last executing test programs: 29m46.173438023s ago: executing program 1 (id=1105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, 0x0, 0x0) getresuid(&(0x7f0000000440), 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 29m45.12837734s ago: executing program 1 (id=1108): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000014000180"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 29m44.928564146s ago: executing program 1 (id=1110): io_setup(0x3ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x44, 0x1000}, 0x4) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 29m44.364762615s ago: executing program 1 (id=1113): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$isdn_base(0x22, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES16=r3, @ANYBLOB='\x00'/20, @ANYRES16=r4, @ANYRES32, @ANYRES64=r0], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000003c0)=r9}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r8, r5, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ca37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3300, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x3c00}}}}}}}, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 29m44.124728273s ago: executing program 1 (id=1115): socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r0 = fsopen(&(0x7f00000001c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x3}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100677265746170"], 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000380)="49a03fbbbc84fa0ed8e63495603240376093e469897aea84b92fff54fd237bab10480960b52464c019b041e4a710932188a50f09c4a60b8709c23c9357014f83085e991fbb51de7a3890a92e3e", 0x4d}, {&(0x7f0000000480)="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", 0xfa}, {&(0x7f0000000600)="a8b17a055f54a82bfbc703c7715bc1f569bf76f24eba70bbf81754f7a81d2171c75d919cfc304d319538a91895f53c8f56cbe6bf3f202e171247cf799b13c0d06eca9b8e9607c18408a1fc12e18d3bf6a6278e95f98701a529872f77e5439676c5b3b16b8a8a19ab82c9f2f6cc58bc9a3e4228b145616a88aaab87dfb9fbc948b49ab434236f9e6792ea1db9655865a272304ee6a793977bf596fb811eae5b6f194d66c2", 0xa4}, {&(0x7f00000000c0)="a9f9b10e97cb9011465cdceb1f3fef", 0xf}], 0x4, &(0x7f000001b380)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x8014) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = epoll_create1(0x0) epoll_pwait(r4, 0xfffffffffffffffc, 0x0, 0x6, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) bind$inet6(r3, &(0x7f000001b0c0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}, 0x1c) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) getdents(r3, &(0x7f000001b000)=""/182, 0xb6) 29m43.305373271s ago: executing program 1 (id=1119): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000180)='4\x00', 0x2) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000003a40)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000440)="f5924a75da23a5f6d51b2cde0471d62ae1daadf5123c0c64d4ea354b99ee774e900e8647ab39d171568c9af955caf40ddbd73822139335ed5d3f6bbb33e5c98ff7a21919be048008cefb35542f070e4cfc3a41c86ca631015752e862e83ddfec11f8cd32d69996bc3130770c9f6fdf4d9dbf11fe6b946bbda060", 0x7a}], 0x1, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r3, r2, r2, r0]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r3, r4, r1, r1, r4, r2, 0xffffffffffffffff, r0, r2]}}], 0x118, 0x24000000}}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000003640)="4b65ef77b97d779e0f1a1b4e91e8cdaac31172ff071327da5d34c86b791a7f50a9c179d0d4cacef57279206406b89fdc453be0687f47462d890a5e319c3c063db0ae0891f3a0d62f678ff178b429d1383537dfb523d91795660a64894e6eddf5b4c37621f4715399b6f71579613596ccee3c578cf00478ce25daf9c5c334229920d0f39baa91a04a5840f68df5cea02951dea736f08e9fe3abec6f9dcd3e25d3c37685d451b37dc06855afd3510b6598ba24a1d4fb", 0xb5}, {&(0x7f0000003700)="4c0abf390f639f08980fd0b97dbd77271849bf6ecc9df77b5ea99596776579817eb4165550874ff583e8532b8364e7103e26d7379020b235be2cc0a26933991846e52e9526cf0923376bf8d91f7ad872c2e47b4d00a5aa651b34b89bcee1433594b5f9b2cf1e0940739f56b44c73feb409382df3aed767724038e624c3060a4d8e91a84ad7819afa380e4d63f9112b606667b73593f842bb74acbcd971ad73784cd7130916445f", 0xa7}, {&(0x7f00000037c0)="c4f56236c8d6f1db07bf13bcdf5dc7dbcf2797066ac35b4e78897bf1737414653134a11d6be1d209920240a902712eb4dbce81bf6510582fd09b2d3c28719265c8f6d161929bf9ddcfdaffa8c2a6b5cc121c6bfde93a4b3e2896fb4906ecef21316e1f1809b35c8c8d7a01974443b9e69e774b089b574b300be7fb38d90adf96a790ef2a38f0bbd175c95b093563abc1525e57d3c14f381836b50626496ba8c6481954829f89a6ef91b32fcb9eb0be19daf106b153ab7e52e0e210d5d44c7b09be71772d5aea73dc9624a27925dc57a987b0b278d8a3e69a1efc17586be70397072bdba2211ae3ee735ccaa2d9c5e29041", 0xf1}, {&(0x7f00000038c0)="bd0245298d594291ad8d2064247656e94c82936826a5f1e3ee2341b9f0cc098a11250bba4781da930d891f40aba3f165fcdc3c7cb27f421bcdb9b0f4cdb17ce74bf5ec313a2e3f46e7b31f3646ce6f58efcd9f49a884c5ff755ea8", 0x5b}], 0x4, &(0x7f00000008c0)=[@rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x50, 0x4008011}}], 0x2, 0x0) 29m41.983686985s ago: executing program 32 (id=1119): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000180)='4\x00', 0x2) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000003a40)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000440)="f5924a75da23a5f6d51b2cde0471d62ae1daadf5123c0c64d4ea354b99ee774e900e8647ab39d171568c9af955caf40ddbd73822139335ed5d3f6bbb33e5c98ff7a21919be048008cefb35542f070e4cfc3a41c86ca631015752e862e83ddfec11f8cd32d69996bc3130770c9f6fdf4d9dbf11fe6b946bbda060", 0x7a}], 0x1, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r3, r2, r2, r0]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r3, r4, r1, r1, r4, r2, 0xffffffffffffffff, r0, r2]}}], 0x118, 0x24000000}}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000003640)="4b65ef77b97d779e0f1a1b4e91e8cdaac31172ff071327da5d34c86b791a7f50a9c179d0d4cacef57279206406b89fdc453be0687f47462d890a5e319c3c063db0ae0891f3a0d62f678ff178b429d1383537dfb523d91795660a64894e6eddf5b4c37621f4715399b6f71579613596ccee3c578cf00478ce25daf9c5c334229920d0f39baa91a04a5840f68df5cea02951dea736f08e9fe3abec6f9dcd3e25d3c37685d451b37dc06855afd3510b6598ba24a1d4fb", 0xb5}, {&(0x7f0000003700)="4c0abf390f639f08980fd0b97dbd77271849bf6ecc9df77b5ea99596776579817eb4165550874ff583e8532b8364e7103e26d7379020b235be2cc0a26933991846e52e9526cf0923376bf8d91f7ad872c2e47b4d00a5aa651b34b89bcee1433594b5f9b2cf1e0940739f56b44c73feb409382df3aed767724038e624c3060a4d8e91a84ad7819afa380e4d63f9112b606667b73593f842bb74acbcd971ad73784cd7130916445f", 0xa7}, {&(0x7f00000037c0)="c4f56236c8d6f1db07bf13bcdf5dc7dbcf2797066ac35b4e78897bf1737414653134a11d6be1d209920240a902712eb4dbce81bf6510582fd09b2d3c28719265c8f6d161929bf9ddcfdaffa8c2a6b5cc121c6bfde93a4b3e2896fb4906ecef21316e1f1809b35c8c8d7a01974443b9e69e774b089b574b300be7fb38d90adf96a790ef2a38f0bbd175c95b093563abc1525e57d3c14f381836b50626496ba8c6481954829f89a6ef91b32fcb9eb0be19daf106b153ab7e52e0e210d5d44c7b09be71772d5aea73dc9624a27925dc57a987b0b278d8a3e69a1efc17586be70397072bdba2211ae3ee735ccaa2d9c5e29041", 0xf1}, {&(0x7f00000038c0)="bd0245298d594291ad8d2064247656e94c82936826a5f1e3ee2341b9f0cc098a11250bba4781da930d891f40aba3f165fcdc3c7cb27f421bcdb9b0f4cdb17ce74bf5ec313a2e3f46e7b31f3646ce6f58efcd9f49a884c5ff755ea8", 0x5b}], 0x4, &(0x7f00000008c0)=[@rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x50, 0x4008011}}], 0x2, 0x0) 24m57.116511523s ago: executing program 3 (id=2084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xb058}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae", 0x7) accept4(r0, 0x0, 0x0, 0x1c0000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca3710c0000cdc67c5e3126628168", r4}) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000280)=0x8000) 24m55.644903565s ago: executing program 3 (id=2087): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xc3, 0x7fff7ffc}]}) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x200, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0480000008003950323030"], 0x15) r2 = dup(r1) setitimer(0x2, &(0x7f0000000340)={{0x77359400}, {0x7fffffffffffffff}}, 0x0) getitimer(0x2, &(0x7f0000000000)) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x62f50f, 0xd) creat(&(0x7f0000000240)='./file0\x00', 0x0) 24m54.779211288s ago: executing program 3 (id=2091): r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140003000401a80009000900024004000000035c044dc1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e03a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4efef3d9300"/216, 0xd8}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001, 0x3}}, './file0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x38, 0x10, 0x1, 0x470bd22, 0x3, {0x0, 0x0, 0x0, r4, 0x40000, 0x5aa4d}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x2, 0x4007ff, 0x200}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x62004880) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x81, 0x7, 0x4, 0x8, {{0x29, 0x4, 0x0, 0x5, 0xa4, 0x67, 0x0, 0xf, 0x2f, 0x0, @multicast2, @remote, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0xb, [{@multicast2, 