69d400a7a3895dd787ba461c4b294f6aeafa08265d8a029d937bdd2066f0a50ed404db4a35ecc4342"}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) 4m43.768638503s ago: executing program 5 (id=3039): socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) keyctl$clear(0x3, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, 0x0, 0xe) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3, 0x1, 0x1}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', r3, 0x2f, 0xd, 0x42, 0x8, 0x0, @local, @loopback, 0x8000, 0x8000, 0xcfbd, 0x1}}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000d00), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x105, 0x105, 0x2, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x2}, @typedef={0x9, 0x0, 0x0, 0x8, 0x4}, @enum={0x6, 0x9, 0x0, 0x6, 0x4, [{0xd, 0xfffffff7}, {0x3, 0xa}, {0xb, 0x1}, {0xb, 0xffffffff}, {0xa, 0x1002}, {0x10, 0xfffffffc}, {0xa, 0x401}, {0xe, 0x81}, {0x10, 0x9}]}, @func={0x7, 0x0, 0x0, 0xc, 0x3}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x4, 0x2}, @datasec={0x1, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x2, 0x6}], 'Q'}, @datasec={0x8, 0x3, 0x0, 0xf, 0x2, [{0x1, 0xfffffff4, 0x9}, {0x4, 0x2, 0x8}, {0x4, 0x0, 0x6}], "e753"}, @datasec={0xa, 0x2, 0x0, 0xf, 0x2, [{0x3, 0x7f, 0x688}, {0x1, 0xb, 0x1}], "f8fe"}, @func={0x6, 0x0, 0x0, 0xc, 0x4}]}}, &(0x7f0000000200)=""/117, 0x122, 0x75, 0x1, 0x3}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x8008, 0xffffff6a) sendfile(0xffffffffffffffff, r5, 0x0, 0xffffffff004) ioctl$COMEDI_BUFCONFIG(r5, 0x8020640d, &(0x7f0000000300)={0x7ff, 0x1, 0x7, 0xa8fa}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) memfd_create(0x0, 0x1) 4m42.164583178s ago: executing program 5 (id=3043): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000740)="751319af5d93b3ee49400001095dae324cc3741a0d38748a761702dff9a9ea3ec890ddbbc4b4017c71208c1fc6173de3bb936fba7d54b6c33c699bab79ba7772cbb1be79e7892b8ce82d33959ed009fb3ed40f463b096f826c003111ea8be207fb53c9d978dad479050caeefb9b828b5a3fe4a00d10b1ed27d46087e6b7b09958a04309693031a5d4c4033b48fc1392388e86a2e6242cad55f0f1cf85dc1924fd6706bbe433158aac739a589b4eb1401009c7e083c8d924462e5900a81b4e5b2859d22c432d58345cc5c6532ee2b5f1528289b16ca33669639798f61d27344", 0x0, 0xdf}) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 4m40.243560108s ago: executing program 5 (id=3045): openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x1b6b80000000}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000500)={0x4, 0x1, 0x1, "2ecf704b441c52d9cae5f6fd6e34aed1a983546708e42b96a1f9b2c976b04bf9", 0x10006006}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x45, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1}}, 0xfffffd56, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x8040) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x5, &(0x7f0000000080)=0x24007, 0xfffffffffffffee9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0xce22, 0x7, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x200}}, 0x0, 0x0, 0x3c, 0x0, "a30b3b2884c69b16668c68a5daa845f387713f4048782ece1e75f1fcb1b3f41e4de625ff106bb28200c01f696109383664417165bba0dd5ace522fa7880000000000000000000300"}, 0xd8) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x100000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0x2d000, 0x8000, 0x1}) 4m39.744184927s ago: executing program 5 (id=3047): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpgrp(0x0) syz_pidfd_open(r1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r3 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000000)={0x0, 0x10001, 0x100b}) modify_ldt$write(0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000100)='\x00\x00\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0xa37, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x80, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf258, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x800004, 0x0, 0x800001ff, 0x8000, 0x5, 0x4, 0xd, 0x3, 0xba55, 0xffc, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x0, 0x0, 0x8, 0x5, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x4], [0x6, 0x1e, 0x3, 0x8003, 0xfffffffe, 0x43, 0x0, 0x5, 0x75, 0x1, 0x4, 0x7ffd, 0x72c, 0x1c32, 0x3, 0x9, 0x10100, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x2, 0x981, 0x4, 0x3, 0x3ff, 0x3, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x0, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x100, 0x0, 0x2, 0x401, 0xb, 0x3, 0x379, 0x9, 0xc, 0x5, 0x7, 0x6, 0x2, 0x1, 0x3, 0x8, 0x6, 0x200, 0x3], [0x400, 0x3, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x8, 0x8, 0x10, 0x7, 0x9, 0xe8a, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0x7, 0xe55, 0x10, 0x80000001, 0x4, 0x101, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xd, 0x47, 0x2, 0x3, 0x4, 0x7, 0x5, 0x40, 0x6, 0x8001, 0x6, 0x6, 0x8, 0x956, 0xffffffff, 0x6, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0x0, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x83ab0f28, 0x7fff, 0x80000003, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xd, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x9, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x7, 0x80, 0x2, 0x5, 0x8800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x6, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x6, 0xfffffffd, 0x7, 0xe, 0x2, 0x80e, 0xf, 0x133, 0x8]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) readv(0xffffffffffffffff, &(0x7f0000000740)=[{0x0}], 0x1) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 4m38.567076805s ago: executing program 5 (id=3049): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000500)="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", 0xf000}, {0x0, 0x55}], 0x2) r1 = syz_io_uring_setup(0x10f, 0x0, &(0x7f00000003c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r1, 0x47f5, 0x2000000, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x8600, 0x0) creat(0x0, 0xecf86c37d53049cc) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x400c0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x6a040000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 4m33.030944882s ago: executing program 0 (id=3057): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x8000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f00000000c0), &(0x7f00000002c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r4}, &(0x7f00000014c0), &(0x7f0000001500)=r3}, 0x20) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x42}, 0x94) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r5, &(0x7f0000001900)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000040)="bd", 0x1}], 0x1}}], 0x1, 0x400488c) 4m31.166577732s ago: executing program 0 (id=3060): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x837, &(0x7f0000001200)={0x0, 0xa846, 0x10, 0x3, 0x178}, &(0x7f0000002380)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r6, 0x6430) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) openat$cgroup_int(r8, &(0x7f0000000040)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket(0x10, 0x3, 0x0) (async) syz_io_uring_setup(0x837, &(0x7f0000001200)={0x0, 0xa846, 0x10, 0x3, 0x178}, &(0x7f0000002380), &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r6, 0x6430) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) openat$cgroup_int(r8, &(0x7f0000000040)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}, 0x0, 0x0, 0x1}) (async) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) 4m28.742817164s ago: executing program 0 (id=3064): socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) keyctl$clear(0x3, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, 0x0, 0xe) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3, 0x1, 0x1}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', r3, 0x2f, 0xd, 0x42, 0x8, 0x0, @local, @loopback, 0x8000, 0x8000, 0xcfbd, 0x1}}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000d00), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x105, 0x105, 0x2, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x2}, @typedef={0x9, 0x0, 0x0, 0x8, 0x4}, @enum={0x6, 0x9, 0x0, 0x6, 0x4, [{0xd, 0xfffffff7}, {0x3, 0xa}, {0xb, 0x1}, {0xb, 0xffffffff}, {0xa, 0x1002}, {0x10, 0xfffffffc}, {0xa, 0x401}, {0xe, 0x81}, {0x10, 0x9}]}, @func={0x7, 0x0, 0x0, 0xc, 0x3}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x4, 0x2}, @datasec={0x1, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x2, 0x6}], 'Q'}, @datasec={0x8, 0x3, 0x0, 0xf, 0x2, [{0x1, 0xfffffff4, 0x9}, {0x4, 0x2, 0x8}, {0x4, 0x0, 0x6}], "e753"}, @datasec={0xa, 0x2, 0x0, 0xf, 0x2, [{0x3, 0x7f, 0x688}, {0x1, 0xb, 0x1}], "f8fe"}, @func={0x6, 0x0, 0x0, 0xc, 0x4}]}}, &(0x7f0000000200)=""/117, 0x122, 0x75, 0x1, 0x3}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x8008, 0xffffff6a) sendfile(0xffffffffffffffff, r5, 0x0, 0xffffffff004) ioctl$COMEDI_BUFCONFIG(r5, 0x8020640d, &(0x7f0000000300)={0x7ff, 0x1, 0x7, 0xa8fa}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) memfd_create(0x0, 0x1) 4m27.344913416s ago: executing program 0 (id=3066): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x1) umount2(&(0x7f0000000080)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r1, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x59) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000002c0)='./file0\x00', 0x2) 4m27.157914751s ago: executing program 0 (id=3068): socket$inet_udplite(0x2, 0x2, 0x88) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, r0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000080)={0x34, r6, 0x21, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}]}]}, 0x34}}, 0x8004) 4m25.723062124s ago: executing program 1 (id=3071): syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe80fe43c8a0000000000000000000bb00000000000000000000ffff00000000242065580000000000000021000086dd080088be4305400f"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000001080)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xe, 0xc, 0x32315241, 0x5, 0x568d, 0x3, 0x2, 0x8, 0x1, 0x1, 0x1}}) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c46000400000180ffffffff28649f55db6b5d1024ffff03003e00ebffffff7c00000000000000400000000000000001000000000000001de600000c203800"], 0x78) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 4m24.058855946s ago: executing program 1 (id=3072): socket$inet_udplite(0x2, 0x2, 0x88) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, r0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000080)={0x34, r6, 0x21, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}]}]}, 0x34}}, 0x8004) 4m23.815897089s ago: executing program 0 (id=3074): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe31, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r4, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdirat(r1, &(0x7f0000000340)='./file1\x00', 0x0) 4m22.711333823s ago: executing program 1 (id=3075): socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) keyctl$clear(0x3, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, 0x0, 0xe) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3, 0x1, 0x1}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', r3, 0x2f, 0xd, 0x42, 0x8, 0x0, @local, @loopback, 0x8000, 0x8000, 0xcfbd, 0x1}}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000d00), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x105, 0x105, 0x2, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x2}, @typedef={0x9, 0x0, 0x0, 0x8, 0x4}, @enum={0x6, 0x9, 0x0, 0x6, 0x4, [{0xd, 0xfffffff7}, {0x3, 0xa}, {0xb, 0x1}, {0xb, 0xffffffff}, {0xa, 0x1002}, {0x10, 0xfffffffc}, {0xa, 0x401}, {0xe, 0x81}, {0x10, 0x9}]}, @func={0x7, 0x0, 0x0, 0xc, 0x3}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x4, 0x2}, @datasec={0x1, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x2, 0x6}], 'Q'}, @datasec={0x8, 0x3, 0x0, 0xf, 0x2, [{0x1, 0xfffffff4, 0x9}, {0x4, 0x2, 0x8}, {0x4, 0x0, 0x6}], "e753"}, @datasec={0xa, 0x2, 0x0, 0xf, 0x2, [{0x3, 0x7f, 0x688}, {0x1, 0xb, 0x1}], "f8fe"}, @func={0x6, 0x0, 0x0, 0xc, 0x4}]}}, &(0x7f0000000200)=""/117, 0x122, 0x75, 0x1, 0x3}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x8008, 0xffffff6a) sendfile(0xffffffffffffffff, r5, 0x0, 0xffffffff004) ioctl$COMEDI_BUFCONFIG(r5, 0x8020640d, &(0x7f0000000300)={0x7ff, 0x1, 0x7, 0xa8fa}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) memfd_create(0x0, 0x1) 4m22.661909085s ago: executing program 33 (id=3049): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000500)="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", 0xf000}, {0x0, 0x55}], 0x2) r1 = syz_io_uring_setup(0x10f, 0x0, &(0x7f00000003c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r1, 0x47f5, 0x2000000, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x8600, 0x0) creat(0x0, 0xecf86c37d53049cc) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x400c0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x6a040000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 4m22.008566489s ago: executing program 34 (id=3074): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe31, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r4, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdirat(r1, &(0x7f0000000340)='./file1\x00', 0x0) 4m21.626063322s ago: executing program 1 (id=3079): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x1) umount2(&(0x7f0000000080)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r1, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x59) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000002c0)='./file0\x00', 0x2) 4m21.379303573s ago: executing program 1 (id=3080): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120001010000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa86dd6000000000383a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000005dc608cedb02b00002fff00000000040000000000000000000001fe8000000000000000000000000000aa1d000d7168000000"], 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0xd, 0x0, 0x1, 0xfffffffd, 0x6, 0x3, 0x100}]}) r3 = fsopen(&(0x7f0000000000)='logfs\x00', 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r5}) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000002300)={0x50, 0x0, r7, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r6, &(0x7f00000065c0)={0x2020}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000002240)={0x10, 0xffffffffffffffda}, 0x10) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x9f1bc7bdd2042b30, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) dup3(r8, r6, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) close(0x3) fsmount(r3, 0x1, 0x80) 4m21.026964882s ago: executing program 1 (id=3082): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpgrp(0x0) syz_pidfd_open(r1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r3 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000000)={0x0, 0x10001, 0x100b}) modify_ldt$write(0x1, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0xa37, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x80, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf258, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x800004, 0x0, 0x800001ff, 0x8000, 0x5, 0x4, 0xd, 0x3, 0xba55, 0xffc, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x0, 0x0, 0x8, 0x5, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x4], [0x6, 0x1e, 0x3, 0x8003, 0xfffffffe, 0x43, 0x0, 0x5, 0x75, 0x1, 0x4, 0x7ffd, 0x72c, 0x1c32, 0x3, 0x9, 0x10100, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x2, 0x981, 0x4, 0x3, 0x3ff, 0x3, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x0, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x100, 0x0, 0x2, 0x401, 0xb, 0x3, 0x379, 0x9, 0xc, 0x5, 0x7, 0x6, 0x2, 0x1, 0x3, 0x8, 0x6, 0x200, 0x3], [0x400, 0x3, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x8, 0x8, 0x10, 0x7, 0x9, 0xe8a, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0x7, 0xe55, 0x10, 0x80000001, 0x4, 0x101, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xd, 0x47, 0x2, 0x3, 0x4, 0x7, 0x5, 0x40, 0x6, 0x8001, 0x6, 0x6, 0x8, 0x956, 0xffffffff, 0x6, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0x0, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x83ab0f28, 0x7fff, 0x80000003, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xd, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x9, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x7, 0x80, 0x2, 0x5, 0x8800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x6, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x6, 0xfffffffd, 0x7, 0xe, 0x2, 0x80e, 0xf, 0x133, 0x8]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) readv(r4, &(0x7f0000000740)=[{0x0}], 0x1) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 4m20.335165694s ago: executing program 35 (id=3082): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpgrp(0x0) syz_pidfd_open(r1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r3 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000000)={0x0, 0x10001, 0x100b}) modify_ldt$write(0x1, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0xa37, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x80, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf258, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x800004, 0x0, 0x800001ff, 0x8000, 0x5, 0x4, 0xd, 0x3, 0xba55, 0xffc, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x0, 0x0, 0x8, 0x5, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x4], [0x6, 0x1e, 0x3, 0x8003, 0xfffffffe, 0x43, 0x0, 0x5, 0x75, 0x1, 0x4, 0x7ffd, 0x72c, 0x1c32, 0x3, 0x9, 0x10100, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x2, 0x981, 0x4, 0x3, 0x3ff, 0x3, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x0, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x100, 0x0, 0x2, 0x401, 0xb, 0x3, 0x379, 0x9, 0xc, 0x5, 0x7, 0x6, 0x2, 0x1, 0x3, 0x8, 0x6, 0x200, 0x3], [0x400, 0x3, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x8, 0x8, 0x10, 0x7, 0x9, 0xe8a, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0x7, 0xe55, 0x10, 0x80000001, 0x4, 0x101, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xd, 0x47, 0x2, 0x3, 0x4, 0x7, 0x5, 0x40, 0x6, 0x8001, 0x6, 0x6, 0x8, 0x956, 0xffffffff, 0x6, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0x0, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x83ab0f28, 0x7fff, 0x80000003, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xd, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x9, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x7, 0x80, 0x2, 0x5, 0x8800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x6, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x6, 0xfffffffd, 0x7, 0xe, 0x2, 0x80e, 0xf, 0x133, 0x8]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) readv(r4, &(0x7f0000000740)=[{0x0}], 0x1) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 4m1.728484782s ago: executing program 7 (id=3077): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x1) umount2(&(0x7f0000000080)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r1, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000180)='./bus\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x59) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x2) 4m0.914742723s ago: executing program 7 (id=3116): openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x1b6b80000000}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000500)={0x4, 0x1, 0x1, "2ecf704b441c52d9cae5f6fd6e34aed1a983546708e42b96a1f9b2c976b04bf9", 0x10006006}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x45, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1}}, 