last executing test programs: 17m39.370858822s ago: executing program 4 (id=476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000440)=@nat={'nat\x00', 0x19, 0x1, 0x90, [0x200000000280, 0x0, 0x0, 0x20000000038e, 0x2000000003be], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000142cdf5f2ce0d50000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff000000000000000000000000000000000000000000000000003e62fe005366114dda99000000000000000001000000ffffffbf0000000000000000000000619a0a9adc2b7860c71a878c50ec236a28358f875523becdb7fb7bca2ad919796effd8258d2e0ec2cfd0dc3b6dbe2895feebc54d9858032342f882efbdf71b53545aa75a5ea448051aec829739"]}, 0x167) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4006, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 17m38.279175903s ago: executing program 4 (id=477): mkdirat(0xffffffffffffff9c, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r0, 0x101, 0x1) getdents64(r0, &(0x7f0000000000)=""/48, 0x30) 17m38.198167557s ago: executing program 4 (id=478): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_deladdr={0x2c, 0x15, 0x1030, 0x70bd2d, 0x25dfdbfd, {0xa, 0x80, 0x48, 0xfd, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40000, 0x0, 0x1000000, 0x0, 0xc5c4, 0x2}, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003180001800d00010073796e70726f787900000000040002900900010073797a30000000000900020073797a320000000014000000110001"], 0xb8}}, 0x40408c0) close(r5) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0xa0, 0x11, 0xaa, 0x10, 0x2001, 0x4002, 0xdfbf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0xe6, 0xce}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="00001e7c0000c75752de5810955e49175e7b9977c7314f50b58fa1885f7573802fee061e0ceb6dd49e285e38cfd12ec6780055e9d239dfe5e44f2ce5e5fc9911dc2fb24ed5f5b9e984d0bb770778061bef3040a97b175f3079a38e0499a53425d9c761bf94a775d617f5f426c460c9b5a239848e7c944b07166c12b9659bb5f8764e52f7bb98d41a1b3c0c2d407210ea5646f08510042d5831f86d6198ea201bbc7701e21da3eebd6a78505765d537c330630a605a1151f58d91b534b85fad934a433ba63f87c6"], 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x40, 0x15, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17m34.350785747s ago: executing program 4 (id=490): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) openat$cgroup_ro(r0, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) 17m32.423101062s ago: executing program 4 (id=495): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x35e, &(0x7f0000000500)={0x0, 0x921e, 0x8, 0x3, 0x8000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_io_uring_setup(0x3031, &(0x7f0000000440)={0x0, 0x4098, 0x8000, 0x3, 0x31f}, &(0x7f0000000340), &(0x7f0000000580)=0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000640)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000600)='./file0\x00', 0x140, 0x4181, 0x12345, {0x0, r4}}) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) socket$xdp(0x2c, 0x3, 0x0) 17m28.96699831s ago: executing program 4 (id=501): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_deladdr={0x2c, 0x15, 0x1030, 0x70bd2d, 0x25dfdbfd, {0xa, 0x80, 0x48, 0xfd, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40000, 0x0, 0x1000000, 0x0, 0xc5c4, 0x2}, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003180001800d00010073796e70726f787900000000040002900900010073797a30000000000900020073797a320000000014000000110001"], 0xb8}}, 0x40408c0) close(r5) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0xa0, 0x11, 0xaa, 0x10, 0x2001, 0x4002, 0xdfbf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0xe6, 0xce}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="00001e7c0000c75752de5810955e49175e7b9977c7314f50b58fa1885f7573802fee061e0ceb6dd49e285e38cfd12ec6780055e9d239dfe5e44f2ce5e5fc9911dc2fb24ed5f5b9e984d0bb770778061bef3040a97b175f3079a38e0499a53425d9c761bf94a775d617f5f426c460c9b5a239848e7c944b07166c12b9659bb5f8764e52f7bb98d41a1b3c0c2d407210ea5646f08510042d5831f86d6198ea201bbc7701e21da3eebd6a78505765d537c330630a605a1151f58d91b534b85fad934a433ba63f87c6"], 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x40, 0x15, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17m28.648692689s ago: executing program 32 (id=501): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_deladdr={0x2c, 0x15, 0x1030, 0x70bd2d, 0x25dfdbfd, {0xa, 0x80, 0x48, 0xfd, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40000, 0x0, 0x1000000, 0x0, 0xc5c4, 0x2}, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003180001800d00010073796e70726f787900000000040002900900010073797a30000000000900020073797a320000000014000000110001"], 0xb8}}, 0x40408c0) close(r5) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0xa0, 0x11, 0xaa, 0x10, 0x2001, 0x4002, 0xdfbf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0xe6, 0xce}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="00001e7c0000c75752de5810955e49175e7b9977c7314f50b58fa1885f7573802fee061e0ceb6dd49e285e38cfd12ec6780055e9d239dfe5e44f2ce5e5fc9911dc2fb24ed5f5b9e984d0bb770778061bef3040a97b175f3079a38e0499a53425d9c761bf94a775d617f5f426c460c9b5a239848e7c944b07166c12b9659bb5f8764e52f7bb98d41a1b3c0c2d407210ea5646f08510042d5831f86d6198ea201bbc7701e21da3eebd6a78505765d537c330630a605a1151f58d91b534b85fad934a433ba63f87c6"], 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x40, 0x15, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m44.844582084s ago: executing program 1 (id=1549): prlimit64(0x0, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10) close(r1) 10m43.815543609s ago: executing program 1 (id=1552): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x18, 0x0, @fd, 0x6, {}, 0x5, 0x15}) io_uring_enter(r0, 0x47f5, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r3, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote}, &(0x7f0000000340)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff}}, './file0\x00'}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@private1, @in6=@remote, 0x4e20, 0x0, 0x4e21, 0x3, 0xa, 0xa0, 0x0, 0x3c, r7, r8}, {0x3, 0x4, 0xfffffffffffffff7, 0x0, 0x9, 0x6, 0x7, 0xe7}, {0x2c67, 0x7fff, 0x9, 0x4}, 0xbb8a, 0x6e6bbd, 0x1, 0x1, 0x2, 0x3}, {{@in=@loopback, 0x4d3, 0x3c}, 0xa, @in=@rand_addr=0x64010102, 0x3500, 0x3, 0x3, 0x4, 0x7, 0x5, 0x1}}, 0xe8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x8, 0x0, 0x0}}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {0x0, 0xc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {0x0, 0x0, 0x400}, {0x7}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 10m37.97741808s ago: executing program 1 (id=1561): r0 = socket$netlink(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x1, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f00000003c0)='GPL\x00', 0xffff7fff, 0x6b, &(0x7f0000000480)=""/107, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x0, 0x2000}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000780)=[{0x2, 0x1, 0x1, 0xb}]}, 0x94) listen(r2, 0xda90) accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x181800) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000d40)={0x6, 0xffffffffffffffff, 0x6, 0x11, 0x0, 0x4063, "5700ed00", 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0xb9}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="db4654", 0x3}], 0x1) readv(0xffffffffffffffff, &(0x7f00000001c0), 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x90) socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) socket$netlink(0x10, 0x3, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000004000000060000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r7], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000340)={{0x0, @loopback, 0x4e23, 0x3, 'none\x00', 0x0, 0xf, 0x2a}, {@rand_addr=0x64010102, 0x4e24, 0x3, 0xfffffff7, 0x4, 0x81}}, 0x44) 10m32.085525052s ago: executing program 1 (id=1574): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) syz_io_uring_setup(0x61ac, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000000), &(0x7f0000000100)) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x40) syz_emit_ethernet(0x109d, &(0x7f0000001940)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x108f, 0x68, 0x0, 0x0, 0x84, 0x0, @empty, @broadcast}, "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"}}}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r3, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1) pipe2$9p(&(0x7f0000001900), 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r5, 0x400, 0x0) 10m31.192992434s ago: executing program 1 (id=1577): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x8000000010, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x19, @empty, 0x9}}, 0x0, 0x0, 0x24, 0x0, "fbb3af84d9d7165048514205defffff97f905c1990c91e0323ba5897af26ebf89b6b0412c139cf0b3436d27c8101f3fd8f9ac440ec5a21cbf66c9f22cdf158f9fb3d9f6bbaaea59d8cb4516e1cf9ec21"}, 0xd8) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x801, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x262200, 0x0) close(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$setstatus(r5, 0x4, 0x2000) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x3) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 10m30.023816471s ago: executing program 1 (id=1580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x20000) preadv(r2, &(0x7f0000001200)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x4, 0xb) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x200040d0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x2, &(0x7f0000000040)={0x1c2, 0x8}) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) mount_setattr(r5, &(0x7f0000000340)='./file0/../file0\x00', 0x1000, &(0x7f0000000400)={0x81, 0x8, 0x100000, {r5}}, 0x20) ioctl$HIDIOCGUSAGES(r5, 0xd01c4813, &(0x7f0000001240)={{0x2, 0x1, 0x10000, 0x200, 0x3, 0xfffffff7}, 0x11f, [0x2, 0x8, 0x1, 0x82, 0x3ff, 0x3, 0xfffffffc, 0x8, 0x3, 0x7, 0x8000, 0x200, 0x3, 0x8, 0x1, 0x10001, 0x400, 0x2, 0x1, 0x38c4, 0x7ac84d3c, 0x80000001, 0x6, 0x8, 0x23, 0x7, 0x0, 0x8, 0x5, 0x7, 0xffffffff, 0x250d, 0x7, 0x5f14, 0x8, 0x8, 0x6, 0xffffffab, 0x4, 0x400000, 0xffff, 0x1d03, 0x7, 0xd2, 0x8, 0x1, 0x4, 0x2, 0x7, 0x4, 0x9, 0xfff, 0x2, 0x8, 0x2ea, 0x7, 0x7130, 0x2, 0x8, 0x50, 0x6, 0x5, 0xfff, 0x8, 0x10000, 0x6, 0x5, 0x4, 0x200, 0x10001, 0x9, 0x24a, 0x3ff, 0x7, 0x4, 0x4, 0x4, 0x7, 0x6, 0x9, 0xfffffffb, 0x3, 0x2, 0xffffffff, 0x8, 0x733, 0x6, 0x0, 0x4, 0x6, 0x9, 0x4, 0xfffffff7, 0x7, 0x8, 0x6, 0x6, 0xacc8, 0x40, 0x5, 0x40, 0x2, 0x51, 0x9, 0x7f, 0x8, 0x5, 0x3, 0x7, 0x3, 0x7, 0x5, 0x7, 0x6a, 0x7, 0x9, 0x1000, 0x2, 0x5, 0x4, 0xcf86, 0x3ff, 0x1b, 0x5, 0xfffffffa, 0x6, 0x6, 0x100, 0x9, 0x2, 0x5, 0x0, 0x7, 0x4, 0x9, 0x7fffffff, 0xc0000, 0x9, 0xf6b1, 0x8, 0x3, 0x8, 0x100, 0x280000, 0x2800000, 0x8001, 0x1, 0x9, 0x3, 0x1ff, 0x8, 0x8, 0x6, 0x9, 0x2, 0x1, 0x5, 0x5, 0xfffffff7, 0x4, 0x40, 0x9, 0x1, 0x3, 0x0, 0xa, 0x7ff, 0x6, 0x9, 0x3, 0xb7c, 0x6, 0x80000000, 0x3, 0xfffffffa, 0x400, 0x9a6, 0xfffffffe, 0xfffffff2, 0x5, 0xec, 0xfff, 0x27, 0x80000000, 0x9, 0x9, 0x6, 0xc0e5, 0x800, 0x6, 0x35, 0x0, 0x3, 0x1, 0x7, 0xfffffff9, 0x7, 0x0, 0xff, 0x10001, 0x2, 0x2, 0x6, 0xa, 0x0, 0x7, 0x10, 0x4, 0x6, 0xc7f, 0x0, 0x80000001, 0x62be, 0x2, 0xa7b1, 0x5829, 0x9, 0x1, 0x2, 0x8, 0x6, 0x401, 0x6, 0x5e9, 0x6, 0x8c, 0x0, 0x8, 0x2, 0x7, 0x8, 0x4, 0x1, 0xe, 0x0, 0xed72, 0xd4, 0x6, 0x4, 0x4, 0x800, 0x7, 0x8839, 0xfffffffe, 0x3, 0x2634, 0x9, 0x0, 0x1, 0xfffffff8, 0x4e, 0x3, 0xfffffff9, 0x0, 0x0, 0x6, 0x2, 0x401, 0x7, 0x3, 0x6, 0x10000, 0x9, 0x3, 0x7, 0x4, 0x3f, 0x1, 0x9, 0x2, 0x1, 0x6, 0x5, 0x5, 0xc, 0x6, 0x4, 0x80000000, 0x1, 0x101, 0xc5c, 0x1, 0xf4, 0xb33, 0x7d37, 0x2, 0xb, 0x5, 0x1000, 0x0, 0x4, 0xd, 0x0, 0x8, 0xe83b563, 0x1, 0xd8d9, 0x4, 0x80000001, 0xf, 0x1, 0x6ea0, 0x7, 0x3, 0x80, 0x8, 0x400, 0x7, 0x22, 0xff, 0x4, 0x32, 0x1, 0x438, 0x1d6, 0x200, 0x0, 0xa, 0xfff00000, 0x954, 0x2, 0x2, 0x80000000, 0x2, 0x4a, 0xfc00, 0x1, 0x8, 0x520, 0x7d, 0x2, 0x8a12, 0x40, 0x80000000, 0x4, 0x1ff, 0xff, 0xc51, 0x725, 0x8001, 0xa771, 0x9, 0x0, 0x7, 0x3, 0x6, 0x100, 0x2, 0xb0f8, 0x8, 0x4d, 0x2, 0x7, 0x4, 0x2, 0x9, 0x6, 0x2400000, 0xfffffffe, 0xe, 0xfffffff7, 0x9, 0x3, 0x0, 0x6d4, 0xa, 0xe2e, 0x2bf39a79, 0x4, 0x5, 0x8, 0x74, 0x6, 0x6, 0x7, 0x858, 0xdcd, 0x9, 0xeee, 0x2, 0x7, 0xfffffffb, 0x0, 0x9, 0x2, 0x1, 0x9, 0x8, 0x7f, 0x3, 0x9, 0x9, 0x0, 0xd0, 0x400, 0x0, 0x5, 0xdf, 0x8c5, 0x0, 0x6, 0x3ff, 0x0, 0x3b4f, 0x2, 0xe, 0xffffffff, 0x5, 0x7f, 0x2, 0x81, 0x5, 0x2, 0x0, 0x9, 0x3, 0x9, 0x1, 0x4, 0x623, 0x500, 0x4, 0xffff61da, 0x1, 0x0, 0x1, 0x5, 0x7, 0x3, 0x5, 0x8, 0x3, 0xe, 0xfffffff8, 0x1000, 0xf826b209, 0x9, 0x2, 0x80000001, 0x34, 0x1, 0x9, 0x2, 0x2, 0x6, 0xa, 0x8, 0x4, 0x100, 0x81, 0x3a8, 0x40d3, 0x5, 0xe, 0x4892, 0x800, 0x5, 0x8, 0x5, 0x4, 0xc80, 0xffff, 0x4, 0x5, 0x5, 0xfffffff2, 0xaa6, 0x2, 0xfffff3bd, 0x6, 0x9, 0x8000, 0x186, 0x5b1, 0x1, 0xb6, 0x58, 0x81, 0x10000, 0x4, 0x9, 0xa, 0x4, 0x2, 0x6, 0x80000001, 0x0, 0x739a, 0x7, 0x3, 0x9, 0x3, 0x7592, 0x10, 0x8, 0x8, 0xfffffff7, 0x8, 0x200, 0x5, 0xa606, 0x0, 0x8, 0xff, 0x72ed, 0x1, 0x400, 0xa4, 0x8, 0x200, 0xd, 0x0, 0xffffff01, 0x10001, 0x1, 0x101, 0xffff, 0x3, 0xd50, 0xffffffc0, 0x2, 0x8, 0x80000001, 0x0, 0xffffffc0, 0xfffffff8, 0x6, 0x3, 0x80000000, 0x5, 0xfffffffe, 0x1, 0xe, 0x241, 0x80, 0x8, 0x8, 0x9, 0x72fd, 0x9, 0x132, 0xfff, 0x2, 0x101, 0x7, 0x7, 0x0, 0x2a7c, 0xff, 0xcef, 0x3, 0x6, 0x1, 0x8, 0x9, 0x4, 0x7, 0xffff8c16, 0x38c, 0x94, 0xf, 0x58, 0x6, 0x0, 0x8, 0x9, 0x5, 0x1, 0x1, 0x4, 0xc270, 0x39050e2, 0x6, 0x3, 0x7, 0x2, 0x1, 0x2, 0x9, 0x8, 0x2, 0x3, 0x6, 0x2, 0x40, 0x2, 0xffffbb58, 0x8, 0x4, 0x80000001, 0x55, 0x6, 0x950, 0x4, 0x0, 0x9, 0x47e4ad03, 0x0, 0x8, 0x6, 0x4, 0x7, 0xfffffffd, 0xb, 0x7d, 0x677, 0x8, 0x6, 0x9, 0xc5, 0x1, 0x9, 0x4c, 0x6, 0x5, 0x2, 0x3, 0x2, 0x8, 0xa215, 0x4, 0x0, 0xd, 0x8, 0x7ff, 0x46, 0x80000000, 0xa3, 0x4, 0x10000, 0x100, 0x501f, 0xffffff01, 0x6, 0x8, 0x0, 0x8, 0xfffffff8, 0x3, 0x9, 0x2, 0x8, 0x4, 0x9, 0x0, 0x997, 0xd18, 0x8, 0x1d8, 0x9, 0x2, 0xffffffc8, 0x1ff, 0x5, 0x3ff, 0xfff, 0x7, 0x4, 0x9, 0x14015aba, 0x8, 0x101, 0xb3, 0x7, 0x5, 0x1, 0x5, 0x0, 0x4, 0x9, 0x1, 0x83, 0x10, 0x1000, 0x7, 0xeb29, 0xea8, 0xfffff828, 0xb, 0x5fa9, 0x6, 0x6, 0x2, 0x9, 0xcfb, 0xe, 0x7, 0x4, 0x166, 0xffffdf9d, 0x81, 0x6, 0xc93, 0x7f5, 0x200, 0x100, 0x7, 0x0, 0xfffffffe, 0x7fffffff, 0xffff8000, 0x4, 0x6, 0x80000000, 0xffffffff, 0x1, 0x3, 0x6, 0x0, 0xcd1, 0x8, 0x5, 0x1, 0x6, 0x2, 0x7ff, 0x4, 0x6, 0x4, 0x9, 0x9, 0x9, 0x5cb, 0x5, 0x58, 0x6f2, 0x8, 0xfffffffa, 0x2, 0x5, 0x5, 0x49, 0x0, 0x2, 0xcebc, 0x7, 0x5a0c, 0x9, 0xfff, 0x8, 0x4, 0xfffffffe, 0x6, 0x7f, 0x80, 0x5, 0x2, 0x7, 0x7, 0x1, 0x5c96, 0x1, 0x0, 0x2, 0x4, 0x5, 0x0, 0x8000, 0xe850, 0x8, 0x7, 0xb76, 0x7, 0x9, 0x2, 0x400, 0x4, 0x7, 0x454f, 0x6, 0x4, 0x71f, 0x10000, 0x9, 0x2, 0x9be, 0x3ff, 0x9, 0x1, 0x9, 0xa7e, 0x5, 0x1b, 0x10000, 0x7, 0x3, 0x2, 0x1, 0x3b3, 0x1, 0x3, 0x168a, 0xc778, 0xfffffff7, 0x4, 0x6699, 0x2, 0x9, 0x9, 0xcb, 0x6, 0x1, 0x10, 0x8, 0x4, 0x2, 0x2fe, 0xe1, 0x10000000, 0x1, 0x16c, 0x3ff, 0x2, 0xffff, 0xd329, 0xd4, 0x3, 0xfffffffe, 0xe8e, 0x5b70, 0x2, 0x1000000, 0x9, 0x7fff, 0xcf1, 0x9, 0x20000, 0xffffffff, 0x9, 0x3, 0x0, 0x80000001, 0x0, 0x8, 0x8, 0x4, 0xfffffc01, 0x4, 0x3, 0x3, 0x6, 0x5, 0x40, 0xe, 0x2, 0x0, 0xfffffeb8, 0x0, 0x6, 0x7f, 0xa, 0x1, 0x0, 0x1, 0x2, 0x1, 0x3, 0xef73, 0x80000001, 0xb7, 0x9b, 0x10, 0x1, 0xff0, 0xa1c, 0x4, 0x1, 0x7, 0x1ff, 0x7, 0x7, 0xa2d, 0x100, 0x80000000, 0x6, 0x7, 0x9, 0x4, 0x10000, 0x8, 0x3, 0x3, 0x8001, 0x7, 0x3, 0x6, 0x9, 0xa9d, 0x3000, 0xdf3c, 0x6, 0x200, 0x66, 0x4, 0x8, 0x9, 0x8, 0x10001, 0x2e6b9a2f, 0x7, 0x100, 0x2, 0x7, 0x2, 0x9, 0x847e, 0x7, 0x1ff, 0x4, 0x0, 0x71560000, 0x80000001, 0x95804126, 0x9, 0x400, 0x3, 0x789d, 0x1, 0x3, 0xe, 0x7, 0x2, 0x3, 0x5, 0xbe, 0x9, 0x9, 0xfd7c, 0x3, 0x4, 0x7fff, 0x0, 0x4, 0x9, 0x4, 0xff, 0x10001, 0x4, 0x6, 0xfffffffb, 0xffff, 0x0, 0x5, 0x0, 0x1, 0xc, 0x1ff, 0x5, 0x4, 0x1, 0x946c, 0x9, 0x6, 0x1, 0x401, 0x3, 0xfffffff8, 0x4, 0x8, 0x7fff, 0x2, 0x2, 0x2, 0x6, 0x3, 0x6ea, 0xfcc, 0xb, 0x4204, 0xa7, 0x3, 0x29, 0x2, 0x7, 0x4, 0xfffffffb, 0x9, 0x8, 0x10001, 0x6, 0x8, 0x7, 0x10, 0x7, 0x6, 0xf44, 0xffffff7f, 0x3, 0x6, 0x200, 0x5, 0x2, 0xa, 0x2, 0x5, 0x8, 0x1000, 0x7, 0x8001, 0x6, 0xfffffff0, 0x5, 0xe1dd00, 0x9, 0x5, 0x3, 0x7, 0x5c, 0x3ff, 0xff, 0x6, 0x5, 0x9, 0xaf43, 0x931, 0x80000000, 0x6, 0x7, 0x3, 0xfffffe01, 0x3, 0x0, 0x64, 0x9c]}) socket$caif_stream(0x25, 0x1, 0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x5}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8003, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 10m14.791469111s ago: executing program 33 (id=1580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x20000) preadv(r2, &(0x7f0000001200)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x4, 0xb) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x200040d0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x2, &(0x7f0000000040)={0x1c2, 0x8}) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) mount_setattr(r5, &(0x7f0000000340)='./file0/../file0\x00', 0x1000, &(0x7f0000000400)={0x81, 0x8, 0x100000, {r5}}, 0x20) ioctl$HIDIOCGUSAGES(r5, 0xd01c4813, &(0x7f0000001240)={{0x2, 0x1, 0x10000, 0x200, 0x3, 0xfffffff7}, 0x11f, [0x2, 0x8, 0x1, 0x82, 0x3ff, 0x3, 0xfffffffc, 0x8, 0x3, 0x7, 0x8000, 0x200, 0x3, 0x8, 0x1, 0x10001, 0x400, 0x2, 0x1, 0x38c4, 0x7ac84d3c, 0x80000001, 0x6, 0x8, 0x23, 0x7, 0x0, 0x8, 0x5, 0x7, 0xffffffff, 0x250d, 0x7, 0x5f14, 0x8, 0x8, 0x6, 0xffffffab, 0x4, 0x400000, 0xffff, 0x1d03, 0x7, 0xd2, 0x8, 0x1, 0x4, 0x2, 0x7, 0x4, 0x9, 0xfff, 0x2, 0x8, 0x2ea, 0x7, 0x7130, 0x2, 0x8, 0x50, 0x6, 0x5, 0xfff, 0x8, 0x10000, 0x6, 0x5, 0x4, 0x200, 0x10001, 0x9, 0x24a, 0x3ff, 0x7, 0x4, 0x4, 0x4, 0x7, 0x6, 0x9, 0xfffffffb, 0x3, 0x2, 0xffffffff, 0x8, 0x733, 0x6, 0x0, 0x4, 0x6, 0x9, 0x4, 0xfffffff7, 0x7, 0x8, 0x6, 0x6, 0xacc8, 0x40, 0x5, 0x40, 0x2, 0x51, 0x9, 0x7f, 0x8, 0x5, 0x3, 0x7, 0x3, 0x7, 0x5, 0x7, 0x6a, 0x7, 0x9, 0x1000, 0x2, 0x5, 0x4, 0xcf86, 0x3ff, 0x1b, 0x5, 0xfffffffa, 0x6, 0x6, 0x100, 0x9, 0x2, 0x5, 0x0, 0x7, 0x4, 0x9, 0x7fffffff, 0xc0000, 0x9, 0xf6b1, 0x8, 0x3, 0x8, 0x100, 0x280000, 0x2800000, 0x8001, 0x1, 0x9, 0x3, 0x1ff, 0x8, 0x8, 0x6, 0x9, 0x2, 0x1, 0x5, 0x5, 0xfffffff7, 0x4, 0x40, 0x9, 0x1, 0x3, 0x0, 0xa, 0x7ff, 0x6, 0x9, 0x3, 0xb7c, 0x6, 0x80000000, 0x3, 0xfffffffa, 0x400, 0x9a6, 0xfffffffe, 0xfffffff2, 0x5, 0xec, 0xfff, 0x27, 0x80000000, 0x9, 0x9, 0x6, 0xc0e5, 0x800, 0x6, 0x35, 0x0, 0x3, 0x1, 0x7, 0xfffffff9, 0x7, 0x0, 0xff, 0x10001, 0x2, 0x2, 0x6, 0xa, 0x0, 0x7, 0x10, 0x4, 0x6, 0xc7f, 0x0, 0x80000001, 0x62be, 0x2, 0xa7b1, 0x5829, 0x9, 0x1, 0x2, 0x8, 0x6, 0x401, 0x6, 0x5e9, 0x6, 0x8c, 0x0, 0x8, 0x2, 0x7, 0x8, 0x4, 0x1, 0xe, 0x0, 0xed72, 0xd4, 0x6, 0x4, 0x4, 0x800, 0x7, 0x8839, 0xfffffffe, 0x3, 0x2634, 0x9, 0x0, 0x1, 0xfffffff8, 0x4e, 0x3, 0xfffffff9, 0x0, 0x0, 0x6, 0x2, 0x401, 0x7, 0x3, 0x6, 0x10000, 0x9, 0x3, 0x7, 0x4, 0x3f, 0x1, 0x9, 0x2, 0x1, 0x6, 0x5, 0x5, 0xc, 0x6, 0x4, 0x80000000, 0x1, 0x101, 0xc5c, 0x1, 0xf4, 0xb33, 0x7d37, 0x2, 0xb, 0x5, 0x1000, 0x0, 0x4, 0xd, 0x0, 0x8, 0xe83b563, 0x1, 0xd8d9, 0x4, 0x80000001, 0xf, 0x1, 0x6ea0, 0x7, 0x3, 0x80, 0x8, 0x400, 0x7, 0x22, 0xff, 0x4, 0x32, 0x1, 0x438, 0x1d6, 0x200, 0x0, 0xa, 0xfff00000, 0x954, 0x2, 0x2, 0x80000000, 0x2, 0x4a, 0xfc00, 0x1, 0x8, 0x520, 0x7d, 0x2, 0x8a12, 0x40, 0x80000000, 0x4, 0x1ff, 0xff, 0xc51, 0x725, 0x8001, 0xa771, 0x9, 0x0, 0x7, 0x3, 0x6, 0x100, 0x2, 0xb0f8, 0x8, 0x4d, 0x2, 0x7, 0x4, 0x2, 0x9, 0x6, 0x2400000, 0xfffffffe, 0xe, 0xfffffff7, 0x9, 0x3, 0x0, 0x6d4, 0xa, 0xe2e, 0x2bf39a79, 0x4, 0x5, 0x8, 0x74, 0x6, 0x6, 0x7, 0x858, 0xdcd, 0x9, 0xeee, 0x2, 0x7, 0xfffffffb, 0x0, 0x9, 0x2, 0x1, 0x9, 0x8, 0x7f, 0x3, 0x9, 0x9, 0x0, 0xd0, 0x400, 0x0, 0x5, 0xdf, 0x8c5, 0x0, 0x6, 0x3ff, 0x0, 0x3b4f, 0x2, 0xe, 0xffffffff, 0x5, 0x7f, 0x2, 0x81, 0x5, 0x2, 0x0, 0x9, 0x3, 0x9, 0x1, 0x4, 0x623, 0x500, 0x4, 0xffff61da, 0x1, 0x0, 0x1, 0x5, 0x7, 0x3, 0x5, 0x8, 0x3, 0xe, 0xfffffff8, 0x1000, 0xf826b209, 0x9, 0x2, 0x80000001, 0x34, 0x1, 0x9, 0x2, 0x2, 0x6, 0xa, 0x8, 0x4, 0x100, 0x81, 0x3a8, 0x40d3, 0x5, 0xe, 0x4892, 0x800, 0x5, 0x8, 0x5, 0x4, 0xc80, 0xffff, 0x4, 0x5, 0x5, 0xfffffff2, 0xaa6, 0x2, 0xfffff3bd, 0x6, 0x9, 0x8000, 0x186, 0x5b1, 0x1, 0xb6, 0x58, 0x81, 0x10000, 0x4, 0x9, 0xa, 0x4, 0x2, 0x6, 0x80000001, 0x0, 0x739a, 0x7, 0x3, 0x9, 0x3, 0x7592, 0x10, 0x8, 0x8, 0xfffffff7, 0x8, 0x200, 0x5, 0xa606, 0x0, 0x8, 0xff, 0x72ed, 0x1, 0x400, 0xa4, 0x8, 0x200, 0xd, 0x0, 0xffffff01, 0x10001, 0x1, 0x101, 0xffff, 0x3, 0xd50, 0xffffffc0, 0x2, 0x8, 0x80000001, 0x0, 0xffffffc0, 0xfffffff8, 0x6, 0x3, 0x80000000, 0x5, 0xfffffffe, 0x1, 0xe, 0x241, 0x80, 0x8, 0x8, 0x9, 0x72fd, 0x9, 0x132, 0xfff, 0x2, 0x101, 0x7, 0x7, 0x0, 0x2a7c, 0xff, 0xcef, 0x3, 0x6, 0x1, 0x8, 0x9, 0x4, 0x7, 0xffff8c16, 0x38c, 0x94, 0xf, 0x58, 0x6, 0x0, 0x8, 0x9, 0x5, 0x1, 0x1, 0x4, 0xc270, 0x39050e2, 0x6, 0x3, 0x7, 0x2, 0x1, 0x2, 0x9, 0x8, 0x2, 0x3, 0x6, 0x2, 0x40, 0x2, 0xffffbb58, 0x8, 0x4, 0x80000001, 0x55, 0x6, 0x950, 0x4, 0x0, 0x9, 0x47e4ad03, 0x0, 0x8, 0x6, 0x4, 0x7, 0xfffffffd, 0xb, 0x7d, 0x677, 0x8, 0x6, 0x9, 0xc5, 0x1, 0x9, 0x4c, 0x6, 0x5, 0x2, 0x3, 0x2, 0x8, 0xa215, 0x4, 0x0, 0xd, 0x8, 0x7ff, 0x46, 0x80000000, 0xa3, 0x4, 0x10000, 0x100, 0x501f, 0xffffff01, 0x6, 0x8, 0x0, 0x8, 0xfffffff8, 0x3, 0x9, 0x2, 0x8, 0x4, 0x9, 0x0, 0x997, 0xd18, 0x8, 0x1d8, 0x9, 0x2, 0xffffffc8, 0x1ff, 0x5, 0x3ff, 0xfff, 0x7, 0x4, 0x9, 0x14015aba, 0x8, 0x101, 0xb3, 0x7, 0x5, 0x1, 0x5, 0x0, 0x4, 0x9, 0x1, 0x83, 0x10, 0x1000, 0x7, 0xeb29, 0xea8, 0xfffff828, 0xb, 0x5fa9, 0x6, 0x6, 0x2, 0x9, 0xcfb, 0xe, 0x7, 0x4, 0x166, 0xffffdf9d, 0x81, 0x6, 0xc93, 0x7f5, 0x200, 0x100, 0x7, 0x0, 0xfffffffe, 0x7fffffff, 0xffff8000, 0x4, 0x6, 0x80000000, 0xffffffff, 0x1, 0x3, 0x6, 0x0, 0xcd1, 0x8, 0x5, 0x1, 0x6, 0x2, 0x7ff, 0x4, 0x6, 0x4, 0x9, 0x9, 0x9, 0x5cb, 0x5, 0x58, 0x6f2, 0x8, 0xfffffffa, 0x2, 0x5, 0x5, 0x49, 0x0, 0x2, 0xcebc, 0x7, 0x5a0c, 0x9, 0xfff, 0x8, 0x4, 0xfffffffe, 0x6, 0x7f, 0x80, 0x5, 0x2, 0x7, 0x7, 0x1, 0x5c96, 0x1, 0x0, 0x2, 0x4, 0x5, 0x0, 0x8000, 0xe850, 0x8, 0x7, 0xb76, 0x7, 0x9, 0x2, 0x400, 0x4, 0x7, 0x454f, 0x6, 0x4, 0x71f, 0x10000, 0x9, 0x2, 0x9be, 0x3ff, 0x9, 0x1, 0x9, 0xa7e, 0x5, 0x1b, 0x10000, 0x7, 0x3, 0x2, 0x1, 0x3b3, 0x1, 0x3, 0x168a, 0xc778, 0xfffffff7, 0x4, 0x6699, 0x2, 0x9, 0x9, 0xcb, 0x6, 0x1, 0x10, 0x8, 0x4, 0x2, 0x2fe, 0xe1, 0x10000000, 0x1, 0x16c, 0x3ff, 0x2, 0xffff, 0xd329, 0xd4, 0x3, 0xfffffffe, 0xe8e, 0x5b70, 0x2, 0x1000000, 0x9, 0x7fff, 0xcf1, 0x9, 0x20000, 0xffffffff, 0x9, 0x3, 0x0, 0x80000001, 0x0, 0x8, 0x8, 0x4, 0xfffffc01, 0x4, 0x3, 0x3, 0x6, 0x5, 0x40, 0xe, 0x2, 0x0, 0xfffffeb8, 0x0, 0x6, 0x7f, 0xa, 0x1, 0x0, 0x1, 0x2, 0x1, 0x3, 0xef73, 0x80000001, 0xb7, 0x9b, 0x10, 0x1, 0xff0, 0xa1c, 0x4, 0x1, 0x7, 0x1ff, 0x7, 0x7, 0xa2d, 0x100, 0x80000000, 0x6, 0x7, 0x9, 0x4, 0x10000, 0x8, 0x3, 0x3, 0x8001, 0x7, 0x3, 0x6, 0x9, 0xa9d, 0x3000, 0xdf3c, 0x6, 0x200, 0x66, 0x4, 0x8, 0x9, 0x8, 0x10001, 0x2e6b9a2f, 0x7, 0x100, 0x2, 0x7, 0x2, 0x9, 0x847e, 0x7, 0x1ff, 0x4, 0x0, 0x71560000, 0x80000001, 0x95804126, 0x9, 0x400, 0x3, 0x789d, 0x1, 0x3, 0xe, 0x7, 0x2, 0x3, 0x5, 0xbe, 0x9, 0x9, 0xfd7c, 0x3, 0x4, 0x7fff, 0x0, 0x4, 0x9, 0x4, 0xff, 0x10001, 0x4, 0x6, 0xfffffffb, 0xffff, 0x0, 0x5, 0x0, 0x1, 0xc, 0x1ff, 0x5, 0x4, 0x1, 0x946c, 0x9, 0x6, 0x1, 0x401, 0x3, 0xfffffff8, 0x4, 0x8, 