0x2}, {@broadcast, 0x3}]}, @generic={0x44, 0xf, "9bddc22e835a5f83ada2635e81"}, @generic={0x82, 0xb, "dcd488c66714cfb5bc"}, @timestamp_prespec={0x44, 0xc, 0x14, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x40}]}, @lsrr={0x83, 0xf, 0xda, [@empty, @local, @loopback]}, @timestamp_prespec={0x44, 0x44, 0x85, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x17}, 0xf7f}, {@empty, 0x9}, {@rand_addr=0x64010101, 0x5}, {@dev={0xac, 0x14, 0x14, 0x10}}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@private=0xa010100, 0x2}, {@private=0xa010102}]}]}}}}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@nullb, r7, &(0x7f0000000240)='./cgroup.cpu/cpuset.cpus\x00') sendmsg$nl_xfrm(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=@acquire={0x14c, 0x17, 0x100, 0x70bd2a, 0x25dfdbfe, {{@in6=@remote, 0x4d4, 0x3c}, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, {@in6=@loopback, @in=@broadcast, 0x4e21, 0x9, 0x4e23, 0x7f, 0x2, 0x80, 0x80, 0x3a, r4, 0xee01}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, 0x4e24, 0x0, 0x4e24, 0x95, 0xa, 0x0, 0x80, 0x33, r6, r7}, {0x9, 0x5, 0x0, 0xc, 0x1ff, 0xf7, 0x9, 0x9}, {0x7, 0x7fff, 0x100000001, 0x6}, 0x3, 0x6e6bbb, 0x2, 0x0, 0x1, 0x3}, 0x612, 0x8001, 0xe6e, 0x70bd2d}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}, @srcaddr={0x14, 0xd, @in6=@local}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x6}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) lseek(r0, 0xfffffffffffffff5, 0x3) syz_usb_connect(0x2, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x9, 0x7c, 0x95, 0x8, 0x16d8, 0x6804, 0x68d5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x81, 0x40, 0x5, [{{0x9, 0x4, 0x4c, 0x1, 0x0, 0xd6, 0x13, 0x37, 0x5}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1900, 0x40}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2404c800}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@updsa={0x148, 0x1a, 0xffffffffffffffff, 0x0, 0x25dfdbfb, {{@in6=@mcast2, @in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x2c}, {@in=@local, 0x0, 0x6c}, @in=@loopback, {0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x970}, {0x0, 0x3, 0x0, 0xa6}, {}, 0x0, 0x3503, 0x2, 0x0, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd2c, 0xf0}}]}, 0x148}}, 0x0) 24m50.105757991s ago: executing program 3 (id=2111): connect$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff57) (async, rerun: 64) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async, rerun: 64) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000240), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)="0706675823b8a37f19b37e0f9f120623b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0289ef98886eaac01b08aa753b8726d16773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2555da4ef9035cbfe8dc1e000000000000", 0xc0, r2) (async) r4 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000001280)={r4, r3, r4}, &(0x7f00000012c0)=""/264, 0x108, &(0x7f0000000400)={&(0x7f0000000100)={'streebog256-generic\x00'}, 0x0, 0x3b}) keyctl$setperm(0x5, r4, 0x20a0208) (async) mkdir(0x0, 0x0) (async) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000580), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000040)={0x80, 0x18, 0x2, 0xfffffff7, 0x0, 0x9}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) (async) write$selinux_load(0xffffffffffffffff, 0x0, 0x205c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 24m46.688532052s ago: executing program 3 (id=2116): write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xa, {"08c39ee52f329f1698b1c4865f8b540a5eee9f496a0809c3d20325867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76023256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4ac6aebef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a96819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac12d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beed375ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e457000000000000000000000000000000000000000000002000", 0x1000}}, 0x1006) unlinkat(0xffffffffffffffff, &(0x7f0000001040)='./file0\x00', 0x0) (async) unlinkat(0xffffffffffffffff, &(0x7f0000001040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0xe) (async) r0 = socket$netlink(0x10, 0x3, 0xe) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001300)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000001200)=0x200000000) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone3(&(0x7f0000001280)={0x200, 0x0, 0x0, 0x0, {0x1b}, &(0x7f0000004480)=""/4101, 0x1005, 0x0, 0x0}, 0x58) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x730a, &(0x7f00000000c0)={0x0, 0x6d89, 0x0, 0x40000, 0x337}, &(0x7f0000000400), &(0x7f0000000040)) (async) r6 = syz_io_uring_setup(0x730a, &(0x7f00000000c0)={0x0, 0x6d89, 0x0, 0x40000, 0x337}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x1dc, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x9, 0x4, r3, 0x0, 0x0, 0x0, 0x2020, 0x1, {0x1}}) io_uring_enter(r6, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000000)={0x0, r9, 0x11, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r3, 0x4068aea3, &(0x7f0000001400)={0xc1, 0x0, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5, 0x0, 0xfffffffffffffffc}, 0x18) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x858, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54a9bc11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd400000000feffffffffffffff00", "f4bd0007008019000000000000090000000000af1e00cfb7b3cad800", [0x0, 0x2000000000001]}}) (async) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x858, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54a9bc11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd400000000feffffffffffffff00", "f4bd0007008019000000000000090000000000af1e00cfb7b3cad800", [0x0, 0x2000000000001]}}) r10 = syz_usbip_server_init(0x5) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffe, 0x6, 0x6b, @buffer={0x0, 0x58, &(0x7f0000001380)=""/88}, &(0x7f0000001240)='\x00\x00\x00\x00\x00\x00', &(0x7f0000002240)=""/4103, 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r10, 0x10e, 0x8, &(0x7f0000000080)=0x5, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e45a22000000000100804824cabecc4b945f64009400050028925aaa000000c60000e5ffffff00feff2c707f8f00ff", 0x4f}, {&(0x7f0000000540)="d534a43c228499e479e2852e291ccf9d635a1dcce40843423d991cfcf9c1485ae82efbbe3f4b221e3a0b8a3b05bcfdd0a565f3bf5e9ac8ba4b851f8e19991f4c47fd61cf134218a7a033d69baa5d758d91aad405f775bc1cf2065714e5e4c6f2cfba43fec7563f5ca7318ae5249e3e8cee83fe3b3bb978ef24429036dca06ccc9735d7f016cc3805d4cd2a3d57dc04caa3118b0b73acb4676bf5e46779a7f717dce538dc9e830abeb3e47b6f909ad4571ef16c7f58c1f703af977e22043797ad667952d35e5051bd6a77e3ad9f6b36b5729d3169d386d4", 0xffffffffffffffe5}, {&(0x7f0000000440)="259483c3d84e509775599debc9e23e50380eab5d6aa0e5c8805c0bac63d95173c9fe100058a6865db321dfa64d1580f7f166cde42750ae7437f07df698ca8c3e76f21cc26de0fbb11be73943ed2b562e06c4abf5b778123a43f8ed93d324c601f6f97ab8cce488532541f1998018eb4995d424d94d49b5cbf01417dd4b8835d9207cf899f3455d7f1333c05ecd90c790770e044c311f1bc58ed1ab0213de282b7b9a4b94b51e52314b1e57751b613cef4d2759dfcedbffc94b024e79f3b671197ccd34365e038bbb1dac88dea07e28c06014cb9c1088", 0xd6}, {&(0x7f0000000180)="ab946ba78ef36b5da0837f2690ad0d00b68e9a398a5939deb49d6d64d0f7905413af2fff506a02a64b30330c5ff7a47d8bff3ae0b00bdecc7e3ffadae730846b4fa95bb17bb0bc849081e331e480606940cf283672ff8020de7bfaaa97fe81029bf7590dd159f0da508a4642c2b81988bc5ec748", 0x74}], 0x4) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e45a22000000000100804824cabecc4b945f64009400050028925aaa000000c60000e5ffffff00feff2c707f8f00ff", 0x4f}, {&(0x7f0000000540)="d534a43c228499e479e2852e291ccf9d635a1dcce40843423d991cfcf9c1485ae82efbbe3f4b221e3a0b8a3b05bcfdd0a565f3bf5e9ac8ba4b851f8e19991f4c47fd61cf134218a7a033d69baa5d758d91aad405f775bc1cf2065714e5e4c6f2cfba43fec7563f5ca7318ae5249e3e8cee83fe3b3bb978ef24429036dca06ccc9735d7f016cc3805d4cd2a3d57dc04caa3118b0b73acb4676bf5e46779a7f717dce538dc9e830abeb3e47b6f909ad4571ef16c7f58c1f703af977e22043797ad667952d35e5051bd6a77e3ad9f6b36b5729d3169d386d4", 0xffffffffffffffe5}, {&(0x7f0000000440)="259483c3d84e509775599debc9e23e50380eab5d6aa0e5c8805c0bac63d95173c9fe100058a6865db321dfa64d1580f7f166cde42750ae7437f07df698ca8c3e76f21cc26de0fbb11be73943ed2b562e06c4abf5b778123a43f8ed93d324c601f6f97ab8cce488532541f1998018eb4995d424d94d49b5cbf01417dd4b8835d9207cf899f3455d7f1333c05ecd90c790770e044c311f1bc58ed1ab0213de282b7b9a4b94b51e52314b1e57751b613cef4d2759dfcedbffc94b024e79f3b671197ccd34365e038bbb1dac88dea07e28c06014cb9c1088", 0xd6}, {&(0x7f0000000180)="ab946ba78ef36b5da0837f2690ad0d00b68e9a398a5939deb49d6d64d0f7905413af2fff506a02a64b30330c5ff7a47d8bff3ae0b00bdecc7e3ffadae730846b4fa95bb17bb0bc849081e331e480606940cf283672ff8020de7bfaaa97fe81029bf7590dd159f0da508a4642c2b81988bc5ec748", 0x74}], 0x4) 24m45.510085238s ago: executing program 3 (id=2119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x40000003}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) (fail_nth: 1) 