0xfffffd56, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x8040) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x5, &(0x7f0000000080)=0x24007, 0xfffffffffffffee9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0xa) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0x2d000, 0x8000, 0x1}) 4m0.139299952s ago: executing program 7 (id=3119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0x9362, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x591}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r5 = socket$inet6(0xa, 0x2, 0x3823) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in=@multicast2, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x200000000002f1e, 0xfffffffffffffffe, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x5, 0x3}, {{@in=@empty, 0x7fd, 0x33}, 0xa, @in6=@empty, 0x3, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x78, &(0x7f0000000600)=""/120}]}) 3m59.519124052s ago: executing program 36 (id=3119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0x9362, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x591}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r5 = socket$inet6(0xa, 0x2, 0x3823) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in=@multicast2, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x200000000002f1e, 0xfffffffffffffffe, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x5, 0x3}, {{@in=@empty, 0x7fd, 0x33}, 0xa, @in6=@empty, 0x3, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x78, &(0x7f0000000600)=""/120}]}) 11.789220117s ago: executing program 6 (id=3818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r5, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x3, 0x1000, 0xfd, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r2, 0x1, 0x999b, 0xfbe}) fsmount(r8, 0x1, 0x6) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000700)="f83cac0259c8e3f2bada30fbc99b5400040000ea07566e96573c7f95a5125ca220428d3c404d329f4fff5f6baf5391c3076b86942a98", 0x36, 0xc080, &(0x7f00000001c0)={0x11, 0x86dd, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) 10.585792935s ago: executing program 6 (id=3819): socket$pppoe(0x18, 0x1, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x40001, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$kcm(0x29, 0x5, 0x0) accept4(r5, 0x0, 0x0, 0x80000) syz_usb_connect(0x1, 0x24, 0x0, 0x0) syz_io_uring_setup(0x4cbf, &(0x7f0000000380)={0x0, 0x64bb, 0x1000, 0x1, 0x4}, &(0x7f0000000400), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_setaffinity(r6, 0x8, &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) 10.486188414s ago: executing program 9 (id=3824): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42e82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r0, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000880)={0x0, 0xdd1, 0xffffffb3, 0x0, 0x88fd, 0x10}) r1 = syz_open_dev$loop(&(0x7f0000000200), 0xd, 0x840) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, 0x0) write$dsp(r0, &(0x7f0000000080)="cd", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940), 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) 9.041885415s ago: executing program 9 (id=3827): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) 8.821752581s ago: executing program 4 (id=3829): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff30000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) fsync(r3) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000b00)={&(0x7f0000000280)={0x50, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.739576693s ago: executing program 9 (id=3830): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf0000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000001c0)='sched_switch\x00', r1, 0x0, 0x4}, 0x18) syz_open_dev$dri(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r3, 0x1) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) 8.600367842s ago: executing program 4 (id=3831): r0 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_names\x00') fchdir(r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfe8e, 0x12) finit_module(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) getitimer(0x0, &(0x7f0000000000)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000019380)={0x0, 0x0, 0x0}, 0x8800) socket$kcm(0x10, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000280)={0x1f, @none}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x5, 0x263f, 0x0, '\x00', 0x20000000}, 0x0, [0x0, 0x0, 0x0, 0xfffdffffffffbffd, 0x0, 0x0, 0x0, 0x3, 0x71, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc19, 0xfffffffffffffffc, 0x7, 0x0, 0x0, 0x2, 0x0, 0x40, 0x0, 0x9, 0x100000000, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd451, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0xc1, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe411, 0x10000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffff8001, 0x0, 0x10000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) (fail_nth: 4) ioctl(r5, 0x8b2a, &(0x7f0000000040)) listen(r4, 0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 7.415365049s ago: executing program 9 (id=3832): socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) creat(&(0x7f0000000080)='./file2\x00', 0xa14089a55daf2cec) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xe00, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) keyctl$read(0xb, 0x0, 0x0, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x2010, 0xffffffffffffffff, 0xeedd5000) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') syz_usb_connect(0x0, 0x50, &(0x7f0000000980)=ANY=[], 0x0) lseek(r3, 0x289e0cb5, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000240)={0x1fe, 0x1, 0x4000, 0x2000, &(0x7f0000fe5000/0x2000)=nil, 0xfffffffffffffffe}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaa60086dd6000000000140600fe80000000000000"], 0x0) io_uring_enter(r5, 0x2218, 0x7721, 0x16, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e33, 0x7, @mcast2}, 0x1c, 0x0}}], 0x1, 0x24000000) 7.316345177s ago: executing program 4 (id=3833): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r4) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x6cc0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, 0x0, 0x0, 0x10001, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f0000000040)={0x6, 0x2, 0x5}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r9, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x0, 0xb, 0x2, "3a02"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x82, 0x1, "0e"}, 0x0, 0x0, 0x0}) 7.239441509s ago: executing program 6 (id=3834): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x40, 0x24, 0x2c, {0x2c, 0x5, "4f47e91e7e17b607cad18df7a24d9e5ae7b2d9ee563329848eb9e0b3e9a4b6553dbf1d9b7affd26f672b"}}, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000000c0)={0x0, 0xf, 0x33, {0x5, 0xf, 0x33, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0xe4, 0x0, 0x0, 0xf, 0x8}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "3ba03ccfc6fc341dba4f6158aaae7dc5"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x31, 0xe, 0x55, 0xf800, 0x8}]}}, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x980915, 0x800}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000180)={0x4}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x400000000000000, 0x0, 0x493, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x6000, 0x3, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$FUSE_ENTRY(r7, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x0, 0x0, 0x4e5, 0x5, 0x8000, 0x8, {0x4, 0xf, 0xfffffffffffffc7f, 0x8000000000000000, 0x4, 0xe, 0x1, 0x7, 0x9, 0x2000, 0x10200, r5, r6, 0x101, 0x7}}}, 0x90) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, r4, {0x7, 0x29}}, 0x50) 4.987355923s ago: executing program 4 (id=3841): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x0, r3}, 0x0) landlock_restrict_self(r2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/246, 0xf6}, {&(0x7f0000000200)=""/101, 0x65}, {&(0x7f0000000380)=""/113, 0x71}, {&(0x7f0000000600)=""/157, 0x9d}, {&(0x7f00000006c0)=""/175, 0xaf}, {&(0x7f00000000c0)=""/28, 0x1c}], 0x6) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000180)=@generic={0x0, 0xe47c, 0x6}) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_open_dev$I2C(&(0x7f00000001c0), 0x1, 0x402) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x540001, 0x0) close_range(r4, r2, 0x2) read$FUSE(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x2400c000) 4.849852694s ago: executing program 8 (id=3842): socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) keyctl$clear(0x3, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, 0x0, 0xe) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3, 0x1, 0x1}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000d00), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf9, 0xf9, 0x2, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x2}, @typedef={0x9, 0x0, 0x0, 0x8, 0x4}, @enum={0x6, 0x9, 0x0, 0x6, 0x4, [{0xd, 0xfffffff7}, {0x3, 0xa}, {0xb, 0x1}, {0xb, 0xffffffff}, {0xa, 0x1002}, {0x10, 0xfffffffc}, {0xa, 0x401}, {0xe, 0x81}, {0x10, 0x9}]}, @func={0x7, 0x0, 0x0, 0xc, 0x3}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x4, 0x2}, @datasec={0x1, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x2, 0x6}], 'Q'}, @datasec={0x8, 0x3, 0x0, 0xf, 0x2, [{0x1, 0xfffffff4, 0x9}, {0x4, 0x2, 0x8}, {0x4, 0x0, 0x6}], "e753"}, @datasec={0xa, 0x2, 0x0, 0xf, 0x2, [{0x3, 0x7f, 0x688}, {0x1, 0xb, 0x1}], "f8fe"}]}}, &(0x7f0000000200)=""/117, 0x116, 0x75, 0x1, 0x3}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x8008, 0xffffff6a) sendfile(0xffffffffffffffff, r5, 0x0, 0xffffffff004) ioctl$COMEDI_BUFCONFIG(r5, 0x8020640d, &(0x7f0000000300)={0x7ff, 0x1, 0x7, 0xa8fa}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) memfd_create(0x0, 0x1) 4.013735348s ago: executing program 9 (id=3844): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffdfa}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1) mknod$loop(&(0x7f00000002c0)='./file1\x00', 0x2000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r5, 0x303, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0440c0}, 0x810) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x2, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r6) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000200304106000000000000109022400010000000009040000"], 0x0) finit_module(r0, 0x0, 0x7) listen(r0, 0x5) 3.42223309s ago: executing program 8 (id=3847): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x2, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x4008001) rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x3, 0x6}, 0x4}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r1 = epoll_create(0x10) epoll_pwait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x101, &(0x7f0000000400)={[0x9]}, 0x8) 3.063452664s ago: executing program 8 (id=3848): r0 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10111) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x7, 0x8, 0xa56, 0x3, {{0x10, 0x4, 0x3, 0xb, 0x40, 0x65, 0x0, 0x0, 0x29, 0x0, @loopback, @private=0xa010102, {[@noop, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x24, 0x9, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x2, 0x0}, 0x10000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x24}, 0xdc5}, {@remote, 0xffffbbac}]}]}}}}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00', {0x2, 0x0, @local}}) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300), &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x122, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000500), 0xfffffffffffffffe, 0x48203) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2d03629c, 0x0, 0x9, 0x40000000000, 0x1, 0x10000000, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001300e99925bd700000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0030803c000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000090000000000000000000000170100000000000000000000000000000000000000000000000000000000020800020000000000000fcfdd4ee5a8ff0421b10000000000000000000000000000000000000000006cd5e069ceddba7747273c2bc3000000001b1a8c52f5a1a102a45d4f4e81bd11735b96e81d0d7d5dae62bad0e2375be7aa6758074f34d75ee9d99f4e781df74bf620065ea0c611c34f694d69de46896aa35edf350e0a7ed695b64fa8e5a5fc1aacef998d6893bfef14d43901a4374745d718e2ad1c9d26eb26e9851c9709eec92e42e366cd74572bb3a746fa4817c75142d2846a7155f203fe4930c87c837b09d36ca7e554768d0bd5169f8b564abd4c23ee8bc16a8cf9f6adf42dc4c42e5de71b561d77dc6dc4f3772b"], 0xb8}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r10], 0x188}}, 0x0) close(r7) 2.703035593s ago: executing program 6 (id=3851): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x8000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f00000000c0), &(0x7f00000002c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r4}, &(0x7f00000014c0), &(0x7f0000001500)=r3}, 0x20) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x42}, 0x94) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r5, &(0x7f0000001900)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000040)="bd", 0x1}], 0x1}}], 0x1, 0x400488c) 2.272499996s ago: executing program 8 (id=3852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_io_uring_setup(0x82e, &(0x7f0000003380)={0x0, 0x400, 0x4000}, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, 0x0, 0x1) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.665758479s ago: executing program 4 (id=3853): r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="013803545c00fddbdf25030000000800040000000000040001"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000035000701fffffff9eacdb8d16de35a361aa624b5a15a68fffeffffff057c00000800048004004980"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) sendto$inet(r0, &(0x7f0000004a80)="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", 0x1000, 0xebc0afe5d409b1b7, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x31, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000050000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018240000", @ANYRES32=r1, @ANYBLOB="00000000030000004a8002000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000852000000300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000532700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000008520000004000000850000007c00000085000000910000007571060000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="92e43eaa4e368d16460e1a125dce3905091c111b5cf2b9ba76eb31cbaddc6889eca7c16672ed607e92106e8fe431e86cac45ae4c20f53fa871fcb79d679e58cf2481402b95d9c8983d6ad0552c3eb5b38acfcb890110e70f18cec14ec81b359ee15df24984dcc18ee7da09ac407a62658e13c021fea83abc795d5a886f62014a70afd06e99b7b501217b", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) r10 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0xa377, 0x0, 0x3, 0x310}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r10, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r13 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r13) 1.66350767s ago: executing program 8 (id=3854): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x89, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r1, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x89, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r1, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) (async) 1.599560031s ago: executing program 3 (id=3855): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x289, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x717}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) 1.586806824s ago: executing program 6 (id=3856): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0x100000000000f7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x1a, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000efffffff7f000000000000000008c42003ca9d10b2d6f30000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(r0, 0xd, &(0x7f00000000c0)={0xfffffffffffffffc, 0x20003ba}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r7, 0x400442c9, &(0x7f0000000040)={0xffffffff, @remote}) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x106f) 1.426418287s ago: executing program 3 (id=3858): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x2, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x4008001) rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x3, 0x6}, 0x4}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r1 = epoll_create(0x10) epoll_pwait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x101, &(0x7f0000000400)={[0x9]}, 0x8) 1.046628414s ago: executing program 3 (id=3859): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[], 0x0}, 0x94) (async) 905.953903ms ago: executing program 9 (id=3860): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x48, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0xa, 0x3, 0x3a) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="88010000190001000000000000000000000000000000000000000000000000006401010200000000000000000000000000000000000000000200b00000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="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"], 0x188}}, 0x48010) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x810) r6 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) writev(r6, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) madvise(&(0x7f00005b7000/0x4000)=nil, 0x4000, 0x3) set_mempolicy(0x2, &(0x7f0000000040)=0x1003, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) open_tree(r6, &(0x7f0000000080)='./file1\x00', 0x80101) truncate(&(0x7f00000000c0)='./file1\x00', 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) 845.34184ms ago: executing program 4 (id=3861): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r6, 0x847ba, 0x79c, 0xe, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x4c8c0) accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) 783.643377ms ago: executing program 3 (id=3862): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x29) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, 0x0) ioctl$HIDIOCSFLAG(r7, 0x4004480f, &(0x7f0000000000)=0x3) 0s ago: executing program 3 (id=3863): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a42, 0x0) r6 = dup(r5) mmap(&(0x7f0000535000/0x2000)=nil, 0x2000, 0xc, 0x28011, r6, 0x0) read$FUSE(r6, &(0x7f00000015c0)={0x2020}, 0x2020) getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000340)={@multicast1}, &(0x7f0000000380)=0xc) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x10) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r8, &(0x7f0000000400)="2ae0", 0x2, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$kcm(0x29, 0x7, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): 0xf5/0x1a0 [ 1345.250480][T19375] ? putname+0xf5/0x1a0 [ 1345.250505][T19375] ? putname+0xf5/0x1a0 [ 1345.250534][T19375] ? __x64_sys_mount+0x293/0x310 [ 1345.250550][T19375] __x64_sys_mount+0x293/0x310 [ 1345.250569][T19375] ? __pfx___x64_sys_mount+0x10/0x10 [ 1345.250594][T19375] do_syscall_64+0xcd/0xf80 [ 1345.250623][T19375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.250642][T19375] RIP: 0033:0x7ff75b98f749 [ 1345.250658][T19375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1345.250677][T19375] RSP: 002b:00007ff75c8db038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1345.250695][T19375] RAX: ffffffffffffffda RBX: 00007ff75bbe5fa0 RCX: 00007ff75b98f749 [ 1345.250707][T19375] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 1345.250718][T19375] RBP: 00007ff75c8db090 R08: 0000200000002140 R09: 0000000000000000 [ 1345.250730][T19375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1345.250741][T19375] R13: 