0x7fff, 0x2, 0x2, 0x2, 0x6, 0x3, 0x6ea, 0xfcc, 0xb, 0x4204, 0xa7, 0x3, 0x29, 0x2, 0x7, 0x4, 0xfffffffb, 0x9, 0x8, 0x10001, 0x6, 0x8, 0x7, 0x10, 0x7, 0x6, 0xf44, 0xffffff7f, 0x3, 0x6, 0x200, 0x5, 0x2, 0xa, 0x2, 0x5, 0x8, 0x1000, 0x7, 0x8001, 0x6, 0xfffffff0, 0x5, 0xe1dd00, 0x9, 0x5, 0x3, 0x7, 0x5c, 0x3ff, 0xff, 0x6, 0x5, 0x9, 0xaf43, 0x931, 0x80000000, 0x6, 0x7, 0x3, 0xfffffe01, 0x3, 0x0, 0x64, 0x9c]}) socket$caif_stream(0x25, 0x1, 0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x5}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8003, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3m25.448571718s ago: executing program 0 (id=2858): openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg(r4, 0x0, 0x8800) socket$tipc(0x1e, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000000), 0x10) 3m24.530714844s ago: executing program 0 (id=2866): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ff00f500200601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRESHEX=r1, @ANYRES64=r2, @ANYBLOB="faa4ab75b5cdba890c5c7440462c0f2cafb8b39e144cb7e0129c2addf0aa0c11daceef680a7d3c6bcb6deff44e41c7411db40c98c7f0a50c74d8c75eda7c9d29f1c12e398c7eda0761971399db643cdb564ebac2d7eddbcf6e607fa7a9bc04eab59989c839565db785e1c8bc0129fe76e89c0908f3f18957d1ddef93f41d72ce"], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m24.111460486s ago: executing program 0 (id=2867): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800022], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3fc, 0x34325241, 0x2, [r4, 0x0, r5, r6], [0x2b8, 0x0, 0x0, 0xfffdffff], [0x5, 0xc]}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) read$fb(r0, &(0x7f00000002c0)=""/22, 0x16) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000340)={r2, 0x0, 0x4, 0x4, 0xffffffffffffffff}) 3m23.111399052s ago: executing program 0 (id=2875): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x6020400) ioperm(0x0, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002ef45a15d000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x240000c0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB=':\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3ac8bfdd7000ffdbdf250d00000000002800feff000005002a000000800008002b0002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040840}, 0x4000000) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000340)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4000}) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3m22.990108261s ago: executing program 0 (id=2876): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, 0x0, 0x0, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0x500d, 0x2) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x4084) connect$vsock_stream(r1, &(0x7f0000000180), 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0xb, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x1b, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x7, [@struct={0x5, 0x8, 0x0, 0x4, 0x1, 0xcd, [{0x5, 0x0, 0x5}, {0x6, 0x2, 0x7b}, {0x9, 0x4, 0x1}, {0x8, 0x2, 0x3}, {0x0, 0x2, 0x3}, {0x2, 0x3, 0x5}, {0x5, 0x5, 0x5}, {0x9, 0x5, 0x4}]}]}, {0x0, [0x2e, 0x2e, 0x30, 0x61, 0x0]}}, &(0x7f0000000700)=""/104, 0x8b, 0x68, 0x1, 0x7}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_tracing={0x1a, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x1}, [@generic={0x1, 0x8, 0x2, 0x3, 0x9f}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @cb_func={0x18, 0x7}]}, &(0x7f0000000300)='GPL\x00', 0x800, 0x0, 0x0, 0x41000, 0x4, '\x00', r2, 0x19, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x2, 0x5, 0xfffff800, 0x5}, 0x10, 0x2e3c4, r1, 0x1, &(0x7f0000000800)=[r1], &(0x7f0000000840)=[{0x0, 0x1, 0xc, 0x4}], 0x10, 0xf3bc}, 0x94) 3m22.755138796s ago: executing program 0 (id=2878): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="080026009409"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3m22.568164514s ago: executing program 34 (id=2878): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="080026009409"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 18.036635646s ago: executing program 5 (id=3453): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) getpid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x2, @loopback, 0x4}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000000c0)="95", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) shutdown(r0, 0x1) sendmmsg$inet6(r0, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)="e0e9d4bd55079d539e6e9bbb72b386574501047aef84b69fdf761884b2346e4e8055e91a9766526bfa89936825c8a19192deeddb6209949d8edfa2fca75fba89cc4eb01689048de3c54de1c82804241a049911b48b2d0fccee5f00205c23968d6f09fea2e8742f19012afc949f77a9c872f260151650b473dbf80a176b43906a2234128e422af02c88b08e5298be4b08721cbe05b4c1", 0x96}, {&(0x7f00000001c0)="837ebbd68828e63e27dfd01dcf5f360d556c0ac24d683d080179b07f632d86798696a31215bfecdedb8eec5d4d8cb4e11f12f123a90cb8c26e05b6537c7146ff22de86", 0x43}, {&(0x7f0000000840)="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", 0x4c0}], 0x3}}], 0x1, 0x4) 16.630926068s ago: executing program 5 (id=3457): socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0xffff8880b870dfff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x84400) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r6) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) splice(r5, 0x0, r6, 0x0, 0xfffd, 0x0) 14.186681108s ago: executing program 5 (id=3466): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9, 0x0, 0x3}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x8000) recvmmsg(r1, &(0x7f0000001b40)=[{{&(0x7f0000000380)=@nfc={0x27, 0x0}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000600)=""/77, 0x4d}, {&(0x7f0000000280)=""/60, 0xfffffdf8}, {&(0x7f0000000800)=""/29, 0x1d}, {&(0x7f0000000700)=""/166, 0xa6}, {&(0x7f0000000840)=""/215, 0xd7}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f00000013c0)=""/159, 0x9f}, {&(0x7f0000000400)=""/47, 0x2f}, {&(0x7f0000000a40)=""/128, 0x80}], 0x9, &(0x7f0000000b80)=""/147, 0x93}, 0x8}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000c40)=""/100, 0x64}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000dc0)=""/90, 0x5a}, {&(0x7f0000000e40)=""/119, 0x77}, {&(0x7f0000000ec0)=""/223, 0xdf}], 0x5, &(0x7f0000001040)=""/183, 0xb7}, 0x6}, {{&(0x7f0000001100)=@generic, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001180)=""/90, 0x5a}, {&(0x7f0000001200)=""/237, 0xed}, {&(0x7f0000001300)=""/160, 0xa0}, {&(0x7f0000001e80)=""/262, 0x106}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x5, &(0x7f0000001540)=""/187, 0xbb}, 0x1}, {{&(0x7f0000001600)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000500)=[{&(0x7f0000001680)=""/84, 0x54}, {&(0x7f0000001c80)=""/140, 0x8c}], 0x2, &(0x7f0000001740)=""/105, 0x69}, 0x200}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000017c0)=""/47, 0x2f}, {&(0x7f0000001800)=""/27, 0x1b}, {&(0x7f0000000540)=""/3, 0x3}, {&(0x7f0000001880)=""/255, 0xff}, {&(0x7f0000001980)=""/6, 0x6}], 0x5, &(0x7f0000001a40)=""/210, 0xd2}}], 0x5, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000001dc0)=ANY=[@ANYRESOCT=r1, @ANYRES8=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=r3, @ANYRESOCT=r4]) read$FUSE(r7, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0xffffffffffffff01) write$FUSE_INIT(r7, &(0x7f0000000200)={0x50, 0x0, r8, {0x7, 0x1f, 0xffffc000, 0x8004, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0xfffffffffffffff5, 0x803}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1a5401, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x6, 0x20}, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x6e, 0xa, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000440)=ANY=[], 0x44}}, 0x80) getsockname$packet(r10, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000006c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 13.015254452s ago: executing program 5 (id=3470): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) keyctl$join(0x1, 0x0) request_key(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, 0x0) 12.628562018s ago: executing program 5 (id=3471): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) getpeername$llc(r0, &(0x7f00000021c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000002200)=0x10) 12.592346674s ago: executing program 5 (id=3472): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet6(0xa, 0x80001, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x240}, 0x1, 0x0, 0x0, 0x4}, 0x40400c6) sendfile(r3, r2, &(0x7f0000000400), 0x7) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000000)=0xff0000) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x1129, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000240)=0x16f) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r9, &(0x7f0000001440)=[{&(0x7f0000001980)=""/128, 0x80}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, 0x372, 0x0) 8.218430783s ago: executing program 6 (id=3486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6201, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x7e48, &(0x7f0000000080)={0x0, 0x354d, 0x800, 0x101, 0x20000115}) close_range(r4, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "cc5e65fb4e966cb6"}, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000002b40), 0x0, 0x40000003, 0x0) 7.079015845s ago: executing program 6 (id=3488): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x44805}, 0x800) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x48000, 0x0) io_uring_setup(0xf08, &(0x7f00000001c0)={0x0, 0xfb6e, 0x38c0, 0x4, 0x2c2, 0x0, r2}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 5.931631757s ago: executing program 3 (id=3490): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x44805}, 0x800) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x48000, 0x0) io_uring_setup(0xf08, &(0x7f00000001c0)={0x0, 0xfb6e, 0x38c0, 0x4, 0x2c2, 0x0, r2}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 5.321245815s ago: executing program 2 (id=3492): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1fffffffffffff17, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000e4370018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESDEC=r0, @ANYRES16, @ANYBLOB="12961eabdaf62af0c0644d9833cfa51f4471b5c8c1ae24ef4463d0d8691bce2ee7bb32aac8726568431ccde241c772dedd2b4f9e565fa882412fb3f4ffb56888817f8d5be86450142474dd579570b1be", @ANYRES64=r0, @ANYRESDEC=r2, @ANYRESOCT=r0, @ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0x200003, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) getcwd(&(0x7f0000001180)=""/4096, 0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r5, &(0x7f0000000040), &(0x7f00000001c0)=ANY=[@ANYBLOB="030201ff"], 0xa9, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1a8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r6 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x47) mknodat$loop(r6, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f0000000140)='./bus\x00') linkat(r6, &(0x7f0000000000)='./file1\x00', r6, &(0x7f00000001c0)='./bus\x00', 0x400) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r7, &(0x7f0000003340)=""/48, 0x30) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 4.961818721s ago: executing program 3 (id=3493): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000002080)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002240), 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) r4 = syz_open_procfs(r3, &(0x7f00000020c0)='net/mcfilter\x00') r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000001c0)=0x2001) r6 = fcntl$dupfd(r5, 0x0, r5) write$FUSE_INIT(r6, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x4ac0, 0x40000000, 0x8000, 0x8001, 0x10000, 0x8, 0x0, 0x0, 0x4, 0x3}}, 0x50) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@ipv4_newrule={0x4c, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'team_slave_0\x00'}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'wg0\x00'}]}, 0x4c}}, 0x0) read$FUSE(r6, &(0x7f0000003800)={0x2020}, 0x3f) read$FUSE(r6, &(0x7f000000b400)={0x2020}, 0xfffffffffffffff1) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080)=0x1, 0x4) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcff0e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x202209a}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getpeername$llc(r1, &(0x7f00000021c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000002200)=0x10) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setuid(r10) 4.959209023s ago: executing program 2 (id=3494): syz_open_dev$sg(0x0, 0x0, 0x401) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xa, 0xffffffffe0100f4d, 0x6, 0x8, 0xa0000001, 0x80000000, 0x0, 0x0, 0x4, 0x10ff}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f28bd421850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = gettid() tkill(r6, 0xb) 4.948107163s ago: executing program 6 (id=3495): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x275, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x41, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x1000}, 0x1}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) fcntl$getownex(r6, 0x10, &(0x7f0000006280)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x47ba, 0x0, 0x1000000, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000300)={0x60, 0x2, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x5, &(0x7f00000000c0)=[{0x3, 0x6, 0x9}, {0x8, 0x0, 0x101}, {0x7, 0xffffffff80000001, 0xace}], 0x3, 0x100000001, 0x40, 0x41, 0x27, 0x10}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000"], 0x0, 0xe, 0xff5, &(0x7f00000003c0)=""/4085}, 0x94) r7 = syz_open_procfs(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000007a80)=@abs, &(0x7f0000007b00)=0x6e, 0x80000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000006200)={r5, 0x37, &(0x7f0000001480)}, 0x10) writev(r7, &(0x7f0000000280)=[{0x0}], 0x1) 4.883132246s ago: executing program 7 (id=3496): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xa}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="016f0800010000000000200000004500003000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7a000700907800140005d58838000000923c38b188d27d6a8599ef7ad72841a10501b3d41f2ef464e05df742758ba45659fcece0b3e64a4bdddb35ca524588a42f2040a474d4f62d17fe3aef87a4cffe5222985e00aad4"], 0x3e) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.628300853s ago: executing program 7 (id=3497): r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_open_procfs(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.541596342s ago: executing program 3 (id=3498): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf41000000653600648d0a00160002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0400000000e000e218d1ddf66ed538f2523250", 0x78, 0x44014, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'ovf\x00', 0x1, 0xa7e, 0x70}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa0100fe, 0x4e21, 0x3, 'lc\x00', 0x15, 0x8, 0x10}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.515714269s ago: executing program 7 (id=3499): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='net_prio.prioidx\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000840)={0x6, {{0xa, 0x4e23, 0xc5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, {{0xa, 0x4e21, 0xb0d, @mcast1, 0xfffffff9}}}, 0x108) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x4, @mcast2, 0x1}, 0x1c) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0xfe8e, 0x12) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8800000000000000000000000001011679d508a8ec7a00afc6ae090d2d", @ANYRES32=r3, @ANYBLOB], 0x28}, 0x4040) mkdir(0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') ioctl$SOUND_MIXER_READ_DEVMASK(r7, 0x80044dfe, &(0x7f0000000040)) 3.963211093s ago: executing program 7 (id=3500): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet6(0xa, 0x80001, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a1c000000030a010100000000000000000700000608000a4000000005c4000000050a01010000000000000000000000020900030073797a31000000000900030073797a3000000000640008800c00014000000000000000020c000240ffffffffffff5e390c00024000000000000000020c000140ffffffffffffff6c0c00014000000000000000040c00014000000000000000080c000240000000007fffffff0c0002"], 0x240}, 0x1, 0x0, 0x0, 0x4}, 0x40400c6) sendfile(r3, r2, &(0x7f0000000400), 0x7) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000000)=0xff0000) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x1129, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000240)=0x16f) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r9, &(0x7f0000001440)=[{&(0x7f0000001980)=""/128, 0x80}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, 0x372, 0x0) 3.902027891s ago: executing program 3 (id=3501): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000) setreuid(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="010326"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x4040814) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) stat(0x0, &(0x7f0000000700)) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r3 = gettid() inotify_init() ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x3, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) 3.318541091s ago: executing program 2 (id=3502): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet6(0xa, 0x80001, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d0000000400000007000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$AUDIT_SET(r2, 0x0, 0x0) sendfile(r3, r2, &(0x7f0000000400), 0x7) r5 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000000)=0xff0000) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x1129, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000240)=0x16f) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) preadv(r7, &(0x7f0000001440)=[{&(0x7f0000001980)=""/128, 0x80}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, 0x372, 0x0) 2.145468563s ago: executing program 7 (id=3503): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x44805}, 0x800) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x48000, 0x0) io_uring_setup(0xf08, &(0x7f00000001c0)={0x0, 0xfb6e, 0x38c0, 0x4, 0x2c2, 0x0, r2}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) 1.972101882s ago: executing program 2 (id=3504): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1fffffffffffff17, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000e4370018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESDEC=r0, @ANYRES16, @ANYBLOB="12961eabdaf62af0c0644d9833cfa51f4471b5c8c1ae24ef4463d0d8691bce2ee7bb32aac8726568431ccde241c772dedd2b4f9e565fa882412fb3f4ffb56888817f8d5be86450142474dd579570b1be", @ANYRES64=r0, @ANYRESDEC=r2, @ANYRESOCT=r0, @ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0x200003, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) getcwd(&(0x7f0000001180)=""/4096, 0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r6, &(0x7f0000000040), &(0x7f00000001c0)=ANY=[@ANYBLOB="030201ff"], 0xa9, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1a8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r7 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x47) mknodat$loop(r7, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f0000000140)='./bus\x00') linkat(r7, &(0x7f0000000000)='./file1\x00', r7, &(0x7f00000001c0)='./bus\x00', 0x400) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r8, &(0x7f0000003340)=""/48, 0x30) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 1.665988757s ago: executing program 2 (id=3505): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x44805}, 0x800) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x48000, 0x0) io_uring_setup(0xf08, &(0x7f00000001c0)={0x0, 0xfb6e, 0x38c0, 0x4, 0x2c2, 0x0, r2}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000) 1.399067444s ago: executing program 6 (id=3506): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xa}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="016f0800010000000000200000004500003000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7a000700907800140005d58838000000923c38b188d27d6a8599ef7ad72841a10501b3d41f2ef464e05df742758ba45659fcece0b3e64a4bdddb35ca524588a42f2040a474d4f62d17fe3aef87a4cffe5222985e00aad4"], 0x3e) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 680.553434ms ago: executing program 3 (id=3507): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000002080)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002240), 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) r4 = syz_open_procfs(r3, &(0x7f00000020c0)='net/mcfilter\x00') r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000001c0)=0x2001) r6 = fcntl$dupfd(r5, 0x0, r5) write$FUSE_INIT(r6, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x4ac0, 0x40000000, 0x8000, 0x8001, 0x10000, 0x8, 0x0, 0x0, 0x4, 0x3}}, 0x50) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@ipv4_newrule={0x4c, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'team_slave_0\x00'}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'wg0\x00'}]}, 0x4c}}, 0x0) read$FUSE(r6, &(0x7f0000003800)={0x2020}, 0x3f) read$FUSE(r6, &(0x7f000000b400)={0x2020}, 0xfffffffffffffff1) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080)=0x1, 0x4) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcff0e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x202209a}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getpeername$llc(r1, &(0x7f00000021c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000002200)=0x10) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setuid(r10) 155.248332ms ago: executing program 6 (id=3508): r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_open_procfs(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 149.871078ms ago: executing program 3 (id=3509): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='net_prio.prioidx\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000840)={0x6, {{0xa, 0x4e23, 0xc5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, {{0xa, 0x4e21, 0xb0d, @mcast1, 0xfffffff9}}}, 0x108) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x4, @mcast2, 0x1}, 0x1c) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0xfe8e, 0x12) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8800000000000000000000000001011679d508a8ec7a00afc6ae090d2d", @ANYRES32=r3, @ANYBLOB], 0x28}, 0x4040) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') ioctl$SOUND_MIXER_READ_DEVMASK(r7, 0x80044dfe, &(0x7f0000000040)) 18.706772ms ago: executing program 7 (id=3510): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x1, 0x5003) rt_tgsigqueueinfo(0x0, r0, 0x39, &(0x7f0000000140)={0x3, 0x9bfc, 0xa3c8}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r4 = socket(0x23, 0x6, 0xffffffff) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0xa0, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.297844ms ago: executing program 6 (id=3511): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x0, 0x4, 0x1}, 