24m29.728393672s ago: executing program 33 (id=2119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x40000003}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) (fail_nth: 1) 6m48.631699716s ago: executing program 4 (id=6837): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0xbbcfb000) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) (async) getsockopt(r0, 0x6, 0x4, &(0x7f0000000040)=""/218, &(0x7f0000000140)=0xda) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x100, 0x0) write$proc_mixer(r1, &(0x7f00000001c0)=[{'DIGITAL3', @val={' \'', 'Line Capture'}}], 0x2d) (async) r2 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x8400) syz_init_net_socket$ax25(0x3, 0x2, 0xce) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000240)={0x1, 0x6}) (async) r3 = socket$pptp(0x18, 0x1, 0x2) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000280)={0x7, r3, 0x2, {0xfffffffffffffff8, 0x2d}, 0x1e}, 0x1) fsync(r2) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x9, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x21e5}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x5a8c128066a31159}, 0xc001) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000400)={0x1f, 0x1, 0x3}, 0x6) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0xfffffff8, 0x7, 0x5, 0x2000, r6, 0xb, '\x00', 0x0, r7, 0x0, 0xc1b, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000540)='cachefiles_mark_active\x00', r8, 0x0, 0xfe}, 0x18) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x8, 0x2, [0x8, 0x3]}, &(0x7f0000000640)=0xc) (async, rerun: 32) read$FUSE(r8, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 32) write$FUSE_INIT(r8, &(0x7f00000026c0)={0x50, 0xfffffffffffffff5, r9, {0x7, 0x2b, 0x3d9f, 0x40ba000, 0x6, 0x1, 0x9, 0x0, 0x0, 0x0, 0x40, 0x5}}, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002780)={&(0x7f0000002740)='kvm_vcpu_wakeup\x00', r8, 0x0, 0x401}, 0x18) (async) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f00000028c0)=0x0, &(0x7f0000002900)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a00)={0x18, 0x7, &(0x7f00000027c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffe5b3, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x34}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000002800)='GPL\x00', 0x8, 0x7d, &(0x7f0000002840)=""/125, 0x40f00, 0x0, '\x00', r10, 0x0, r8, 0x8, &(0x7f0000002940)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000002980)=[{0x1, 0x2, 0x9, 0xb}, {0x1, 0x1, 0x1}, {0x5, 0x5, 0xd, 0x8}, {0x3, 0x5, 0x4}, {0x1, 0x2, 0x0, 0x1}, {0x2, 0x2, 0x4, 0x9}, {0x0, 0x5, 0x4, 0xb}], 0x10, 0x3, @void, @value}, 0x94) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000003d00)=[{&(0x7f0000002ac0)="4b92116fae57121cf1f73b8888dc3e5de8761f6a17ea2eb253287b550a3856", 0x1f}, {&(0x7f0000002b00)="8214b3f73125e29b42e4e7150283ea95d8c19a43be44bab57b26a008eaad161fc7e8bf54e50f6205468829c82671a913257951feb29721", 0x37}, {&(0x7f0000002b40)="a825965ca6ab39564015b45ef8347e73e095d5cafbc6ca2b8e82b73aa7f2713c407b932ebda93fce206ebebfd91a5d94af407a757d8882123c1b32bd68c9caa6d88c0a31a42ab69e779e0e5d6291d2a3cea9ffaa91944a039fad43ad9eee65826f9ec6263d50bdfa97717269b3868cfe", 0x70}, {&(0x7f0000002bc0)="9a90004fc99866837dcdb6dc1805feab4686301426b72fd2fcfa28c31015e0f7e93d941f793ed342db2c17894f4850f5795975a005f9719bd7b488a51be07ea80e15ab608e8be61ecbdf23b80a08f0a94171483db6b4c2ec7a85684700b6e90f305c8f489569214b20981a0ccbc7588fc2009165b30e60a1d34731d594b35702e2f00aa3d8f880025bc19feffae8bfa608f61e1476596134ab07e61e4b53f9933d24bc60792ae18573145759ecabb1581241a28ac4c9511c1e2cbfb6d10d5f0f71b211bbc18a0e11e604068a070e3376091096d3afa714ee91dc6320394a9e87a920a7d27415c514fc87e7bd6e68727d6ae5af74d805ae475efdf8141a68ea52a7c232374ec4a7d0b73d43270bb0910434b200203068b16c95b5baceeb066abdc11e0d06b47e1cdf6cd6a259f0a22899a6ddb3748797fbe1e28d0e4db880e040df19417ccd8727ca271eeddff1bb55f9ffa50c9485cb2c415e4a6c3a825ec80bf68cc0d00af47320bba66c4858278c83d5abe18ec45a8b62a29e0002e04c7ccc56e654f76021e39aee6a9fb2f27797764e74027a51300a9df452fc2877d7261d8f7e16892c61871387d4833c2884a9ad8175a7d014715c07670e573b4101ae3542a71a6324088895d7d4a7e656d9f70d25917af97a156f1d74eb4b8fb4d034a51f1c360f24ad5aac0f7509d4c95fe0fb2e5559fd138aca230c31065b9e043e3d7931afdb025bbce8ef516e355495fc181050020158bd8367a9d19bd8d74b2b0782bd34135c4c9a6fd55e8060a778109b61ebd5ac7e538c7a42fea845279aa2d22b3a28b71335daa980d1f291bc5746077d2fd73c133ff9907daeaaeb4919f2ef8a00f4d62deb4eaa0e1526843f81090e9226a1e78739c7701be36a7d5e391e75c169ca5bcd989c678fb9274f4a3142f625cc8759f0d2bcbb4e770fba937020a58cfad59105374fd67c170a06306881688ed7bccc3dee4d0298ef1c83f31294da0a11be3c3935bc7da0811b230399907035d30dce7184aa5bdd08aa3c99addcdafd303553f2fb18cbde13db467773773d9c3e31ad6886e206b4f6935427c3f21d20eab6d328f50f3d37638af206505c507f1bbc74a45378db14ae074042b4a46eca210bc48b66ce696caf5ca3e60bc234181890e4bb713a2c4c387fbaaa4600babc08bd4ac1436789022abb17ae9a180db8dbae01bdc27c38a679e50df9a6aaeecaaf662500bb0fb0cec1d6b69cda1e27a18b20253edf58e35fc8e4128aaa3eca2d9f2c5565a4193347bd3d5a1f86d3c45374de52f2c87a7ef59e07e0cf2b71210f664954e0189ce4d93b570176e86a204b998f5a5c3278ad20e9528d65f97477f54fa8c6c0b10f09a8053875ab7f956986eb9f8296c5985f1ba084fb6f8066e75689cb6eef551f99c67cbb9cb431242b4f00aa8783fd980c1dda3c521e9e9107bbb2c75d0ef09a6ada3733bcd8d1717492c7bbca4485fd764c8f9fcbf4b5859ef89a7ee07c2de94fafbc955e193ac1caff441b86dafb834255b83e10741bb0e2514e28b591151e4aa1550c49198b422f0f1606d1d58c6673ba09855a1becd7913e67b6b15c7aab6c8a14ae3aa2f6bfba3ecdb0bfe38322b882699aad02c7e2a0e4d59e7d71d94f2e42e0288b8b9b469fb6034baba9f21f5b31ef0264f5c259feff7c2cf287cc71fa4fe82fc4381632ee50e6a35c94daa91a928427a01a69d7f4213f6fbd46aadc87c3476d910e6f08069e9636300087222aed138296aecaf556d350466c1a322d281942f0cf2cb2778bb4dee3bc41ac106d10d5374e0dd5d6b1262491b0bfd2d3152328e16cbb9f0720df777e054c5cf2325af6bb26ce6cac7b855004f5ff00029df867b2a3658425bb720668f0652789c65859f92e0cf615bffb34980e82f2c7625630feb684ec584c2083fc903c741bd24134aa340c0ca96219c5e92ec6e4ca9ed744fb8caa783d56acfadc5b05d455c01b9154f1ef476489dc4a913c25b1ed8e68df0d81b9c4fcfab875b959efac059b67c29ad3d28b5602a8734e0dee117b2186ed07b0fe0dcf11d9ae7de9b40404177335f5296ae204fd9eb70ca318a38b77dc683bc47b3890797f4165ae9d9f8e3c4fa759f83c4c3936a6cbeb9cd519bb69e72a6ea21d818f49cbb1a2383594b122c62023bffa9ed387f2fd32c4d4de91eaa968d7ad3678f5224ab67eede33880f4fe75b646662f17fc6f873d3eb65b669b38926b66a663d6326625d39bba98601d3d7c632123cb6c7c453d74584584c04f4313f6ae5f312264bfa5bc1b0b1bfee53d92831d5415f314fee7e00a81d6def60974f183057d803c2ad5902db3c35b162d7710ef412f1735f02bdb5988ee24057cb0f06e2bb11263cef8d16b38a9f44347a7ef819c69a74d49e02b4b6e0df6a6f1740bb45e14ba6619ae45239a5585362a0b47239cd69e0e798f5fda635f708f2c2170981f299d43ca4e76ef273a5c0ee176163d8c5dd9754e1ebfd687eccdd11d7833e49482ecf039f276958ef475ed59ea8f6364767f8ec5f7a42a04a68e010bf5e55bd62d8c246e955ac79e7df8246fd108f2160e6c1662b973c597bfbf433b6c07c4b56e35b592a6b83dc6d88653aebb291a309bbaa982ad92eecee8c07a602d4c90d49a57205a28f9b50556f2d0257b61038336e2488850567bedde30220d1fff3ebc5c35d28b7cec2d67730938edc59bbff0b1f9068d2fca902eb660537edf1a757467ea893b591b408011b57c5f76dffc6540700d986606545dff0c4a73455d736df5b6c7d0457167c08adf38db9ca818c10877d42b02dd0b0764f45d7b2697f19bda2d4b0955ea65afb9208b2080125fe083b37a8e5b8b9ca115c9c4edeef7cf01885891ea0877ae838d883593b74c0570eb859564880064a70a16fbda609a8e713488583d43e0592e09be0236001e4f3edb2a2adc7a39726a2af5d58daa95842ba787ec58c767116426fc0fea95654411efa4db807e428d5782416e7e1d5d469bbfe5855b25e6c7827f0a869a83ed472ea8214a1e8decce9396419b38fc28977b78582cfe073e39b36ed32f98c365666dd358a559c9bba388cd0f42cb592b4123c6e3602b60ca84288fd39ed0e2013e41e1e42fc7b0b160c54061f98f55243e2d87a430b35482116f5ce449ddf763b2896009b5afb150f23e9e80e9adcc1fae964144a2a9bc3091cf627b21d48b16d921b2101d76e4af7353d3be9d3c11ef3e10f2e682725fc7c3469658106cdd6f9439a8d6a2721654e6bc793379a99f6bab1a2b519e43a9ab9aba2c404007218337640f4202e89c1e44b99e98ea23a6993d79db1ef579536a61acc738d64ba4e721e2041cd50b179eeffd32f719881d7afac7fde0decef614d182cd6f9a580d81c2bd1b4eaa7c004feb6e1180157c7fdfc375bbcc90df78548b4b8cbab06c41ee3fa5e88fbae672ccd6f973b20e9ba0881bd5a388eb4b1207827c0f20befdf4735cdddd70660dbd4e986ce80934cb1c72d5d999013e58c166b6b7b7118674f159a87510cf2d8109d06ff09f7ef268dd361f0ebf3295329cdeb76647d76dae488b10608f47d1d1744c5e472fb6fa01ef018a400b3c4c7691252f8509501d131b0e547f81007fe879b324c352e1cc56c950dd8aef70a6e7e47d14709bb20f1652b72cb392007ca121b4b3feae89bc679e131e12915b4b57d302cdfdd92ab96b360679c12d55ac5004f00c76768c25c44373e9aa3a9606de83c6217c85678bd1d523ebe54c924466ce5bbbdb98c949fbf39bf2f645748bee5d597df42c13b6169acf1d9fa0e6a90a19eabfb54161485b02c619e62cd5e7824e8331fcf5829ca401e4990b797f08698e9f5f04be7d9fdb5b3a0f1cc263cc8bf484d117776fa4b8b963a17efbe31fcc458ffa4cf85349829d89d521ce3dce34bf4383dec4cf17b6ce43a3f367648c5fed4067857589a2c6da8aafd744ef73329bf874ed1bcd86dc032e436c243b04fc28f2ea6fe602e073385a3cdb24b1b3d46a8b2281a89cbec3b97cda3d94a4205838d6bcb2f1855fdb36004d6ef834aa39d1b3841679d05e477d7734d122afd130074655a1bb7666cb5a75166ca8afc80c17c836a2cf86f80234d8ad9280dd081