00007ff75bbe6038 R14: 00007ff75bbe5fa0 R15: 00007fffe25efa38 [ 1345.250766][T19375] [ 1345.560955][T15723] usb 9-1: config 9 has an invalid interface number: 94 but max is 0 [ 1345.569095][T15723] usb 9-1: config 9 has no interface number 0 [ 1345.575295][T15723] usb 9-1: config 9 interface 94 altsetting 4 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1345.586229][T15723] usb 9-1: config 9 interface 94 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1345.595959][T15723] usb 9-1: config 9 interface 94 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1345.606947][T15723] usb 9-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1345.617740][T15723] usb 9-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1345.628544][T15723] usb 9-1: config 9 interface 94 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 1345.639165][T15723] usb 9-1: config 9 interface 94 altsetting 4 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 1345.650437][T15723] usb 9-1: config 9 interface 94 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1345.661660][T15723] usb 9-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1345.672467][T15723] usb 9-1: config 9 interface 94 has no altsetting 0 [ 1345.684938][T15723] usb 9-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=96.28 [ 1345.694082][T15723] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.702065][T15723] usb 9-1: Product: Ð [ 1345.706188][T15723] usb 9-1: SerialNumber: syz [ 1347.461560][T15723] usb 9-1: USB disconnect, device number 9 [ 1348.166077][ T30] audit: type=1400 audit(1767696006.320:1340): avc: denied { append } for pid=19386 comm="syz.9.3314" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1352.137894][ T30] audit: type=1400 audit(1767696010.720:1341): avc: denied { bind } for pid=19417 comm="syz.8.3320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1352.787152][T19257] libceph: connect (1)[c::]:6789 error -101 [ 1352.798526][T19257] libceph: mon0 (1)[c::]:6789 connect error [ 1352.918094][ T791] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1352.963252][ T5824] Bluetooth: hci5: command 0x0406 tx timeout [ 1353.038650][T19429] ceph: No mds server is up or the cluster is laggy [ 1353.194570][ T791] usb 7-1: config 9 has an invalid interface number: 94 but max is 0 [ 1353.202988][ T791] usb 7-1: config 9 has no interface number 0 [ 1353.217111][ T791] usb 7-1: config 9 interface 94 altsetting 4 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1353.303768][T14315] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1353.701739][ T791] usb 7-1: config 9 interface 94 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1353.716823][ T791] usb 7-1: config 9 interface 94 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1353.736743][ T791] usb 7-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1353.747717][ T791] usb 7-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1353.758660][ T791] usb 7-1: config 9 interface 94 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 1353.772370][ T791] usb 7-1: config 9 interface 94 altsetting 4 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 1353.783433][ T791] usb 7-1: config 9 interface 94 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1353.794592][ T791] usb 7-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1353.805775][ T791] usb 7-1: config 9 interface 94 has no altsetting 0 [ 1353.820602][ T791] usb 7-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=96.28 [ 1353.839349][ T791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.855828][ T791] usb 7-1: Product: Ð [ 1353.874520][T14315] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1353.895757][T14315] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1353.917052][T14315] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1353.935558][ T791] usb 7-1: SerialNumber: syz [ 1353.958015][T14315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.988057][T14315] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1354.000052][T14315] usb 4-1: invalid MIDI out EP 0 [ 1354.048071][T14315] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1354.184384][ T791] usb 7-1: USB disconnect, device number 8 [ 1354.197175][T19257] usb 4-1: USB disconnect, device number 124 [ 1354.243370][T14315] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1354.423162][T14315] usb 9-1: Using ep0 maxpacket: 16 [ 1354.463945][T14315] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1354.572575][T14315] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1354.622566][T14315] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1354.633218][T14315] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1354.687511][T14315] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1355.038113][T14315] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.054682][T14315] usb 9-1: Product: 櫪⤨ïœá¨ˆí†±ç±ç¶¦â‹©ã¥¿ê„³ê™§æ”掗â§î”ªå° ï­Žè‘”ਚ쒿題ç¦åš–煵箞霢ŕ䙔î ê¸—ç±ì™€ë‡ŠëŒ°ì› é½˜ãœœè¸†à¿’Ŷ㌄䨔媣܋鹓쩀霱໌囈筮츨ᖥጬ꽳퀌햅酫㵴貀䛟贗èƒé‚”ì‘Œí»ã­å„©è–šèŠì§§ã™¯ë¤ à¢ã™²ãŸŸë„žíš°æ¿¬æª·á‘…᜶璪Іà©ë¿á©›ä´¬ä¢”î°¢ßî¼›ë„ [ 1355.104541][T14315] usb 9-1: SerialNumber: syz [ 1355.880572][T14315] usb 9-1: 0:2 : does not exist [ 1355.953168][ T30] audit: type=1400 audit(1767696014.340:1342): avc: denied { getopt } for pid=19465 comm="syz.6.3331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1356.241094][T14315] usb 9-1: USB disconnect, device number 10 [ 1357.043187][ T6601] usb 4-1: new low-speed USB device number 125 using dummy_hcd [ 1357.315434][ T6601] usb 4-1: Invalid ep0 maxpacket: 32 [ 1357.507513][ T6601] usb 4-1: new low-speed USB device number 126 using dummy_hcd [ 1358.051377][T18605] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1358.203199][ T6601] usb 4-1: Invalid ep0 maxpacket: 32 [ 1358.210900][ T6601] usb usb4-port1: attempt power cycle [ 1358.223291][T18605] usb 10-1: Using ep0 maxpacket: 16 [ 1358.234809][T18605] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.246279][T18605] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1358.260581][T18605] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1358.282559][T18605] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.392528][T18605] usb 10-1: config 0 descriptor?? [ 1358.595949][T18605] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1358.643394][ T6601] usb 4-1: new low-speed USB device number 127 using dummy_hcd [ 1358.683670][ T6601] usb 4-1: Invalid ep0 maxpacket: 32 [ 1358.833282][ T6601] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 1358.983620][ T6601] usb 4-1: Invalid ep0 maxpacket: 32 [ 1359.084264][ T6601] usb usb4-port1: unable to enumerate USB device [ 1359.190516][T19502] netlink: 666 bytes leftover after parsing attributes in process `syz.9.3336'. [ 1359.385767][ T6601] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1359.701310][ T6601] usb 7-1: config 9 has an invalid interface number: 94 but max is 0 [ 1359.709635][ T6601] usb 7-1: config 9 has no interface number 0 [ 1359.718451][ T6601] usb 7-1: config 9 interface 94 altsetting 4 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1359.733642][ T6601] usb 7-1: config 9 interface 94 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1359.744345][ T6601] usb 7-1: config 9 interface 94 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1359.755571][ T6601] usb 7-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1359.766737][ T6601] usb 7-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1359.784734][ T6601] usb 7-1: config 9 interface 94 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 1359.800259][ T6601] usb 7-1: config 9 interface 94 altsetting 4 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 1359.812332][ T6601] usb 7-1: config 9 interface 94 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1359.824903][ T6601] usb 7-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1359.839362][ T6601] usb 7-1: config 9 interface 94 has no altsetting 0 [ 1359.859673][ T6601] usb 7-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=96.28 [ 1359.869619][T18605] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1359.886433][ T6601] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.894841][ T6601] usb 7-1: Product: syz [ 1359.899068][ T6601] usb 7-1: Manufacturer: Ð [ 1359.903887][ T6601] usb 7-1: SerialNumber: syz [ 1360.078681][T18605] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1360.100624][T18605] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1360.110953][T18605] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1360.121372][T18605] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1360.130553][T18605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.202293][T18605] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1360.231166][ T6601] usb 7-1: USB disconnect, device number 9 [ 1360.251993][T18605] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1360.378767][T18605] usb 5-1: USB disconnect, device number 10 [ 1360.594491][T15005] usb 10-1: USB disconnect, device number 10 [ 1360.735675][ T6520] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1360.917652][ T6520] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1360.929374][ T6520] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1360.943051][ T6520] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1360.952244][ T6520] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.001833][ T6520] usb 4-1: config 0 descriptor?? [ 1361.153722][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.608780][ T6520] hid-multitouch 0003:0457:07DA.0015: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 1362.933209][T18605] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 1362.966720][T19535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3352'. [ 1363.093965][T18605] usb 7-1: Invalid ep0 maxpacket: 32 [ 1363.233181][T18605] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 1363.259469][T19556] FAULT_INJECTION: forcing a failure. [ 1363.259469][T19556] name failslab, interval 1, probability 0, space 0, times 0 [ 1363.272148][T19556] CPU: 0 UID: 0 PID: 19556 Comm: syz.9.3356 Tainted: G L syzkaller #0 PREEMPT(full) [ 1363.272175][T19556] Tainted: [L]=SOFTLOCKUP [ 1363.272179][T19556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1363.272187][T19556] Call Trace: [ 1363.272192][T19556] [ 1363.272197][T19556] dump_stack_lvl+0x16c/0x1f0 [ 1363.272216][T19556] should_fail_ex+0x512/0x640 [ 1363.272235][T19556] ? fs_reclaim_acquire+0xae/0x150 [ 1363.272252][T19556] should_failslab+0xc2/0x120 [ 1363.272267][T19556] __kmalloc_noprof+0xeb/0x910 [ 1363.272286][T19556] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1363.272305][T19556] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1363.272321][T19556] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1363.272338][T19556] ? tomoyo_profile+0x47/0x60 [ 1363.272367][T19556] tomoyo_path_number_perm+0x245/0x580 [ 1363.272387][T19556] ? tomoyo_path_number_perm+0x237/0x580 [ 1363.272408][T19556] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1363.272423][T19556] ? find_held_lock+0x2b/0x80 [ 1363.272453][T19556] ? find_held_lock+0x2b/0x80 [ 1363.272469][T19556] ? hook_file_ioctl_common+0x144/0x410 [ 1363.272490][T19556] ? __fget_files+0x20e/0x3c0 [ 1363.272509][T19556] security_file_ioctl+0x9b/0x240 [ 1363.272526][T19556] __x64_sys_ioctl+0xb7/0x210 [ 1363.272540][T19556] do_syscall_64+0xcd/0xf80 [ 1363.272556][T19556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.272567][T19556] RIP: 0033:0x7fbfcdf8f749 [ 1363.272577][T19556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1363.272588][T19556] RSP: 002b:00007fbfcc1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1363.272599][T19556] RAX: ffffffffffffffda RBX: 00007fbfce1e5fa0 RCX: 00007fbfcdf8f749 [ 1363.272607][T19556] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1363.272616][T19556] RBP: 00007fbfcc1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1363.272623][T19556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1363.272629][T19556] R13: 00007fbfce1e6038 R14: 00007fbfce1e5fa0 R15: 00007ffcd2d7b078 [ 1363.272644][T19556] [ 1363.272662][T19556] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1363.373162][T19257] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1363.503169][ T8605] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1363.523129][T18605] usb 7-1: Invalid ep0 maxpacket: 32 [ 1363.528595][T18605] usb usb7-port1: attempt power cycle [ 1363.566351][T15005] usb 4-1: USB disconnect, device number 3 [ 1363.663151][ T8605] usb 9-1: Using ep0 maxpacket: 32 [ 1363.663194][T19257] usb 5-1: Using ep0 maxpacket: 16 [ 1363.670745][ T8605] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.685186][ T8605] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1363.691984][ T8605] usb 9-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1363.702052][ T8605] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.702877][T19257] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.712140][ T8605] usb 9-1: config 0 descriptor?? [ 1363.720369][T19257] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1363.738146][T19257] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1363.747892][T19257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.767236][T19257] usb 5-1: config 0 descriptor?? [ 1363.798843][T19257] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1363.845772][ T30] audit: type=1400 audit(1767696022.490:1343): avc: denied { listen } for pid=19560 comm="syz.9.3360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1363.869055][ T30] audit: type=1400 audit(1767696022.520:1344): avc: denied { accept } for pid=19560 comm="syz.9.3360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1363.896154][T18605] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 1363.947967][ T8605] usbhid 9-1:0.0: can't add hid device: -71 [ 1363.948222][T18605] usb 7-1: Invalid ep0 maxpacket: 32 [ 1363.960217][T15005] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1363.969807][ T8605] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1363.973952][T19570] trusted_key: encrypted_key: insufficient parameters specified [ 1364.093315][T18605] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 1364.094096][ T8605] usb 9-1: USB disconnect, device number 11 [ 1364.209617][T18605] usb 7-1: Invalid ep0 maxpacket: 32 [ 1364.218524][T18605] usb usb7-port1: unable to enumerate USB device [ 1364.224420][T15005] usb 4-1: config 9 has an invalid interface number: 94 but max is 0 [ 1364.238790][T15005] usb 4-1: config 9 has no interface number 0 [ 1364.411741][T19576] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3357'. [ 1364.509367][T15005] usb 4-1: config 9 interface 94 altsetting 4 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1364.521074][T15005] usb 4-1: config 9 interface 94 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1364.530909][T15005] usb 4-1: config 9 interface 94 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1364.541911][T15005] usb 4-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1364.553336][T15005] usb 4-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1364.564286][T15005] usb 4-1: config 9 interface 94 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 1364.575007][T15005] usb 4-1: config 9 interface 94 altsetting 4 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 1364.585961][T15005] usb 4-1: config 9 interface 94 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1364.597815][T15005] usb 4-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1364.608681][T15005] usb 4-1: config 9 interface 94 has no altsetting 0 [ 1364.617292][T15005] usb 4-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=96.28 [ 1364.626492][T15005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.651291][T15005] usb 4-1: Product: syz [ 1364.660852][T15005] usb 4-1: Manufacturer: Ð [ 1364.668493][T15005] usb 4-1: SerialNumber: syz [ 1365.010490][T15005] usb 4-1: USB disconnect, device number 4 [ 1365.273523][ T8605] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1365.423609][T18605] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1365.448724][ T8605] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1365.458727][ T8605] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.466788][ T8605] usb 9-1: Product: syz [ 1365.471053][ T8605] usb 9-1: Manufacturer: syz [ 1365.475880][ T8605] usb 9-1: SerialNumber: syz [ 1365.481922][ T8605] usb 9-1: config 0 descriptor?? [ 1365.488689][ T8605] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 012 [ 1365.584864][T18605] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1365.596076][T18605] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1365.606250][T18605] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1365.616947][T18605] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1365.626169][T18605] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.639890][T18605] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1365.677231][T18605] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1365.763881][ T30] audit: type=1400 audit(1767696024.410:1345): avc: denied { write } for pid=19587 comm="syz.6.3367" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1365.849248][T19592] binder: 19587:19592 ioctl c018620c 0 returned -14 [ 1365.864334][T18605] usb 10-1: USB disconnect, device number 11 [ 1366.199873][T19597] netlink: 'syz.3.3368': attribute type 3 has an invalid length. [ 1366.208634][T19597] netlink: 'syz.3.3368': attribute type 3 has an invalid length. [ 1366.315353][T15005] usb 5-1: USB disconnect, device number 11 [ 1366.614690][T19599] netlink: 'syz.4.3369': attribute type 10 has an invalid length. [ 1366.675599][T19599] syz_tun: entered promiscuous mode [ 1366.717408][T19599] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1366.726267][ T30] audit: type=1400 audit(1767696025.380:1346): avc: denied { setopt } for pid=19600 comm="syz.9.3370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1367.694605][T19613] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3372'. [ 1368.250725][ T8605] i2c i2c-1: failure reading functionality [ 1368.259924][ T8605] i2c i2c-1: connected i2c-tiny-usb device [ 1368.307007][T19617] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 1368.315508][ T30] audit: type=1400 audit(1767696026.950:1347): avc: denied { mounton } for pid=19616 comm="syz.4.3375" path="/bus" dev="ramfs" ino=78158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1368.337676][T19618] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 1368.356697][T19618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.399179][T19618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.452867][T14315] usb 9-1: USB disconnect, device number 12 [ 1368.614459][ T8605] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1368.663203][T18946] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 1368.670805][ T6601] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 1368.764353][ T8605] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1368.774683][ T8605] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1368.785740][ T8605] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1368.799304][T15005] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1368.810872][ T8605] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1368.820029][ T8605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.828068][ T8605] usb 5-1: Product: syz [ 1368.832231][ T8605] usb 5-1: Manufacturer: syz [ 