0x50) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000004280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="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"/263, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x40ceb152, 0x4, 0x40, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x150, 0x0, 0x0, [{{0x3, 0x0, 0x0, 0x0, 0x10000, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x8000, 0x0, 0x0, r3, 0x0, 0xfffffffc}}, {0x0, 0x0, 0x8, 0x2, 'group_id'}}, {{0x3, 0x2, 0x0, 0x73, 0x746, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xf4}}, {0x0, 0x0, 0x8, 0x29, 'group_id'}}]}, 0x0, 0x0, 0x0}) r4 = syz_open_dev$vivid(&(0x7f0000008d80), 0x0, 0x2) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000008dc0)={0x0, 0x0}, &(0x7f0000008e00)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r0, {r6, r3}}, './file0/file0\x00'}) r8 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000008e80)={0x0}, &(0x7f0000008ec0)=0xc) lstat(&(0x7f0000008f00)='./file0\x00', &(0x7f0000008f40)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() r12 = openat$comedi(0xffffffffffffff9c, &(0x7f0000009280)='/dev/comedi3\x00', 0x800, 0x0) r13 = openat$cuse(0xffffffffffffff9c, &(0x7f00000092c0), 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000009300)={'\x00', 0x1, 0x401, 0x9, 0x100, 0x2, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000009380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f000000b3c0)={0xe0, 0x9, {0xffffffffffffffff}, {0xee00}, 0x1, 0x4}) r17 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) r18 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) fstat(r17, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r18, 0xffffffff80000701, r19, 0x0) getgroups(0x8, &(0x7f000000b400)=[0xee01, 0xffffffffffffffff, 0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f000000b440)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f000000b480)=0x0) r23 = getegid() sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b940)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000000080)="af233d69b6a4339d", 0x8}, {&(0x7f00000000c0)="93332a40418a4c8abc3d81f496ff6f00c2d9ed2b7b57985f0f1f94e93a5958c201b5ccc938e67b779c58c4e2d18cfba71a2f76554582afc802810a2c03b075f7", 0x40}, {&(0x7f0000000100)="fd0be711ad78712e671cb7b2512ee2d609fe1b8776fae243d0b4c9c62eeace", 0x1f}, {&(0x7f0000000140)="95c952ad217c941431b601c3e103c2c72d2032725000ca1520e4a9843b1c8864fdd29b1ac36d304680a83ac35ca71c9f0bbbb024f174ff27bc990e9f3735080b3605de4e84a635ca0c4fe187da5e9b4d4effa43be82413a6641d6285b684e8383ffc7543a50456e16062b9d65b88ded9473d0af283c8867a98539c7fc0e1aa927e71b23c623b8574e0050752b0fb69f1", 0x90}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="06cc7dc6c73b37755525ad9bc35f581059eeaaaa458f544b8c9b3a0adcd0bbb1c03680412954bd6231844048154d279b01f1f5e2d8b3bcea8b462571e69b5be2d8a9e67de60572951c1611b99ffc3841694beea6efa80bb38ac7aee7578ca4159df37d0be65be227b409a9f8a5715f249611942e54d43782013b88a3fcd99f83d31383cf9e23ab0976c864e599f5e1f5e94b043861cceffe86db4b73dd3c60d9b66f40ebf33cedda54afaa14019b88a1", 0xb0}, {&(0x7f0000001340)="72af0e3925b7d978496ad029bcca332def8b2e0da0af991ebbc61c67b2e5156677410fdf48ad4bb7e0ef2e0531b417128d1d1fb875c4606debda629ad9d413498eabbf073869d263635195468e9e02fee7855850bab294c8a549e8f27b9ee28e9387424847288d618e990be233fde656e2f4d1bd19960f1820ac973308d468de3e8b66e2578f76e7d0cf40fc7e90cf1fbcf5ef30ffe5c46c162b83a66394cc1625d9d6de64de7b49ddc17e933b21ad889435198402c00abe378f2e2afc4b0cb6a4dccbf1ae7233ed8b39a67956a5ebf3ccd613c7e3bc4d3daeb8ddd4ee9a9abda1", 0xe1}], 0x7, &(0x7f00000014c0), 0x0, 0x10}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001500)="e42d8a555f787cb97170ec653d1890d1aa341e1349c4f573810f5c8c81d71dd5aa8819cf57993f5df3b306ea2fe5117ed936a363a8a21d0d7a5c3c023c8c845bac949a502d8651705177b832b82ac84003b019c48924843d6c1aedb05c63e619237c1700c29b98cb19f897609b9b6709d165d1963aad0114b87158fcc3bc7c3d4d574a57086acee2bf0de201ff742169aaf3364fd39a4acc286841d141445bf24fd556ba8570ab", 0xa7}, {&(0x7f00000015c0)="7eefa18f9f9285818357b06c80759d716233ac301292dd60104b348a8b160c3d198eec2acc57cd238964119dfa149b084bdfea33cb4ee0f89a2d2332b27c02d860417b489bcdcb8092fd522ae1bf244913c0ad978118a3a7143b227cd1737c0c176a76465d0c978d393de026266411fe14010231959cb8051745c7526dee18f26f8122936b4b2a7fbf9bd09321e259cd5289bd4368e11dfde2add9700602a76f3e31eb8790bdbc788498d609", 0xac}], 0x2, &(0x7f0000001800)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x40080}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001840)="3f30d8a97ad9a16f4e1f7df09cbe9bf0d9125fb8", 0x14}, {&(0x7f0000001880)="7d4a303ebc16a969097fd533028d6b9e40df33f698e3f759253c75712b5d9d5ef70439f144a2730c74db19c6f46b20a5b60b4fb60d35014e5ab70e3255766ee0dc9a99e6aeb74b0853ebb0fdfea8cf5335c8f914b5a2f055b51756eccc13dfe541acc2d488b719472b5beb0aab0a9106d1ec678dfc7a5c41bcb768fc4ed0ced146e8313fea9d03e9fbc7d4c68272544782ad0d032cfe81f36921", 0x9a}], 0x2, &(0x7f00000019c0)=[@rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r12, r4, 0xffffffffffffffff]}}], 0x78, 0x10}}, {{&(0x7f0000001a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001ac0)="3cd4be4b3369a64fbc46ab9315bbe4d0a784b8c7d8f1f26e43a82afaa43fecf698ba3204349ba627fe15106caa4da10ed2", 0x31}, {&(0x7f0000001b00)="63f4c3c7d1fdc5c1e51cc4883596829235537343813175909a640c3ff961035925d1f4e2363065ac1d13d14a23d6ee70e89a19e7ae00ecb10fa79f10757897d2e30b6c868760f2cc00920419e91b288621803c40fb7a64", 0x57}, {&(0x7f0000001b80)="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", 0xfb}], 0x3, &(0x7f0000001e00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48, 0x20044004}}, {{&(0x7f0000001e80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001f00)="d23db28d0860b57d8ac33ea4e9e636ee38b26d46d3674747213e205519836e8098815ac349aa4e93212acdeb653820bf5edecf129b570a3a8e861b83f39f8d9336354b62851f6ffacf5fdd61ece65277322a3f6530b3e9fda4ba8a9925ebeebf7ff462b9495be8a956dd6f8a3beaf6391927d8e5823c155f5dff1e1a9086245de8e556b87c248b7f1dbe16fcc62dcce6b6cc3997fe09e61e2f1e133c3f1b78266163b015b1af554d37fea8e1cbfe2d0dd2fcdbdbd3f15ac1ac78a285344bd5dfee1ea3e9fe342989a8ade2da2a856e1c3b4f91d367c9321cd86566", 0xdb}, {&(0x7f0000002000)="daa3b0fddf859c581bdc0be47026f49ccd82b405f1cfb707dc4d90ef1814720c2a4a7eed80f165d5f287513d875ab056a0edaa059f60cc85418a2c0b5a362ada95a1697983f1beebf7fd7a51da3d0ceebaf9a222a4915e48c1895e7130ee423743af6430fcd98b4a68e0988248b40cff6b4ba37ace1763fb32b28b7d660e252e4b07cbeb16227daefcda5873", 0x8c}, {&(0x7f00000020c0)="76f1dde3ba3017928a613a737ad3e5f25b72fa016a798dfc81fbe1f898d1399fb323af4f9c94559ba56273df2b3450f45f554ee459a470b90b2f2f52fae678fe1a05a69c5a8d162b5d6f163ee0236a6aca18da8b7e4a93fbb0ccea8eb02a2b6d8616e6406c23f6", 0x67}, {&(0x7f0000002140)="55e069af4be620337d9a0e6012ac22028d0769977df022eaafa921b2030d7b24279643e1a2b102a6187f555df57ec28229e64bd6711197cb8df97cc04857d3febca547259456387ba36564c17c2bc299798154b5862d74b88daeb4e25858ced0df1122b949638adec72f37c4d598fda5d743460e5ab8d5e26db850f582747d4c724e66bd648f66db3d895608d7781979bd75ca2250f55c1d84b93931ea89c4f51e1979c8904cd5f6895e3d7d79c2e11d82654166381d131bd1d8d17c14e506bc8968141bc4d92d465ae59aff1a750b9f32d3bc8c2136", 0xd6}, {&(0x7f0000002240)="7924bfd424a208d4e9dc930c63ecda849afe14d7711407c5f3ae6a5e54600431016464cccf100f29e9adcabab291e3fecb9625a01ae616f313f6657679b206ea49d4a65f1b934131ac1aa6d79968484c125a3664b363c95b263f25ada0df1078155a3031e6d9842fa288d00abde777baab9c65bf7d805da66a88214f19c454b7f3f63828465ddf", 0x87}], 0x5, &(0x7f0000006780)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}], 0xd8}}, {{&(0x7f0000006880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006cc0)=[{&(0x7f0000006900)="0cdff81fcdab74a014ff16aa143f0f591c7f583ca0f75cd5260f3dc04c17505093988f4be1846477fc12b3549b33dcb8ac3a4cd0bc0cf401d0b617b9111f28080dee7d4ffd93671560099a19483eb8364fb32f4ba22fe8e63aced5f6c7bf15eb97dd84eb834be93a0e507d61f2d9b6b01f4d38231ec5237fdea21e31f1be3c0ef2e98674264dab78fabe2a81e2b337f9040dae0c7b64527098672a87b3e824d21bff0915ec87fbc1410a00b88dd940706a76dac64749b136f6e6720beb510e91eca361d8d6ca194839b78d72e7f29c542964310bd4d1d61e7bc5ede322557c3e8b533a991670547c86ac4c8d78", 0xed}, {&(0x7f0000006a00)="1240fbbd15acfade9de94374c069522c722335756fffa6007258b7f02fb9546ca1ef76c68e89fc47e248f8f519744a045eb413d43fa7235b69522d9038cfb507048518248daacbfddd18a0af4f1fc262e511c822317e3b14ef1f34f8074f92dacd358fdc7fa5922c9df8f611a6afe339176e1814a597040bfe99b89096277a53502aab7835432c09c78ca249df61e805c68df32cab0004a8ae0c19c3f54c0d48fa111ae801456f6cfc6c6d7d6b428cc9f18541690e1247ec04797d5994493d", 0xbf}, {&(0x7f0000006ac0)="e8f280615af8df4183b7efe5bef760bdea1ce00ea790e9201d6315d0294e6f54546e08f33b8e20e38e05d16db8f3a386845d7f7d9f48141349ceb2b2f645f34207ff4e264c2b64b3a0007c4be7e54010ecfc4180dee2e493d1bc07f2608c2d2d954832ea2a1937550306d279efc4e58370ddffd6ebbeaa2deecd2dc811", 0x7d}, {&(0x7f0000006b40)="661b0704a95fa860862695aa9b42cf3fed22bc4f8b7cb728c08e43dd3c6bbe60412b8f32beb72a3c5297d04c3d9eb9c6899e236045a72cb3a30b51b50800b870aab80b016c2a1a3b5905a8e7770decdf768dfc9aba291b7be03e7dbc1a9440125eaf38a002d55fc6c52ae21d541b367861187b685bcf759786b5bb2478dc7c20d0e399f7f881bad9704418aa35d4ffa0686c3e6a9c69495da27591a695de4598e008e1038e853308510f2152df1b37f5c87abbb46c364c4a6571b80966bc01529300c1d1ee37b03f9afdb7d6851245fc58f48749e8", 0xd5}, {&(0x7f0000006c40)="6b2ed9bcbc515c1bd63445f3b6d5c8569fbd0d16844c2f8e056c124c3364d0c5c7eaf96fcd1828178e44aed6f4678397101023a9079df00e6e7d8b5c812f0bf5edff4f7069ad82cbfd02ceb72e2966fa9d81f7960aaf8ef4d5b12a36333110e12c825125", 0x64}], 0x5, &(0x7f0000008fc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r8, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, 0xee01}}}], 0xb0, 0x1}}, {{&(0x7f0000009080)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000009240)=[{&(0x7f0000009100)="c058eccb2d110768860b2a67af49eba3f75cc331badd774150cda0aa5a357a921ff405052f49f781278179cbf672743f788eaae80cb28384fde8dba19b3e76bd150db777a355c179ea3cbf6d6e70b9710e31b8e63b9945c91e", 0x59}, {&(0x7f0000009180)="bc44d02791a42bd36d07cd748dbb9af8d276de28cbd59a2235c067e3d7ef49766a3396e78c0e24fd9d03189a9507e50ae6ee290963bc0a85d0eb1d421fe0501e508e7c1ec195bff4074be2041e75b6b06cc4bfb3ff0bfb073e90dd7d", 0x5c}, {&(0x7f0000009200)="845926735252179c2f4b9a5d40e04f9e5e28008da99d5dd50f63e0287079edf4b7bd9f595f1aa77eea", 0x29}], 0x3, &(0x7f000000b4c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r11}}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r12, r0, r13, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xee01, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r19, r20}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}], 0xf8, 0x8000}}, {{&(0x7f000000b5c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f000000b900)=[{&(0x7f000000b640)="6f6fc0145e747b026550be9be30f45ead533ddef4a76d2686c9d1e67dc46a7b25b4bd197d87addfc91db7f7402b69d1f22fd62f7056511ce3f7d7bb440e94af8fb82962e0d1df1751e2bb8952fc973b88430172f5dea85dca2b09bf2f5bf3e8a2f60b58911a4", 0x66}, {&(0x7f000000b6c0)="b4dd261495772c3c1a49928b5c47cf7870ac", 0x12}, {&(0x7f000000b700)="4ce169540561cafa1fe9b03f279204f020da527bdbea0e007a2afd14524138f04286d05f7ab500947697d813c98b6e027e034793c0be1fca5ef982452ade4861797d02412b179f5c6149ffffbfe111568e81258a9f545c3823c06ddf9eaadf35b5a445eba9b39e0e2af622ceb3646a4cc7901b9b08f9be34f578e139ad339e84f99fc8f38af410339ec57939d72b28376fd1e76ea4f00835f7989463345d1535cd0e28d49761fce5d7a51b3b754eebc81a3c5c2c093c29043ad17705936bb1c649c703cea97babff626ac29d26ef037f32af5ef6a40e82de0710b78c", 0xdc}, {&(0x7f000000b800)="e6bd0836d90f5178f1bf1ec0d6cdd298b9797398885dc10bf3355042b878dd9bdc5c4029b54a70b60a86e9f879c8c1964cef8e2a4a51f7ec5fe50efa4ce93dd7f3c3533e4a8a56c5d3af50e405b47e5086e2a5545145b5066c1978e7c2f6f05ea67c5b5260b0c0585f8f072ae9f7fcabf78348881f794be429375aa13a40959dcb6e541cc24cd5412819e06ffb86e8e1e45ba857f6365469952a9a05c035e8d6f0cf7c38e6ae56f7804925669f6e79b557a297525ff860a5017021d7dd646671eef724a4145454df7f6f26316b03b774c7a7ae4f16511289a4e723dc20d6", 0xde}], 0x4, 0x0, 0x0, 0x8040}}], 0x8, 0x8080) 0s ago: executing program 2 (id=3512): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) r2 = memfd_secret(0x0) ftruncate(r2, 0x581) ftruncate(r2, 0x0) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x38, 0x4}, {0x6, 0xfc}]}) write(r3, &(0x7f0000000280)="4591c28e8b83", 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, &(0x7f0000000540)=@urb_type_iso={0x0, {0x1, 0x1}, 0x1000000, 0x2, 0x0, 0x0, 0x7172, 0xa8b, 0x4f, 0x51bf, 0xfffffffe, 0x0, [{0x6, 0x8, 0x8}, {0x200, 0x6, 0x8}, {0x1bd, 0x80000001, 0x9e6b}, {0x5, 0x9, 0x9}, {0x6, 0x5, 0x80000001}, {0x81, 0xb3}, {0x5, 0x3, 0x8}, {0xff, 0x6, 0x10000}, {0xa7c, 0x7, 0x4}, {0x7f, 0x6, 0xa}, {0x9, 0x7fff, 0x2}, {0x7f43c63, 0x7, 0x101}, {0xb, 0x8, 0x8}, {0x2, 0x7, 0x100}, {0x9, 0x920, 0x2}, {0x3, 0x1, 0x8}, {0x1, 0x9, 0x58e}, {0x7, 0x4, 0xc758}, {0x8001, 0x9, 0x21}, {0x9, 0x3, 0xc}, {0x81, 0x7fffffff, 0x8}, {0x2, 0x7fff, 0x233}, {0xa, 0xcc3, 0x7a2b}, {0x7, 0x9, 0x75}, {0x9, 0xb088, 0x1}, {0x81, 0x9, 0x184f}, {0x3ff, 0x8, 0x5c}, {0x5, 0x79, 0x8}, {0x7, 0x2}, {0xfffff717, 0x7fff, 0x2}, {0x4, 0xdf, 0x5}, {0x14c, 0x81, 0x1}, {0x4, 0x6, 0xe}, {0x6, 0x2, 0x8}, {0x3, 0x0, 0x7}, {0x2, 0xffff, 0x8}, {0x78, 0x80000000, 0x400000ff}, {0x1, 0x7fff, 0x8}, {0x8, 0x7, 0x9}, {0x1000, 0x100, 0x7ff}, {0x5, 0x9, 0xf0a4}, {0x8000, 0x0, 0x6}, {0xa, 0xf, 0x5b}, {0xfc, 0x8, 0x10000}, {0xc, 0x10000, 0x2}, {0x4, 0x1, 0x5b}, {0x3, 0x1000, 0x5}, {0x6, 0xa000000, 0x7f}, {0xa, 0xb, 0xa35}, {0x8c, 0xfffffff8, 0x8}, {0x5, 0x4, 0x80000000}, {0x1, 0x7, 0x5}, {0x1, 0x6, 0xfff}, {0xc, 0xfeadea0, 0x2ff}, {0x77f7, 0xd3, 0x4}, {0x0, 0xd9, 0x1ff}, {0x40, 0x5, 0x3}, {0x8, 0x9, 0x1}, {0x2, 0x8, 0x3}, {0x4, 0x0, 0x2}, {0x5, 0x2, 0x4}, {0x34ad, 0x8, 0xffffffff}, {0x4, 0x7f, 0x141}, {0x0, 0x3, 0xb}, {0x0, 0x101, 0x5}, {0x0, 0x2, 0x10000}, {0x81, 0xff, 0x5777}, {0x2, 0xfffffff1, 0x8}, {0xde, 0x7fff, 0x625f5b28}, {0xa, 0x5, 0x3}, {0x3ff, 0xfffffff7, 0x80000001}, {0x4, 0x80000001, 0x7}, {0xc, 0xfff, 0x8}, {0x4, 0x2, 0x5}, {0x5, 0x8001, 0x80000000}, {0x40006, 0x0, 0x9}, {0xd107, 0xa8db, 0x6}, {0x9, 0x0, 0x7}, {0x6, 0x2, 0x7}]}) userfaultfd(0x80001) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4) listen(r5, 0x0) kernel console output (not intermixed with test programs): 85.656216][T17407] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input70 [ 1085.695315][ T30] audit: type=1400 audit(1765380341.178:1070): avc: denied { connect } for pid=17403 comm="syz.3.2910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1085.826273][ T10] usb 8-1: device not accepting address 2, error -71 [ 1086.033775][T17418] bridge0: port 3(gretap0) entered blocking state [ 1086.040652][T17418] bridge0: port 3(gretap0) entered disabled state [ 1086.048611][T17418] gretap0: entered allmulticast mode [ 1086.058317][T17418] gretap0: entered promiscuous mode [ 1086.065205][T17418] bridge0: port 3(gretap0) entered blocking state [ 1086.071830][T17418] bridge0: port 3(gretap0) entered forwarding state [ 1088.557364][T17431] syz.3.2915 (17431): /proc/17423/oom_adj is deprecated, please use /proc/17423/oom_score_adj instead. [ 1088.570198][ T30] audit: type=1400 audit(1765380343.998:1071): avc: denied { create } for pid=17423 comm="syz.3.2915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1088.810631][ T30] audit: type=1400 audit(1765380343.998:1072): avc: denied { write } for pid=17423 comm="syz.3.2915" path="socket:[71931]" dev="sockfs" ino=71931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1089.031066][T17430] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1089.379560][ T30] audit: type=1400 audit(1765380344.908:1073): avc: denied { getopt } for pid=17444 comm="syz.3.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1089.674444][ T5872] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 1089.851120][ T5872] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1089.884845][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1089.931858][ T5872] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1089.961505][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1089.990388][ T5872] usb 3-1: Product: syz [ 1090.002603][ T5872] usb 3-1: Manufacturer: syz [ 1090.022745][ T5872] usb 3-1: SerialNumber: syz [ 1090.053193][ T5872] usb 3-1: config 0 descriptor?? [ 1090.084958][ T5872] usb 3-1: selecting invalid altsetting 0 [ 1090.156783][ T10] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1090.326748][ T10] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1090.360175][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.402066][ T10] usb 4-1: config 0 descriptor?? [ 1090.635186][T17459] FAULT_INJECTION: forcing a failure. [ 1090.635186][T17459] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.648900][T17459] CPU: 0 UID: 0 PID: 17459 Comm: syz.2.2919 Tainted: G L syzkaller #0 PREEMPT(full) [ 1090.648929][T17459] Tainted: [L]=SOFTLOCKUP [ 1090.648936][T17459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1090.648946][T17459] Call Trace: [ 1090.648958][T17459] [ 1090.648967][T17459] dump_stack_lvl+0x16c/0x1f0 [ 1090.648991][T17459] should_fail_ex+0x512/0x640 [ 1090.649015][T17459] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1090.649048][T17459] should_failslab+0xc2/0x120 [ 1090.649072][T17459] __kmalloc_cache_noprof+0x80/0x800 [ 1090.649101][T17459] ? snd_pcm_attach_substream+0x441/0xd60 [ 1090.649133][T17459] ? snd_pcm_attach_substream+0x441/0xd60 [ 1090.649158][T17459] snd_pcm_attach_substream+0x441/0xd60 [ 1090.649191][T17459] snd_pcm_open_substream+0x8d/0x1820 [ 1090.649218][T17459] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1090.649251][T17459] snd_pcm_oss_open+0x735/0x1400 [ 1090.649283][T17459] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1090.649306][T17459] ? __pfx_default_wake_function+0x10/0x10 [ 1090.649337][T17459] ? __pfx___schedule+0x10/0x10 [ 1090.649376][T17459] ? preempt_schedule_thunk+0x16/0x30 [ 1090.649398][T17459] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1090.649419][T17459] soundcore_open+0x40c/0x580 [ 1090.649440][T17459] ? __pfx_soundcore_open+0x10/0x10 [ 1090.649457][T17459] chrdev_open+0x234/0x6a0 [ 1090.649484][T17459] ? __pfx_chrdev_open+0x10/0x10 [ 1090.649510][T17459] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1090.649545][T17459] do_dentry_open+0x748/0x1590 [ 1090.649567][T17459] ? __pfx_chrdev_open+0x10/0x10 [ 1090.649599][T17459] vfs_open+0x82/0x3f0 [ 1090.649629][T17459] path_openat+0x2078/0x3140 [ 1090.649660][T17459] ? trace_sched_exit_tp+0xd1/0x110 [ 1090.649677][T17459] ? __schedule+0x10b9/0x6150 [ 1090.649704][T17459] ? __pfx_path_openat+0x10/0x10 [ 1090.649739][T17459] do_filp_open+0x20b/0x470 [ 1090.649765][T17459] ? __pfx_do_filp_open+0x10/0x10 [ 1090.649788][T17459] ? __pfx___schedule+0x10/0x10 [ 1090.649814][T17459] ? lockdep_hardirqs_on+0x7c/0x110 [ 1090.649851][T17459] ? alloc_fd+0x471/0x7d0 [ 1090.649890][T17459] do_sys_openat2+0x11f/0x280 [ 1090.649907][T17459] ? __pfx_do_sys_openat2+0x10/0x10 [ 1090.649935][T17459] __x64_sys_openat+0x174/0x210 [ 1090.649953][T17459] ? __pfx___x64_sys_openat+0x10/0x10 [ 1090.649981][T17459] do_syscall_64+0xcd/0xf80 [ 1090.650001][T17459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.650020][T17459] RIP: 0033:0x7f172698df90 [ 1090.650036][T17459] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1090.650053][T17459] RSP: 002b:00007f172785cb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1090.650072][T17459] RAX: ffffffffffffffda RBX: 00000000008c4201 RCX: 00007f172698df90 [ 1090.650085][T17459] RDX: 00000000008c4201 RSI: 00007f172785cc10 RDI: 00000000ffffff9c [ 1090.650098][T17459] RBP: 00007f172785cc10 R08: 0000000000000000 R09: 00236f696475612f [ 1090.650110][T17459] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1090.650122][T17459] R13: 00007f1726be6218 R14: 00007f1726be6180 R15: 00007fffe34f8268 [ 1090.650150][T17459] [ 1090.956724][T10984] Bluetooth: hci2: command 0x0401 tx timeout [ 1090.963021][ T10] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1091.768566][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 1091.805160][ T10] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1091.940987][T17484] xt_socket: unknown flags 0x4 [ 1092.010434][ T10] [drm] Initialized udl on minor 2 [ 1092.018662][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1092.029153][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1092.036829][T10237] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1092.048131][ T10] usb 4-1: USB disconnect, device number 98 [ 1092.054157][T10237] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1092.169527][ T5872] usb 3-1: USB disconnect, device number 85 [ 1092.267862][T17484] lo speed is unknown, defaulting to 1000 [ 1092.299595][T17484] lo speed is unknown, defaulting to 1000 [ 1092.456097][T17489] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2927'. [ 1092.729562][T17498] loop3: detected capacity change from 0 to 7 [ 1092.753442][T13936] Dev loop3: unable to read RDB block 7 [ 1092.764512][T13936] loop3: unable to read partition table [ 1092.878888][T13936] loop3: partition table beyond EOD, truncated [ 1092.909797][T17498] Dev loop3: unable to read RDB block 7 [ 1092.948877][T17498] loop3: unable to read partition table [ 1092.963911][T17498] loop3: partition table beyond EOD, truncated [ 1092.986754][T17498] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1096.014955][T17538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1096.213177][T17533] overlay: Unknown parameter 'fsname' [ 1096.391017][T17544] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2935'. [ 1096.896712][T10237] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1097.272015][T17560] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2940'. [ 1097.579109][T10237] usb 7-1: Using ep0 maxpacket: 16 [ 1097.654047][T10237] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1097.680029][T10237] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.704695][T10237] usb 7-1: config 0 descriptor?? [ 1097.815831][T17370] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1097.848063][T10237] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1098.148434][T17370] usb 8-1: Using ep0 maxpacket: 16 [ 1098.387332][T17370] usb 8-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 1098.444285][T17370] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.637865][T17370] usb 8-1: config 0 descriptor?? [ 1099.087278][T10237] gspca_sonixj: reg_r err -110 [ 1099.098906][T10237] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 1099.516814][T17370] pegasus 8-1:0.0: probe with driver pegasus failed with error -121 [ 1099.895159][T17370] usb 7-1: USB disconnect, device number 57 [ 1100.785393][T17370] usb 8-1: USB disconnect, device number 4 [ 1103.654547][ T30] audit: type=1400 audit(1765380359.178:1074): avc: denied { getopt } for pid=17602 comm="syz.3.2952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1103.913905][ T30] audit: type=1400 audit(1765380359.178:1075): avc: denied { connect } for pid=17602 