d3269839ab0ff112a3c803d1636ebd6ed126815e71cd9d06a7e2b000239475c280ca2121c8d17375db0d849f9bd955ffc757a9686ee17adec4324a81d0202e0ff203e8163f40f0bba1efbab97eb584dff7d5f222c7359d5ad5c1df82a6a6de0cddbdff2e3988deb24977cd85c4b8bc39721d0db8607a8c08b71dc2fbeb089234100963cf690d26bb73eea18477c52b09f6670bc76a63386973a36678d48aafd308133655df74f99a34ed807dc6d6393c562deaaa1806c77d1cde0cf4cab5133bda4da7bc2009a059bf9d98b997029d7bc36f03d038a5f33a8674661ddb6ca051e8530fab3cc73d14e4908b83f0e6e26635536cb5ff2d98981d9aef4976d279841bf3c8c88839bddc15311629d0327c5ed9b46da1e4dbf1563e16934cf16b38cf8a2c566c471d8406f7e9d3d915d859f2f2ad99feb4747826e632a99774f6ae564ec81f10d1313dbf0602ccfe3b409e064c641ba06cb7fe0e0de09e1f82a2fbf1b5a383bbaf5bc54c9494f143d9ef65b3e2659d41ff64fa486f4b51c7842f496dd82e1861ce85004c2518ac35c94980b72c5319232792d776c9cd7f692c685bb3e3ec5747af4450fe1d2495329f01436f2b4534bddcc9b075206f05703c08d30d8555c2ba2f5caef145ba2029d897985f20127b93f911750d3de9dcdf2fdfd89c4fc9e75b38d2d250e33161da5cc29fca017f91e16815350d47d8c74dc7b126b4e5640a6b162d24dc2dc158a184921fb03cce2bd3424425f973e2e4ff641237ffdc457f9cca4ad9a4b642fd82c04c0ec5eab26dce094d020bde6b26f5f412fb5a675807b5b61ad12dce37a9741261776fd2d2324c0940b1610c90dbf4fc0bd2713cd49dc6b06ddaa1d601c2018e4001cd18470205893c627d3f449514d85fb1e67e0387561362eac545e3dafd90ea2f10b5719687434953c47e7f9a8c65e74982bb04695874184e89568486ee1ea1484399e61f2e8d3caf26cffca73be97d1e111d1a736e36bb8bf9fcfdf4ca28e842551a931e3334bb55660f18a61b227adbb85883e1e4912fdce8fbef7e54944ae9cef35b9151be714c460449aa3654fca597ed47d5715651bf69ead8469e2400ed7cd2c00e2271ed9a41aa2ab6135697cdfa0de48a5bdcf2add5870c9c7bf2018dfb5ee015a832bd8560291c50c8ff609df718ea5d9a954661e69c69ff17dcd67930bdd41df6d34eb2feb8bd8120469bf59353ab9aba75b71cd6a212baac27685aac259a868292a1b408c8794ec37cb71f8bf97eb359230d435a57031dbafd2252a49417f23bda9b89d107ff8b5fe43f406de8d49267b880f869c74b6dd5ccf3fd85e6c6b4d61072164c69f49419811a92fdf72da1be8a528933cbb130812b4f20f086aa5c72d32103eb355eb588f962461a7332f4ecb834f77a7eab4e6f54b321f80b71b70977789696b66b489acce00ecdbb5a9340961f6f696a998c4947a86bc0ed11f5a24b06d6efd8e04882a6f70e72d2a58a2d7f20dedffbda449ebafee6fe0c7978837d520fdbcf63dbcc5bda9dddc5463b4e8b151e68918af6ad9b9f3aaf66bacbb5bfca43b9bf63a7c6d8f38b5e94b83f3414082ad0b0115f05c2565c22618f8eed0eaba090b997022ece5f5836e1953750cd6c566a4bb5fc1f0f8b8cfa3e573cbca6251911c58e0901cde88cb", 0x1000}, {&(0x7f0000003bc0)="db856abc95808b1639dc16b9f13301b109ba869f1f4faa33059d19f653a6a848d6533eb13fc5e2bf6125992e7ab3509232afaeccfb87850d608d0dd359ef40e007fd5bdf649cf104c567318830b9c09ba38261c0965fa1937a456ae35dd0c64ca2b21b5f1fd2b3d59673c0523a8b3ca89108d35363f5611d565b655c978eb60702c6dc6f0c3ddddba616ae95c2905f0d8bee8c486edf891e5770986a74f81ee6e09b34a4afbcb4dc87017359991296697e9cfc75b12b23bc14baa413", 0xbc}, {&(0x7f0000003c80)="c3c12177f343e820601cbc7b6706e2ea2dab111be49c50b7624b5ad90505a06ebdb6befac81379d560304205c5ab717074d7a0e52cc7f86ac8efb7f9d72a5e49bf1c203081bb57bb495d5e837293a9e2a92a10709aa820599d1aa29b70ef2cedad59652c5309417b54f67c23c3b9ad4f107201", 0x73}], 0x6) (async, rerun: 64) write$FUSE_NOTIFY_INVAL_INODE(r8, &(0x7f0000003d80)={0x28, 0x2, 0x0, {0x2, 0x52, 0x9}}, 0x28) (async) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x2010, r8, 0x0) 6m48.397311613s ago: executing program 4 (id=6838): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000080)=0x0) timer_settime(r0, 0x0, &(0x7f0000000a40)={{}, {0x0, 0x989680}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f00000005c0)={'syz1\x00', {0x0, 0x0, 0x0, 0xd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x400000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x20000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x597, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x85e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x80000]}, 0x45c) r2 = dup(r1) r3 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000a80)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x4, 0x7, 0xa, 0x3, 0x0, 0x7c, 0xd, 0x8000, 0x6, 0x6, 0x5, 0xe45, 0x6, 0xa, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7ffb, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x3, 0x10, 0x6, 0x7, 0x8, 0xe66, 0x5, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x81, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x1, 0x8, 0xdaa, 0x2000005, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0a, 0xfffffffd, 0x9, 0xc, 0xffffffff], [0xa3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0xa43d, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x4, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x2, 0x7, 0x6, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x2007, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff0447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x200002, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x4, 0x401, 0x1, 0x5, 0x2, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x7, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0xffffffff]}, 0x45c) creat(&(0x7f0000000280)='./file0\x00', 0x0) setfsuid(0xee00) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000007a4000030095000066f8000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r9 = syz_open_dev$vim2m(&(0x7f0000000280), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f00000010c0)={0x8, 0x5, 0x2, {0x2, @pix_mp={0x3fe, 0x200, 0x43564548, 0x5, 0x1, [{0xf, 0xfffffff8}, {0x9, 0xc12b}, {0x8, 0x101}, {0x0, 0x3}, {0x401, 0x6}, {0xfffffff9, 0x32ceb250}, {0x6, 0x9}, {0x6, 0x5}], 0x3, 0x6, 0x6, 0x3, 0x4}}, 0xb658}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f00000000c0)={0xc}) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ppoll(&(0x7f00000000c0)=[{r10, 0x3210}], 0x1, 0x0, 0x0, 0x0) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r7, 0x3b70, &(0x7f0000000240)={0x30}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00000001c0)={0x4, 0x1, 0xff, 0x9}, &(0x7f0000000200)=0x10) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r7, 0x3b71, &(0x7f0000000180)={0x20, 0x2, &(0x7f0000000100)="6f83ea999118cd14ee3a59bde18b0aa60b8638ab99f4ca1657ca3cc31aac237c9eafe6e1d68479f0660507ccf970e4413a7a9e98ae17bb8c6b6ddf8ea9e53a1e1235d7e2355f4167a43c21e55223a11eeb680ae6f450b9b499e3a9", 0x1, 0xe}) connect$unix(0xffffffffffffffff, 0x0, 0x0) 6m47.241816558s ago: executing program 4 (id=6839): socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) modify_ldt$write(0x1, &(0x7f00000000c0)={0xf, 0x20000000, 0x1000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r6, r6, 0x0) socket$rds(0x15, 0x5, 0x0) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[], 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) 6m44.520908032s ago: executing program 4 (id=6848): ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x32, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x8, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365216084de39", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000021c0)="77c61223d5a77e6eb54eb37df2a6550d6a92caad07dd94edbab3c1bafabc4525f42da59f37dea9ac984d1fcada5f31486e3d505e5c7efdca38df95729c1713a34c0747a70cf9d03651264505355d8f97db53ee07960157dc86a9edd8ae482519b0b69a22762383b338e81387054845b159096db6e8146623fe9d9e8b1fe24ccef64a8d6f78852af810993fc5c828d184da363f98586e30851c9149b9a3bffd926f39050bad081dba0e32ff94fd883aec2013dc36afcac723286c3be5acba915322a3d62d2e816c6a97bad75e0bfea9bd600d78c029a83aa035d3b185b3a1c733a5087fbb0980566dd163fd5931b6a9cfe4b85b8fea7bb2cab10dc9e912508d280ee8d64030e4a9de20ffe80582a59eec11067f1bb9e489287bfdea395f01fa2406cc8f1921b14a4f1195999d2aecda5bab0e2608fa6c65b1668017ab29514f9cedaa396b17827402bd7e2241cb1ba04fab531b684c0347c7d35f1ed86d438222266943a15db3c577cb8537b90b0fd9770bab8ec336d6ed8d2458faa6db36d18b63f18b522977e74548f5344b9e1d5e8079f7e9c8dee75d7fc8e135017e7ae0a0d81902682c6ecc7edcb45a27b958995b2a69c90a6287f48e0182681fa0476747c827d07cf4fcb764689747fd55c23d39689c84174aa33abf3b69fdac0005b0ffeb03069d6e07a5fb2a6704e295f46b47b99552c81dac65eabcd3d4f00ec2fb904609d02b4cfa4e242a07e1325228d5a72514cef4624fab9d547b09b303b53e5ed0a72e14120be47b31d78d73d3086c81ac40f2962fa17585619e6cbab0a471d51ea7a9c94246fed8e970f37fe78b27866bbec5d85c18a714a6e89627d4819c1816bd77f00fcb72fc1686dc107fc351ecb4f0164b7ef1a0802b8c3f31755135cda5b14bc6a2e08285da4323d4060c7f40c8b350e8d026421f25dd67d163b1c1ab87c19ef6c1af1eafa50de66b5e0e11bcf3c620986a834b5327ca8d0970de724912c58b402de63b2d7615096d67e6f9c15036ddb8915a1fb602072266e0a2903384f50bfd9d749c4b587a2fc6d4d28a8b352a9b5e0c9f8cc18d7321a8a29386db80bea100d13a66741dbc67d27948ae1ba4233f80f6141d769166ec8dede37cf74afc42fd75cfb942572cda14b1ac739e6b486758bc4cab194fe35c41159b3c12892bfbfb17860f47e95ef89d715a73558d79369445f411b0e6b35a06cf74b4356e41fef6bd06f7c7148fee19cd736ead1f95d931d498f4eefa00c03b117ae758b9430a38fcc941b115c42a6a1d50ace0dcccba45320791e906f1ef4c2655a86cea021e686a4529ff9d471e33ec04016cffa229ebf90977f10ec3e654aee030382637677d4b2ffb16d95f83981949567ef4a088c2171a73608571bbe4a439725cb2dc88063078a067ac3652c0843f220a2a6dbeeae5fbf4642c8e7cad40b57262a53793c7cdd81d6876e89bdb013befb1444ac