1368.837089][ T8605] usb 5-1: SerialNumber: syz [ 1368.843226][T18946] usb 4-1: Invalid ep0 maxpacket: 32 [ 1368.850264][ T6601] usb 7-1: config 9 has an invalid interface number: 94 but max is 0 [ 1368.858626][ T6601] usb 7-1: config 9 has no interface number 0 [ 1368.864965][ T6601] usb 7-1: config 9 interface 94 altsetting 4 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1368.875983][ T6601] usb 7-1: config 9 interface 94 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1368.885765][T14315] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1368.894121][ T6601] usb 7-1: config 9 interface 94 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1368.905268][ T6601] usb 7-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1368.916152][ T6601] usb 7-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1368.928193][ T6601] usb 7-1: config 9 interface 94 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 1368.938817][ T6601] usb 7-1: config 9 interface 94 altsetting 4 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 1368.949822][ T6601] usb 7-1: config 9 interface 94 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1368.960788][ T6601] usb 7-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1368.971860][ T6601] usb 7-1: config 9 interface 94 has no altsetting 0 [ 1368.973295][T15005] usb 10-1: Using ep0 maxpacket: 16 [ 1368.980246][ T6601] usb 7-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=96.28 [ 1368.985369][T15005] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1368.994027][T18946] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 1369.006109][T15005] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1369.011265][ T6601] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.025567][T15005] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1369.032241][ T6601] usb 7-1: Product: syz [ 1369.042960][T15005] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.045845][ T6601] usb 7-1: Manufacturer: Ð [ 1369.055771][T15005] usb 10-1: config 0 descriptor?? [ 1369.058482][ T6601] usb 7-1: SerialNumber: syz [ 1369.065163][ T8605] cdc_ncm 5-1:1.0: bind() failure [ 1369.075875][ T8605] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1369.082666][ T8605] cdc_ncm 5-1:1.1: bind() failure [ 1369.090548][T15005] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1369.095751][T14315] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 1369.106120][ T8605] usb 5-1: USB disconnect, device number 12 [ 1369.111279][T14315] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1369.124836][T14315] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.132809][T14315] usb 9-1: Product: syz [ 1369.137772][T14315] usb 9-1: Manufacturer: syz [ 1369.142361][T14315] usb 9-1: SerialNumber: syz [ 1369.148389][T14315] usb 9-1: config 0 descriptor?? [ 1369.213175][T18946] usb 4-1: Invalid ep0 maxpacket: 32 [ 1369.218792][T18946] usb usb4-port1: attempt power cycle [ 1369.303580][ T6601] usb 7-1: USB disconnect, device number 14 [ 1369.540350][T19632] netlink: 666 bytes leftover after parsing attributes in process `syz.9.3379'. [ 1369.573204][T18946] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 1369.645328][T18946] usb 4-1: Invalid ep0 maxpacket: 32 [ 1369.741889][ T30] audit: type=1400 audit(1767696028.380:1348): avc: denied { write } for pid=19627 comm="syz.8.3378" path="socket:[78180]" dev="sockfs" ino=78180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1369.802776][T18605] usb 9-1: USB disconnect, device number 13 [ 1369.883209][T18946] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 1370.004560][T18946] usb 4-1: Invalid ep0 maxpacket: 32 [ 1370.010390][T18946] usb usb4-port1: unable to enumerate USB device [ 1372.615911][T15005] usb 10-1: USB disconnect, device number 12 [ 1373.029594][T19648] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input41 [ 1373.048746][ T30] audit: type=1400 audit(1767696031.690:1349): avc: denied { write } for pid=19651 comm="syz.8.3385" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1373.116742][T19652] FAULT_INJECTION: forcing a failure. [ 1373.116742][T19652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1373.163830][T19652] CPU: 0 UID: 0 PID: 19652 Comm: syz.8.3385 Tainted: G L syzkaller #0 PREEMPT(full) [ 1373.163861][T19652] Tainted: [L]=SOFTLOCKUP [ 1373.163868][T19652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1373.163879][T19652] Call Trace: [ 1373.163885][T19652] [ 1373.163893][T19652] dump_stack_lvl+0x16c/0x1f0 [ 1373.163922][T19652] should_fail_ex+0x512/0x640 [ 1373.163954][T19652] _copy_from_user+0x2e/0xd0 [ 1373.163981][T19652] drm_mode_atomic_ioctl+0x685/0x2640 [ 1373.164021][T19652] ? avc_has_extended_perms+0x47c/0x1090 [ 1373.164055][T19652] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1373.164082][T19652] ? __lock_acquire+0x436/0x2890 [ 1373.164104][T19652] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 1373.164147][T19652] ? drm_is_current_master+0x2c/0x40 [ 1373.164177][T19652] ? do_raw_spin_unlock+0x172/0x230 [ 1373.164206][T19652] drm_ioctl_kernel+0x1f4/0x3e0 [ 1373.164236][T19652] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1373.164266][T19652] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1373.164300][T19652] drm_ioctl+0x5c9/0xc30 [ 1373.164328][T19652] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1373.164358][T19652] ? __pfx_drm_ioctl+0x10/0x10 [ 1373.164394][T19652] ? selinux_file_ioctl+0x180/0x270 [ 1373.164418][T19652] ? selinux_file_ioctl+0xb4/0x270 [ 1373.164442][T19652] ? __pfx_drm_ioctl+0x10/0x10 [ 1373.164469][T19652] __x64_sys_ioctl+0x18e/0x210 [ 1373.164493][T19652] do_syscall_64+0xcd/0xf80 [ 1373.164518][T19652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.164537][T19652] RIP: 0033:0x7f2aa5b8f749 [ 1373.164553][T19652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1373.164571][T19652] RSP: 002b:00007f2aa6aa4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1373.164590][T19652] RAX: ffffffffffffffda RBX: 00007f2aa5de5fa0 RCX: 00007f2aa5b8f749 [ 1373.164602][T19652] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000c [ 1373.164617][T19652] RBP: 00007f2aa6aa4090 R08: 0000000000000000 R09: 0000000000000000 [ 1373.164629][T19652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1373.164640][T19652] R13: 00007f2aa5de6038 R14: 00007f2aa5de5fa0 R15: 00007ffc8bd81fe8 [ 1373.164666][T19652] [ 1373.502542][T19659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.509877][T19659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.575600][ T30] audit: type=1400 audit(1767696032.220:1350): avc: denied { bind } for pid=19658 comm="syz.6.3387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1373.870794][ T30] audit: type=1400 audit(1767696032.500:1351): avc: denied { mount } for pid=19665 comm="syz.3.3389" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1374.178062][ T5138] Bluetooth: hci1: link tx timeout [ 1374.184835][ T5138] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1374.336644][ T5138] Bluetooth: hci1: link tx timeout [ 1374.336681][ T5138] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1374.441333][T19659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1374.471647][T19659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1374.535881][T19677] loop4: detected capacity change from 0 to 7 [ 1374.546139][T19677] Dev loop4: unable to read RDB block 7 [ 1374.551773][T19677] loop4: AHDI p1 p2 [ 1374.555816][T19677] loop4: partition table partially beyond EOD, truncated [ 1374.562984][T19677] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 1374.973250][ T6729] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.993194][ T6729] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.404642][ T6729] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.413586][ T6729] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.543328][ T6520] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 1375.732951][T19698] veth0_to_team: entered promiscuous mode [ 1375.777189][ T6520] usb 9-1: Invalid ep0 maxpacket: 32 [ 1375.858104][T15005] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1375.931945][ T6520] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 1376.023145][T15005] usb 5-1: Using ep0 maxpacket: 16 [ 1376.032167][T15005] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.042739][T15005] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1376.060734][T15005] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1376.077671][T15005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.097571][T15005] usb 5-1: config 0 descriptor?? [ 1376.103141][ T6520] usb 9-1: Invalid ep0 maxpacket: 32 [ 1376.108803][ T6520] usb usb9-port1: attempt power cycle [ 1376.123654][T15005] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1376.253180][ T5138] Bluetooth: hci1: command 0x0406 tx timeout [ 1376.480747][ T6520] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 1376.533476][T19705] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3396'. [ 1376.894369][ T6520] usb 9-1: Invalid ep0 maxpacket: 32 [ 1377.033239][ T6520] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 1377.091398][ T6520] usb 9-1: Invalid ep0 maxpacket: 32 [ 1377.104301][ T6520] usb usb9-port1: unable to enumerate USB device [ 1377.623236][T14315] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1377.804391][T14315] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1377.817589][T14315] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1377.827689][T14315] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1377.837004][T14315] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.858492][T19721] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1377.869548][T14315] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1378.090684][T15005] usb 10-1: USB disconnect, device number 13 [ 1378.893244][T15743] Bluetooth: hci0: command 0x0406 tx timeout [ 1378.899806][T15743] Bluetooth: hci3: command 0x0406 tx timeout [ 1379.234248][ T8605] usb 5-1: USB disconnect, device number 13 [ 1381.600990][T19747] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1382.782621][T19759] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3415'. [ 1383.563543][T19769] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3418'. [ 1383.693271][ T6601] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1383.937030][ T6601] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1383.958625][ T6601] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1383.987088][T19775] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1383.997696][ T6601] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1384.025868][ T6601] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.244194][T18406] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1384.310127][T19766] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1384.324968][ T6601] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1384.433309][T18406] usb 7-1: Using ep0 maxpacket: 8 [ 1384.441947][T18406] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.465668][T18406] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1384.485189][T18406] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1384.497968][T18406] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.507382][T18406] usb 7-1: Product: syz [ 1384.511580][T18406] usb 7-1: Manufacturer: syz [ 1384.516372][T18406] usb 7-1: SerialNumber: syz [ 1384.580680][T18406] cdc_ether 7-1:1.0: invalid descriptor buffer length [ 1384.615821][T18406] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1384.979022][ T791] usb 7-1: USB disconnect, device number 15 [ 1385.188772][ T6520] usb 5-1: USB disconnect, device number 14 [ 1385.644880][ T30] audit: type=1400 audit(1767696043.910:1352): avc: denied { write } for pid=19789 comm="syz.9.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1387.156182][T19808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3428'. [ 1390.304371][T19840] FAULT_INJECTION: forcing a failure. [ 1390.304371][T19840] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.910617][T19840] CPU: 1 UID: 0 PID: 19840 Comm: syz.3.3437 Tainted: G L syzkaller #0 PREEMPT(full) [ 1390.910650][T19840] Tainted: [L]=SOFTLOCKUP [ 1390.910656][T19840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1390.910667][T19840] Call Trace: [ 1390.910675][T19840] [ 1390.910682][T19840] dump_stack_lvl+0x16c/0x1f0 [ 1390.910710][T19840] should_fail_ex+0x512/0x640 [ 1390.910737][T19840] ? __kmalloc_noprof+0xca/0x910 [ 1390.910767][T19840] should_failslab+0xc2/0x120 [ 1390.910791][T19840] __kmalloc_noprof+0xeb/0x910 [ 1390.910823][T19840] ? __kernel_text_address+0xd/0x40 [ 1390.910848][T19840] ? constrain_params_by_rules+0x175/0xca0 [ 1390.910878][T19840] ? constrain_params_by_rules+0x175/0xca0 [ 1390.910901][T19840] constrain_params_by_rules+0x175/0xca0 [ 1390.910932][T19840] ? stack_trace_save+0x8e/0xc0 [ 1390.910956][T19840] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1390.910986][T19840] ? __kasan_kmalloc+0xaa/0xb0 [ 1390.911004][T19840] ? snd_pcm_oss_change_params_locked+0x247/0x3ab0 [ 1390.911027][T19840] ? snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1390.911048][T19840] ? snd_pcm_oss_write+0x4c2/0xa10 [ 1390.911080][T19840] ? rcu_is_watching+0x12/0xc0 [ 1390.911096][T19840] ? snd_interval_refine+0x2fa/0x580 [ 1390.911118][T19840] snd_pcm_hw_refine+0x7de/0xad0 [ 1390.911147][T19840] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1390.911179][T19840] ? __asan_memset+0x23/0x50 [ 1390.911197][T19840] ? _snd_pcm_hw_param_min+0x259/0x630 [ 1390.911225][T19840] snd_pcm_oss_change_params_locked+0x7d7/0x3ab0 [ 1390.911258][T19840] ? find_held_lock+0x2b/0x80 [ 1390.911286][T19840] ? snd_pcm_oss_write+0x4a1/0xa10 [ 1390.911311][T19840] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1390.911340][T19840] ? __pfx___mutex_lock+0x10/0x10 [ 1390.911372][T19840] ? find_held_lock+0x2b/0x80 [ 1390.911403][T19840] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1390.911430][T19840] snd_pcm_oss_write+0x4c2/0xa10 [ 1390.911456][T19840] ? bpf_lsm_file_permission+0x9/0x10 [ 1390.911472][T19840] ? security_file_permission+0x71/0x210 [ 1390.911490][T19840] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1390.911506][T19840] vfs_write+0x2a0/0x11d0 [ 1390.911524][T19840] ? __pfx_vfs_write+0x10/0x10 [ 1390.911537][T19840] ? find_held_lock+0x2b/0x80 [ 1390.911553][T19840] ? __fget_files+0x204/0x3c0 [ 1390.911571][T19840] ? __fget_files+0x20e/0x3c0 [ 1390.911590][T19840] ksys_write+0x12a/0x250 [ 1390.911609][T19840] ? __pfx_ksys_write+0x10/0x10 [ 1390.911637][T19840] do_syscall_64+0xcd/0xf80 [ 1390.911661][T19840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.911678][T19840] RIP: 0033:0x7ff75b98f749 [ 1390.911689][T19840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1390.911700][T19840] RSP: 002b:00007ff75c8ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1390.911712][T19840] RAX: ffffffffffffffda RBX: 00007ff75bbe6090 RCX: 00007ff75b98f749 [ 1390.911719][T19840] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 1390.911726][T19840] RBP: 00007ff75c8ba090 R08: 0000000000000000 R09: 0000000000000000 [ 1390.911733][T19840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1390.911740][T19840] R13: 00007ff75bbe6128 R14: 00007ff75bbe6090 R15: 00007fffe25efa38 [ 1390.911754][T19840] [ 1391.303740][ T30] audit: type=1400 audit(1767696049.510:1353): avc: denied { write } for pid=19841 comm="syz.6.3438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1393.913359][T18605] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1393.983921][ T30] audit: type=1400 audit(1767696052.630:1354): avc: denied { getopt } for pid=19872 comm="syz.9.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1394.074466][T18605] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1394.103145][T18605] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1394.112987][T18605] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1394.207852][T18605] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.242823][T19865] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1394.250131][ T30] audit: type=1400 audit(1767696052.770:1355): avc: denied { execute } for pid=19872 comm="syz.9.3448" dev="hugetlbfs" ino=78682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1394.273342][ T30] audit: type=1400 audit(1767696052.770:1356): avc: denied { execute_no_trans } for pid=19872 comm="syz.9.3448" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=78682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1394.275537][T18605] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1394.520925][T18605] usb 9-1: USB disconnect, device number 18 [ 1396.530839][ T8605] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1396.574862][ T30] audit: type=1326 audit(1767696054.820:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19901 comm="syz.6.3452" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac6a98f749 code=0x0 [ 1397.053381][ T8605] usb 5-1: Using ep0 maxpacket: 8 [ 1397.060156][ T8605] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1397.074028][ T8605] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 1397.082268][ T8605] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1397.093351][ T8605] usb 5-1: config 4 has no interface number 0 [ 1397.101269][ T8605] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1397.118175][ T8605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.131706][ T8605] usb 5-1: Product: syz [ 1398.273624][ T8605] usb 5-1: Manufacturer: syz [ 1398.278356][ T8605] usb 5-1: SerialNumber: syz [ 1399.293686][ T8605] uvcvideo 5-1:4.147: Found multiple Units with ID 6 [ 1399.383912][ T8605] uvcvideo 5-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 1399.456980][ T8605] uvcvideo 5-1:4.147: No streaming interface found for terminal 65535. [ 1399.592821][ T8605] usb 5-1: USB disconnect, device number 15 [ 1400.073483][ T8605] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1400.324511][ T8605] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1400.336054][ T8605] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1400.358419][ T8605] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1400.389689][ T8605] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.421769][T19940] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1400.439996][ T8605] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1401.110290][ T30] audit: type=1326 audit(1767696059.390:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19951 comm="syz.4.3465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc5078f749 code=0x0 [ 1401.228565][T18406] usb 7-1: USB disconnect, device number 16 [ 1401.871218][ T30] audit: type=1400 audit(1767696059.970:1359): avc: denied { bind } for pid=19956 comm="syz.9.3467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1403.330778][ T30] audit: type=1400 audit(1767696061.970:1360): avc: denied { create } for pid=19979 comm="syz.9.3473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1403.403182][T19988] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3473'. [ 1403.600844][ T8605] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1403.863155][ T8605] usb 7-1: Using ep0 maxpacket: 32 [ 1403.870184][ T8605] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1403.982085][ T8605] usb 7-1: config 8 has an invalid interface number: 170 but max is 0 [ 1403.991842][ T8605] usb 7-1: config 8 has no interface number 0 [ 1404.002297][ T8605] usb 7-1: config 8 interface 170 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1404.014512][ T8605] usb 7-1: config 8 interface 170 altsetting 2 endpoint 0xB has invalid maxpacket 22275, setting to 64 [ 1404.025687][ T8605] usb 7-1: config 8 interface 170 has no altsetting 0 [ 1404.042224][ T8605] usb 7-1: New USB device found, idVendor=1385, idProduct=4250, bcdDevice=63.ab [ 1404.061891][ T8605] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.073261][ T8605] usb 7-1: Product: syz [ 1404.077427][ T8605] usb 7-1: Manufacturer: syz [ 1404.082006][ T8605] usb 7-1: SerialNumber: syz [ 1404.145803][T19996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3474'. [ 1404.365949][ T30] audit: type=1326 audit(1767696063.010:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19977 comm="syz.6.