comm="syz.3.2952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1105.594215][T17638] overlay: ./file0 is not a directory [ 1106.175671][T15279] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1106.265705][T10237] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1106.339597][T15279] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1106.415683][T15279] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1106.441739][T10237] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1106.455163][T15279] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1106.467062][T10237] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1107.180999][T10237] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1107.212360][T10237] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1107.215129][T15279] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1107.222898][T10237] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1107.240742][T10237] usb 4-1: Product: syz [ 1107.257838][T10237] usb 4-1: Manufacturer: syz [ 1107.287825][T10237] usb 4-1: SerialNumber: syz [ 1107.299597][T10237] usb 4-1: config 0 descriptor?? [ 1107.301382][T15279] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1107.330906][T10237] hub 4-1:0.0: bad descriptor, ignoring hub [ 1107.346291][T10237] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1107.353541][T15279] usb 7-1: Product: syz [ 1107.356572][T10237] usb 4-1: selecting invalid altsetting 0 [ 1107.367977][T15279] usb 7-1: Manufacturer: syz [ 1107.372588][T15279] usb 7-1: SerialNumber: syz [ 1107.409425][T15279] usb 7-1: config 0 descriptor?? [ 1107.456693][T15279] hub 7-1:0.0: bad descriptor, ignoring hub [ 1107.478888][T15279] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1107.516985][T15279] usb 7-1: selecting invalid altsetting 0 [ 1107.695854][ T116] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1107.859298][ T116] usb 8-1: Using ep0 maxpacket: 8 [ 1107.885262][ T116] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1107.905150][ T116] usb 8-1: config 0 has no interface number 0 [ 1107.915288][ T116] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1107.926610][T10237] usb 7-1: USB disconnect, device number 58 [ 1107.927239][T17649] usb 4-1: reset high-speed USB device number 99 using dummy_hcd [ 1107.951936][ T116] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1107.993646][ T116] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1108.045913][ T116] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1108.067025][ T116] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1108.085677][ T116] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.114886][ T116] usb 8-1: config 0 descriptor?? [ 1108.133159][ T116] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1108.266099][T10237] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1108.417919][T10237] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1108.427452][T10237] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1108.438501][T10237] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1108.833461][T17370] usb 8-1: USB disconnect, device number 5 [ 1108.849486][T10237] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1108.863300][T17370] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1108.871234][T10237] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1108.884824][T10237] usb 7-1: Product: syz [ 1108.892252][T10237] usb 7-1: Manufacturer: syz [ 1108.898577][T10237] usb 7-1: SerialNumber: syz [ 1108.908416][T10237] usb 7-1: config 0 descriptor?? [ 1109.013252][T10237] hub 7-1:0.0: bad descriptor, ignoring hub [ 1109.016010][ T8598] usb 4-1: USB disconnect, device number 99 [ 1109.026506][T10237] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1109.091354][T10237] usb 7-1: selecting invalid altsetting 0 [ 1109.177840][T10237] usb 7-1: USB disconnect, device number 59 [ 1109.233941][T14038] udevd[14038]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1109.806310][T10237] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1109.987377][T10237] usb 3-1: device descriptor read/64, error -71 [ 1110.133831][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1110.154889][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1110.163288][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1110.195837][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1110.203277][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1110.279641][T10237] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1110.357576][T17686] lo speed is unknown, defaulting to 1000 [ 1110.373752][T17686] lo speed is unknown, defaulting to 1000 [ 1110.486319][T10237] usb 3-1: device descriptor read/64, error -71 [ 1110.618765][T10237] usb usb3-port1: attempt power cycle [ 1110.995033][T10237] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1111.048176][T10237] usb 3-1: device descriptor read/8, error -71 [ 1111.306845][T17686] chnl_net:caif_netlink_parms(): no params data found [ 1111.336628][T10237] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1111.366981][T10237] usb 3-1: device descriptor read/8, error -71 [ 1111.486227][T10237] usb usb3-port1: unable to enumerate USB device [ 1111.517267][T17686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.524573][T17686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.532674][T17686] bridge_slave_0: entered allmulticast mode [ 1111.541898][T17686] bridge_slave_0: entered promiscuous mode [ 1111.551219][T17686] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.559904][T17686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.568190][T17686] bridge_slave_1: entered allmulticast mode [ 1111.577910][T17686] bridge_slave_1: entered promiscuous mode [ 1111.619932][T17686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.295350][T17686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1112.295725][ T5811] Bluetooth: hci4: command tx timeout [ 1112.353260][T17370] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1112.763612][T17712] bond1: entered allmulticast mode [ 1112.780760][T17712] Cannot find add_set index 128 as target [ 1112.799101][T17686] team0: Port device team_slave_0 added [ 1112.827819][T17686] team0: Port device team_slave_1 added [ 1112.849204][ T30] audit: type=1400 audit(1765380368.378:1076): avc: denied { connect } for pid=17711 comm="syz.6.2982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1112.874777][T17370] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1112.884169][T17370] usb 8-1: not running at top speed; connect to a high speed hub [ 1112.903852][T17370] usb 8-1: config 4 has an invalid interface number: 147 but max is 0 [ 1112.911080][T17718] trusted_key: encrypted_key: insufficient parameters specified [ 1112.921410][T17370] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.934481][T17370] usb 8-1: config 4 has no interface number 0 [ 1112.952724][T17370] usb 8-1: Dual-Role OTG device on HNP port [ 1112.960602][T17370] usb 8-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1112.970400][T17370] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 1112.980744][T17370] usb 8-1: Product: syz [ 1112.982359][T17686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1112.992475][T17370] usb 8-1: Manufacturer: syz [ 1112.998974][T17370] usb 8-1: SerialNumber: syz [ 1113.003616][T17686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.083742][T17686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.116793][T17686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.137570][T17686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.205749][T17686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.235919][T17702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.250232][T17702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1113.272868][T17702] xt_time: unknown flags 0xc [ 1113.293787][T17370] uvcvideo 8-1:4.147: Found multiple Units with ID 6 [ 1113.303748][T17370] uvcvideo 8-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 1113.313203][T17370] uvcvideo 8-1:4.147: No streaming interface found for terminal 65535. [ 1113.339199][T17370] usb 8-1: USB disconnect, device number 6 [ 1113.385197][T17686] hsr_slave_0: entered promiscuous mode [ 1113.404352][T17686] hsr_slave_1: entered promiscuous mode [ 1113.435742][T17686] debugfs: 'hsr0' already exists in 'hsr' [ 1113.448249][T17686] Cannot create hsr debugfs directory [ 1113.750790][T17686] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1113.763275][T17686] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.832429][T17686] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1113.858738][T17686] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.947368][T17370] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1113.959393][T17686] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1113.985384][T17686] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.082921][T17686] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1114.100019][T17686] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.163417][T17730] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1114.179191][T17730] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1114.188449][T17370] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1114.198467][T17370] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1114.223254][T17370] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1114.321423][T17370] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1114.331324][T17370] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1114.341522][T17370] usb 7-1: Product: syz [ 1114.346179][T17370] usb 7-1: Manufacturer: syz [ 1114.352554][T17370] usb 7-1: SerialNumber: syz [ 1114.370293][ T5811] Bluetooth: hci4: command tx timeout [ 1114.822558][T17370] usb 7-1: config 0 descriptor?? [ 1114.831488][T17370] hub 7-1:0.0: bad descriptor, ignoring hub [ 1114.867445][T17370] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1114.898487][T17370] usb 7-1: selecting invalid altsetting 0 [ 1115.260541][T17738] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2989'. [ 1115.699994][T17686] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1115.720637][T17686] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1115.736297][T17686] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1115.752084][T17686] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1115.875477][T17686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.913954][T17686] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.931492][T12101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.938642][T12101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.963612][T12101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.970703][T12101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1116.026530][T17722] usb 7-1: reset high-speed USB device number 60 using dummy_hcd [ 1116.251717][T17758] netlink: 'syz.5.2993': attribute type 2 has an invalid length. [ 1116.259964][T17686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1116.267247][T17758] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2993'. [ 1116.446142][ T5811] Bluetooth: hci4: command tx timeout [ 1116.776816][T17686] veth0_vlan: entered promiscuous mode [ 1116.824088][T17686] veth1_vlan: entered promiscuous mode [ 1116.900191][T17686] veth0_macvtap: entered promiscuous mode [ 1116.933606][T17686] veth1_macvtap: entered promiscuous mode [ 1117.106745][T17370] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1117.345544][T17686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1117.382762][T17686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1117.410506][T17370] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.460290][T17370] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.471848][ T6855] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.500805][T17362] usb 7-1: USB disconnect, device number 60 [ 1117.526188][ T6855] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.541740][T17370] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1117.584953][ T6855] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.598894][T17370] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1117.610559][ T6855] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.622207][T17370] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.636744][T17370] usb 8-1: config 0 descriptor?? [ 1118.377339][ T7576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.387322][ T7576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.441999][ T7767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.459377][ T7767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.526804][ T5811] Bluetooth: hci4: command tx timeout [ 1118.629315][T17370] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1119.268939][ T5872] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1119.568430][ T5872] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1119.585689][ T5872] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1119.612138][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1119.638059][ T5872] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1119.661744][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1119.810521][T17791] loop6: detected capacity change from 0 to 524288000 [ 1119.830962][ T5872] usb 3-1: Product: syz [ 1119.839423][ T5872] usb 3-1: Manufacturer: syz [ 1119.844106][ T5872] usb 3-1: SerialNumber: syz [ 1119.861565][ T5872] usb 3-1: config 0 descriptor?? [ 1119.876945][ T5872] hub 3-1:0.0: bad descriptor, ignoring hub [ 1119.883007][ T5872] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1119.893571][ T5872] usb 3-1: selecting invalid altsetting 0 [ 1119.948975][ T30] audit: type=1400 audit(1765380375.468:1077): avc: denied { connect } for pid=17785 comm="syz.5.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1120.043744][ T30] audit: type=1400 audit(1765380375.478:1078): avc: denied { read } for pid=17785 comm="syz.5.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1120.103401][T17756] usb 8-1: string descriptor 0 read error: -71 [ 1120.189318][ T30] audit: type=1400 audit(1765380375.718:1079): avc: denied { bind } for pid=17785 comm="syz.5.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1120.227441][ T116] usb 8-1: reset high-speed USB device number 7 using dummy_hcd [ 1120.353732][ T30] audit: type=1400 audit(1765380375.878:1080): avc: denied { write } for pid=17785 comm="syz.5.2999" path="socket:[72976]" dev="sockfs" ino=72976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1120.395882][ T116] usb 8-1: device descriptor read/64, error -32 [ 1120.413268][ T10] usb 3-1: USB disconnect, device number 90 [ 1121.014579][ T116] usb 8-1: reset high-speed USB device number 7 using dummy_hcd [ 1121.186341][ T10] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1121.195767][ T116] usb 8-1: device descriptor read/64, error -32 [ 1121.377790][ T10] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1121.406673][ T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1121.452121][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1121.531617][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1121.570426][ T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1121.584388][ T10] usb 3-1: Product: syz [ 1121.589357][ T10] usb 3-1: Manufacturer: syz [ 1121.593968][ T10] usb 3-1: SerialNumber: syz [ 1121.621963][ T10] usb 3-1: config 0 descriptor?? [ 1121.626974][T17815] bond1: entered allmulticast mode [ 1121.634702][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 1121.642039][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1121.650065][T17815] Cannot find set identified by id 0 to match [ 1121.654199][ T10] usb 3-1: selecting invalid altsetting 0 [ 1122.076822][ T5872] usb 8-1: USB disconnect, device number 7 [ 1122.236536][T10237] usb 3-1: USB disconnect, device number 91 [ 1122.244434][ T10] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1122.429777][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1122.438412][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.449361][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1122.461584][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1122.504977][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1122.587650][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1122.633804][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.740825][ T10] usb 4-1: Product: syz [ 1122.745020][ T10] usb 4-1: Manufacturer: syz [ 1122.764369][ T10] usb 4-1: SerialNumber: syz [ 1122.777168][ T10] usb 4-1: config 0 descriptor?? [ 1123.066312][ T10] rc_core: IR keymap rc-xbox-dvd not found [ 1123.191592][T17831] cgroup: Unknown subsys name 'rlimit' [ 1123.201733][ T10] Registered IR keymap rc-empty [ 1123.734894][ T10] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1123.776468][T17831] syzkaller1: entered promiscuous mode [ 1123.794898][ T10] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input72 [ 1123.808586][T17831] syzkaller1: entered allmulticast mode [ 1124.046320][ T10] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1124.174619][ T30] audit: type=1400 audit(1765380379.698:1081): avc: denied { getopt } for pid=17829 comm="syz.3.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1124.228139][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1124.238097][ T10] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1124.247851][ T10] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1124.280962][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1124.295019][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1124.295417][T17850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3012'. [ 1124.321890][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1124.433035][T17859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3012'. [ 1124.457584][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1124.501358][T17861] bond1: entered allmulticast mode [ 1124.507191][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1124.529945][T17863] Cannot find set identified by id 0 to match [ 1124.552824][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1124.584161][T17859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3012'. [ 1124.594211][ T10] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1124.595634][ T116] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1124.603997][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.715203][T17859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3012'. [ 1124.807647][ T10] usb 7-1: config 0 descriptor?? [ 1124.814513][T17848] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1124.833707][ T116] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1124.851117][ T116] usb 3-1: not running at top speed; connect to a high speed hub [ 1124.934702][ T116] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 1124.957620][ T116] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.987359][ T116] usb 3-1: config 4 has no interface number 0 [ 1125.030019][ T116] usb 3-1: Dual-Role OTG device on HNP port [ 1125.042573][ T116] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1125.059332][T17848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.063919][ T10] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 61 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1125.067837][ T116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 1125.067862][ T116] usb 3-1: Product: syz [ 1125.067877][ T116] usb 3-1: Manufacturer: syz [ 1125.067892][ T116] usb 3-1: SerialNumber: syz [ 1125.156021][T15279] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1125.164832][T17848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.295505][ C0] usblp0: nonzero read bulk status received: -71 [ 1125.303772][T17848] usblp0: error -71 reading from printer [ 1125.306146][T15279] usb 8-1: Using ep0 maxpacket: 16 [ 1125.318430][ C1] usblp0: nonzero read bulk status received: -71 [ 1125.334572][ T7717] usb 7-1: USB disconnect, device number 61 [ 1125.343787][T17858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.371232][T15279] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1125.388139][ T7717] usblp0: removed [ 1125.398361][T17858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.412967][T15279] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.430182][T15279] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1125.453153][T17858] xt_time: unknown flags 0xc [ 1125.469535][ T116] uvcvideo 3-1:4.147: Found multiple Units with ID 6 [ 1125.491246][T15279] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1125.507151][ T116] uvcvideo 3-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 1125.525225][T15279] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.536060][ T116] uvcvideo 3-1:4.147: No streaming interface found for terminal 65535. [ 1125.567680][T15279] usb 8-1: Product: syz [ 1125.590418][T15279] usb 8-1: Manufacturer: syz [ 1125.598361][ T116] usb 3-1: USB disconnect, device number 92 [ 1125.614197][T15279] usb 8-1: SerialNumber: syz [ 1126.079642][T17877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1126.101304][T17877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1126.119795][T15279] usb 8-1: 0:2 : does not exist [ 1126.248748][ C0] xbox_remote 4-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 1126.248752][ T8598] usb 4-1: USB disconnect, device number 100 [ 1126.888240][T15279] usb 8-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1126.944509][T15279] usb 8-1: USB disconnect, device number 8 [ 1127.094341][T13936] udevd[13936]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1129.187154][T17909] netlink: 'syz.3.3035': attribute type 4 has an invalid length. [ 1129.291246][T17909] netlink: 'syz.3.3035': attribute type 17 has an invalid length. [ 1129.636947][T17908] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1129.771686][ T30] audit: type=1400 audit(1765380385.298:1082): avc: denied { map } for pid=17911 comm="syz.2.3036" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1129.983799][ T30] audit: type=1400 audit(1765380385.508:1083): avc: denied { setopt } for pid=17919 comm="syz.7.3040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1130.106119][T17923] dns_resolver: Unsupported server list version (0) [ 1130.166190][T10237] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1130.327858][T10237] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.418964][T10237] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1130.938284][T10237] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1130.974080][T10237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1130.988576][T10237] usb 3-1: SerialNumber: syz [ 1131.438295][T17917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.826275][T17917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.847088][T17917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.938547][T17917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.962776][T17936] mkiss: ax0: crc mode is auto. [ 1131.984566][T17917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.028271][T17917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.044467][T17917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.083030][T17917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.107995][T17917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.121719][T17917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.162235][T10237] usb 3-1: 0:2 : does not exist [ 1132.176296][ T10] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1132.212198][T10237] usb 3-1: USB disconnect, device number 93 [ 1132.228302][T15279] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 1132.258071][T13936] udevd[13936]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1132.346299][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1132.353318][ T10] usb 7-1: config 0 has an invalid interface number: 14 but max is 0 [ 1132.366727][ T10] usb 7-1: config 0 has no interface number 0 [ 1132.385123][ T10] usb 7-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=e5.73 [ 1132.415902][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.424748][ T10] usb 7-1: Product: syz [ 1132.446867][ T10] usb 7-1: Manufacturer: syz [ 1132.461841][ T10] usb 7-1: SerialNumber: syz [ 1132.590083][ T10] usb 7-1: config 0 descriptor?? [ 1132.717072][ T10] gspca_main: pac7311-2.14.0 probing 093a:260e [ 1132.857090][T15279] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1132.865208][T15279] usb 8-1: not running at top speed; connect to a high speed hub [ 1132.874007][T15279] usb 8-1: config 4 has an invalid interface number: 147 but max is 0 [ 1132.882495][T15279] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.892672][T15279] usb 8-1: config 4 has no interface number 0 [ 1132.919893][T15279] usb 8-1: Dual-Role OTG device on HNP port [ 1132.927499][T15279] usb 8-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1132.937595][T15279] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 1132.949968][T15279] usb 8-1: Product: syz [ 1132.954454][T15279] usb 8-1: Manufacturer: syz [ 1132.959372][T15279] usb 8-1: SerialNumber: syz [ 1133.066595][ T10] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 1133.074508][ T10] pac7311 7-1:0.14: probe with driver pac7311 failed with error -71 [ 1133.118911][ T10] usb 7-1: USB disconnect, device number 62 [ 1133.230186][T17938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1133.266997][T17938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1133.290644][T17938] xt_time: unknown flags 0xc [ 1133.321870][T15279] uvcvideo 8-1:4.147: Found multiple Units with ID 6 [ 1133.350325][T15279] uvcvideo 8-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 1133.372559][T15279] uvcvideo 8-1:4.147: No streaming interface found for terminal 65535. [ 1133.390236][T15279] usb 8-1: USB disconnect, device number 9 [ 1133.734125][T17966] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1133.778621][T17966] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1135.327154][T15279] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 1135.518883][T15279] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1135.548391][T15279] usb 3-1: config 0 has no interface number 0 [ 1135.554581][T15279] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1135.567707][T17990] loop7: detected capacity change from 0 to 16384 [ 1135.617830][T15279] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1135.630049][T15279] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1135.644799][T15279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.674356][T17991] loop7: detected capacity change from 16384 to 0 [ 1135.694559][T15279] usb 3-1: config 0 descriptor?? [ 1135.751766][T17980] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1135.768069][T15279] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1136.527282][T15279] usb 3-1: USB disconnect, device number 94 [ 1137.143093][T18023] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3066'. [ 1138.185125][ T30] audit: type=1400 audit(1765380393.708:1084): avc: denied { watch } for pid=18029 comm="syz.2.3070" path="/33" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1138.456076][ T30] audit: type=1400 audit(1765380393.738:1085): avc: denied { watch_sb } for pid=18029 comm="syz.2.3070" path="/33" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1138.965858][T18036] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1139.278429][T18036] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1140.111937][T18050] tc_dump_action: action bad kind [ 1140.367271][ T5885] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 1141.044247][ T5885] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 232, setting to 64 [ 1141.058219][ T5885] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1141.176503][ T5885] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1141.211474][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1141.247247][ T5885] usb 3-1: Product: syz [ 1141.251450][ T5885] usb 3-1: Manufacturer: syz [ 1141.283297][ T5885] usb 3-1: SerialNumber: syz [ 1141.303666][ T5885] usb 3-1: config 0 descriptor?? [ 1141.329723][T18053] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1141.348357][ T5885] usb 3-1: selecting invalid altsetting 0 [ 1141.398192][T18065] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3079'. [ 1144.247447][T18088] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3084'. [ 1145.722056][T10237] usb 3-1: USB disconnect, device number 95 [ 1145.987102][T18093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3086'. [ 1146.036413][ T5930] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1146.324393][T18093] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 1146.333038][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 1147.280829][ T5930] usb 7-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 1147.291028][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.306027][ T5930] usb 7-1: config 0 descriptor?? [ 1147.363686][T18093] batadv_slave_0: entered promiscuous mode [ 1147.421468][T18093] batadv_slave_0: left promiscuous mode [ 1147.786191][T18093] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 1148.736303][ T10] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1148.848024][ T5930] pegasus 7-1:0.0: probe with driver pegasus failed with error -32 [ 1148.908978][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1148.955033][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.978404][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1148.989410][ T10] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1149.007269][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.139139][ T10] usb 3-1: config 0 descriptor?? [ 1149.149001][ T5930] usb 7-1: USB disconnect, device number 64 [ 1149.878361][T18121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.933700][T18121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.113266][ T10] corsair 0003:1B1C:1B02.001F: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 1150.666799][ T10] corsair 0003:1B1C:1B02.001F: Failed to get K90 initial state (error -32). [ 1150.756838][T18147] netlink: 'syz.5.3099': attribute type 2 has an invalid length. [ 1150.823965][ T10] usb 3-1: USB disconnect, device number 96 [ 1151.746368][ T30] audit: type=1400 audit(1765380407.258:1086): avc: denied { call } for pid=18160 comm="syz.3.3103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1151.786958][ T30] audit: type=1400 audit(1765380407.268:1087): avc: denied { transfer } for pid=18160 comm="syz.3.3103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1151.915678][ T116] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1152.019696][T18173] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3107'. [ 1152.066173][ T116] usb 3-1: Using ep0 maxpacket: 32 [ 1152.076487][ T116] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1152.092085][ T116] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1152.102715][ T116] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1152.113685][ T116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1152.125130][ T116] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1152.135761][ T116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1152.146356][ T7717] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1152.163367][ T116] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1152.179960][ T116] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1152.195123][ T116] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1152.212094][ T116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.246052][ T116] usb 3-1: config 0 descriptor?? [ 1152.325234][ T7717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.341552][ T7717] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1152.343300][T18175] binder: 18174:18175 ioctl 5411 200000000600 returned -22 [ 1152.368458][ T7717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.463726][ T7717] usb 4-1: config 0 descriptor?? [ 1152.492290][T18159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1152.503168][ T116] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 97 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1152.518176][T18159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1152.522293][T18175] binder: 18174:18175 ioctl 40046201 200000000640 returned -22 [ 1152.548918][ T116] usb 3-1: USB disconnect, device number 97 [ 1152.559713][ T116] usblp0: removed [ 1153.722970][ T7717] usbhid 4-1:0.0: can't add hid device: -71 [ 1153.755756][ T7717] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1153.797233][ T7717] usb 4-1: USB disconnect, device number 101 [ 1153.850964][T18186] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1153.882825][T18186] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1153.894177][T18189] netlink: 'syz.6.3111': attribute type 1 has an invalid length. [ 1154.528584][T18189] netlink: 'syz.6.3111': attribute type 1 has an invalid length. [ 1154.982819][T18203] netlink: 'syz.5.3115': attribute type 1 has an invalid length. [ 1155.065058][T18202] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3115'. [ 1155.074806][T18189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1155.217410][T18203] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1155.225458][T18202] bond6: entered promiscuous mode [ 1155.362286][T18205] bond6: (slave dummy0): making interface the new active one [ 1155.418035][T18205] dummy0: entered promiscuous mode [ 1155.418137][T10237] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1155.433258][T18205] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 1155.637985][T18216] FAULT_INJECTION: forcing a failure. [ 1155.637985][T18216] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.675161][T18216] CPU: 0 UID: 0 PID: 18216 Comm: syz.5.3118 Tainted: G L syzkaller #0 PREEMPT(full) [ 1155.675189][T18216] Tainted: [L]=SOFTLOCKUP [ 1155.675195][T18216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1155.675204][T18216] Call Trace: [ 1155.675211][T18216] [ 1155.675219][T18216] dump_stack_lvl+0x16c/0x1f0 [ 1155.675241][T18216] should_fail_ex+0x512/0x640 [ 1155.675260][T18216] ? fs_reclaim_acquire+0xae/0x150 [ 1155.675282][T18216] should_failslab+0xc2/0x120 [ 1155.675302][T18216] __kmalloc_noprof+0xeb/0x910 [ 1155.675326][T18216] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1155.675348][T18216] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1155.675364][T18216] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1155.675383][T18216] ? tomoyo_profile+0x47/0x60 [ 1155.675403][T18216] tomoyo_path_number_perm+0x245/0x580 [ 1155.675426][T18216] ? tomoyo_path_number_perm+0x237/0x580 [ 1155.675451][T18216] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1155.675482][T18216] ? find_held_lock+0x2b/0x80 [ 1155.675522][T18216] ? find_held_lock+0x2b/0x80 [ 1155.675544][T18216] ? hook_file_ioctl_common+0x144/0x410 [ 1155.675572][T18216] ? __fget_files+0x20e/0x3c0 [ 1155.675596][T18216] security_file_ioctl+0x9b/0x240 [ 1155.675613][T18216] __x64_sys_ioctl+0xb7/0x210 [ 1155.675631][T18216] do_syscall_64+0xcd/0xf80 [ 1155.675648][T18216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.675664][T18216] RIP: 0033:0x7fd86658f749 [ 1155.675676][T18216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1155.675690][T18216] RSP: 002b:00007fd867481038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1155.675707][T18216] RAX: ffffffffffffffda RBX: 00007fd8667e5fa0 RCX: 00007fd86658f749 [ 1155.675718][T18216] RDX: 0000200000000300 RSI: 00000000c00c643c RDI: 0000000000000003 [ 1155.675729][T18216] RBP: 00007fd867481090 R08: 0000000000000000 R09: 0000000000000000 [ 1155.675739][T18216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1155.675749][T18216] R13: 00007fd8667e6038 R14: 00007fd8667e5fa0 R15: 00007ffc6cd1aa58 [ 1155.675773][T18216] [ 1156.006248][T10237] usb 4-1: Using ep0 maxpacket: 32 [ 1156.033556][T18216] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1156.034528][T10237] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1156.049674][T10237] usb 4-1: config 0 has no interface number 0 [ 1156.056474][T10237] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1156.069837][T10237] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1156.080282][T10237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.088884][T10237] usb 4-1: Product: syz [ 1156.093095][T10237] usb 4-1: Manufacturer: syz [ 1156.098150][T10237] usb 4-1: SerialNumber: syz [ 1156.111828][T10237] usb 4-1: config 0 descriptor?? [ 1156.123211][T10237] smsc75xx v1.0.0 [ 1156.253567][T18220] netlink: 'syz.5.3120': attribute type 2 has an invalid length. [ 1156.301213][T18220] !9: entered promiscuous mode [ 1156.338555][ T30] audit: type=1800 audit(1765380411.868:1088): pid=18220 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3120" name="#2843" dev="overlay" ino=2843 res=0 errno=0 [ 1156.386197][ T5930] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1156.648630][ T5930] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1156.664947][ T5930] usb 3-1: not running at top speed; connect to a high speed hub [ 1156.690634][ T5930] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 1156.726674][ T5930] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.888373][ T5930] usb 3-1: config 4 has no interface number 0 [ 1156.960828][ T5930] usb 3-1: Dual-Role OTG device on HNP port [ 1156.979345][ T5930] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1157.043665][T10237] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1157.063837][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 1157.138001][T18229] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3122'. [ 1157.944528][T10237] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1158.126423][ T5872] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1158.315792][ T5872] usb 8-1: Using ep0 maxpacket: 16 [ 1158.404297][ T5872] usb 8-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 1158.483519][ T5872] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.616707][ T5872] usb 8-1: config 0 descriptor?? [ 1159.533860][ T5930] usb 3-1: Product: syz [ 1159.539207][ T5930] usb 3-1: Manufacturer: syz [ 1159.544669][T10237] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1159.557053][ T5930] usb 3-1: SerialNumber: syz [ 1159.562963][T10237] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1159.574156][T10237] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1159.585257][T10237] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1159.588886][ T5872] pegasus 8-1:0.0: probe with driver pegasus failed with error -121 [ 1159.596480][T10237] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1159.618481][T10237] usb 4-1: USB disconnect, device number 102 [ 1159.796781][ T5930] usb 3-1: can't set config #4, error -71 [ 1160.440128][T10237] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1160.696474][ T5930] usb 3-1: USB disconnect, device number 98 [ 1160.766051][T10237] usb 4-1: device descriptor read/64, error -71 [ 1160.988742][ T5872] usb 8-1: USB disconnect, device number 10 [ 1161.068006][T10237] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1161.114410][ T30] audit: type=1400 audit(1765380416.638:1089): avc: denied { connect } for pid=18258 comm="syz.6.3130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1161.236299][T10237] usb 4-1: device descriptor read/64, error -71 [ 1161.294014][ T30] audit: type=1400 audit(1765380416.818:1090): avc: denied { read } for pid=18258 comm="syz.6.3130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1162.045135][T10237] usb usb4-port1: attempt power cycle [ 1162.806889][T18292] FAULT_INJECTION: forcing a failure. [ 1162.806889][T18292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1162.842418][T18292] CPU: 1 UID: 0 PID: 18292 Comm: syz.3.3139 Tainted: G L syzkaller #0 PREEMPT(full) [ 1162.842455][T18292] Tainted: [L]=SOFTLOCKUP [ 1162.842463][T18292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1162.842474][T18292] Call Trace: [ 1162.842482][T18292] [ 1162.842490][T18292] dump_stack_lvl+0x16c/0x1f0 [ 1162.842515][T18292] should_fail_ex+0x512/0x640 [ 1162.842543][T18292] _copy_from_user+0x2e/0xd0 [ 1162.842567][T18292] input_event_from_user+0x133/0x3b0 [ 1162.842596][T18292] ? __pfx_input_event_from_user+0x10/0x10 [ 1162.842632][T18292] evdev_write+0x37b/0x750 [ 1162.842664][T18292] ? __pfx_evdev_write+0x10/0x10 [ 1162.842693][T18292] ? bpf_lsm_file_permission+0x9/0x10 [ 1162.842713][T18292] ? security_file_permission+0x71/0x210 [ 1162.842736][T18292] ? rw_verify_area+0xcf/0x6c0 [ 1162.842759][T18292] ? __pfx_evdev_write+0x10/0x10 [ 1162.842784][T18292] vfs_write+0x2a0/0x11d0 [ 1162.842813][T18292] ? __pfx_vfs_write+0x10/0x10 [ 1162.842833][T18292] ? find_held_lock+0x2b/0x80 [ 1162.842862][T18292] ? __fget_files+0x204/0x3c0 [ 1162.842892][T18292] ? __fget_files+0x20e/0x3c0 [ 1162.842924][T18292] ksys_write+0x1f8/0x250 [ 1162.842945][T18292] ? __pfx_ksys_write+0x10/0x10 [ 1162.842976][T18292] do_syscall_64+0xcd/0xf80 [ 1162.842997][T18292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.843016][T18292] RIP: 0033:0x7f1c0178f749 [ 1162.843032][T18292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1162.843050][T18292] RSP: 002b:00007f1c02695038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1162.843069][T18292] RAX: ffffffffffffffda RBX: 00007f1c019e5fa0 RCX: 00007f1c0178f749 [ 1162.843081][T18292] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000003 [ 1162.843092][T18292] RBP: 00007f1c02695090 R08: 0000000000000000 R09: 0000000000000000 [ 1162.843103][T18292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1162.843114][T18292] R13: 00007f1c019e6038 R14: 00007f1c019e5fa0 R15: 00007ffd090f51f8 [ 1162.843142][T18292] [ 1163.310625][ T116] IPVS: starting estimator thread 0... [ 1163.311217][ T30] audit: type=1400 audit(1765380418.588:1091): avc: denied { append } for pid=18289 comm="syz.7.3138" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1163.363970][T18300] tmpfs: Unknown parameter 'mpoult' [ 1163.377479][ T30] audit: type=1400 audit(1765380418.888:1092): avc: denied { mounton } for pid=18299 comm="syz.5.3140" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1163.445785][T18298] IPVS: using max 75 ests per chain, 180000 per kthread [ 1163.716252][T10237] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 1163.845837][T10237] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1163.877522][T10237] usb 4-1: Using ep0 maxpacket: 16 [ 1163.891079][T10237] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.921423][T10237] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.010117][T10237] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1164.122930][T10237] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1164.174577][T10237] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1164.292899][T10237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.326526][ T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1164.344883][T10237] usb 4-1: config 0 descriptor?? [ 1165.354783][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1165.364369][ T9] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1165.393024][ T9] usb 8-1: can't read configurations, error -71 [ 1165.737897][T10237] usbhid 4-1:0.0: can't add hid device: -71 [ 1165.750886][T10237] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1165.782370][T10237] usb 4-1: USB disconnect, device number 106 [ 1166.601369][ T30] audit: type=1400 audit(1765380422.128:1093): avc: denied { setopt } for pid=18339 comm="syz.2.3152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1166.628600][T18342] netlink: 'syz.2.3152': attribute type 1 has an invalid length. [ 1166.716290][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1166.907323][ T9] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 1166.922033][ T9] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1166.934104][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1166.977173][ T9] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1167.054523][ T9] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1167.077233][ T9] usb 8-1: Product: syz [ 1167.081538][ T9] usb 8-1: Manufacturer: syz [ 1167.104983][ T9] usb 8-1: SerialNumber: syz [ 1167.123608][ T9] usb 8-1: config 0 descriptor?? [ 1167.136364][ T9] hub 8-1:0.0: bad descriptor, ignoring hub [ 1167.147993][ T9] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1167.174614][ T9] usb 8-1: selecting invalid altsetting 0 [ 1167.410562][T18352] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=102 sclass=netlink_xfrm_socket pid=18352 comm=syz.5.3154 [ 1168.176695][T18338] usb 8-1: reset high-speed USB device number 13 using dummy_hcd [ 1169.917078][ T116] usb 8-1: USB disconnect, device number 13 [ 1170.574513][ T30] audit: type=1400 audit(1765380426.068:1094): avc: denied { lock } for pid=18388 comm="syz.3.3164" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=76173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1170.822154][T18398] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1170.918321][T18398] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1171.756500][ T10] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1171.967847][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1172.254438][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1172.277309][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1172.297331][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.320201][T18406] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1172.338431][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1172.649576][ T116] usb 3-1: USB disconnect, device number 99 [ 1172.720153][T18424] fuse: Unknown parameter 