80388c6c868f685db0819e0907742749f337cad78860dd863424f2a1ce493cf138da1af8ef5ac55d8da1962ab5ea272e6d55f6247d58154c5f13580e2f5a8dcf418a77c71cb1abd4f07606ceab95e5da5838e93193bb7c7e6ac2ea41bda4a3d35614569a44b431d42f2cf0cd13f544daaeb3cb91425c5887493437efb9498abda3ad9714fa250827fda0f8f25ca888595fc8c31e07b5af970d6d84ddc142ab0db7b801159d0e8346ff3b5881c1729769338b66c058d78ebd4651700cde4283c83e66fecaf26a31890f9e94e16fc2f3f662aa399a04da4a846c2f1237a3b1003c4592d7297c5451407b67245eaaacbc963809903aa9a7213f9dbbc52716628c5d0fd4b182c453303f10bba73840176d08bf5e9c4f33f7efff342ef13a1e0ad202d308e9c647a8d303f44e4df5ea0da9fcdb1023efae76fdb1bacada4eee1883dd1f275ec24d549a3fc6784bc5c63b349dcc5520ef08e888290c8500e888fdc9ede9b97ac09aba2a454d390ab9c65d68d3aab30ffacfb771d32f49e42ab3c87bca66737e8d2630822c9892e809084c093a7f1c0e9b938004920f03483e4b244bf1adaf19de2c62fb500404b8c834b5529a7988277d96e5fd74d3d6624363bad03a768d1aa5a008e3826e6dfff58862833747fb0b09dc5ebce83ad4a952ff3c8e98599323483a63e93f56d179a8f653d2f6b2e9e5771350d6447f3ba73b1e94df4b45d8910f4b95e5867a8bcec8a979e90431b2d472e05a4b79b0a5411f179a2ff93a2105c2478b13ae4977c617054bc36265da92e0410b0e0f1c38307e9890e998ab2acf6a32776ec895c621f0693191b059ecb92559abde57efda2736ea1ad7c4c648c1b77e714638baaa8e086ca047cd25a490f32178306e6a4fead902f35e91adb5bbff458514ff84c574aa14daf6d9105c97fbe54b7cd13ff0a11753861b4ac4f6d31b5d3f65050805d1f3d4310e942a86e0bd99a8d15612ee56666ce898b8aec0126c31d8ba2c91c4937638b8958eee421e6d0208803cb6a64db94f132036d4ef1ff53ee486aa8933d6f5fb7795ee611cb12b0dd9faf6acdbbf4aeba1518abeb40f8275a697d57fd7cd68bdb60e02d6aca8e9e6da432be7fa889d1b3d42177b208dc6ed21e35b084596b0d21b8082a363bb0aac821f7fcd5baf69c8057809054cf40f44924b79663096db1b552721924b65790153a6fc745afd4862f59e91950b6f7d8889eaef038702775e472387236287f5af6e607a67abd4ac034ea31ad60f7ad89c047c34aca845c4e6acf029b1c1955a764346dfca5f0462b2a8a805f06f1ed5408f7b43498bc667429813d7afe5e5ec03d558618a08fe5af1ae1ee84d95577b67b3ee2e8f2da81cc3d5bc336bbecad223a3abe96685ff574ea472fc026cdf449d842528dfaeaf4605484d9f42d38aa385437685bdd162122a4769338d8afadd9df929fefb55a3e3f04e4bdb12d621a678631b7babd21b31239de0748ff15248f2ca5cb189d7f0110f9e649a02763a5a259a0a2e3fb1a885fd50b3ea25c6bbf56e85c1665146f4a5bdab0c2af2fab417602ad6bab50d6bb57feaa07d0a235ab10ee6da11883323a6c24bf9d054697e5fc7d3f39b9454962a017e405db82924cf80b31ca9e22dc2d9f7d6a118e568ffbbd3aa03886ced26ee55c035ab44812bd7d1d50beca5fc4f7d944458f1e2b99478811ed75b1d70c2a0722a5cea10719d645d4a0e030c18016afb396b449cde8878f3a822487e69f6ab10127759f917ae106738a320aeeb300422358d9358aa68b4801a65651970c602dc1093029625fed7e2ea488e9b8fd5365338db93ba7e3884866f5f4ced41cc10dc88f6fa9b2532537f229fbd404f4853e9b91cdec69e5e545172f71367d7913f242fc54989227b794eac44935206a793fd833f14f6d6f1b9cf698c7e420081d0571f35baef028d39bdf7f046928276296b7ded7729a31d318b5212b21c00d03ee414537500d2305b81ab2f0be12b1578459200e3c16333c1519032da0591979adf7fefb655d968345e1f2369b8f3c832338cf1c7e6b9fa3d2b78d180479334b26332e5ee0d52272cf26c0deae22fe810f7a5b1804ca8674cd2cdb465bee0c414a9ae44314417b7248d6fdccef0b43edd48003c291b9e721453be187d8fa34de2acda3b8df2777fb933fb6daef0dfe8089aefe842f87c01f2ad3b5bd28799dac6d47211292901f99048649dde6a856e8fe688cc62a9660756071b0bf6333f9687085cb52f3b95d2ebd8769bc6c2171d968771cf181d03d5f0bcc531f274c428d1db66b6cc9ff1b48fb2f96887d3f5f4722e92ea488100a8f5acd973ac28bdb399b75bf27d687bfc0ffbe803ac9a0c21efcd48ae55eb3b3c55f58bd95ebd89a102c8f97c26ba8d68925723068410fa475535eb9ae2b119f0c85f34d9e87724a9382cd409fbfb316b0923f59a59c36b49f6fe6d033a578ba1fef0e607923f8859e98f37f369a97177f7ffef77a69371babbfb5ac7299a33c38ace80e839ac17a294ad8dbb70aa476643f96faabe69df20e23705cc2e3796e000d81b568b1fc3806a32f7da08b495e06f4cbb4e67fa88f4d5f04fb6bdf7b18aed386aad0c4861207e925dd2c58a57767e9eba4bbae16343c8cc85e00dc9944a63064debb5478819e9a72a84553e1bebb8eb0543dd724a0a7c0ab6fa613ad8763aff024655c99006c10b258d857dc36418283c86b3fb6101ad52d42ac90bc6d04d82f2fb6b742b4b460f9282378856a48b023a2f2b55652dae86080e730dac47280be3915884a2da9e647b9679e53e43aec05f8b6c6aed4e14b60a5b23af0862e65b46b7a66a939a2e0b41d2041c87e7239a2ff1e8bd54f09f7b901bc4dcdd42c99822b97d382b1c9a2bdb011d03027821a9f1faa13d7449e6119f55922a947491ccdaefe251ae8184152cf3d9706eb3d26cd5f648ab07d4780fe47816a12bd2b32cf120fd48bead9e7444710ac5aee6084d0539adc0773e788ece76fe640c7bca3ca727db6e2f55e0930813e275495d8e6e63fcdc952f90b4d99f6d7cd1301e88f436d7db674d10eefe2bd023732468ceaf9ce0b0eb281ffd59d78836eb85296b333432c9f381f809fa07f3665eeeb2b8c42ec9cd8291b1c2b7deaaaf3b5e576140443c93ff8e3709153cd4ae64c23bfa21646b654e8924f9315eb4278a8e23f088440ba42a2e86f570b887c3af9b086ede6ee341a28c836766b9a7cd4f48eddcbf737eaf726e57c988f7b6c652357fa9fc9eb6da777f704275c6cdb236f3dad75673da71d5e6ac66ba2b9b40c395ada8875724a34d9b957ff128674b55225db4c8646825c104e163a0034e21882913d2929497b47ef37a98e93b7e1b3e9939b499354ee5b5631bdc063a4f2135da406529d76591aa8f119cf66f264b79554a2599b4ef1c901599c3bca3982212b1af5b4432aec2545c23112eb4e9d7e50e11a1394ca929120ba6a24b3c9d028e6203b8158eef143d374ac49fea05bd0aa941b8f6afd411459c8b68ed3c33d8bb271732669411aeedfa0a31c01fae1f76eafd3afc77ba24f5555a201ebed431eaeea65c2d1f07f7052bcbd9c9ab71938a7fd88b61c9da677cfdd282f9f8e12023f3c3f016ee9ed404a00cedd1976ac472996d7b8d8df73b8d520de4ce0c40a2f08aa2ab26d1e0356f140b6271154f3a49368bf8ef4efd9f46e7b9a0b1d33c73c34c55f7d4ba5d258ac1a46cf3cbd81b0edaf2ac055c11dfef8b9d9673fa58712da6bad3a683e68c5a0f592d6b5bcc79c5ba6c1d4019b9b7302c1326b9ea3896aa3d37a6fb800d9a14748d99a824ca494df564cc4c653fe78101fa9755afbfaf86cb165eb662ea69a040842570c22b011f0a3c306f4d5a4d438327edcca3cc8af65827a02ce38c6940e65154f85ab90518c9a00b794e6f88fc0ed8f86d90332143efa99cd7dd28955d0542a3f7a6f5cfc70449e9805fd8fb890d35c5e1cd01d0723d389caa3b975cf92eb08a61a4a82c8e7b65143443729e523bb9122aa645cf86be938eefe8e335c4a24b3f337223cb31247b2aef22760a63e6197c2af8d8fec551a55a67c290a02bca4f206a59a08bbcb119056b5369df83d29b2d54ba922a408e74ef4abc36994f6fde036d31bc9f75087e11477105bc6306660358f6ac900f6362f36474cd0752d5ac145f11359dc8f7f2001b63b5deaef5e83d9ce656526251c80760e419beeafb9ae3d2c3caee48b07faf940548afdcbc1c9a5fbfe360db5f7f6607c4ef04cc55201e4ce2ef45e0307dc1651bf02c8edaaa0e08907cdbc6b824f43e2810c3e51f1ff7ad4778183f5590d2e971063aa0f3b78dd094b98421cabc6f686f740632c3c1c5afe77a1c79c3f62f4c8e4cdcf97497adc6958d634395bddba855e260885c7d7921c8b5ccaa83f98ff6aa1de89b1ec269fe17b41eb9e770a839f7298b362fcfe3179c8c637e9ded0724323a0d9dfe5d49294b89c47f80a13fe40a376e7f90c06cc4bf8f14b3adf9f26d31f7b3eb5d549c1fade4ad2a17b3a4f337b664c07e68e7289830f5c68b6c4232620413ef1c865de78b8508da1effd6ba689930904352ebf96501552d650dcd5372b4094a88921ede2b44e895039416337a81a2af25e987f61c39a92b377cbf7fb18c1f20ef8bda087589998317e7795162a604a10c745232c2d9cac13b8461597e1fa1c5dfb665a76cf6fee345a45735d3dab68b352928500b95c88e5dfb2bacc2bcb7995ab18e697c727064a1741312c8f78db34ad98ff88f9aa63cf391371a07deee6f5154eb1964f9f9bc5420c16d2f3f7afdddb2ca10f3d77b12f3c0f0f812e2a2986bf5a1a0296d0e90a73a9732bb8f233c5e78befdc178184fe494d573669889aa28b2eb131a8f05d3473ce9eb5077bc56369c881e436925c1954292d769421a4ae9ea83eff196f6476be5c414c3122fde3e3ce0b7980741b9f3145b2a14381d133b70b7a69b9f41d3a24448799a1c0369188bff509abab9f11314eb874926f4b91539328e92ac391c8e2ae1243cc8def4ccf3eafb3e134291851802ed1741450a894a014899154c2c9932e555733cfa9d60c38939625b3fbf52f5485c8e73b772a7cf78e8337c7127fdc3f2e08bc7891cc978fe7158c252a0e272d92f12e576586d58d210755b615e51e7df5f3acbc40d8f590222818d295f4d271a327359e07ea55b936eca780935df6329606c2925765a21a5991a35e6d296d677158f887897c3fc4f547b34cbae0db03d3b65d710e62791e4b3c8d73999ccd72383f94902cb28909aafd252130d323d7c99f0f4784a0acd02207c650594247309f64ec0b01e3b87663c415c86c25b3308555182b7bde398357725a042ffdd94b18a614df760cdb4ab9d4537d4d1a4c808134dadf76311fc51dabf8872c478d05d532840a7eb8b2aeb668036fd61815bd27b7657e1886d75437649fe42b12a569668197c77732f7fa1a47e5ae033436938b2de3112dd6c2fb59511ec97a894ad33b46caaf868a8a371740af2556a986bc44bd5179682ccbf8ba4fa301c9ce2c3315d6edc81a3b3e4f06f1980607ef3946cee1d29e52597ddbb9f0483066720fb1fec1d23b28027e89b120b8aaa8846a9f9401d0d4bb36153f4ceff1161bf4f34da351a4446723b02bb49adc2938dca9e4442b36436d08df2a18e874d7516ce33359f8c938ce43fac6d3b9d7af5bcdecbb5b575620d0e96fa7537a459ac7b6730a67eedeb2cd060ceab5ff63b739a2cb78001f21da42dfd45d2ff066b097a14479f715557e8e15da5ec5371b5cfeeaa3ce52065582ee6286be2737dd1e0f085ec75e6b3937b1cf9151bdf159bd1e4f572d020742ce5900f1ed03c6f384c03582ef071e9d2ea2816aebe58415af925c375d1707d4bafc56c839ebf874d83da829b48db9d2a221fdcddf814ba465ca5dfc818a48a6979f2673d2e52ba593fc3744bf0fb61c4ac8ce500c5ff0b75baf42b23eb9ba3a6308bf91669f3e45e3b9cfb2fd90c359365b90c43746a2a507fb3a72e940500de41c5db4d353cd6d721d0b4d4c0b7aca3e2ec3c11517bf680835479f793a1b8a219e705e5358761745d9c9345e1353dee09c10ae64ee06c6007aa2b946c0c460ec15472457274273fc54071503b894b04e8ccbe87f5a55129784bb790d19075dda1f3ae6fd658b88759f451a42333e125766a6d8e9823d004944c238e31d7796b415eb53e8c418f689baf89a6fd417e6b8da354babc15644409f0cb60423e1fe1460c2478796dd0b42f61f620d909c125272ae047fa2ee684bf15265506bf237eb28f95105442030cf7770c76303220f1ec997208e19cbdaa9c832cacfecf2c84a208bcaa95d7dba31e5fa16ed