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a98f749 code=0x7ffc0000 [ 1404.433142][ T30] audit: type=1326 audit(1767696063.040:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19977 comm="syz.6.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a98f749 code=0x7ffc0000 [ 1404.733787][ T30] audit: type=1326 audit(1767696063.040:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19977 comm="syz.6.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac6a98f749 code=0x7ffc0000 [ 1404.847262][ T30] audit: type=1326 audit(1767696063.040:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19977 comm="syz.6.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a98f749 code=0x7ffc0000 [ 1404.942673][ T30] audit: type=1326 audit(1767696063.040:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19977 comm="syz.6.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a98f749 code=0x7ffc0000 [ 1404.995602][ T30] audit: type=1326 audit(1767696063.040:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19977 comm="syz.6.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac6a98f749 code=0x7ffc0000 [ 1405.021086][ T30] audit: type=1326 audit(1767696063.040:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19977 comm="syz.6.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a98f749 code=0x7ffc0000 [ 1405.070280][T20006] netlink: 'syz.4.3478': attribute type 2 has an invalid length. [ 1405.092443][T20006] netlink: 'syz.4.3478': attribute type 8 has an invalid length. [ 1405.101627][T20006] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3478'. [ 1405.113390][ T30] audit: type=1326 audit(1767696063.040:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19977 comm="syz.6.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a98f749 code=0x7ffc0000 [ 1405.895498][ T8605] usb 7-1: Could not find all expected endpoints [ 1405.911011][ T8605] usb 7-1: USB disconnect, device number 17 [ 1406.343170][T18406] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1406.494684][T18406] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1406.518596][T18406] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1406.543976][T18406] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1406.553009][T18406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.586001][T20022] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1406.595364][T18406] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1406.822367][ T8605] usb 5-1: USB disconnect, device number 16 [ 1407.483383][ T8605] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1407.735033][ T8605] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1407.793381][ T8605] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1407.804818][ T8605] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1407.823896][ T8605] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1407.839132][ T8605] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.873685][ T8605] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1408.200791][ T8605] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1408.265446][T18406] usb 7-1: USB disconnect, device number 18 [ 1408.503167][ T8605] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1408.653795][ T8605] usb 5-1: Using ep0 maxpacket: 16 [ 1408.664616][ T8605] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.675003][ T8605] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1408.688554][ T8605] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1408.698168][ T8605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.708988][ T8605] usb 5-1: config 0 descriptor?? [ 1408.729882][ T8605] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1408.944439][T20085] dns_resolver: Unsupported server list version (0) [ 1409.374632][T20091] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3499'. [ 1409.830290][T20092] dns_resolver: Unsupported server list version (0) [ 1410.492025][ T5824] Bluetooth: Unexpected continuation frame (len 4) [ 1410.649190][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1410.649206][ T30] audit: type=1400 audit(1767696069.290:1374): avc: denied { read } for pid=20101 comm="syz.3.3508" lport=36981 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1410.820390][T20113] ubi31: attaching mtd0 [ 1410.857139][T20113] ubi31: scanning is finished [ 1410.920496][ T30] audit: type=1400 audit(1767696069.540:1375): avc: denied { map } for pid=20093 comm="syz.6.3505" path="socket:[80432]" dev="sockfs" ino=80432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1410.950541][ T30] audit: type=1400 audit(1767696069.550:1376): avc: denied { read } for pid=20093 comm="syz.6.3505" path="socket:[80432]" dev="sockfs" ino=80432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1410.999158][ T30] audit: type=1400 audit(1767696069.640:1377): avc: denied { getopt } for pid=20111 comm="syz.9.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1411.032526][T20094] block nbd6: shutting down sockets [ 1411.120094][T20113] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1411.127848][T20113] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1411.136509][T20113] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1411.144278][T20113] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1411.151863][T20113] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1411.159055][T20113] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1411.167331][T20113] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 188447207 [ 1411.228136][T20113] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1411.313391][ T791] usb 5-1: USB disconnect, device number 17 [ 1411.405866][T20119] ubi31: background thread "ubi_bgt31d" started, PID 20119 [ 1412.427695][ T5138] Bluetooth: hci3: Unable to find connection for big 0x00 [ 1413.433144][ T8605] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1413.443143][T18605] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1413.523347][T18946] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1413.531985][T18406] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1413.584672][ T8605] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.595291][ T8605] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1413.606869][ T8605] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1413.616278][ T8605] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1413.624750][ T8605] usb 7-1: SerialNumber: syz [ 1413.629620][T18605] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1413.653134][T18605] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1413.664235][T18605] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1413.675559][T18406] usb 9-1: device descriptor read/64, error -71 [ 1413.681844][T18605] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1413.695065][T18605] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1413.705121][T18605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.716470][T18946] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1413.726616][T18946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.735293][T18605] usb 5-1: config 0 descriptor?? [ 1413.741630][T20132] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1413.750456][T18946] usb 4-1: config 0 descriptor?? [ 1413.757732][T18605] usbhid 5-1:0.0: can't add hid device: -22 [ 1413.764512][T18605] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 1413.845380][ T8605] usb 7-1: 0:2 : does not exist [ 1413.850329][ T8605] usb 7-1: unit 5: unexpected type 0x09 [ 1413.913820][T18406] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1413.932124][ T8605] usb 7-1: USB disconnect, device number 19 [ 1413.976270][T18605] usb 5-1: USB disconnect, device number 18 [ 1413.999945][T18946] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1414.045896][T18406] usb 9-1: device descriptor read/64, error -71 [ 1414.166499][T18406] usb usb9-port1: attempt power cycle [ 1414.211136][T18946] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1414.218058][T18946] [drm] Initialized udl on minor 2 [ 1414.507395][T20166] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3527'. [ 1414.516721][T20166] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3527'. [ 1414.566580][T18406] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1414.615916][T18406] usb 9-1: device descriptor read/8, error -71 [ 1414.622358][T18946] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 1414.643510][T18946] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1414.658164][T19082] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1414.667974][T18946] usb 4-1: USB disconnect, device number 9 [ 1414.675840][T19082] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1414.883319][ T30] audit: type=1400 audit(1767696073.530:1378): avc: denied { search } for pid=20161 comm="syz.9.3526" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1414.883669][T18406] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1415.016919][ T8605] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1415.017884][T18406] usb 9-1: device descriptor read/8, error -71 [ 1415.133490][T18406] usb usb9-port1: unable to enumerate USB device [ 1415.173498][ T8605] usb 7-1: Using ep0 maxpacket: 8 [ 1415.193947][ T8605] usb 7-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 1415.203507][ T8605] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.211752][ T8605] usb 7-1: Product: syz [ 1415.220619][ T8605] usb 7-1: Manufacturer: syz [ 1415.230144][ T8605] usb 7-1: SerialNumber: syz [ 1415.321204][ T8605] usb 7-1: config 0 descriptor?? [ 1415.330292][ T8605] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 1415.784554][T20175] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3529'. [ 1416.298036][T20189] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3534'. [ 1416.333386][T20175] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3529'. [ 1416.352344][T20189] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20189 comm=syz.3.3534 [ 1416.383237][T20189] FAULT_INJECTION: forcing a failure. [ 1416.383237][T20189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1416.493135][T20189] CPU: 1 UID: 0 PID: 20189 Comm: syz.3.3534 Tainted: G L syzkaller #0 PREEMPT(full) [ 1416.493169][T20189] Tainted: [L]=SOFTLOCKUP [ 1416.493176][T20189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1416.493187][T20189] Call Trace: [ 1416.493193][T20189] [ 1416.493201][T20189] dump_stack_lvl+0x16c/0x1f0 [ 1416.493229][T20189] should_fail_ex+0x512/0x640 [ 1416.493262][T20189] _copy_from_user+0x2e/0xd0 [ 1416.493291][T20189] copy_msghdr_from_user+0x98/0x160 [ 1416.493314][T20189] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1416.493345][T20189] ___sys_sendmsg+0xfe/0x1d0 [ 1416.493365][T20189] ? __pfx____sys_sendmsg+0x10/0x10 [ 1416.493410][T20189] __sys_sendmsg+0x16d/0x220 [ 1416.493429][T20189] ? __pfx___sys_sendmsg+0x10/0x10 [ 1416.493462][T20189] do_syscall_64+0xcd/0xf80 [ 1416.493485][T20189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.493502][T20189] RIP: 0033:0x7ff75b98f749 [ 1416.493513][T20189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1416.493530][T20189] RSP: 002b:00007ff75c8db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1416.493561][T20189] RAX: ffffffffffffffda RBX: 00007ff75bbe5fa0 RCX: 00007ff75b98f749 [ 1416.493573][T20189] RDX: 0000000000004010 RSI: 0000200000000280 RDI: 0000000000000005 [ 1416.493583][T20189] RBP: 00007ff75c8db090 R08: 0000000000000000 R09: 0000000000000000 [ 1416.493593][T20189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1416.493603][T20189] R13: 00007ff75bbe6038 R14: 00007ff75bbe5fa0 R15: 00007fffe25efa38 [ 1416.493628][T20189] [ 1418.379988][ T30] audit: type=1400 audit(1767696076.720:1379): avc: denied { connect } for pid=20210 comm="syz.8.3541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1418.769706][ T8605] pwc: send_video_command error -71 [ 1418.774953][ T8605] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1418.788876][ T8605] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1418.804591][ T8605] usb 7-1: USB disconnect, device number 20 [ 1419.573151][T18406] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1419.947000][T20243] sctp: [Deprecated]: syz.3.3550 (pid 20243) Use of int in maxseg socket option. [ 1419.947000][T20243] Use struct sctp_assoc_value instead [ 1420.034458][T18406] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1420.062036][T18406] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1420.128652][T18406] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1420.159833][T18406] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.176392][T20249] netlink: 'syz.8.3552': attribute type 2 has an invalid length. [ 1420.196990][T20249] netlink: 'syz.8.3552': attribute type 1 has an invalid length. [ 1420.215668][T20233] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1420.218161][T20249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1420.233244][T20252] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 1420.255573][T18406] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1421.086992][T18406] usb 10-1: USB disconnect, device number 14 [ 1421.385384][ T791] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1421.658058][ T791] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1421.667197][ T791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.681891][ T791] usb 7-1: Product: syz [ 1421.691312][ T791] usb 7-1: Manufacturer: syz [ 1421.701819][ T791] usb 7-1: SerialNumber: syz [ 1422.197587][T20283] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=7201 sclass=netlink_xfrm_socket pid=20283 comm=syz.8.3564 [ 1422.293839][T20284] loop6: detected capacity change from 0 to 2640 [ 1422.305056][T20284] buffer_io_error: 11 callbacks suppressed [ 1422.305125][T20284] Buffer I/O error on dev loop6, logical block 0, async page read [ 1422.319158][T20284] Buffer I/O error on dev loop6, logical block 0, async page read [ 1422.327244][T20284] Buffer I/O error on dev loop6, logical block 0, async page read [ 1422.336257][T20284] Buffer I/O error on dev loop6, logical block 0, async page read [ 1422.353204][T20284] Buffer I/O error on dev loop6, logical block 0, async page read [ 1422.362024][T20284] Buffer I/O error on dev loop6, logical block 0, async page read [ 1422.372523][T20284] Buffer I/O error on dev loop6, logical block 0, async page read [ 1422.380693][T20284] Buffer I/O error on dev loop6, logical block 0, async page read [ 1422.388958][T20284] ldm_validate_partition_table(): Disk read failed. [ 1422.396544][T20284] Buffer I/O error on dev loop6, logical block 0, async page read [ 1422.404539][T20284] Buffer I/O error on dev loop6, logical block 0, async page read [ 1422.413135][T20284] Dev loop6: unable to read RDB block 0 [ 1422.420315][T20284] loop6: unable to read partition table [ 1422.428246][T20284] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1422.580220][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.877831][T20288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.893513][T20288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.022215][ T791] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1423.143734][T18440] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1423.353960][T18440] usb 9-1: device descriptor read/64, error -71 [ 1423.506397][T20295] netlink: 35 bytes leftover after parsing attributes in process `syz.4.3566'. [ 1423.518170][ T791] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1423.559780][ T791] usb 7-1: USB disconnect, device number 21 [ 1423.589888][ T791] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 1423.734122][T18440] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1423.873132][T18440] usb 9-1: device descriptor read/64, error -71 [ 1424.441477][T18440] usb usb9-port1: attempt power cycle [ 1424.913609][T18440] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1424.934515][T18440] usb 9-1: device descriptor read/8, error -71 [ 1425.186744][T18440] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1425.281281][T18440] usb 9-1: device descriptor read/8, error -71 [ 1425.403537][T18440] usb usb9-port1: unable to enumerate USB device [ 1425.458700][T20318] loop6: detected capacity change from 0 to 2640 [ 1425.468326][T20318] ldm_validate_partition_table(): Disk read failed. [ 1425.475575][T20318] Dev loop6: unable to read RDB block 0 [ 1425.483369][T20318] loop6: unable to read partition table [ 1425.490337][T20318] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1425.513232][T18605] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1425.643889][T18440] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1425.696053][T18605] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1425.720514][T18605] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1425.741517][T18605] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1425.770910][T18605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.782989][T20313] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1425.812597][T18605] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1425.845978][T18440] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1426.079685][T18440] usb 7-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99 [ 1426.121516][T18440] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.129961][T18440] usb 7-1: Product: syz [ 1426.138192][T18440] usb 7-1: Manufacturer: syz [ 1426.146099][T18440] usb 7-1: SerialNumber: syz [ 1426.158585][T18440] usb 7-1: config 0 descriptor?? [ 1426.193335][ T6601] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1426.317188][ T791] usb 5-1: USB disconnect, device number 19 [ 1426.368077][T18440] f81534a_ctrl 7-1:0.0: failed to set register 0x116: -5 [ 1426.376224][T18440] f81534a_ctrl 7-1:0.0: failed to enable ports: -5 [ 1426.384905][T18440] f81534a_ctrl 7-1:0.0: probe with driver f81534a_ctrl failed with error -5 [ 1426.386214][ T6601] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1426.403941][T18440] usb 7-1: USB disconnect, device number 22 [ 1426.430636][ T6601] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1426.455722][ T6601] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1426.474782][ T6601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.495741][T20321] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1426.505910][ T6601] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1426.816498][ T6601] usb 4-1: USB disconnect, device number 10 [ 1427.252746][T20343] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3582'. [ 1427.272300][T20343] tmpfs: Unknown parameter 's‰ze5W2' [ 1427.953286][T18605] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1428.073230][T20358] netlink: 'syz.4.3587': attribute type 