'rootmde' [ 1173.527634][ T10] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1173.593190][T18446] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1173.622354][T18446] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1173.716869][ T10] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1173.725098][ T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1173.982497][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1174.002300][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1174.014782][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1174.031516][ T10] usb 4-1: Product: syz [ 1174.042748][ T10] usb 4-1: Manufacturer: syz [ 1174.093993][ T10] usb 4-1: SerialNumber: syz [ 1174.109849][ T10] usb 4-1: config 0 descriptor?? [ 1174.122473][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 1174.664999][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1174.681510][ T10] usb 4-1: selecting invalid altsetting 0 [ 1174.727905][ T10] usb 4-1: USB disconnect, device number 107 [ 1175.076418][ T10] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1175.176391][T18467] Invalid source name [ 1175.180401][T18467] UBIFS error (pid: 18467): cannot open "./file0", error -22 [ 1175.181743][T18467] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3189'. [ 1175.257458][ T10] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1175.281010][ T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1175.298478][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1175.327740][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1175.346255][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1175.365254][ T10] usb 4-1: Product: syz [ 1175.369863][ T10] usb 4-1: Manufacturer: syz [ 1175.382059][ T10] usb 4-1: SerialNumber: syz [ 1175.393850][ T10] usb 4-1: config 0 descriptor?? [ 1175.407979][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 1175.416824][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1175.437261][ T10] usb 4-1: selecting invalid altsetting 0 [ 1176.139158][ T30] audit: type=1400 audit(1765380431.668:1095): avc: denied { accept } for pid=18476 comm="syz.7.3192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1176.162580][ T30] audit: type=1400 audit(1765380431.688:1096): avc: denied { read } for pid=18476 comm="syz.7.3192" name="file0" dev="tmpfs" ino=335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1176.190313][ T30] audit: type=1400 audit(1765380431.688:1097): avc: denied { open } for pid=18476 comm="syz.7.3192" path="/58/file0" dev="tmpfs" ino=335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1176.214704][ T30] audit: type=1400 audit(1765380431.688:1098): avc: denied { ioctl } for pid=18476 comm="syz.7.3192" path="/58/file0" dev="tmpfs" ino=335 ioctlcmd=0x1286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1176.802174][ T8598] usb 4-1: USB disconnect, device number 108 [ 1178.556534][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3195'. [ 1178.603312][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3195'. [ 1178.796324][T18512] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3201'. [ 1178.812511][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3195'. [ 1178.834357][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3195'. [ 1178.867576][ T10] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1178.917416][ T30] audit: type=1400 audit(1765380434.408:1099): avc: denied { getopt } for pid=18503 comm="syz.5.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1179.025875][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1179.041098][ T10] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1179.122494][ T10] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1179.208708][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1179.252501][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1179.322438][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1179.358101][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1179.393778][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1179.420262][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1179.552752][ T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1179.666783][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.727366][ T10] usb 4-1: config 0 descriptor?? [ 1179.940133][T18506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.956528][ T10] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 109 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1179.993773][T18506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1180.012137][ T5872] usb 4-1: USB disconnect, device number 109 [ 1180.023900][ T5872] usblp0: removed [ 1180.151805][T18519] netlink: 192 bytes leftover after parsing attributes in process `syz.5.3203'. [ 1180.219478][T18521] ALSA: mixer_oss: invalid OSS volume '' [ 1180.636187][ T10] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 1180.673753][T18530] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1180.824972][T18530] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1180.830879][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1180.862684][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 1180.879277][ T10] usb 8-1: config 4 has an invalid interface number: 147 but max is 0 [ 1180.888836][ T10] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.899826][ T10] usb 8-1: config 4 has no interface number 0 [ 1180.912863][ T10] usb 8-1: Dual-Role OTG device on HNP port [ 1181.349689][ T10] usb 8-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1181.462332][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 1181.471175][ T10] usb 8-1: Product: syz [ 1181.475419][ T10] usb 8-1: Manufacturer: syz [ 1181.480716][ T10] usb 8-1: SerialNumber: syz [ 1181.696430][T18523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.706453][T18523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.716731][T18523] xt_time: unknown flags 0xc [ 1181.830448][ T10] uvcvideo 8-1:4.147: Found multiple Units with ID 6 [ 1181.845014][ T10] uvcvideo 8-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 1181.862500][ T10] uvcvideo 8-1:4.147: No streaming interface found for terminal 65535. [ 1181.884679][ T10] usb 8-1: USB disconnect, device number 14 [ 1181.981709][T18545] netlink: 'syz.2.3211': attribute type 5 has an invalid length. [ 1182.000074][ T5872] IPVS: starting estimator thread 0... [ 1182.176823][T18546] IPVS: using max 42 ests per chain, 100800 per kthread [ 1184.396420][ T5872] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1184.626726][ T5872] usb 7-1: too many configurations: 203, using maximum allowed: 8 [ 1184.645435][ T5872] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1184.653630][ T5872] usb 7-1: can't read configurations, error -61 [ 1184.795688][ T5872] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1185.316232][ T5872] usb 7-1: too many configurations: 203, using maximum allowed: 8 [ 1185.456947][T18583] FAULT_INJECTION: forcing a failure. [ 1185.456947][T18583] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.458065][ T5872] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1185.470246][T18583] CPU: 0 UID: 0 PID: 18583 Comm: syz.7.3220 Tainted: G L syzkaller #0 PREEMPT(full) [ 1185.470275][T18583] Tainted: [L]=SOFTLOCKUP [ 1185.470281][T18583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1185.470291][T18583] Call Trace: [ 1185.470299][T18583] [ 1185.470307][T18583] dump_stack_lvl+0x16c/0x1f0 [ 1185.470330][T18583] should_fail_ex+0x512/0x640 [ 1185.470351][T18583] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1185.470370][T18583] should_failslab+0xc2/0x120 [ 1185.470392][T18583] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1185.470410][T18583] ? __alloc_skb+0x156/0x410 [ 1185.470436][T18583] ? __alloc_skb+0x156/0x410 [ 1185.470454][T18583] __alloc_skb+0x156/0x410 [ 1185.470471][T18583] ? __alloc_skb+0x35d/0x410 [ 1185.470490][T18583] ? __pfx___alloc_skb+0x10/0x10 [ 1185.470509][T18583] ? do_raw_spin_lock+0x12c/0x2b0 [ 1185.470532][T18583] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1185.470561][T18583] sock_wmalloc+0xd4/0x120 [ 1185.470582][T18583] l2tp_ip_sendmsg+0x1b6/0x1980 [ 1185.470611][T18583] ? __pfx_l2tp_ip_sendmsg+0x10/0x10 [ 1185.470636][T18583] inet_sendmsg+0x11c/0x140 [ 1185.470659][T18583] __sys_sendto+0x43c/0x520 [ 1185.470681][T18583] ? __pfx___sys_sendto+0x10/0x10 [ 1185.470721][T18583] ? ksys_write+0x1ac/0x250 [ 1185.470742][T18583] ? __pfx_ksys_write+0x10/0x10 [ 1185.470765][T18583] __x64_sys_sendto+0xe0/0x1c0 [ 1185.470785][T18583] ? do_syscall_64+0x91/0xf80 [ 1185.470800][T18583] ? lockdep_hardirqs_on+0x7c/0x110 [ 1185.470816][T18583] do_syscall_64+0xcd/0xf80 [ 1185.470834][T18583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.470851][T18583] RIP: 0033:0x7f765e38f749 [ 1185.470865][T18583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1185.470881][T18583] RSP: 002b:00007f765f25d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1185.470898][T18583] RAX: ffffffffffffffda RBX: 00007f765e5e5fa0 RCX: 00007f765e38f749 [ 1185.470909][T18583] RDX: fffffffffffffc2a RSI: 0000000000000000 RDI: 0000000000000003 [ 1185.470918][T18583] RBP: 00007f765f25d090 R08: 0000200000e68000 R09: 0000000000000010 [ 1185.470929][T18583] R10: 0000000000048001 R11: 0000000000000246 R12: 0000000000000001 [ 1185.470938][T18583] R13: 00007f765e5e6038 R14: 00007f765e5e5fa0 R15: 00007ffc398be838 [ 1185.470962][T18583] [ 1185.811178][T18591] netlink: 'syz.5.3223': attribute type 1 has an invalid length. [ 1185.820633][T18588] netlink: 'syz.5.3223': attribute type 1 has an invalid length. [ 1186.026396][ T9] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 1186.322705][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1186.398987][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.462800][ T9] usb 8-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1186.560874][ T5872] usb 7-1: can't read configurations, error -61 [ 1186.567740][ T5872] usb usb7-port1: attempt power cycle [ 1186.576138][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.655064][ T9] usb 8-1: config 0 descriptor?? [ 1187.876313][T10237] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1187.952888][T18590] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3224'. [ 1187.963089][T18590] openvswitch: netlink: Flow key attr not present in new flow. [ 1187.980324][ T30] audit: type=1400 audit(1765380443.508:1100): avc: denied { connect } for pid=18589 comm="syz.7.3224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1188.083565][T10237] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 1188.094456][T10237] usb 3-1: config 0 has no interface number 0 [ 1188.112216][T10237] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1188.124026][T10237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.146808][T10237] usb 3-1: Product: syz [ 1188.151054][T10237] usb 3-1: Manufacturer: syz [ 1188.156207][T10237] usb 3-1: SerialNumber: syz [ 1188.202989][T10237] usb 3-1: config 0 descriptor?? [ 1189.322993][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 1189.334642][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1189.346556][T10237] usb 3-1: Firmware version (0.0) predates our first public release. [ 1189.358035][ T9] usb 8-1: USB disconnect, device number 15 [ 1189.373051][T10237] usb 3-1: Please update to version 0.2 or newer [ 1189.567305][ T5811] Bluetooth: hci2: command 0x0401 tx timeout [ 1191.011347][T10237] usb 3-1: USB disconnect, device number 100 [ 1191.260064][ T30] audit: type=1400 audit(1765380446.788:1101): avc: denied { getopt } for pid=18651 comm="syz.5.3241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1192.025908][T15279] usb 4-1: new low-speed USB device number 110 using dummy_hcd [ 1192.837835][T15279] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1192.848614][T15279] usb 4-1: config 0 has no interface number 0 [ 1192.854814][T15279] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1192.865997][T15279] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1192.878228][T15279] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1192.887503][T15279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.904345][T15279] usb 4-1: config 0 descriptor?? [ 1192.912036][T18670] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1193.089272][T15279] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1193.302433][T18670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.817924][T18670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.486320][T10237] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1194.649748][T10237] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.673895][T10237] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1194.694415][T10237] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.713834][T10237] usb 8-1: config 0 descriptor?? [ 1194.725866][T10237] pwc: Askey VC010 type 2 USB webcam detected. [ 1195.977911][ T5941] usb 4-1: USB disconnect, device number 110 [ 1196.008898][T18718] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3261'. [ 1196.053718][ T149] Bluetooth: hci6: Frame reassembly failed (-84) [ 1196.061809][ T30] audit: type=1400 audit(1765380451.588:1102): avc: denied { read } for pid=18711 comm="syz.2.3260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1196.094385][T10237] pwc: recv_control_msg error -32 req 02 val 2700 [ 1196.104226][T18718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18718 comm=syz.6.3261 [ 1196.144055][T10237] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1196.259345][T10237] pwc: recv_control_msg error -32 req 04 val 1000 [ 1196.271190][T10237] pwc: recv_control_msg error -32 req 04 val 1300 [ 1196.291026][T10237] pwc: recv_control_msg error -32 req 04 val 1400 [ 1196.755019][T10237] pwc: recv_control_msg error -32 req 02 val 2000 [ 1196.762979][T10237] pwc: recv_control_msg error -32 req 02 val 2100 [ 1196.797795][T10237] pwc: recv_control_msg error -32 req 04 val 1500 [ 1196.821785][T10237] pwc: recv_control_msg error -32 req 02 val 2500 [ 1196.831838][T10237] pwc: recv_control_msg error -32 req 02 val 2400 [ 1196.839237][T10237] pwc: recv_control_msg error -32 req 02 val 2600 [ 1197.038254][ T5941] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1197.066507][T10237] pwc: recv_control_msg error -71 req 02 val 2800 [ 1197.086754][T10237] pwc: recv_control_msg error -71 req 04 val 1100 [ 1197.215234][T10237] pwc: recv_control_msg error -71 req 04 val 1200 [ 1197.247153][T10237] pwc: Registered as video103. [ 1197.252758][T10237] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input73 [ 1197.387807][T18734] ceph: No mds server is up or the cluster is laggy [ 1197.807926][T10237] usb 8-1: USB disconnect, device number 16 [ 1197.813359][T15279] libceph: connect (1)[c::]:6789 error -101 [ 1197.831602][ T5941] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 1197.843013][ T5941] usb 7-1: config 0 has no interface number 0 [ 1197.845230][T15279] libceph: mon0 (1)[c::]:6789 connect error [ 1197.849975][ T5941] usb 7-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1197.988917][ T5941] usb 7-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1198.000607][ T5941] usb 7-1: config 0 interface 255 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1198.034793][ T5941] usb 7-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1198.066197][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.090444][ T5941] usb 7-1: Product: syz [ 1198.125861][T10984] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1198.126340][ T5811] Bluetooth: hci6: command 0x1003 tx timeout [ 1198.144058][ T5941] usb 7-1: Manufacturer: syz [ 1198.150885][ T5941] usb 7-1: SerialNumber: syz [ 1198.228824][ T5941] usb 7-1: config 0 descriptor?? [ 1198.274490][ T5941] iguanair 7-1:0.255: probe with driver iguanair failed with error -12 [ 1199.435649][T18763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3271'. [ 1199.514358][ T5858] usb 7-1: USB disconnect, device number 68 [ 1202.265650][T10237] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1202.465102][T10237] usb 4-1: Using ep0 maxpacket: 32 [ 1202.699890][T10237] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1202.726673][T10237] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1202.746437][T10237] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1202.756995][T10237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1202.775267][T10237] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1202.801251][T10237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1202.820336][T10237] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1202.840735][T10237] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1202.864144][T10237] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1202.880979][T10237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.901478][T10237] usb 4-1: config 0 descriptor?? [ 1203.816821][T10237] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 111 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1203.833428][T18809] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1203.874014][T10237] usb 4-1: USB disconnect, device number 111 [ 1203.882558][T18809] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1203.922593][T10237] usblp0: removed [ 1204.098513][T18814] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1204.113310][T18814] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1205.445744][ T5872] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 1205.604370][T18828] netlink: 'syz.6.3286': attribute type 5 has an invalid length. [ 1205.615169][ T5872] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1205.626050][ T5872] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1205.643058][ T5872] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1205.675025][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1205.804930][ T116] IPVS: starting estimator thread 0... [ 1205.813144][ T5872] usb 8-1: Product: syz [ 1205.826731][ T5872] usb 8-1: Manufacturer: syz [ 1206.226314][ T5872] usb 8-1: SerialNumber: syz [ 1206.236825][ T5872] usb 8-1: config 0 descriptor?? [ 1206.247546][ T5872] usb 8-1: selecting invalid altsetting 0 [ 1206.265741][T18833] IPVS: using max 75 ests per chain, 180000 per kthread [ 1206.593140][ T30] audit: type=1400 audit(1765380462.098:1103): avc: denied { map } for pid=18837 comm="syz.5.3294" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1207.059239][T18820] usb 8-1: USB disconnect, device number 17 [ 1207.088345][ T30] audit: type=1400 audit(1765380462.098:1104): avc: denied { execute } for pid=18837 comm="syz.5.3294" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1207.951936][T18854] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1207.965181][T18854] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1208.895657][ T5872] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1209.175698][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 1209.185805][ T5872] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1209.514588][ T5872] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1209.532599][ T5872] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1209.553793][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1209.572269][ T5872] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1209.588915][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1209.637607][ T5872] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1209.652650][T18865] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1209.664865][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1209.667614][T18865] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1209.865621][ T5872] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1209.972546][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.112443][ T5872] usb 4-1: config 0 descriptor?? [ 1210.978366][T18874] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1211.109113][ T30] audit: type=1400 audit(1765380466.638:1105): avc: denied { getopt } for pid=18877 comm="syz.7.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1211.132744][ T5872] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 112 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1212.569101][ T5872] usb 4-1: USB disconnect, device number 112 [ 1213.038841][ T5872] usblp0: removed [ 1213.254187][ T30] audit: type=1400 audit(1765380468.778:1106): avc: denied { read } for pid=18894 comm="syz.6.3311" lport=31636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1213.540859][T18897] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1213.566425][T18897] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1214.176270][T10237] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1214.336228][T10237] usb 3-1: Using ep0 maxpacket: 32 [ 1214.341399][ T10] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1214.351325][T10237] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1214.360862][T10237] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1214.414226][T10237] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1214.467557][T10237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1214.489419][T10237] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1214.508089][T10237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1214.508228][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.532016][T10237] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1214.542304][T10237] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1214.557470][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1214.568063][T10237] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1214.578156][ T10] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1214.589267][T10237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.597885][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.618126][T10237] usb 3-1: config 0 descriptor?? [ 1214.624844][ T10] usb 7-1: config 0 descriptor?? [ 1214.949352][T18918] bridge0: port 3(gretap0) entered blocking state [ 1214.956863][T18918] bridge0: port 3(gretap0) entered disabled state [ 1214.964365][T18918] gretap0: entered allmulticast mode [ 1214.979648][T18918] gretap0: entered promiscuous mode [ 1214.987553][T18918] bridge0: port 3(gretap0) entered blocking state [ 1214.994066][T18918] bridge0: port 3(gretap0) entered forwarding state [ 1215.077613][T10237] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 101 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1216.028559][T10237] usb 3-1: USB disconnect, device number 101 [ 1216.043913][T10237] usblp0: removed [ 1217.708680][ T30] audit: type=1400 audit(1765380473.238:1107): avc: denied { shutdown } for pid=18919 comm="syz.3.