85846ac1ed92f7a8a64e639c8d3f8cf7bbe13cc26326897e86e9a46fd5276e87bf2e1927205aacbac5ebd3746257521c2ede191c97ac9e7a0660efcf7b45f99e3b0c57b2231dfa10741121c0c94368c95fe4289a17b150fb54e01de2f46def5d986508c710c572d9f2046bacd8fdeb5a2feed81e566cf60167cf2c630367efd305e33f2b1d1a00b9b63d3be3428c01759a895fe341d64d2c64c8d7c7ffb7cc9fd2fc2a64ba21d508e828d02f2b86709b8ff6f12997af927a9b2807dce2e386ae1979608c293b200dbfb23a092c9aeeb413e51f00b4f96d2bb77f0d77534f1ac4bba42ae9bab94b0ef79ddd4e1fcf9dca6b45f0691fbb8423550c4f9ade4a22d2ee8a216bcc8a76b02e732d4d8e1c572df5593f6617b6cbe2a11b27a144b6f31ab08d835ebf31060bca2b4f6fcdd2a9f9d066c5b84d932d92e66a7fcfaba61661d24a28e1ebe7b8fd6bbdbb9f122d83b25975705f72b483994eb9f4db8f7b41f88cb81b842adce9979df9e8181c675730ada54a2424c598c6a65f7689b8264af7d5fa2d06e118820ec1cfd762aba3e029ee9004dd9c7c6e5930ce8214ad77ea14c9796afbf4ef3a3c332ac8516ab9fe8d6332e93fabde79fd4b5c252436418a283040447ef5802eedcfadbf8b985cf19fb5765380c60f3886984727da4f47dd21f3263d85a68de2f068b7c9513a8b33383b52583fd40ea21027ed269846b93e72e252fecb9e6a66467a9a4deea7954e46b4ec9e812d13120d8d39b5246cf12ae7c907abb1141b356ed10a6618f3a9075f0de878ac5710374b2bfbfbc7df9436ad1be0858f4f6e22465dc1134702767503549b95486cb691157b26efa099281b0837c3375ef1695d2ae7b255811a1c72fcdac97b7fabb45b70814169bd408bef175fc6cd6b7fd17f5eb27ad4d8e10a4278d5ee17c4b28093886eb09f52a7a5411c36454327fb968ce26a518e4c58154049f9f21382ad44ea8f1c500dbdbf5a1696f36cfaf9051eb76c01b709fe22229cba17085e9beaeb8195bcfc11c3f2872ff782f5a2719ac7c8efc4d42b6a6650bd77ab52097e5bf3ba46b83f7fc909072b053466b61361aa178b38f71c521fb754ce68d47b957a31e5016e81762fd22d4368bf1478c7bd4e20d1bfc843e2be5ba63dcde90760aa8247ecedde81b9680e6dc30337d13366a31f2ee809491a967d5fa1f20c49a44ad4917753ad5cf2922548638d760661d3e366bf89a8737ebdf156116176294e14bd4cff450e5399380e3623895e273ab1b1bf259bd0b03690ea84bf7d247f1afeac6466c8314a7f7ef86c15c3fed002ac6b7efe462a50b1802b579a92a6a5b5dc7e30da9b5f2c1dc79a0ecd0215763e5e96db878805682a25168ac43c3e901fbf9ee45ecb7841c1246c1971b4440f40b36df94265945fbd66d3b11d8786d33eed0820f8bd46e9d8e1506587f0164efd6d9630ed718191ea8208958f371da562f2daa763e75d1b5394a9e0850eac527016a81eb5af2d0d0f8bc4ccf9df12943fd7f6d5b918e7a292299b7c9a640a6eaeee8d72b0a4b630bc459b46a9165c76a54108b3461b0fa290d4d4ef41f4f0d7e70fb01a0c11a09c0387e16bfc4f2cf83475e5f0f4f93ecce070e7d920180d283e6a492b1d09ac274643406d430b010a7f4ae8fceb21979790cac797a09f02b3cf8921f3c227dc794cf6f4fbc1b059473db93d81fa2536caead99c348f5dc904971f39a9178cf1e1473a3a96e8967d9421f2b9065cc9f1c3a9b5142dea8b09a910f03efc96d89f5023cc66e5ee60cb08c2c146f568f304e60662a8f0e763caaeced479ea8b4a4c9342ee229a5e790498fc4258254d3d7f3f5044999e88fb3117ab81aa46a91bf05b3e753063f78d6c483d5c973edab2c0f1ff96babb4fee81832f06a0e5998e445109e3e71328ec6d89caa1a8d42bef237f3ac370a17b0fcc70d74f5993ec3d3862c14729a357156f865218f5b2898d88cf6f30cb4a2a11c8f4b58395b6b0bc3c208b3b1625a709206ed2c0b13519fc8b659055b004717adc3570236a17e5f56ab12d0e29698aace9a7fda31a99467083ce0b723f578937b6bb1a201ffd0aa298b588dc30ad9606871718546b38ee26e08a1955705d2046beb745d3b1dfa22d7928539339d3aa0e0a23a8bc55a5c5c8221fcf1b387ca9ed31ceb42d3f453b9244b56732ba43828d08808a4d045486ea776a5adcfcef9c73f042f6921de0ae52a6a96467cf5ddac78c50d64a650812215db17faa8ea2173c9cadfbaa56daa36f117e57d348d843d6c1bf71372799a3e0781c325a486e043e3b6bf761d19545ac810d02425800d998b52f62b2f6bd7b49598bf76b27aeb10468e09cfa37aa61b69a975b33fdc4293da607cbab584fcf975fcf4a27b8b089b278ce5c5f3261d9cf2c47ab2c9c5a1acef1817679d6b033f597fb8502fd6b5d7a83d0b6aebe26aae60c8756eddd3ca7b52fea30ff1113f6486f782570b550c6a32ec581618089419a4e27cd5ac3b46822513e022ed09c0039c409f31a2ad973adc2d9acc9af18cda1416f15c317f92c03346e87f2ae3a6a725d2e8f03664aa14b929f9fc4f61ce177cbbea49573e4861a081135af997aa9a0154f5e7894b9e9e4709c411546fce1b272807ee6907d03e3455e6e42a0becea75617e000c32f3b0d848f94ea22b2e3ef73ba0b54f4a7e808d637ad4f871ed2c4ebd1529be1e1fb0bb060b00df8a0d86ba4970128ce1f3b1e4ca63c3439125c22a89a2e16ef4db3abc1d50e6c91f2dd13e868b2323ae09df73b427004335e51fd4f660a1bcd1769e73fc8d0d00cc2ee6b585943aea55580cd01d5e9ab6047b433b67cb72237084d70aae46dc6b6c1d03369fab43c965c59e612008533979985cc00de7c7e5f352e4557c1616d45b6926bebf1171d84b4865c54c07dc762f688506f4de1551ba131e3be4e8fa6f0b8dc0227e50abfb1fc502863aaf40bfde543c102e51414f2932b44d24de5e68f3ca722c868e2984c3fc7f308185997ba0bc503d1419bb6623a6b34b1fa8bae87dc51125dbd4a9b4345bd448e0fdc993fa89c5b5ace960744911bd84bcdcacb303571786e503921f9bca8885c87aa16150bc1351d244290cae65bd8cb4850920fdc816da0006e77ee3223746b320d350535d355301bc3faa03f1ed86232a3429a790ad20b52a9631ca6b01f16a17ac78d870c47f750c46b5c565ae8ad9ed02156c2fe4fcb12afb5e66145f4777590c61585582f02b4216cec200ed1b56e60b8947169b114ab0a18d879041fc6ce3a381d79ac296670f31588e12f0a2d0b6e3bee0ddc95d7c63bbe91c25760cdee4ea0bae6014c7b4c56c00f77a07eede40c74943f7f91e8d03fd8c85bb57c82d57bb5838f756b2cbb830d72bfec8acdb5e209af88ad0773e704b3b08f3d9fa338ec39e8f24eae40edc1b0e5e49150e42dd3d3b62020681afe6309eccbab23ea807c6345d9d686c8ccc8cddae2a019259d9cf112f6bd34b69b0bd20ececaa0373a8af151dd84d785810031a62a40a803ff1d2fe8e925470f3b70b7a18948f51010822a616d3ef6a45ded8a4518b26180c6af736866f3b1def978938a9875a68eead30a33b2e4a6eafa289e02990c06ca86e122b9f3994198b4e65c4c8a174a1425739416e66eb9181fc7d830426043e8979e47fa0be50483aa1f996b08ae30e017b7cf82a34193118fe872c6de3301453bb504628a196a462f88ec1c695eb27f7318a30e190c806f", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x170, 0x0, 0x4, [{{0x0, 0x800000000001, 0x100000000009, 0x7c6b, 0x8, 0x3e, {0x6, 0xf163, 0x4, 0x8, 0x3, 0x15, 0xa, 0x5, 0xd7a, 0x8000, 0x0, r3, r4, 0xb, 0x6}}, {0x6, 0x0, 0x1, 0x3ff, '\x00'}}, {{0x4, 0x1, 0x5a, 0x101, 0xfffffffc, 0x1, {0x1, 0x0, 0x500c8c09, 0xaed1, 0x1, 0x4, 0x970, 0xfffffd5b, 0x28, 0x2000, 0xffff3f5a, r3, r4, 0x20081, 0x6}}, {0x4, 0x10000000003, 0x24, 0x3, '\x00\x00\x00\xbf\xf9b\xcf\x0e\xccI\xe7\'\xd6\x96U\xb2\xdbK\xd0\x14\x00\xf2\x82483\xe3\xc4\xc6[\xda\xa0)\xe0\x890'}}]}, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) rmdir(&(0x7f0000000440)='./file0\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1008440, &(0x7f0000000b80)={[{@gid={'gid', 0x3d, r4}}], [{@fsuuid={'fsuuid', 0x3d, {[0x34, 0x64, 0x63, 0x65, 0x36, 0x31, 0x37, 0x62], 0x2d, [0x63, 0x66, 0x63, 0x30], 0x2d, [0x30, 0x36, 0x32, 0x51a3d251bf2d21b8], 0x2d, [0x51, 0x34, 0x34, 0x65], 0x2d, [0x64, 0x32, 0x39, 0x64, 0x61, 0x65, 0x65, 0x66]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ct\x00'}}, {@dont_measure}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000009c0)={'sit0\x00', &(0x7f0000000900)={'gre0\x00', 0x0, 0x8000, 0x8, 0xa60, 0xffffe9d2, {{0x27, 0x4, 0x1, 0x8, 0x9c, 0x65, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x18, 0xc0, 0x0, 0xb, [0xffffff81, 0x8, 0x10000000, 0x1, 0x1]}, @generic={0x94, 0x7, "aadf66c633"}, @timestamp_prespec={0x44, 0x14, 0x12, 0x3, 0x8, [{@local, 0x7}, {@remote, 0x4}]}, @noop, @timestamp_prespec={0x44, 0x54, 0x5a, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@local, 0x10000}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0xaa33d800}, {@multicast2, 0xffffffff}, {@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0xb}, {@dev={0xac, 0x14, 0x14, 0x1a}}, {@loopback, 0x7}, {@broadcast, 0x7}]}]}}}}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lseek(0xffffffffffffffff, 0x3875, 0x0) sendmsg$inet(r6, &(0x7f0000000b40)={&(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000500)="1b44f14a98166d6b12524d5b05a32210ca04422ee99873df027e50593e535c6ea8bd25f97b90e353c8563e39758428667506f09886d06cc99584df11b75992bda8679d36fdfb7f8dd6e9f8d73f6a25c1853ede8742f0eafcd9903464dd9ac1e232c8", 0x62}, {&(0x7f0000000580)="dc54de8f1947f49088eb446057a796ef546233de2c02d5963ca32d1523a9514363ba8a2ac8a1a19183c4a3c23526bc31818938fbb4fd27a33981af646c98dccf679b4a8ec9c6d38667d647044e062ae99494831defc2970e4ac21a04356f304ae16ac81d95e3f29ae7d7acccd9ad3d3e87f8649b94219dc9c529279a3fcacf02243be35dfc06e742cef00ad911bb12dc1bf4723c3f88690e5b67249f5b10972afea8d3de4ba038204ce660a6181dd86123b7b2d31ae99524940e1f4431119277d8de4762e16e404dd6794eecc329cb2c576f319f36203af8417114ba6280e3cee7f57498c2df40d659385d9ace82dcbf279af7f1", 0xf4}, {&(0x7f0000000480)="c76100003ecea6c32bbc21e9df6054ea1fb3a2", 0x13}, {&(0x7f0000000680)="0b80a61aa8a0741f1c62c12dc36ea30c61637627bb46daab1e794fc1fee1bbce3cc0e045763e08f9edb017582ec0830dce1ec370710f858746e89fbe401063404dd18590cd07a25f7640c3ae24e1ed8a8d2e71b8563a3cd4b91f620b4ba735781ffe84b56cc2808bf32b290c72affb97d57bade9a7e0777b5c3ffa362d6f63c342e826f69252bf78a1887a1b5c801e8036e2c927b424bf63a3f48e958bd64bd6b57e20338e1d737ffe65cf31f65f22f30d", 0xb1}, {&(0x7f0000000740)}, {&(0x7f0000000780)="3f94004cde7f2466fa88375f993863269c292177a00efedbbf92c2ae42691abf6c9a68c8ece8ac6f9842c89a9f707158bacd2d2f99bc53a18c181af22c93ac4a3f79c2b7ea71ca0581fd8f5b9e9b246730b9923d", 0x54}, {&(0x7f0000000800)="2c1faa8610896e71f6b35991e7ea93397493a5e833e2f150cababdd6d2e27ea64859043abc5fd34c2700d12d1b3c1ab4fe6195110ead6d4aa0b9eb248360a173d9dc2542adda6f5d20e954", 0x4b}], 0x7, &(0x7f0000000a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast2, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x25}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x78, 