1 has an invalid length. [ 1428.163581][T18605] usb 4-1: Using ep0 maxpacket: 32 [ 1428.194957][T18605] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1428.211260][T18605] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.249809][T18605] usb 4-1: config 0 descriptor?? [ 1428.271044][T18605] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1428.506774][ T30] audit: type=1400 audit(1767696087.150:1380): avc: denied { unmount } for pid=18215 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1428.953367][T18440] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1429.039570][T18605] gspca_vc032x: reg_w err -71 [ 1429.044458][T18605] gspca_vc032x: I2c Bus Busy Wait 00 [ 1429.049835][T18605] gspca_vc032x: I2c Bus Busy Wait 00 [ 1429.055589][T18605] gspca_vc032x: I2c Bus Busy Wait 00 [ 1429.060911][T18605] gspca_vc032x: I2c Bus Busy Wait 00 [ 1429.066956][T18605] gspca_vc032x: I2c Bus Busy Wait 00 [ 1429.072298][T18605] gspca_vc032x: I2c Bus Busy Wait 00 [ 1429.078664][T18605] gspca_vc032x: I2c Bus Busy Wait 00 [ 1429.084222][T18605] gspca_vc032x: I2c Bus Busy Wait 00 [ 1429.089645][T18605] gspca_vc032x: I2c Bus Busy Wait 00 [ 1429.096150][T18605] gspca_vc032x: I2c Bus Busy Wait 00 [ 1429.103427][T18605] gspca_vc032x: I2c Bus Busy Wait 00 [ 1429.108796][T18605] gspca_vc032x: I2c Bus Busy Wait 00 [ 1429.115658][T18605] gspca_vc032x: I2c Bus Busy Wait 00 [ 1429.120997][T18605] gspca_vc032x: I2c Bus Busy Wait 00 [ 1429.121848][T18440] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1429.126447][T18605] gspca_vc032x: I2c Bus Busy Wait 00 [ 1429.168325][T18605] gspca_vc032x: I2c Bus Busy Wait 00 [ 1429.169037][T18440] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1429.173694][T18605] gspca_vc032x: I2c Bus Busy Wait 00 [ 1429.173707][T18605] gspca_vc032x: I2c Bus Busy Wait 00 [ 1429.173716][T18605] gspca_vc032x: Unknown sensor... [ 1429.174066][T18605] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1429.176236][T18605] usb 4-1: USB disconnect, device number 11 [ 1429.191795][T18440] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.233248][T18440] usb 5-1: config 0 descriptor?? [ 1429.238983][T20366] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1429.283419][T19156] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1429.503186][T19156] usb 7-1: Using ep0 maxpacket: 8 [ 1429.509399][T19156] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1429.520965][T19156] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1429.531497][T19156] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 4 [ 1429.543572][T19156] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1429.553703][T19156] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1429.561842][T19156] usb 7-1: SerialNumber: syz [ 1429.632534][T20349] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1429.640803][T20349] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1429.751559][T18440] elan 0003:04F3:0755.0016: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 1429.879578][T20349] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1429.886929][T20349] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1430.097038][T20349] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20004 [ 1430.130204][T19156] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 1430.139909][T19156] usb-storage 7-1:1.0: USB Mass Storage device detected [ 1430.167876][T19156] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1430.179329][T19156] scsi host1: usb-storage 7-1:1.0 [ 1430.190109][T19156] usb 7-1: USB disconnect, device number 23 [ 1431.103140][T19156] usb 5-1: reset full-speed USB device number 20 using dummy_hcd [ 1431.363198][ T3690] wlan0: Trigger new scan to find an IBSS to join [ 1432.876281][T20416] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 1433.026147][T20416] SELinux: failed to load policy [ 1433.054365][ T791] usb 5-1: USB disconnect, device number 20 [ 1435.009507][T10108] wlan0: Trigger new scan to find an IBSS to join [ 1435.522536][T20424] netlink: 'syz.3.3604': attribute type 3 has an invalid length. [ 1435.530636][T20424] netlink: 'syz.3.3604': attribute type 3 has an invalid length. [ 1435.673610][T20430] hub 8-0:1.0: USB hub found [ 1435.680218][T20430] hub 8-0:1.0: 1 port detected [ 1436.853419][T18604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1436.990330][T20440] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1438.249526][T20448] netlink: 204 bytes leftover after parsing attributes in process `syz.9.3605'. [ 1438.259183][T20448] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3605'. [ 1438.275323][T20448] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3605'. [ 1438.493002][ T5994] bridge0: port 1(batadv0) entered disabled state [ 1438.643201][T18406] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1438.673121][ T30] audit: type=1400 audit(1767696097.310:1381): avc: denied { write } for pid=20455 comm="syz.4.3613" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1438.854756][T18406] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1438.878941][ T30] audit: type=1400 audit(1767696097.340:1382): avc: denied { open } for pid=20455 comm="syz.4.3613" path="/114/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1438.902630][ T30] audit: type=1400 audit(1767696097.340:1383): avc: denied { ioctl } for pid=20455 comm="syz.4.3613" path="/114/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1438.927303][T18406] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1438.927350][T18406] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1438.927372][T18406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.930546][T20452] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1439.066305][T18406] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1439.617688][ T791] usb 4-1: USB disconnect, device number 12 [ 1440.070554][ T5994] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 1440.114870][ T5994] bridge2 (unregistering): left promiscuous mode [ 1440.184317][T20474] SELinux: Context system_u:object_r:sendmail_exec_t:s0 is not valid (left unmapped). [ 1440.199345][ T30] audit: type=1400 audit(1767696098.840:1384): avc: denied { relabelto } for pid=20469 comm="syz.4.3616" name="cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:sendmail_exec_t:s0" [ 1440.229137][ T30] audit: type=1400 audit(1767696098.870:1385): avc: denied { associate } for pid=20469 comm="syz.4.3616" name="cgroup.procs" dev="cgroup" ino=236 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sendmail_exec_t:s0" [ 1440.372856][T20479] input: syz1 as /devices/virtual/input/input42 [ 1440.790776][ T791] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1441.059035][T20486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3621'. [ 1441.099733][ T5994] bond0 (unregistering): Released all slaves [ 1441.113470][ T791] usb 7-1: Using ep0 maxpacket: 16 [ 1441.120237][ T791] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.131814][ T791] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1441.145944][ T791] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1441.155423][ T791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.169264][ T791] usb 7-1: config 0 descriptor?? [ 1441.177666][ T791] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1441.249095][ T5994] bond1 (unregistering): Released all slaves [ 1441.259719][T20481] netlink: 'syz.8.3619': attribute type 3 has an invalid length. [ 1441.267891][T20481] netlink: 'syz.8.3619': attribute type 3 has an invalid length. [ 1441.361912][ T5994] : left promiscuous mode [ 1441.446391][ T30] audit: type=1400 audit(1767696100.040:1386): avc: denied { write } for pid=20490 comm="syz.3.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1441.501126][T20493] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3623'. [ 1441.953427][T20496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1441.976128][T20496] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1441.985391][ T5994] tipc: Disabling bearer [ 1441.998293][ T5994] tipc: Left network mode [ 1442.024294][ T30] audit: type=1400 audit(1767696100.670:1387): avc: denied { write } for pid=20490 comm="syz.3.3624" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1442.342553][T20493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1442.357380][T20493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1442.370035][T20493] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 1442.382661][T20493] bond0 (unregistering): (slave bond1): Releasing backup interface [ 1442.396024][T20493] bond0 (unregistering): Released all slaves [ 1442.431324][T20499] netlink: 666 bytes leftover after parsing attributes in process `syz.6.3618'. [ 1443.050374][T20516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3629'. [ 1443.584191][T19156] usb 7-1: USB disconnect, device number 24 [ 1443.786843][T20524] FAULT_INJECTION: forcing a failure. [ 1443.786843][T20524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1443.801358][T20524] CPU: 0 UID: 0 PID: 20524 Comm: syz.6.3631 Tainted: G L syzkaller #0 PREEMPT(full) [ 1443.801388][T20524] Tainted: [L]=SOFTLOCKUP [ 1443.801395][T20524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1443.801407][T20524] Call Trace: [ 1443.801413][T20524] [ 1443.801421][T20524] dump_stack_lvl+0x16c/0x1f0 [ 1443.801449][T20524] should_fail_ex+0x512/0x640 [ 1443.801481][T20524] _copy_from_user+0x2e/0xd0 [ 1443.801510][T20524] __sys_bpf+0x248/0x4980 [ 1443.801540][T20524] ? __pfx___sys_bpf+0x10/0x10 [ 1443.801565][T20524] ? find_held_lock+0x2b/0x80 [ 1443.801607][T20524] ? find_held_lock+0x2b/0x80 [ 1443.801640][T20524] ? __mutex_unlock_slowpath+0x161/0x790 [ 1443.801681][T20524] ? fput+0x70/0xf0 [ 1443.801697][T20524] ? ksys_write+0x1ac/0x250 [ 1443.801720][T20524] ? __pfx_ksys_write+0x10/0x10 [ 1443.801748][T20524] __x64_sys_bpf+0x78/0xc0 [ 1443.801774][T20524] ? lockdep_hardirqs_on+0x7c/0x110 [ 1443.801798][T20524] do_syscall_64+0xcd/0xf80 [ 1443.801823][T20524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.801841][T20524] RIP: 0033:0x7fac6a98f749 [ 1443.801856][T20524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1443.801875][T20524] RSP: 002b:00007fac6b743038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1443.801893][T20524] RAX: ffffffffffffffda RBX: 00007fac6abe5fa0 RCX: 00007fac6a98f749 [ 1443.801906][T20524] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 1443.801917][T20524] RBP: 00007fac6b743090 R08: 0000000000000000 R09: 0000000000000000 [ 1443.801928][T20524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1443.801939][T20524] R13: 00007fac6abe6038 R14: 00007fac6abe5fa0 R15: 00007fffb41d71d8 [ 1443.801965][T20524] [ 1444.159040][ T5994] veth1_macvtap: left allmulticast mode [ 1444.166792][ T5994] veth1_macvtap: left promiscuous mode [ 1444.172337][ T5994] veth0_macvtap: left promiscuous mode [ 1444.247390][ T30] audit: type=1400 audit(1767696102.880:1388): avc: denied { read } for pid=20529 comm="syz.6.3633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1446.902713][ T30] audit: type=1400 audit(1767696105.540:1389): avc: denied { setopt } for pid=20556 comm="syz.9.3636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1448.738492][T20574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1448.784189][T20584] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3644'. [ 1448.883687][T20576] netlink: 'syz.8.3643': attribute type 3 has an invalid length. [ 1448.891641][T20576] netlink: 'syz.8.3643': attribute type 3 has an invalid length. [ 1448.933175][T20584] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3644'. [ 1448.935553][T20581] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1448.968544][ T5138] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 1448.992854][T20581] bond1: (slave macvlan2): making interface the new active one [ 1449.029468][T20581] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1449.164563][T20584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1449.338257][T20584] bond1: (slave bond0): making interface the new active one [ 1449.386114][T20584] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1449.987480][ T5994] IPVS: stop unused estimator thread 0... [ 1450.599429][ T30] audit: type=1400 audit(1767696109.240:1390): avc: denied { map } for pid=20606 comm="syz.3.3652" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1450.599588][T20610] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3652'. [ 1450.719089][T20610] syzkaller1: entered promiscuous mode [ 1450.734669][T20610] syzkaller1: entered allmulticast mode [ 1451.035702][ T30] audit: type=1400 audit(1767696109.680:1391): avc: denied { append } for pid=20616 comm="syz.9.3655" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1452.898495][T20631] netlink: 'syz.8.3656': attribute type 3 has an invalid length. [ 1452.906904][T20631] netlink: 'syz.8.3656': attribute type 3 has an invalid length. [ 1453.044470][ T5138] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1453.053956][ T5138] Bluetooth: hci0: Injecting HCI hardware error event [ 1453.065145][ T5138] Bluetooth: hci0: hardware error 0x00 [ 1453.322295][ T30] audit: type=1400 audit(1767696111.960:1392): avc: denied { name_bind 0x1000000 } for pid=20632 comm="syz.9.3660" path="socket:[82757]" dev="sockfs" ino=82757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1453.588299][T20639] netlink: 'syz.3.3659': attribute type 3 has an invalid length. [ 1453.596602][T20639] netlink: 'syz.3.3659': attribute type 3 has an invalid length. [ 1455.014912][T18946] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1455.041378][T20657] netlink: 'syz.3.3666': attribute type 5 has an invalid length. [ 1455.193519][T18946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1455.284710][ T5138] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1455.296912][T18946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1455.307782][T18946] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1455.573394][T18946] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1455.588925][T18946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.610787][ T5138] Bluetooth: hci2: ACL packet for unknown connection handle 1848 [ 1455.624401][T18946] usb 5-1: config 0 descriptor?? [ 1456.793379][T20653] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3658'. [ 1456.889799][T20677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3670'. [ 1457.455106][T18946] plantronics 0003:047F:FFFF.0017: reserved main item tag 0xd [ 1457.469974][T18946] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1457.705424][T18902] usb 5-1: USB disconnect, device number 21 [ 1458.081979][T20691] netlink: 'syz.3.3676': attribute type 3 has an invalid length. [ 1458.090364][T20691] netlink: 'syz.3.3676': attribute type 3 has an invalid length. [ 1459.735963][T20712] __vm_enough_memory: pid: 20712, comm: syz.8.3681, bytes: 21200436117504 not enough memory for the allocation [ 1459.748265][T20712] __vm_enough_memory: pid: 20712, comm: syz.8.3681, bytes: 11727885746176 not enough memory for the allocation [ 1461.510518][T20706] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=20706 comm=syz.4.3677 [ 1461.562285][ T5824] Bluetooth: hci5: hardware error 0x06 [ 1462.791096][ T30] audit: type=1400 audit(1767696121.420:1393): avc: denied { execute } for pid=20745 comm="syz.6.3690" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1462.803120][ T6085] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1462.987253][T20749] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3691'. [ 1463.073482][ T6085] usb 10-1: Using ep0 maxpacket: 32 [ 1463.080231][ T6085] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 1463.088876][ T6085] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1463.100160][ T6085] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1463.110790][ T6085] usb 10-1: config 1 has no interface number 0 [ 1463.122731][ T6085] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1463.145949][ T6085] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1463.169637][ T6085] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1463.191352][ T6085] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.227302][ T6085] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 1463.256938][T20753] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(1) [ 1463.263445][T20753] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1463.286558][T18406] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 1463.305788][T20753] vhci_hcd vhci_hcd.0: Device attached [ 1463.321795][T20754] usbip_core: unknown command [ 1463.326557][T20754] vhci_hcd: unknown pdu 1668249189 [ 1463.331683][T20754] usbip_core: unknown command [ 1463.336788][T18945] vhci_hcd vhci_hcd.4: stop threads [ 1463.342009][T18945] vhci_hcd vhci_hcd.4: release socket [ 1463.347721][T18945] vhci_hcd vhci_hcd.4: disconnect device [ 1463.422411][ T6085] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 1463.498715][T18406] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1463.518410][T18406] usb 4-1: config 0 has no interface number 0 [ 1463.566621][T18406] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1463.590218][T18406] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1463.630533][T18406] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1463.658877][T18406] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1463.683139][ T5824] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1463.689761][T18406] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1463.692916][T20765] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1463.723694][T18406] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1463.737021][T18406] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1463.746570][T18406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.775704][T18406] usb 4-1: config 0 descriptor?? [ 1463.787413][T20751] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1463.795541][T20751] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1464.047304][T18406] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1464.089109][T19156] usb 10-1: USB disconnect, device number 15 [ 1464.126217][T19156] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 1464.420948][T20780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=20780 comm=syz.3.3692 [ 1466.088166][ T30] audit: type=1400 audit(1767696124.720:1394): avc: denied { create } for pid=20796 comm="syz.9.3704" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 1466.416662][ T30] audit: type=1400 audit(1767696124.730:1395): avc: denied { link } for pid=20796 comm="syz.9.3704" name="file1" dev="ramfs" ino=84103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 1466.476205][ T6085] usb 4-1: USB disconnect, device number 13 [ 1466.501657][ T6085] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1468.218794][ T30] audit: type=1400 audit(1767696126.860:1396): avc: denied { getopt } for pid=20802 comm="syz.3.3706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1468.279367][T20824] netlink: 'syz.8.3710': attribute type 20 has an invalid length. [ 1468.288638][T20824] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3710'. [ 1468.491120][T18210] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1468.566393][T18210] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1468.600361][ T5824] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 