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1217.863550][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 1217.932787][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1217.948407][ T10] usb 7-1: USB disconnect, device number 69 [ 1220.985011][ T30] audit: type=1400 audit(1765380476.498:1108): avc: denied { read } for pid=18948 comm="syz.3.3326" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1223.596263][ T5941] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1224.535388][ T30] audit: type=1400 audit(1765380479.768:1109): avc: denied { getopt } for pid=18984 comm="syz.7.3336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1224.646539][ T5941] usb 7-1: Using ep0 maxpacket: 32 [ 1224.653660][ T5941] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1224.662858][ T5941] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1224.827489][ T5941] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1224.876100][T18974] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1224.915441][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1225.183754][T18974] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1225.193644][T18974] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1225.206701][T18974] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1225.212426][ T5941] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1225.221043][T18974] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1225.244489][T18974] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1225.252894][T18974] usb 3-1: Product: syz [ 1225.257989][T18974] usb 3-1: Manufacturer: syz [ 1225.263243][T18974] usb 3-1: SerialNumber: syz [ 1225.272460][T18974] usb 3-1: config 0 descriptor?? [ 1225.276201][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1225.278996][T18974] hub 3-1:0.0: bad descriptor, ignoring hub [ 1225.304006][ T5941] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1225.305736][T18974] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1225.323629][ T5941] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1225.323653][T18974] usb 3-1: selecting invalid altsetting 0 [ 1225.345142][ T5941] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1225.463818][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.476987][ T5941] usb 7-1: config 0 descriptor?? [ 1226.061940][T18980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.108972][T18980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1226.127325][ T5941] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 70 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1226.147260][ T5941] usb 7-1: USB disconnect, device number 70 [ 1226.165207][ T5941] usblp0: removed [ 1226.476328][T18986] usb 3-1: reset high-speed USB device number 102 using dummy_hcd [ 1227.336926][T19012] usb 7-1: new full-speed USB device number 71 using dummy_hcd [ 1227.382349][T19025] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1227.393603][T19025] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1227.427209][ T5941] usb 3-1: USB disconnect, device number 102 [ 1227.626813][T19012] usb 7-1: not running at top speed; connect to a high speed hub [ 1227.637362][T19012] usb 7-1: config 3 has an invalid interface number: 61 but max is 0 [ 1227.645721][T19012] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.656183][T19012] usb 7-1: config 3 has no interface number 0 [ 1227.662302][T19012] usb 7-1: config 3 interface 61 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1227.675854][T19012] usb 7-1: config 3 interface 61 has no altsetting 0 [ 1227.685046][T19012] usb 7-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 1227.694468][T19012] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.702515][T19012] usb 7-1: Product: syz [ 1227.715628][T19012] usb 7-1: Manufacturer: syz [ 1227.721327][T19012] usb 7-1: SerialNumber: syz [ 1227.963147][T19021] netlink: 'syz.6.3343': attribute type 3 has an invalid length. [ 1228.005975][ T30] audit: type=1400 audit(1765380483.478:1110): avc: denied { watch watch_reads } for pid=19020 comm="syz.6.3343" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1228.047866][T18974] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1228.063479][T19012] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1228.701772][T19037] bridge0: port 3(gretap0) entered blocking state [ 1228.708971][T19037] bridge0: port 3(gretap0) entered disabled state [ 1228.716240][T19037] gretap0: entered allmulticast mode [ 1228.723092][T19037] gretap0: entered promiscuous mode [ 1228.729444][T19037] bridge0: port 3(gretap0) entered blocking state [ 1228.735963][T19037] bridge0: port 3(gretap0) entered forwarding state [ 1228.751730][T19012] snd-usb-audio 7-1:3.61: probe with driver snd-usb-audio failed with error -2 [ 1228.775584][T18974] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1228.914044][T18974] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1228.950760][T19012] usb 7-1: USB disconnect, device number 71 [ 1228.959710][T18974] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1228.986196][T18974] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1229.024047][T18974] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1229.063544][T18974] usb 4-1: Product: syz [ 1229.125102][T18974] usb 4-1: Manufacturer: syz [ 1229.567815][T18974] usb 4-1: SerialNumber: syz [ 1229.575784][T18974] usb 4-1: config 0 descriptor?? [ 1229.592185][T18974] hub 4-1:0.0: bad descriptor, ignoring hub [ 1229.599174][T18974] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1229.609255][T18974] usb 4-1: selecting invalid altsetting 0 [ 1230.008711][T19044] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1230.033388][T19044] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1230.155275][T19052] netlink: 'syz.7.3355': attribute type 5 has an invalid length. [ 1230.171970][T19052] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1230.286615][ T10] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1230.446333][T19032] usb 4-1: reset high-speed USB device number 113 using dummy_hcd [ 1230.454570][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1230.464827][ T10] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1230.473952][ T10] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1230.484301][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1230.640175][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1230.661377][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1230.684808][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1230.711142][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1230.737052][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1230.811198][ T10] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1230.857197][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.078375][ T10] usb 7-1: config 0 descriptor?? [ 1231.327017][T19047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.352778][T19047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.404157][ T10] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 72 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1231.501192][ T10] usb 7-1: USB disconnect, device number 72 [ 1231.512590][ T10] usblp0: removed [ 1231.608190][T18974] usb 4-1: USB disconnect, device number 113 [ 1231.634587][ T30] audit: type=1326 audit(1765380487.158:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19063 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172698f749 code=0x7ffc0000 [ 1231.676340][ T30] audit: type=1326 audit(1765380487.158:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19063 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172698f749 code=0x7ffc0000 [ 1231.703674][ T30] audit: type=1326 audit(1765380487.158:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19063 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f172698f749 code=0x7ffc0000 [ 1231.739447][ T30] audit: type=1326 audit(1765380487.168:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19063 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172698f749 code=0x7ffc0000 [ 1231.764639][ T30] audit: type=1326 audit(1765380487.178:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19063 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172698f749 code=0x7ffc0000 [ 1231.789227][ T30] audit: type=1326 audit(1765380487.178:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19063 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f172698f749 code=0x7ffc0000 [ 1231.820454][ T30] audit: type=1326 audit(1765380487.178:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19063 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172698f749 code=0x7ffc0000 [ 1231.849674][ T30] audit: type=1326 audit(1765380487.178:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19063 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172698f749 code=0x7ffc0000 [ 1231.874210][ T30] audit: type=1326 audit(1765380487.178:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19063 comm="syz.2.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f172698f749 code=0x7ffc0000 [ 1231.902249][T19066] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1231.906263][ T10] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1231.949466][T19066] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1232.146230][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1232.156262][ T10] usb 3-1: config 1 interface 0 altsetting 14 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1232.181821][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1232.201223][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.40 [ 1232.215634][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.233885][ T10] usb 3-1: Product: 滃庒挗䬙僘嬽⼜倁ᄰ୓뗅䄘ษ騪馯狥듄盜ሷ踟ಫᤨ꠻⽁浦띈⋭ṋ늩ɔ䗀攬捫鄅趶杈⊜嵑ꄊᛤ薒ᵦ鸘዁堕 [ 1232.253994][ T10] usb 3-1: Manufacturer: ӿ [ 1232.268856][ T10] usb 3-1: SerialNumber: ᰉ [ 1232.319290][T19084] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1232.331315][T19084] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1232.361721][T19088] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3368'. [ 1232.370990][T19088] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3368'. [ 1232.741358][T19064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.792151][T19064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.842150][ T10] usbhid 3-1:1.0: can't add hid device: -71 [ 1232.870387][ T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1232.897459][ T10] usb 3-1: USB disconnect, device number 103 [ 1234.045815][T15279] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1234.195647][T15279] usb 4-1: Using ep0 maxpacket: 32 [ 1234.202486][T15279] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1234.211310][T15279] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1234.219975][T15279] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1234.229167][T15279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1234.246539][T15279] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1234.271283][T15279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1234.291526][T15279] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1234.307074][ T5885] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1234.323858][T15279] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1234.340489][T15279] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1234.349691][T15279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.362681][T15279] usb 4-1: config 0 descriptor?? [ 1234.491569][ T5885] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.515859][ T5885] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1234.551129][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.561998][ T5885] usb 7-1: config 0 descriptor?? [ 1234.570876][T19110] netlink: 'syz.2.3379': attribute type 8 has an invalid length. [ 1234.581131][ T5885] pwc: Askey VC010 type 2 USB webcam detected. [ 1234.587294][T19100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.587537][T19100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.609790][T15279] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 114 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1234.641002][T15279] usb 4-1: USB disconnect, device number 114 [ 1234.689675][T15279] usblp0: removed [ 1234.823738][T19116] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1234.874871][T19116] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1234.972933][ T5885] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1234.980178][ T5885] pwc: recv_control_msg error -32 req 02 val 2700 [ 1234.987475][ T5885] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1234.994660][ T5885] pwc: recv_control_msg error -32 req 04 val 1000 [ 1235.001987][ T5885] pwc: recv_control_msg error -32 req 04 val 1300 [ 1235.015910][ T5885] pwc: recv_control_msg error -32 req 04 val 1400 [ 1235.022892][ T5885] pwc: recv_control_msg error -32 req 02 val 2000 [ 1235.030195][ T5885] pwc: recv_control_msg error -32 req 02 val 2100 [ 1235.037363][ T5885] pwc: recv_control_msg error -32 req 04 val 1500 [ 1235.044481][ T5885] pwc: recv_control_msg error -32 req 02 val 2500 [ 1235.055208][ T5885] pwc: recv_control_msg error -32 req 02 val 2400 [ 1236.352150][ T5885] pwc: recv_control_msg error -71 req 02 val 2900 [ 1236.377809][ T5885] pwc: recv_control_msg error -71 req 02 val 2800 [ 1236.386600][ T5811] Bluetooth: hci4: command 0x0406 tx timeout [ 1236.402429][ T5885] pwc: recv_control_msg error -71 req 04 val 1100 [ 1236.418871][ T5885] pwc: recv_control_msg error -71 req 04 val 1200 [ 1236.444719][ T5885] pwc: Registered as video103. [ 1236.461098][ T5885] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input75 [ 1236.557455][T19125] bridge1: entered promiscuous mode [ 1236.574465][ T5941] IPVS: starting estimator thread 0... [ 1236.574500][ T5885] usb 7-1: USB disconnect, device number 73 [ 1236.686002][T19127] IPVS: using max 37 ests per chain, 88800 per kthread [ 1237.263971][T19141] netlink: 'syz.3.3388': attribute type 5 has an invalid length. [ 1237.481039][T19149] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1237.487278][T19147] nbd: must specify a size in bytes for the device [ 1237.527731][T19149] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1237.578551][T19151] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1237.601654][T19151] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1237.720815][ T5930] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1237.936058][ T5941] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1238.218032][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.586849][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1238.620723][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.635885][ T5941] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1238.656469][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1238.667259][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.679987][ T5930] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1238.698562][ T5941] usb 7-1: config 0 descriptor?? [ 1238.703655][ T5930] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1238.715041][ T5930] usb 4-1: Manufacturer: syz [ 1238.727284][ T5930] usb 4-1: config 0 descriptor?? [ 1238.832922][T19164] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3395'. [ 1239.193993][ T5941] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 1239.213724][ T5941] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0020/input/input76 [ 1239.614004][ T5930] uclogic 0003:256C:006D.0021: failed retrieving string descriptor #200: -71 [ 1239.884504][ T5930] uclogic 0003:256C:006D.0021: failed retrieving pen parameters: -71 [ 1239.970220][ T5930] uclogic 0003:256C:006D.0021: failed probing pen v2 parameters: -71 [ 1239.990751][ T5930] uclogic 0003:256C:006D.0021: failed probing parameters: -71 [ 1240.044984][ T5930] uclogic 0003:256C:006D.0021: probe with driver uclogic failed with error -71 [ 1240.093114][ T5930] usb 4-1: USB disconnect, device number 115 [ 1240.102006][ T5941] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1240.182138][ T5941] usb 7-1: USB disconnect, device number 74 [ 1240.218830][T19184] netlink: 'syz.2.3401': attribute type 5 has an invalid length. [ 1240.281066][T19188] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1240.312553][T19188] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1240.360092][T19191] nbd: must specify a size in bytes for the device [ 1240.955705][T19202] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1241.170500][T19199] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1241.183531][T19203] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3410'. [ 1241.396641][T19199] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1241.621642][T19207] netlink: 4436 bytes leftover after parsing attributes in process `syz.6.3410'. [ 1241.636506][T19207] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 1241.831456][T19216] Invalid logical block size (1792) [ 1242.008074][T19222] nbd: must specify a size in bytes for the device [ 1242.038282][T19220] netlink: 664 bytes leftover after parsing attributes in process `syz.5.3416'. [ 1242.070476][T19224] netlink: 'syz.3.3415': attribute type 5 has an invalid length. [ 1242.086372][T19220] netlink: 664 bytes leftover after parsing attributes in process `syz.5.3416'. [ 1242.121762][T19227] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1242.146659][T19227] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1242.362465][T19234] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3419'. [ 1242.781088][T19242] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1243.362694][T19252] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1243.439829][T19254] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3424'. [ 1243.550698][T19252] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1245.539803][T19275] nbd: must specify a size in bytes for the device [ 1246.184917][T19279] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1246.219588][T19279] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1246.244877][T19283] netlink: 'syz.2.3434': attribute type 5 has an invalid length. [ 1246.419992][T19290] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1246.470142][T19290] Cannot find add_set index 0 as target [ 1246.673080][T19285] binder: BINDER_SET_CONTEXT_MGR already set [ 1246.691168][T19285] binder: 19284:19285 ioctl 4018620d 200000000040 returned -16 [ 1246.923912][T19295] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1246.949794][T19295] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1247.276861][T19302] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3441'. [ 1249.218322][T19318] nbd: must specify a size in bytes for the device [ 1249.487782][T19325] block nbd2: NBD_DISCONNECT [ 1250.382372][T19337] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3452'. [ 1251.094167][T19344] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1251.108133][T19344] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1252.270409][T19355] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3457'. [ 1252.469091][T19359] nbd: must specify a size in bytes for the device [ 1253.757446][T19380] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3464'. [ 1254.091996][T18974] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1254.184151][ T30] kauditd_printk_skb: 109 callbacks suppressed [ 1254.184169][ T30] audit: type=1400 audit(1765380509.708:1229): avc: denied { map } for pid=19387 comm="syz.6.3467" path="/dev/sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1254.275718][T18974] usb 4-1: Using ep0 maxpacket: 8 [ 1254.283965][T18974] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1254.293531][T18974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.302824][T18974] usb 4-1: Product: syz [ 1254.307138][T18974] usb 4-1: Manufacturer: syz [ 1254.311809][T18974] usb 4-1: SerialNumber: syz [ 1254.378002][T18974] usb 4-1: config 0 descriptor?? [ 1254.494252][T19397] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1254.505931][T19397] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1254.506291][ T5941] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1254.593579][T18974] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1254.667781][ T5941] usb 7-1: config 1 interface 0 altsetting 100 endpoint 0x81 has an invalid bInterval 206, changing to 11 [ 1254.682132][ T5941] usb 7-1: config 1 interface 0 altsetting 100 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1254.696358][ T5941] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1254.705295][ T5941] usb 7-1: New USB device found, idVendor=04f2, idProduct=1125, bcdDevice= 0.40 [ 1254.715054][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.723644][ T5941] usb 7-1: Product: syz [ 1254.728494][ T5941] usb 7-1: Manufacturer: syz [ 1254.733087][ T5941] usb 7-1: SerialNumber: syz [ 1256.377699][ T5811] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1256.393084][ T5811] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1256.402537][ T5811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1256.416407][ T5811] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1256.424732][ T5811] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1256.494798][T19409] lo speed is unknown, defaulting to 1000 [ 1256.519127][T19409] lo speed is unknown, defaulting to 1000 [ 1256.567490][T19374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.597462][T19374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.667730][T18974] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1256.703279][T18974] usb 4-1: USB disconnect, device number 116 [ 1256.946526][ T65] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.185469][T19388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1257.214725][ T65] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.350412][ T5941] usbhid 7-1:1.0: can't add hid device: -71 [ 1257.380864][ T5941] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1257.409777][ T65] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.424936][ T5941] usb 7-1: USB disconnect, device number 75 [ 1257.589143][ T65] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.739524][T19434] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3478'. [ 1258.240702][T19436] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3476'. [ 1258.526317][ T5811] Bluetooth: hci6: command tx timeout [ 1258.695856][T19409] chnl_net:caif_netlink_parms(): no params data found [ 1258.712157][ T65] gretap0: left allmulticast mode [ 1258.723622][ T65] gretap0: left promiscuous mode [ 1258.742550][ T65] bridge0: port 3(gretap0) entered disabled state [ 1258.762317][ T65] bridge_slave_1: left allmulticast mode [ 1258.777477][ T65] bridge_slave_1: left promiscuous mode [ 1258.790334][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.802816][ T65] bridge_slave_0: left allmulticast mode [ 1258.808641][ T65] bridge_slave_0: left promiscuous mode [ 1258.815844][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.826236][T17370] usb 4-1: new low-speed USB device number 