0x0, 0x7, {[@generic={0x94, 0x3, '\\'}, @ra={0x94, 0x4}, @noop, @cipso={0x86, 0xe, 0x2, [{0x6, 0x5, "de35ba"}, {0x1, 0x3, "f3"}]}, @timestamp_addr={0x44, 0x24, 0xad, 0x1, 0x1, [{@empty, 0x10001}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x2}, {@rand_addr=0x64010101, 0x7}, {@broadcast, 0x3}]}, @lsrr={0x83, 0x2b, 0xce, [@multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010102, @multicast1, @empty]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x140}, 0x4008005) 6m41.848174639s ago: executing program 4 (id=6854): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040), 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4) syz_usb_connect(0x4, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x9, 0x5, 0x32314d59, 0x6, 0x6, 0x2, 0x1, 0x7, 0x1, 0x7, 0x1, 0x2}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 6m41.029938665s ago: executing program 4 (id=6856): connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) syz_init_net_socket$ax25(0x3, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = gettid() prlimit64(r0, 0xf, &(0x7f0000000140)={0x100005, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000006680)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) getdents(r2, &(0x7f0000000ec0)=""/4096, 0x1000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) r4 = fsopen(&(0x7f0000000100)='pstore\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000340)='\'{!\x00', &(0x7f0000000440)="8ccea6afe5650f821ab920717e1de1d541ceb141631052807f130b70e32b622eb346ab297e0f53dbc5cccfc61ae10cc4a8f29e636666b61a4980b5f51465577861b94a1b7fc133bbb77aea", 0x4b) r5 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x6528, &(0x7f00000004c0)={0x0, 0xc150, 0x20, 0x3, 0x1ab, 0x0, r2}, &(0x7f0000000540), &(0x7f0000000580)) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), &(0x7f0000000280)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 6m40.543971495s ago: executing program 34 (id=6856): connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) syz_init_net_socket$ax25(0x3, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = gettid() prlimit64(r0, 0xf, &(0x7f0000000140)={0x100005, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000006680)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) getdents(r2, &(0x7f0000000ec0)=""/4096, 0x1000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) r4 = fsopen(&(0x7f0000000100)='pstore\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000340)='\'{!\x00', &(0x7f0000000440)="8ccea6afe5650f821ab920717e1de1d541ceb141631052807f130b70e32b622eb346ab297e0f53dbc5cccfc61ae10cc4a8f29e636666b61a4980b5f51465577861b94a1b7fc133bbb77aea", 0x4b) r5 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x6528, &(0x7f00000004c0)={0x0, 0xc150, 0x20, 0x3, 0x1ab, 0x0, r2}, &(0x7f0000000540), &(0x7f0000000580)) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), &(0x7f0000000280)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 4m50.125110157s ago: executing program 7 (id=7222): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x7, &(0x7f0000000a00)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x36) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) nanosleep(&(0x7f0000000080)={0x0, 0x989680}, 0x0) 4m46.073003318s ago: executing program 7 (id=7227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x40080) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4}) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000200), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc0405668, 0x0) userfaultfd(0x801) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r7, &(0x7f0000004980), 0x0, 0x20008000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="26761f410f01b00000000166b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@remote, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x21}, {@in=@rand_addr=0x64010100, 0x0, 0x32}, @in6=@mcast1, {0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, {0x20, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1a}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) 4m43.263863211s ago: executing program 7 (id=7235): openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000480)=ANY=[], 0x310) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac0504c777620102030109022d0001080540040904270102fffd01000921e700070122b30409050c0200020103400905df02"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="4018066e8f04e5f060ced921"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$kcm(0x10, 0x400000002, 0x0) r3 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x1d9}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x8000, 0x0, 0x3ce, 0x0, r3}, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='\a'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x20, 0x0, r2, 0x0, &(0x7f0000000380)='./file0\x00', 0x2, 0x0, 0x1}) io_uring_enter(r3, 0x2d3c, 0x0, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000100)=""/79, 0x4f}, {&(0x7f0000000080)=""/57, 0x39}, {&(0x7f00000002c0)=""/72, 0x48}], 0x3, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) 4m38.51986604s ago: executing program 7 (id=7246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) listen(r0, 0x0) listen(0xffffffffffffffff, 0x9ce2) 4m38.169391009s ago: executing program 7 (id=7248): syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='binfmt_misc\x00', 0x281c012, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x800, 0x0) creat(&(0x7f00000002c0)='./file1\x00', 0x24) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r4, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 4m37.165323493s ago: executing program 7 (id=7250): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2c6301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2c6301, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x1) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) 4m22.037526456s ago: executing program 35 (id=7250): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2c6301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2c6301, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x1) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) 12.419338098s ago: executing program 6 (id=8361): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x109842, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES8=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$sg(0x0, 0x0, 0x8002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(r1, &(0x7f0000000480)=""/177, 0xb1, 0xe0) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r8, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364", 0x55}, {&(0x7f0000000240)="fe07e4ad9a397dad6be54dfbeac6a913c79649675cd17722b2d47d45fd70b35511f1ca5aeee011f421dc4419da98c5ee237f14d6d2b86afc56ade91bf2646a7fe24348340aa8350817e1c51724ad6c4025aa66083e6c8a48eb7dbfed87b8d8bf96d94cda9e43e39bcde5323ff3f28b7daa02ffb09430fe", 0x16}, {&(0x7f00000003c0)="0eb5365284add559306869416978bc7dd6e426fd5024f81a3fe7d312d847c98ee81322037f5c7263f4a4bae9288c2e35b5cee801848d5b34e5da33e488a53f010bbeb36a0e21c1b005a7d7e38d8d4990c1bd4c811723557b40979471d0b4b36f0de8d3c7cf64dc434dc351a271dbcede139bcbb000b878c7552d5026c91f67366d887ecafd65cf5e978a9f2fefd06182afd338", 0x93}], 0x4, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x594}}], 0xff28}, 0x40000c1) fchdir(r7) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) 12.326181s ago: executing program 6 (id=8362): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc}) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000040000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r5}, &(0x7f0000000a00), &(0x7f0000000a40)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f0000000880), &(0x7f00000008c0)=r4}, 0x20) rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) tee(r1, r0, 0x53bc, 0x8) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x5453, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x8c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1535d, 0x40240}, [@IFLA_LINKMODE={0x5, 0x11, 0x2}, @IFLA_IFALIAS={0x14, 0x14, 'ip_vti0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0xe, 0x0, 0x0, 0x6}]}}, @AF_MPLS={0x4}]}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}]}, @IFLA_LINK_NETNSID={0x8}]}, 0x8c}}, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0xc, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x100) 10.837189268s ago: executing program 0 (id=8369): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x20) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x154c, 0xef91, 0x48, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r5, &(0x7f0000000c40)=[{0x0}], 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) 9.541674271s ago: executing program 0 (id=8374): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0x9, 0xe55, 0x6, 0x2, 0x1040, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x5, 0x6a], 0x5000, 0x1000d6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, 0x0}}], 0x1, 