1468.624304][T18210] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1468.658996][T18210] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1468.804511][T19156] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1469.026546][T19156] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1469.040638][T19156] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.063456][T19156] usb 10-1: Product: syz [ 1469.081612][T19156] usb 10-1: Manufacturer: syz [ 1469.110551][T19156] usb 10-1: SerialNumber: syz [ 1469.184925][T19156] usb 10-1: config 0 descriptor?? [ 1469.191747][T19156] hso 10-1:0.0: Not our interface [ 1469.200965][T19156] usb-storage 10-1:0.0: USB Mass Storage device detected [ 1469.212829][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.223681][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.233824][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.253728][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.262042][T20839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.341410][T19156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.623516][T20815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1469.631989][T20815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1469.670689][T18440] usb 10-1: USB disconnect, device number 16 [ 1469.684177][T20838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.713617][T18605] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 1469.772926][T20851] FAULT_INJECTION: forcing a failure. [ 1469.772926][T20851] name failslab, interval 1, probability 0, space 0, times 0 [ 1469.786026][T20851] CPU: 0 UID: 0 PID: 20851 Comm: syz.3.3718 Tainted: G L syzkaller #0 PREEMPT(full) [ 1469.786044][T20851] Tainted: [L]=SOFTLOCKUP [ 1469.786048][T20851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1469.786055][T20851] Call Trace: [ 1469.786059][T20851] [ 1469.786063][T20851] dump_stack_lvl+0x16c/0x1f0 [ 1469.786082][T20851] should_fail_ex+0x512/0x640 [ 1469.786100][T20851] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1469.786120][T20851] should_failslab+0xc2/0x120 [ 1469.786135][T20851] __kmalloc_cache_noprof+0x80/0x800 [ 1469.786154][T20851] ? copy_mount_options+0x55/0x190 [ 1469.786168][T20851] ? copy_mount_options+0x55/0x190 [ 1469.786180][T20851] copy_mount_options+0x55/0x190 [ 1469.786193][T20851] __x64_sys_mount+0x1ab/0x310 [ 1469.786205][T20851] ? __pfx___x64_sys_mount+0x10/0x10 [ 1469.786220][T20851] do_syscall_64+0xcd/0xf80 [ 1469.786235][T20851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1469.786247][T20851] RIP: 0033:0x7ff75b98f749 [ 1469.786256][T20851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1469.786267][T20851] RSP: 002b:00007ff75c8db038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1469.786278][T20851] RAX: ffffffffffffffda RBX: 00007ff75bbe5fa0 RCX: 00007ff75b98f749 [ 1469.786285][T20851] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1469.786292][T20851] RBP: 00007ff75c8db090 R08: 0000200000000240 R09: 0000000000000000 [ 1469.786299][T20851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1469.786305][T20851] R13: 00007ff75bbe6038 R14: 00007ff75bbe5fa0 R15: 00007fffe25efa38 [ 1469.786320][T20851] [ 1469.874336][T18605] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1469.933474][T10108] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1469.938134][T19082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.008451][T18605] usb 7-1: config 0 has no interface number 0 [ 1471.056401][T19082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.064683][T18605] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1471.076473][T18605] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.176083][T18605] usb 7-1: config 0 descriptor?? [ 1471.205453][T18605] usb 7-1: selecting invalid altsetting 1 [ 1471.233869][T18605] dvb_ttusb_budget: ttusb_init_controller: error [ 1471.240268][T18605] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1471.391844][T18605] DVB: Unable to find symbol cx22700_attach() [ 1471.599684][ T30] audit: type=1400 audit(1767696130.130:1397): avc: denied { write } for pid=20861 comm="syz.9.3721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1471.637978][T18605] DVB: Unable to find symbol tda10046_attach() [ 1471.671149][T18605] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1471.688708][T18605] usb 7-1: USB disconnect, device number 25 [ 1471.691402][T19156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.732312][T20869] ªªªªªª: renamed from lo (while UP) [ 1472.643298][ T5824] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1472.652037][ T5824] Bluetooth: hci3: Injecting HCI hardware error event [ 1472.661809][ T5138] Bluetooth: hci3: hardware error 0x00 [ 1473.033534][T20888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3725'. [ 1473.400783][T20893] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 1473.761368][T19156] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1473.968133][T20881] infiniband syz1: set down [ 1474.056762][T20881] infiniband syz1: added syz_tun [ 1474.124658][ T30] audit: type=1400 audit(1767696132.770:1398): avc: denied { lock } for pid=20897 comm="syz.6.3727" path="socket:[85047]" dev="sockfs" ino=85047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1474.445784][ T37] net_ratelimit: 8 callbacks suppressed [ 1474.445802][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.469209][T18605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.125207][ T6520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.136828][ T5138] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1475.166512][T19156] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1475.332353][T19156] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.341402][T19156] usb 4-1: Product: syz [ 1475.346007][T19156] usb 4-1: Manufacturer: syz [ 1475.350666][T19156] usb 4-1: SerialNumber: syz [ 1475.625997][T19156] usb 4-1: config 0 descriptor?? [ 1475.905419][T19156] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 014 [ 1475.937649][T19082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.948409][T20881] RDS/IB: syz1: added [ 1475.962083][T20881] smc: adding ib device syz1 with port count 1 [ 1475.992346][T20881] smc: ib device syz1 port 1 has no pnetid [ 1476.270912][ T30] audit: type=1326 audit(1767696134.910:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20912 comm="syz.8.3732" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2aa5b8f749 code=0x0 [ 1476.323333][ T6520] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1476.891016][ T6520] usb 7-1: config 0 has no interfaces? [ 1476.897820][ T6520] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1476.916135][ T6520] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.943603][ T6520] usb 7-1: config 0 descriptor?? [ 1476.976359][T19082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.104518][T19156] (null): failure setting delay to 10us [ 1477.110190][T19156] i2c-tiny-usb 4-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 1477.183720][T19156] usb 4-1: USB disconnect, device number 14 [ 1477.204832][T19082] usb 7-1: USB disconnect, device number 26 [ 1477.216897][T20910] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3731'. [ 1477.342954][ T30] audit: type=1400 audit(1767696135.980:1400): avc: denied { append } for pid=20919 comm="syz.4.3733" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1477.366929][T20920] random: crng reseeded on system resumption [ 1478.111927][T19082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.286868][T18440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.216787][T18946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.749279][T20945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.838602][T20945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.903276][T20945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.203873][T20954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.212105][T20954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.244451][T19082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.311825][T20961] fuse: Unknown parameter 'rootm0000000000000000040000' [ 1480.795938][T20968] 9pnet_fd: Insufficient options for proto=fd [ 1481.092327][T18946] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1481.097359][T18210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.099357][T18440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.101912][T19156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.244910][T18946] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 1481.263963][T20969] wireguard0: entered allmulticast mode [ 1481.581097][T18946] usb 4-1: config 8 has no interface number 0 [ 1481.588113][T18605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.596438][T18946] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1481.607558][T18946] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1481.617487][T18946] usb 4-1: config 8 interface 177 has no altsetting 0 [ 1481.624290][T18946] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1481.633901][T18946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.645676][T20956] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1481.905907][T18946] usb 4-1: string descriptor 0 read error: -71 [ 1481.914503][T18946] ir_toy 4-1:8.177: required endpoints not found [ 1481.941647][T18946] usb 4-1: USB disconnect, device number 15 [ 1481.963353][T18440] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1482.528532][T18440] usb 10-1: config 127 has an invalid interface number: 124 but max is 0 [ 1482.550910][T18440] usb 10-1: config 127 has no interface number 0 [ 1482.579969][T18440] usb 10-1: config 127 interface 124 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1482.645531][T20986] netlink: 'syz.4.3749': attribute type 3 has an invalid length. [ 1482.654266][T20986] netlink: 'syz.4.3749': attribute type 3 has an invalid length. [ 1483.063974][T18440] usb 10-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=1d.4f [ 1483.101243][T18440] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.371094][T20975] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3747'. [ 1483.407308][T18440] peak_usb 10-1:127.124 can0: unable to request usb[type=0 value=1] err=-71 [ 1483.441422][T18440] peak_usb 10-1:127.124: unable to read PCAN-Chip USB firmware info (err -71) [ 1483.537155][T18440] peak_usb 10-1:127.124: probe with driver peak_usb failed with error -71 [ 1483.584458][T18440] usb 10-1: USB disconnect, device number 17 [ 1484.055305][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.140182][T18946] net_ratelimit: 6 callbacks suppressed [ 1485.140194][T18946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.359007][T20946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.375022][T21016] picdev_read: 77 callbacks suppressed [ 1485.375037][T21016] kvm: pic: non byte read [ 1485.393477][T21016] kvm: pic: non byte read [ 1485.397868][T21016] kvm: pic: non byte read [ 1485.402238][T21016] kvm: pic: non byte read [ 1485.415925][T21016] kvm: pic: non byte read [ 1485.416535][T18440] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1485.423189][T21016] kvm: pic: non byte read [ 1485.453226][T21016] kvm: pic: non byte read [ 1485.457726][T21016] kvm: pic: non byte read [ 1485.462141][T21016] kvm: pic: non byte read [ 1485.473249][T21016] kvm: pic: non byte read [ 1485.593802][T18440] usb 10-1: device descriptor read/64, error -71 [ 1485.931253][T18440] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 1486.082239][ T8605] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1486.163223][T18440] usb 10-1: device descriptor read/64, error -71 [ 1486.273399][T18440] usb usb10-port1: attempt power cycle [ 1486.540569][T20146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.615120][ T8605] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1486.643224][ T8605] usb 4-1: config 0 has no interface number 0 [ 1486.664519][ T8605] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1486.694664][T18440] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 1486.737064][ T8605] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1486.753221][ T8605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.769209][T18440] usb 10-1: device descriptor read/8, error -71 [ 1486.778826][ T8605] usb 4-1: Product: syz [ 1486.782992][ T8605] usb 4-1: Manufacturer: syz [ 1486.797810][ T8605] usb 4-1: SerialNumber: syz [ 1486.805585][ T8605] usb 4-1: config 0 descriptor?? [ 1487.116075][T21042] netlink: 'syz.8.3763': attribute type 3 has an invalid length. [ 1487.124621][T21042] netlink: 'syz.8.3763': attribute type 3 has an invalid length. [ 1487.522591][ T6520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.531893][T18440] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 1487.614084][T18440] usb 10-1: device descriptor read/8, error -71 [ 1487.617706][T20146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.644647][T21044] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3764'. [ 1487.741128][ T8605] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -32 [ 1487.750987][T18440] usb usb10-port1: unable to enumerate USB device [ 1488.896712][T18605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.982940][T18605] usb 4-1: USB disconnect, device number 16 [ 1489.212182][ T30] audit: type=1400 audit(1768220435.857:1401): avc: denied { connect } for pid=21057 comm="syz.9.3770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1489.376275][T21060] sd 0:0:1:0: PR command failed: 1026 [ 1489.485186][T21073] mac80211_hwsim hwsim53 syzkaller0: entered promiscuous mode [ 1489.502968][T21060] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1489.521295][T21073] mac80211_hwsim hwsim53 syzkaller0: entered allmulticast mode [ 1489.549642][T21060] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1490.081104][T18946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1490.470854][T21079] FAULT_INJECTION: forcing a failure. [ 1490.470854][T21079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1490.507382][T21079] CPU: 0 UID: 0 PID: 21079 Comm: syz.9.3776 Tainted: G L syzkaller #0 PREEMPT(full) [ 1490.507408][T21079] Tainted: [L]=SOFTLOCKUP [ 1490.507414][T21079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1490.507423][T21079] Call Trace: [ 1490.507429][T21079] [ 1490.507435][T21079] dump_stack_lvl+0x16c/0x1f0 [ 1490.507463][T21079] should_fail_ex+0x512/0x640 [ 1490.507494][T21079] _copy_to_user+0x32/0xd0 [ 1490.507521][T21079] simple_read_from_buffer+0xcb/0x170 [ 1490.507548][T21079] proc_fail_nth_read+0x197/0x240 [ 1490.507568][T21079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1490.507590][T21079] ? rw_verify_area+0xcf/0x6c0 [ 1490.507613][T21079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1490.507631][T21079] vfs_read+0x1e4/0xcf0 [ 1490.507654][T21079] ? __pfx___mutex_lock+0x10/0x10 [ 1490.507682][T21079] ? __pfx_vfs_read+0x10/0x10 [ 1490.507712][T21079] ? __fget_files+0x20e/0x3c0 [ 1490.507746][T21079] ksys_read+0x12a/0x250 [ 1490.507769][T21079] ? __pfx_ksys_read+0x10/0x10 [ 1490.507801][T21079] do_syscall_64+0xcd/0xf80 [ 1490.507826][T21079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.507845][T21079] RIP: 0033:0x7fbfcdf8e15c [ 1490.507861][T21079] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1490.507879][T21079] RSP: 002b:00007fbfcc1f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1490.507897][T21079] RAX: ffffffffffffffda RBX: 00007fbfce1e5fa0 RCX: 00007fbfcdf8e15c [ 1490.507909][T21079] RDX: 000000000000000f RSI: 00007fbfcc1f60a0 RDI: 0000000000000009 [ 1490.507921][T21079] RBP: 00007fbfcc1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1490.507932][T21079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1490.507942][T21079] R13: 00007fbfce1e6038 R14: 00007fbfce1e5fa0 R15: 00007ffcd2d7b078 [ 1490.507969][T21079] [ 1490.766184][T18902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1491.126340][T18946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1491.391930][T21096] netlink: 'syz.9.3779': attribute type 3 has an invalid length. [ 1491.400286][T21096] netlink: 'syz.9.3779': attribute type 3 has an invalid length. [ 1492.472180][T18406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.008012][T19156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.186831][ T30] audit: type=1400 audit(1768220439.835:1402): avc: denied { read } for pid=21113 comm="syz.6.3787" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1493.307898][ T30] audit: type=1400 audit(1768220439.855:1403): avc: denied { open } for pid=21113 comm="syz.6.3787" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1493.404735][ T30] audit: type=1400 audit(1768220439.855:1404): avc: denied { ioctl } for pid=21113 comm="syz.6.3787" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1493.531045][T18605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.856748][T19156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1494.474832][T21112] netlink: 'syz.4.3783': attribute type 2 has an invalid length. [ 1494.577457][T18605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.052944][T18605] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1495.197396][T18406] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1495.227450][T18605] usb 10-1: Using ep0 maxpacket: 16 [ 1495.253191][T18605] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.304077][T18605] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1495.339490][T18605] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1495.386217][T18605] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.413865][T18406] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1495.443144][T18605] usb 10-1: config 0 descriptor?? [ 1495.450594][T18406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.482514][T18605] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1495.505336][T18406] usb 5-1: config 0 descriptor?? [ 1495.672202][T18946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.560495][ T30] audit: type=1400 audit(1768220443.193:1405): avc: denied { validate_trans } for pid=21148 comm="syz.6.3795" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1496.611731][T18406] usb 5-1: Cannot read MAC address [ 1496.625230][T18406] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 1496.775452][T21156] netlink: 666 bytes leftover after parsing attributes in process `syz.9.3789'. [ 1496.952866][T18946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.960991][T18946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.981176][ T8605] usb 5-1: USB disconnect, device number 22 [ 1497.234809][T21161] netlink: 'syz.6.3796': attribute type 3 has an invalid length. [ 1497.243454][T21161] netlink: 'syz.6.3796': attribute type 3 has an invalid length. [ 1498.696048][T18406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.696049][ T6520] usb 10-1: USB disconnect, device number 22 [ 1499.033708][T21171] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1499.772778][T18406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.010243][T18440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.824511][T18946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.890691][T18440] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1500.960257][T18605] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1501.946030][T20146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1501.962544][T18440] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1502.006786][T18440] usb 4-1: config 0 has no interface number 0 [ 1502.010682][T18605] usb 7-1: Using ep0 maxpacket: 16 [ 