117 using dummy_hcd [ 1259.027898][T17370] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1259.236241][T17370] usb 4-1: config 0 has no interface number 0 [ 1259.242341][T17370] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1259.284412][T17370] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1259.315328][T17370] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1259.352728][T17370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.378501][T17370] usb 4-1: config 0 descriptor?? [ 1259.416936][T19441] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1259.442757][T17370] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1259.477262][T19449] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3483'. [ 1259.559338][T19454] fuse: Unknown parameter 'r000 000&700Bޙ3000000004000Sjw̹h~oTA' [ 1259.703814][T19441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1259.724706][T19441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.169608][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1260.191495][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1260.220283][ T65] bond0 (unregistering): Released all slaves [ 1260.390881][T19468] FAULT_INJECTION: forcing a failure. [ 1260.390881][T19468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1260.406604][T19468] CPU: 0 UID: 0 PID: 19468 Comm: syz.2.3487 Tainted: G L syzkaller #0 PREEMPT(full) [ 1260.406633][T19468] Tainted: [L]=SOFTLOCKUP [ 1260.406639][T19468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1260.406650][T19468] Call Trace: [ 1260.406657][T19468] [ 1260.406665][T19468] dump_stack_lvl+0x16c/0x1f0 [ 1260.406689][T19468] should_fail_ex+0x512/0x640 [ 1260.406713][T19468] _copy_to_user+0x32/0xd0 [ 1260.406735][T19468] simple_read_from_buffer+0xcb/0x170 [ 1260.406759][T19468] proc_fail_nth_read+0x197/0x240 [ 1260.406777][T19468] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1260.406795][T19468] ? rw_verify_area+0xcf/0x6c0 [ 1260.406813][T19468] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1260.406829][T19468] vfs_read+0x1e4/0xcf0 [ 1260.406849][T19468] ? __pfx___mutex_lock+0x10/0x10 [ 1260.406878][T19468] ? __pfx_vfs_read+0x10/0x10 [ 1260.406904][T19468] ? __fget_files+0x20e/0x3c0 [ 1260.406934][T19468] ksys_read+0x12a/0x250 [ 1260.406958][T19468] ? __pfx_ksys_read+0x10/0x10 [ 1260.406984][T19468] do_syscall_64+0xcd/0xf80 [ 1260.407002][T19468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.407019][T19468] RIP: 0033:0x7f172698e15c [ 1260.407034][T19468] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1260.407049][T19468] RSP: 002b:00007f172785d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1260.407066][T19468] RAX: ffffffffffffffda RBX: 00007f1726be6180 RCX: 00007f172698e15c [ 1260.407077][T19468] RDX: 000000000000000f RSI: 00007f172785d0a0 RDI: 000000000000000a [ 1260.407086][T19468] RBP: 00007f172785d090 R08: 0000000000000000 R09: 0000000000000000 [ 1260.407096][T19468] R10: 0000000000000035 R11: 0000000000000246 R12: 0000000000000001 [ 1260.407106][T19468] R13: 00007f1726be6218 R14: 00007f1726be6180 R15: 00007fffe34f8268 [ 1260.407131][T19468] [ 1260.702202][ T5811] Bluetooth: hci6: command tx timeout [ 1260.787038][ T65] bond1 (unregistering): Released all slaves [ 1260.815963][T19471] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1260.827468][T19471] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1261.090366][ T65] bond2 (unregistering): Released all slaves [ 1261.200052][T19475] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3489'. [ 1261.573626][ T65] bond3 (unregistering): Released all slaves [ 1261.709908][T17370] usb 4-1: USB disconnect, device number 117 [ 1261.870371][ T65] bond4 (unregistering): Released all slaves [ 1262.019479][ T65] bond5 (unregistering): Released all slaves [ 1262.230354][T19482] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1262.243254][T19482] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1262.530072][ T65] bond6 (unregistering): (slave dummy0): Releasing active interface [ 1262.541332][ T65] dummy0: left promiscuous mode [ 1262.560932][ T65] bond6 (unregistering): Released all slaves [ 1262.711450][T19449] netdevsim netdevsim7 netdevsim3: entered promiscuous mode [ 1262.736142][T19449] netdevsim netdevsim7 netdevsim3: left promiscuous mode [ 1262.769761][ T5811] Bluetooth: hci6: command tx timeout [ 1262.848993][ T65] !9: left promiscuous mode [ 1263.043198][T19495] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.3496'. [ 1263.568014][T19507] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1263.671759][T19409] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.729619][T19409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.742407][T19409] bridge_slave_0: entered allmulticast mode [ 1263.756868][T19409] bridge_slave_0: entered promiscuous mode [ 1263.778735][T19409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.794204][T19409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.811466][T19409] bridge_slave_1: entered allmulticast mode [ 1263.859718][T19409] bridge_slave_1: entered promiscuous mode [ 1263.867630][T19509] netlink: 'syz.3.3498': attribute type 5 has an invalid length. [ 1264.242000][T19409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1264.298796][T19409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1264.440703][T18974] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1264.748098][T19519] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3500'. [ 1265.416523][ T5811] Bluetooth: hci6: command tx timeout [ 1265.633992][T18974] usb 4-1: Using ep0 maxpacket: 16 [ 1265.877091][T18974] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1265.917716][T18974] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1265.930548][ T65] hsr_slave_0: left promiscuous mode [ 1265.942557][T18974] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1265.951886][ T65] hsr_slave_1: left promiscuous mode [ 1265.960225][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1265.971413][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1265.980546][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1265.988713][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1266.002545][T19528] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1266.014014][T19528] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1266.076377][T18974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.084596][T18974] usb 4-1: Product: syz [ 1266.089093][T18974] usb 4-1: Manufacturer: syz [ 1266.093854][T18974] usb 4-1: SerialNumber: syz [ 1266.168378][T18974] usb 4-1: config 0 descriptor?? [ 1266.168462][ T65] veth0_macvtap: left promiscuous mode [ 1266.181438][ T65] veth1_vlan: left promiscuous mode [ 1266.189991][ T65] veth0_vlan: left promiscuous mode [ 1266.466588][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1266.474512][T18974] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input77 [ 1266.490410][T19533] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1266.507342][T19533] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1266.520332][T18974] imon:send_packet: packet tx failed (-71) [ 1266.555841][T18974] imon 4-1:0.0: panel buttons/knobs setup failed [ 1266.728955][T18974] rc_core: IR keymap rc-imon-pad not found [ 1266.742037][T18974] Registered IR keymap rc-empty [ 1266.748277][T18974] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1266.771402][T18974] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1266.790935][T18974] imon:send_packet: packet tx failed (-71) [ 1266.831323][T18974] imon 4-1:0.0: remote input dev register failed [ 1266.852505][T18974] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 1266.881323][T18974] imon 4-1:0.0: unable to initialize intf0, err 0 [ 1266.898361][T18974] imon:imon_probe: failed to initialize context! [ 1266.904724][T18974] imon 4-1:0.0: unable to register, err -19 [ 1266.929068][T18974] usb 4-1: USB disconnect, device number 118 [ 1267.099828][ T65] team0 (unregistering): Port device team_slave_1 removed [ 1267.173033][ T65] team0 (unregistering): Port device team_slave_0 removed [ 1267.598827][T19409] team0: Port device team_slave_0 added [ 1267.628345][T19409] team0: Port device team_slave_1 added [ 1267.802578][T19409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1267.830729][T19409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1267.956882][T19550] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1267.991713][T19409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1269.116451][ T31] INFO: task syz.3.2385:15473 blocked for more than 144 seconds. [ 1269.124214][ T31] Tainted: G L syzkaller #0 [ 1269.156293][T19409] batman_adv: batadv0: Adding interface: batadv_slave_1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1269.163435][T19409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1269.170113][ T30] audit: type=1400 audit(1765380524.688:1230): avc: denied { write } for pid=5799 comm="syz-executor" path="pipe:[3991]" dev="pipefs" ino=3991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1269.213223][ T31] Blocked by coredump. [ 1269.218423][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1269.228731][ T31] task:syz.3.2385 state:D stack:27480 pid:15473 tgid:15473 ppid:5809 task_flags:0x40044c flags:0x00080003 [ 1269.246938][ T31] Call Trace: [ 1269.250217][ T31] [ 1269.253169][ T31] ? __schedule+0x10b9/0x6150 [ 1269.265762][ T31] __schedule+0x1139/0x6150 [ 1269.270355][ T31] ? __pfx___schedule+0x10/0x10 [ 1269.285230][ T31] ? find_held_lock+0x2b/0x80 [ 1269.294681][ T31] ? schedule+0x2d7/0x3a0 [ 1269.337678][ T31] schedule+0xe7/0x3a0 [ 1269.341820][ T31] schedule_timeout+0x257/0x290 [ 1269.351084][T19409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1269.403398][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1269.417154][ T31] ? rcu_is_watching+0x12/0xc0 [ 1269.445664][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1269.450924][ T31] __wait_for_common+0x2fc/0x4e0 [ 1269.475600][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1269.481029][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1269.535773][ T31] ? find_held_lock+0x2b/0x80 [ 1269.540519][ T31] ? __flush_work+0x938/0xcc0 [ 1269.545233][ T31] ? __flush_work+0x4d0/0xcc0 [ 1269.565832][ T31] __flush_work+0x7d7/0xcc0 [ 1269.570427][ T31] ? __pfx___flush_work+0x10/0x10 [ 1269.575474][ T31] ? try_to_grab_pending+0x450/0x850 [ 1269.585596][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 1269.590943][ T31] ? __pfx___might_resched+0x10/0x10 [ 1269.616813][ T31] cancel_work_sync+0xd1/0xf0 [ 1269.624173][ T31] hci_cmd_sync_clear+0x33/0x100 [ 1269.635615][ T31] hci_unregister_dev+0x1cc/0x680 [ 1269.640698][ T31] vhci_release+0x17d/0x230 [ 1269.645224][ T31] ? __pfx_vhci_release+0x10/0x10 [ 1269.685599][ T31] __fput+0x402/0xb70 [ 1269.689654][ T31] task_work_run+0x150/0x240 [ 1269.694265][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1269.723700][ T31] do_exit+0x87f/0x2bd0 [ 1269.745611][ T31] ? __pfx_do_exit+0x10/0x10 [ 1269.750251][ T31] ? cgroup_update_frozen_flag+0x107/0x210 [ 1269.765581][ T31] ? find_held_lock+0x2b/0x80 [ 1269.770316][ T31] do_group_exit+0xd3/0x2a0 [ 1269.774838][ T31] get_signal+0x2671/0x26d0 [ 1269.795605][ T31] ? __pfx_get_signal+0x10/0x10 [ 1269.800616][ T31] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1269.815640][ T31] arch_do_signal_or_restart+0x8f/0x7e0 [ 1269.821244][ T31] ? get_timespec64+0x147/0x240 [ 1269.845652][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1269.851969][ T31] ? __x64_sys_clock_nanosleep+0x35e/0x4a0 [ 1269.865637][ T31] exit_to_user_mode_loop+0x8c/0x540 [ 1269.870984][ T31] do_syscall_64+0x4ee/0xf80 [ 1269.886111][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.892047][ T31] RIP: 0033:0x7f80e55c2005 [ 1269.905604][ T31] RSP: 002b:00007f80e63a9f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1269.914062][ T31] RAX: fffffffffffffdfc RBX: 00007f80e57e5fa0 RCX: 00007f80e55c2005 [ 1269.930357][ T31] RDX: 00007f80e63a9fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1269.939507][ T31] RBP: 00007f80e5613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1269.948504][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1269.956699][ T31] R13: 00007f80e57e6038 R14: 00007f80e57e5fa0 R15: 00007ffec0407568 [ 1269.964706][ T31] [ 1270.006492][ T31] [ 1270.006492][ T31] Showing all locks held in the system: [ 1270.014236][ T31] 1 lock held by ksoftirqd/0/15: [ 1270.050739][ T31] 1 lock held by khungtaskd/31: [ 1270.065586][ T31] #0: ffffffff8e3c9620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1270.075481][ T31] 5 locks held by kworker/u8:4/65: [ 1270.125605][ T31] #0: ffff88801badc948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1270.155602][ T31] #1: ffffc9000215fc90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1270.186234][ T31] #2: ffffffff90128250 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830 [ 1270.233690][ T31] #3: ffff8880793654e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x151/0x3f0 [ 1270.266064][ T31] #4: ffffffff8e3d4d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1270.295271][ T31] 2 locks held by getty/5572: [ 1270.300060][ T31] #0: ffff88814e07f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1270.315617][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 1270.335577][ T31] 3 locks held by kworker/u9:8/5825: [ 1270.341900][ T31] #0: ffff888030eeb948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1270.356868][ T31] #1: ffffc9000216fc90 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1270.368827][ T31] #2: ffff888029c70ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x470 [ 1270.378681][ T31] 1 lock held by syz.6.1691/12732: [ 1270.383771][ T31] #0: ffffffff9013ea28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1270.392758][ T31] 4 locks held by syz-executor/17686: [ 1270.398130][ T31] #0: ffff888057dbcec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xc0 [ 1270.407725][ T31] #1: ffff888057dbc0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3af/0x1260 [ 1270.417399][ T31] #2: ffffffff903bb848 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x290 [ 1270.427492][ T31] #3: ffff8880342e3338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x760 [ 1270.436822][ T31] 1 lock held by syz.7.3024/17866: [ 1270.443099][ T31] #0: ffff88804cc7fac8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 1270.454635][ T31] 2 locks held by kworker/1:4/18974: [ 1270.459936][ T31] #0: ffff88813ff51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1270.470477][ T31] #1: ffffc9000c4d7c90 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1270.480140][ T31] 1 lock held by syz.7.3427/19264: [ 1270.485228][ T31] #0: ffff8880754fbb88 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 1270.495778][ T31] 3 locks held by syz-executor/19409: [ 1270.501146][ T31] #0: ffff888073478ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xc0 [ 1270.510721][ T31] #1: ffff8880734780c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3af/0x1260 [ 1270.520383][ T31] #2: ffffffff903bb848 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x290 [ 1270.530439][ T31] 3 locks held by syz.2.3512/19562: [ 1270.535727][ T31] #0: ffff888056dfcec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xc0 [ 1270.546191][ T31] #1: ffff888056dfc0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3af/0x1260 [ 1270.555927][ T31] #2: ffffffff903bb848 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x290 [ 1270.609644][ T31] [ 1270.614671][ T31] ============================================= [ 1270.614671][ T31] [ 1270.641899][ T31] NMI backtrace for cpu 1 [ 1270.641917][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1270.641933][ T31] Tainted: [L]=SOFTLOCKUP [ 1270.641937][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1270.641944][ T31] Call Trace: [ 1270.641948][ T31] [ 1270.641954][ T31] dump_stack_lvl+0x116/0x1f0 [ 1270.641971][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1270.641986][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1270.642005][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1270.642021][ T31] sys_info+0x133/0x180 [ 1270.642035][ T31] watchdog+0xe66/0x1180 [ 1270.642050][ T31] ? rcu_is_watching+0x12/0xc0 [ 1270.642061][ T31] ? __pfx_watchdog+0x10/0x10 [ 1270.642073][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1270.642085][ T31] ? __kthread_parkme+0x19e/0x250 [ 1270.642097][ T31] ? __pfx_watchdog+0x10/0x10 [ 1270.642109][ T31] kthread+0x3c5/0x780 [ 1270.642123][ T31] ? __pfx_kthread+0x10/0x10 [ 1270.642137][ T31] ? rcu_is_watching+0x12/0xc0 [ 1270.642147][ T31] ? __pfx_kthread+0x10/0x10 [ 1270.642160][ T31] ret_from_fork+0x983/0xb10 [ 1270.642174][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1270.642187][ T31] ? __switch_to+0x7af/0x10d0 [ 1270.642202][ T31] ? __pfx_kthread+0x10/0x10 [ 1270.642216][ T31] ret_from_fork_asm+0x1a/0x30 [ 1270.642239][ T31] [ 1270.642243][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1270.784814][ C0] NMI backtrace for cpu 0 [ 1270.784834][ C0] CPU: 0 UID: 0 PID: 18016 Comm: syz.7.3067 Tainted: G L syzkaller #0 PREEMPT(full) [ 1270.784856][ C0] Tainted: [L]=SOFTLOCKUP [ 1270.784861][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1270.784871][ C0] RIP: 0010:__rcu_read_lock+0xa7/0xf0 [ 1270.784898][ C0] Code: 48 b8 00 00 00 00 00 fc ff df 89 9d 84 04 00 00 65 48 8b 1d 53 34 0f 12 48 8d bb 84 04 00 00 48 89 fa 48 c1 ea 03 0f b6 14 02 <48> 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 1f 8b 83 84 04 00 [ 1270.784911][ C0] RSP: 0018:ffffc90003fff608 EFLAGS: 00000a07 [ 1270.784925][ C0] RAX: dffffc0000000000 RBX: ffff88802b57a4c0 RCX: ffffc90003fff778 [ 1270.784934][ C0] RDX: 0000000000000000 RSI: ffff88802b57a4c0 RDI: ffff88802b57a944 [ 1270.784943][ C0] RBP: ffff88802b57a4c0 R08: 0000000000000001 R09: 0000000000000000 [ 1270.784952][ C0] R10: ffffc90003fff6e0 R11: ffff88802b57aff0 R12: fffff520007ffede [ 1270.784962][ C0] R13: ffffc90003fff6e0 R14: ffffc90003fff6e0 R15: ffffc90003fff6e8 [ 1270.784971][ C0] FS: 0000000000000000(0000) GS:ffff8881248fd000(0000) knlGS:0000000000000000 [ 1270.784985][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1270.784996][ C0] CR2: 0000001b2da15ff8 CR3: 000000000e184000 CR4: 00000000003526f0 [ 1270.785006][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1270.785015][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1270.785024][ C0] Call Trace: [ 1270.785030][ C0] [ 1270.785035][ C0] unwind_next_frame+0xae/0x20a0 [ 1270.785056][ C0] ? __unwind_start+0x574/0x7f0 [ 1270.785073][ C0] ? get_stack_info_noinstr+0x18/0x120 [ 1270.785094][ C0] __unwind_start+0x45f/0x7f0 [ 1270.785113][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1270.785129][ C0] arch_stack_walk+0x73/0x100 [ 1270.785150][ C0] ? __unwind_start+0x574/0x7f0 [ 1270.785170][ C0] stack_trace_save+0x8e/0xc0 [ 1270.785184][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1270.785200][ C0] ? __lock_acquire+0x436/0x2890 [ 1270.785216][ C0] ? __lock_acquire+0x436/0x2890 [ 1270.785231][ C0] save_stack+0x160/0x1f0 [ 1270.785248][ C0] ? __pfx_save_stack+0x10/0x10 [ 1270.785267][ C0] ? page_ext_put+0x3e/0xd0 [ 1270.785284][ C0] __reset_page_owner+0x84/0x1a0 [ 1270.785301][ C0] __free_frozen_pages+0x7df/0x1170 [ 1270.785323][ C0] ? ___free_pages+0xcd/0x220 [ 1270.785342][ C0] vfree+0x1fd/0xb50 [ 1270.785360][ C0] ? find_held_lock+0x2b/0x80 [ 1270.785381][ C0] ? rcu_is_watching+0x12/0xc0 [ 1270.785394][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1270.785418][ C0] ? __pfx_kcov_close+0x10/0x10 [ 1270.785433][ C0] kcov_close+0x34/0x60 [ 1270.785446][ C0] __fput+0x402/0xb70 [ 1270.785468][ C0] ? cleanup_mnt+0x26b/0x450 [ 1270.785487][ C0] task_work_run+0x150/0x240 [ 1270.785505][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1270.785534][ C0] do_exit+0x87f/0x2bd0 [ 1270.785552][ C0] ? __pfx_do_exit+0x10/0x10 [ 1270.785566][ C0] ? cgroup_update_frozen_flag+0x107/0x210 [ 1270.785587][ C0] ? find_held_lock+0x2b/0x80 [ 1270.785609][ C0] do_group_exit+0xd3/0x2a0 [ 1270.785624][ C0] get_signal+0x2671/0x26d0 [ 1270.785649][ C0] ? __pfx_get_signal+0x10/0x10 [ 1270.785667][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1270.785684][ C0] arch_do_signal_or_restart+0x8f/0x7e0 [ 1270.785704][ C0] ? get_timespec64+0x147/0x240 [ 1270.785720][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1270.785742][ C0] ? __x64_sys_clock_nanosleep+0x35e/0x4a0 [ 1270.785759][ C0] exit_to_user_mode_loop+0x8c/0x540 [ 1270.785780][ C0] do_syscall_64+0x4ee/0xf80 [ 1270.785795][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.785810][ C0] RIP: 0033:0x7f765e3c2005 [ 1270.785821][ C0] Code: Unable to access opcode bytes at 0x7f765e3c1fdb. [ 1270.785828][ C0] RSP: 002b:00007f765f25cf80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1270.785841][ C0] RAX: fffffffffffffdfc RBX: 00007f765e5e5fa0 RCX: 00007f765e3c2005 [ 1270.785851][ C0] RDX: 00007f765f25cfc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1270.785860][ C0] RBP: 00007f765e413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1270.785869][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1270.785878][ C0] R13: 00007f765e5e6038 R14: 00007f765e5e5fa0 R15: 00007ffc398be838 [ 1270.785893][ C0] [ 1270.787002][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1270.787017][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1270.787040][ T31] Tainted: [L]=SOFTLOCKUP [ 1270.787047][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1270.787056][ T31] Call Trace: [ 1270.787062][ T31] [ 1270.787069][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1270.787089][ T31] vpanic+0x640/0x6f0 [ 1270.787108][ T31] panic+0xca/0xd0 [ 1270.787125][ T31] ? __pfx_panic+0x10/0x10 [ 1270.787142][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1270.787163][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1270.787185][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 1270.787208][ T31] ? watchdog+0xe83/0x1180 [ 1270.787225][ T31] ? watchdog+0xe76/0x1180 [ 1270.787244][ T31] watchdog+0xe94/0x1180 [ 1270.787266][ T31] ? rcu_is_watching+0x12/0xc0 [ 1270.787281][ T31] ? __pfx_watchdog+0x10/0x10 [ 1270.787298][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1270.787316][ T31] ? __kthread_parkme+0x19e/0x250 [ 1270.787334][ T31] ? __pfx_watchdog+0x10/0x10 [ 1270.787352][ T31] kthread+0x3c5/0x780 [ 1270.787372][ T31] ? __pfx_kthread+0x10/0x10 [ 1270.787393][ T31] ? rcu_is_watching+0x12/0xc0 [ 1270.787409][ T31] ? __pfx_kthread+0x10/0x10 [ 1270.787429][ T31] ret_from_fork+0x983/0xb10 [ 1270.787448][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1270.787468][ T31] ? __switch_to+0x7af/0x10d0 [ 1270.787489][ T31] ? __pfx_kthread+0x10/0x10 [ 1270.787510][ T31] ret_from_fork_asm+0x1a/0x30 [ 1270.787545][ T31] [ 1271.354159][ T31] Kernel Offset: disabled [ 1271.358465][ T31] Rebooting in 86400 seconds..