1502.039591][T18440] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1502.046427][T18605] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1502.103191][T18440] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1502.131793][T18605] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1502.149733][T18440] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.179189][T18605] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1502.198518][T18440] usb 4-1: Product: syz [ 1502.224438][T18605] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.251706][T18440] usb 4-1: Manufacturer: syz [ 1502.256366][T18440] usb 4-1: SerialNumber: syz [ 1502.277789][T18440] usb 4-1: config 0 descriptor?? [ 1502.303922][T18605] usb 7-1: config 0 descriptor?? [ 1502.363791][T18605] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1502.571059][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1502.581624][ T8605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.753893][T21210] netlink: 666 bytes leftover after parsing attributes in process `syz.6.3809'. [ 1503.050083][T18946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.062109][T18440] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -32 [ 1503.070727][T19156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.410160][T21218] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3813'. [ 1504.261100][T20146] usb 7-1: USB disconnect, device number 27 [ 1504.401600][T18946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1504.428400][T21242] mac80211_hwsim hwsim59 syzkaller0: entered promiscuous mode [ 1504.436154][T21242] mac80211_hwsim hwsim59 syzkaller0: entered allmulticast mode [ 1505.472714][T20146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.480812][T20146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.550704][T18440] usb 4-1: USB disconnect, device number 17 [ 1505.668279][T21262] syz.3.3825 (21262): /proc/21261/oom_adj is deprecated, please use /proc/21261/oom_score_adj instead. [ 1505.687194][ T30] audit: type=1400 audit(1768220452.319:1406): avc: denied { accept } for pid=21247 comm="syz.6.3819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1505.852556][T20146] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1506.024764][T20146] usb 9-1: Using ep0 maxpacket: 16 [ 1506.536214][T20146] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1506.537346][T18440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.555104][T18440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.703049][T20146] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1507.095548][T20146] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.112170][T20146] usb 9-1: Product: syz [ 1507.121001][T20146] usb 9-1: Manufacturer: syz [ 1507.137559][T20146] usb 9-1: SerialNumber: syz [ 1507.158290][T20146] usb 9-1: config 0 descriptor?? [ 1507.182097][T20146] hub 9-1:0.0: bad descriptor, ignoring hub [ 1507.209718][T20146] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1507.287911][T21282] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3829'. [ 1507.301021][ T30] audit: type=1400 audit(1768220453.938:1407): avc: denied { mount } for pid=21281 comm="syz.4.3829" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1507.330198][ T30] audit: type=1400 audit(1768220453.968:1408): avc: denied { mounton } for pid=21281 comm="syz.4.3829" path="/158/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1507.484266][ T30] audit: type=1400 audit(1768220454.118:1409): avc: denied { unmount } for pid=18215 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1507.949137][T20146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.976483][ T8605] libceph: connect (1)[c::]:6789 error -101 [ 1507.978203][T21291] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1507.994041][ T8605] libceph: mon0 (1)[c::]:6789 connect error [ 1508.063680][T18440] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1508.084930][T18406] usb 9-1: USB disconnect, device number 27 [ 1508.204102][T21287] ceph: No mds server is up or the cluster is laggy [ 1508.228547][T21293] FAULT_INJECTION: forcing a failure. [ 1508.228547][T21293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1508.243663][T21293] CPU: 0 UID: 0 PID: 21293 Comm: syz.4.3831 Tainted: G L syzkaller #0 PREEMPT(full) [ 1508.243691][T21293] Tainted: [L]=SOFTLOCKUP [ 1508.243698][T21293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1508.243709][T21293] Call Trace: [ 1508.243715][T21293] [ 1508.243721][T21293] dump_stack_lvl+0x16c/0x1f0 [ 1508.243741][T21293] should_fail_ex+0x512/0x640 [ 1508.243760][T21293] _copy_from_user+0x2e/0xd0 [ 1508.243778][T21293] memdup_user+0x6b/0xe0 [ 1508.243790][T21293] snd_ctl_ioctl+0xe8b/0x13e0 [ 1508.243803][T21293] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1508.243820][T21293] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1508.243835][T21293] ? hook_file_ioctl_common+0x144/0x410 [ 1508.243856][T21293] ? selinux_file_ioctl+0x180/0x270 [ 1508.243870][T21293] ? selinux_file_ioctl+0xb4/0x270 [ 1508.243886][T21293] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1508.243899][T21293] __x64_sys_ioctl+0x18e/0x210 [ 1508.243914][T21293] do_syscall_64+0xcd/0xf80 [ 1508.243929][T21293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.243941][T21293] RIP: 0033:0x7fcc5078f749 [ 1508.243951][T21293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1508.243961][T21293] RSP: 002b:00007fcc516d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1508.243973][T21293] RAX: ffffffffffffffda RBX: 00007fcc509e6090 RCX: 00007fcc5078f749 [ 1508.243980][T21293] RDX: 0000200000000280 RSI: 00000000c4c85512 RDI: 000000000000000a [ 1508.243987][T21293] RBP: 00007fcc516d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1508.243993][T21293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1508.244000][T21293] R13: 00007fcc509e6128 R14: 00007fcc509e6090 R15: 00007ffe3942aed8 [ 1508.244015][T21293] [ 1508.520119][ T8605] libceph: connect (1)[c::]:6789 error -101 [ 1508.526340][ T8605] libceph: mon0 (1)[c::]:6789 connect error [ 1508.634823][T18440] usb 4-1: Using ep0 maxpacket: 32 [ 1508.652933][T18440] usb 4-1: config 0 has no interfaces? [ 1508.677539][T18440] usb 4-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 1508.733898][T18440] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.755620][T18440] usb 4-1: config 0 descriptor?? [ 1508.924033][T18406] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1508.964043][T20146] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1508.978312][T14315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.020553][T18440] usb 4-1: USB disconnect, device number 18 [ 1509.054180][T18406] usb 10-1: device descriptor read/64, error -71 [ 1509.094139][T18605] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 1509.115624][T20146] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.125807][T20146] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1509.135224][T20146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.144882][T20146] usb 5-1: config 0 descriptor?? [ 1509.151525][T20146] pwc: Askey VC010 type 2 USB webcam detected. [ 1509.255674][T18605] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1509.263776][T18605] usb 7-1: config 0 has no interface number 0 [ 1509.273363][T18605] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1509.283447][T18605] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1509.293780][T18605] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.302104][ T30] audit: type=1800 audit(1768220455.927:1410): pid=21310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.3838" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1509.325332][T18440] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1509.325783][T18605] usb 7-1: Product: syz [ 1509.339751][T18406] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1509.347457][T18605] usb 7-1: Manufacturer: syz [ 1509.352071][T18605] usb 7-1: SerialNumber: syz [ 1509.452285][T18605] usb 7-1: config 0 descriptor?? [ 1510.223880][T15723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.232061][T15723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.267524][T18440] usb 4-1: device descriptor read/64, error -71 [ 1510.267593][T18406] usb 10-1: device descriptor read/64, error -71 [ 1510.505246][T18406] usb usb10-port1: attempt power cycle [ 1510.657018][T18605] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -32 [ 1511.086191][T20146] pwc: send_video_command error -71 [ 1511.091415][T20146] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1511.102977][T20146] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1511.113718][T20146] usb 5-1: USB disconnect, device number 23 [ 1511.131851][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805708b800: rx timeout, send abort [ 1511.641598][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805708b800: abort rx timeout. Force session deactivation [ 1511.698339][T18406] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1511.777362][T19082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1512.067258][T18406] usb 10-1: device descriptor read/8, error -71 [ 1512.381689][T19082] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1512.730756][T21347] hub 8-0:1.0: USB hub found [ 1512.735620][T21347] hub 8-0:1.0: 1 port detected [ 1512.988145][T14315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.069447][T19082] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1513.092162][T19082] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.102521][T14315] usb 7-1: USB disconnect, device number 28 [ 1513.137722][T19082] usb 5-1: Product: syz [ 1513.142012][T19082] usb 5-1: Manufacturer: syz [ 1513.178806][T19082] usb 5-1: SerialNumber: syz [ 1513.203016][T19082] usb 5-1: config 0 descriptor?? [ 1513.222996][T19082] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 024 [ 1513.246269][T21353] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1513.256130][T18406] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1513.296774][ T6520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.297258][T18406] usb 10-1: Using ep0 maxpacket: 32 [ 1513.340032][T18406] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.370825][ T30] audit: type=1400 audit(1768220460.005:1411): avc: denied { unmount } for pid=18416 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1513.396995][T18406] usb 10-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.00 [ 1513.407388][T18406] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.445562][T19082] (null): failure setting delay to 10us [ 1513.463763][T18406] usb 10-1: config 0 descriptor?? [ 1513.472732][T19082] i2c-tiny-usb 5-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 1513.496009][T18406] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1513.515076][T19082] usb 5-1: USB disconnect, device number 24 [ 1513.530378][T18406] usb 10-1: Detected SIO [ 1513.576630][T18406] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1513.718521][ T30] audit: type=1400 audit(1768220460.355:1412): avc: denied { module_load } for pid=21337 comm="syz.9.3844" path="/sys/kernel/notes" dev="sysfs" ino=1404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 1514.340286][T14315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.737781][ T30] audit: type=1326 audit(1768220461.375:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21376 comm="syz.8.3857" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2aa5b8f749 code=0x0 [ 1514.741007][T18440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.162636][T19082] usb 10-1: USB disconnect, device number 26 [ 1515.196909][T19082] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1515.270362][T19082] ftdi_sio 10-1:0.0: device disconnected [ 1515.649127][T21392] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1516.059127][ T6520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.067676][ T6520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.154706][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1621.161665][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18339/1:b..l [ 1621.170192][ C1] rcu: (detected by 1, t=10502 jiffies, g=106649, q=1038 ncpus=2) [ 1621.178068][ C1] task:kworker/u8:5 state:R running task stack:25096 pid:18339 tgid:18339 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1621.192346][ C1] Workqueue: iou_exit io_ring_exit_work [ 1621.197899][ C1] Call Trace: [ 1621.201163][ C1] [ 1621.204085][ C1] ? __schedule+0x10b9/0x6150 [ 1621.208750][ C1] __schedule+0x1139/0x6150 [ 1621.213241][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1621.219398][ C1] ? __pfx___schedule+0x10/0x10 [ 1621.224242][ C1] ? mark_held_locks+0x49/0x80 [ 1621.229001][ C1] preempt_schedule_irq+0x51/0x90 [ 1621.234013][ C1] irqentry_exit+0x1d8/0x8c0 [ 1621.238596][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1621.244564][ C1] RIP: 0010:unwind_next_frame+0x5da/0x20b0 [ 1621.250360][ C1] Code: 01 38 d0 7f 08 84 c0 0f 85 a0 14 00 00 45 88 7d 35 44 0f b6 71 04 41 83 e6 0f 41 80 fe 06 0f 84 90 0c 00 00 0f 87 20 02 00 00 <41> 80 fe 04 0f 84 e3 0b 00 00 41 80 fe 05 0f 85 cf 00 00 00 48 b8 [ 1621.269952][ C1] RSP: 0018:ffffc9000212f558 EFLAGS: 00000297 [ 1621.276005][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff912fc3aa [ 1621.284221][ C1] RDX: 0000000000000005 RSI: 0000000000000001 RDI: ffffffff90a7705c [ 1621.292176][ C1] RBP: ffffc9000212f610 R08: ffffffff912fc3ae R09: 00000000c31c67d2 [ 1621.300132][ C1] R10: 0000000000000002 R11: 0000000000012887 R12: ffffc9000212f618 [ 1621.308085][ C1] R13: ffffc9000212f5c8 R14: 0000000000000005 R15: 0000000000000000 [ 1621.316057][ C1] ? unwind_next_frame+0x2ec/0x20b0 [ 1621.321248][ C1] ? kasan_save_stack+0x33/0x60 [ 1621.326091][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1621.332233][ C1] arch_stack_walk+0x94/0x100 [ 1621.336907][ C1] ? kasan_save_stack+0x33/0x60 [ 1621.341750][ C1] stack_trace_save+0x8e/0xc0 [ 1621.346414][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1621.351774][ C1] ? __lock_acquire+0x436/0x2890 [ 1621.356698][ C1] ? kasan_save_stack+0x33/0x60 [ 1621.361536][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 1621.366905][ C1] kasan_save_stack+0x33/0x60 [ 1621.371572][ C1] ? kasan_save_stack+0x33/0x60 [ 1621.376446][ C1] kasan_save_track+0x14/0x30 [ 1621.381109][ C1] __kasan_kmalloc+0xaa/0xb0 [ 1621.385686][ C1] kmem_cache_free+0x147/0x770 [ 1621.390436][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 1621.395805][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 1621.401166][ C1] __io_req_caches_free+0x19e/0x5c0 [ 1621.406360][ C1] io_ring_exit_work+0x33c/0x1170 [ 1621.411385][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1621.416834][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 1621.422024][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1621.427817][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 1621.433448][ C1] ? rcu_is_watching+0x12/0xc0 [ 1621.438200][ C1] process_one_work+0x9ba/0x1b20 [ 1621.443136][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1621.448503][ C1] ? assign_work+0x1a0/0x250 [ 1621.453082][ C1] worker_thread+0x6c8/0xf10 [ 1621.457668][ C1] ? __kthread_parkme+0x19e/0x250 [ 1621.462678][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1621.467778][ C1] kthread+0x3c5/0x780 [ 1621.471837][ C1] ? __pfx_kthread+0x10/0x10 [ 1621.476421][ C1] ? rcu_is_watching+0x12/0xc0 [ 1621.481171][ C1] ? __pfx_kthread+0x10/0x10 [ 1621.485750][ C1] ret_from_fork+0x983/0xb10 [ 1621.490327][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1621.495426][ C1] ? __switch_to+0x7af/0x10d0 [ 1621.500092][ C1] ? __pfx_kthread+0x10/0x10 [ 1621.504669][ C1] ret_from_fork_asm+0x1a/0x30 [ 1621.509437][ C1] [ 1621.512439][ C1] rcu: rcu_preempt kthread starved for 10533 jiffies! g106649 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1621.523703][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1621.533652][ C1] rcu: RCU grace-period kthread stack dump: [ 1621.539517][ C1] task:rcu_preempt state:R running task stack:28208 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1621.552987][ C1] Call Trace: [ 1621.556247][ C1] [ 1621.559162][ C1] ? __schedule+0x10b9/0x6150 [ 1621.563825][ C1] __schedule+0x1139/0x6150 [ 1621.568327][ C1] ? __pfx___schedule+0x10/0x10 [ 1621.573162][ C1] ? find_held_lock+0x2b/0x80 [ 1621.577834][ C1] ? schedule+0x2d7/0x3a0 [ 1621.582152][ C1] schedule+0xe7/0x3a0 [ 1621.586209][ C1] schedule_timeout+0x123/0x290 [ 1621.591046][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1621.596403][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1621.601680][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1621.607472][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 1621.612921][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1621.617675][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1621.622949][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1621.628134][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1621.633056][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1621.637901][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1621.643699][ C1] rcu_gp_kthread+0x26d/0x380 [ 1621.648362][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1621.653546][ C1] ? rcu_is_watching+0x12/0xc0 [ 1621.658294][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1621.663479][ C1] ? __kthread_parkme+0x19e/0x250 [ 1621.668488][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1621.673679][ C1] kthread+0x3c5/0x780 [ 1621.677738][ C1] ? __pfx_kthread+0x10/0x10 [ 1621.682317][ C1] ? rcu_is_watching+0x12/0xc0 [ 1621.687065][ C1] ? __pfx_kthread+0x10/0x10 [ 1621.691642][ C1] ret_from_fork+0x983/0xb10 [ 1621.696221][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1621.701318][ C1] ? __switch_to+0x7af/0x10d0 [ 1621.705981][ C1] ? __pfx_kthread+0x10/0x10 [ 1621.710560][ C1] ret_from_fork_asm+0x1a/0x30 [ 1621.715328][ C1] [ 1621.718331][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1621.724639][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1621.735120][ C1] Tainted: [L]=SOFTLOCKUP [ 1621.739421][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1621.749459][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1621.755079][ C1] Code: b6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 39 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1621.774671][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 1621.780724][ C1] RAX: 0000000007ff4485 RBX: 0000000000000001 RCX: ffffffff8b7826d9 [ 1621.788675][ C1] RDX: 0000000000000000 RSI: ffffffff8dace4f3 RDI: ffffffff8bf2b480 [ 1621.796628][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 1621.804579][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 1621.812530][ C1] R13: ffff88801dab24c0 R14: ffffffff9088bad0 R15: 0000000000000000 [ 1621.820485][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 1621.829401][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1621.835969][ C1] CR2: 00007fcc507733e0 CR3: 000000005a62c000 CR4: 00000000003526f0 [ 1621.843925][ C1] Call Trace: [ 1621.847185][ C1] [ 1621.850098][ C1] default_idle+0x13/0x20 [ 1621.854418][ C1] default_idle_call+0x6c/0xb0 [ 1621.859173][ C1] do_idle+0x38d/0x510 [ 1621.863235][ C1] ? __pfx_do_idle+0x10/0x10 [ 1621.867825][ C1] cpu_startup_entry+0x4f/0x60 [ 1621.872580][ C1] start_secondary+0x21d/0x2d0 [ 1621.877328][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1621.882603][ C1] common_startup_64+0x13e/0x148 [ 1621.887541][ C1]