0x844) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.507008195s ago: executing program 6 (id=8378): syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000d3ccb510b1134200292b0102030109021b0001fc00000009040f0001e711e100090583ff03"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) writev(r3, &(0x7f0000003500)=[{&(0x7f00000035c0)="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", 0x142}], 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, 0x0, &(0x7f0000000140)) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$kcm(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) 8.388523497s ago: executing program 8 (id=8380): r0 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r3, &(0x7f0000000080)=ANY=[], 0xfd85) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x0, '\x00', @p_u32=0x0}}) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)='}\x00\x00', 0x3}], 0x1, 0xa, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)={0x5e}, 0x8) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)={0x32, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}]}, 0x10) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x89901) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 8.333446913s ago: executing program 2 (id=8381): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x2000000000000212, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000370c000000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000002800128008000100736974001c000280060008003f000000080002006401010108000300e0000001"], 0x48}}, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) pipe2$9p(0x0, 0x80) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x7c8) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000000c0)='gfs2\x00', 0x2000400, 0x0) 8.201321668s ago: executing program 0 (id=8382): ioperm(0x9, 0x6, 0x5) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="000127bd700077dbdf250f00d7229d4105050000000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4801) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10000, 0x2000000}, &(0x7f0000002000)=0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xf8) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = dup2(r4, r3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, 0x0) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1e4011, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200008c0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 7.109578591s ago: executing program 0 (id=8384): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 7.109204999s ago: executing program 2 (id=8385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) 6.05330966s ago: executing program 0 (id=8387): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 5.759521624s ago: executing program 2 (id=8389): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x34, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) 5.577299451s ago: executing program 2 (id=8392): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x48, 0x1, 0x4, 0x5}}]}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40008333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5.552131923s ago: executing program 0 (id=8393): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="de6a84400f005f00440f20c0350a000000440f22c0c442c9a73b66baf80cb8994a9e8def66bafc0cec460f00d4467c5c0f20d835080000000f22d80f0164120066b804000f00d8", 0x47}], 0x1, 0x63, &(0x7f00000001c0)=[@cr4={0x1, 0x200900}], 0x1) 5.424109425s ago: executing program 36 (id=8393): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="de6a84400f005f00440f20c0350a000000440f22c0c442c9a73b66baf80cb8994a9e8def66bafc0cec460f00d4467c5c0f20d835080000000f22d80f0164120066b804000f00d8", 0x47}], 0x1, 0x63, &(0x7f00000001c0)=[@cr4={0x1, 0x200900}], 0x1) 5.029800799s ago: executing program 8 (id=8396): syz_emit_vhci(&(0x7f00000029c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_oob_ext_data={{0x5}, {0xc, "b255b6d05706c6780929fcc0325dc918", "717ff6481c5ad974594e6cd593e899a8", "ab795b1723ad211d7b727f88f1431b9b", "e405cd03ba7a078f3d92addd8a60909e"}}}}, 0x47) shmctl$IPC_INFO(0x0, 0x3, 0x0) 4.995450289s ago: executing program 8 (id=8397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) 4.804882183s ago: executing program 6 (id=8398): kexec_load(0x7fffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000280)=ANY=[]) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f000084dff0)='!linux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedreceive(r3, &(0x7f0000000440)=""/121, 0x79, 0x6, 0x0) 3.513588864s ago: executing program 8 (id=8399): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) close(r0) ioctl$VT_GETSTATE(r2, 0x5603, 0x0) 3.513477141s ago: executing program 5 (id=8400): r0 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) 3.454624219s ago: executing program 5 (id=8401): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x80000000, 0x63, 0x11, 0x2c}, [@initr0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r6], &(0x7f0000000040)}) 3.423976368s ago: executing program 8 (id=8402): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{}, {}, {0x2000, 0x0, 0x0, 0xfd}, {0x1}, {0xdddd1000, 0x0, 0x0, 0x0, 0x1}, {0x1000, 0x2, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x3e, 0x26}, {}, {0xd000}, {}, 0xddf8ffdb, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8080000}) 3.069547845s ago: executing program 8 (id=8403): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) socket(0x10, 0x803, 0x2) 2.62231797s ago: executing program 6 (id=8404): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.425949229s ago: executing program 5 (id=8405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000020000000900010073797a300000000044000000090a010400000000000000000300000008000a4000000000090002007379fa31000000000900010073797a300000000008000540ec000023080004"], 0x8c}}, 0x4) 1.541506788s ago: executing program 2 (id=8406): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r1, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000100)) ioctl$TCFLSH(r7, 0x80045430, 0x7ffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) ioctl$TIOCL_SETVESABLANK(r10, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r9, 0x541c, &(0x7f0000000000)) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x64, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x1000}}, 0x0}, 0x1000}, @free_buffer={0x40086303, r6}, @dead_binder_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000c40)={0x8, 0x0, &(0x7f0000000240)=[@acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB='%\n\x00'/24], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff800, @void, @value}, 0x94) 1.541233664s ago: executing program 5 (id=8407): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) mlockall(0x6) syz_open_dev$video4linux(&(0x7f0000000500), 0x322, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r3, 0x0, r3, 0x0, 0x60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 854.149992ms ago: executing program 6 (id=8408): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 635.305846ms ago: executing program 5 (id=8409): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) listen(0xffffffffffffffff, 0x80) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(r0, r4, &(0x7f00000001c0)=0x8, 0x1) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) 3.009327ms ago: executing program 5 (id=8410): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x4008) 0s ago: executing program 2 (id=8411): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs):  U4ĮVBZ}WMTQΦR 4 [ 2084.295818][ T337] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 2084.349941][T27603] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2084.359673][ T337] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 2084.370508][T27603] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2084.392429][T27603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2084.459043][T27603] usb 3-1: config 0 descriptor?? [ 2084.500258][ T337] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 2084.551898][ T337] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 2084.596288][ T337] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 2084.796371][ C0] vkms_vblank_simulate: vblank timer overrun [ 2084.833925][ T337] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 2084.853685][ T337] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 2084.871104][ T337] [U] 22Ʃ۩X?0;3U [ 2084.877579][ T337] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 2084.903316][T27603] Bluetooth: Can't get state to change to load configuration err [ 2084.908083][ T337] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 2085.035389][ T337] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 2085.045341][ T337] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 2085.052281][ T337] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 2085.064806][ T337] [U] EC [ 2085.068239][ T337] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 2085.071819][ T351] overlay: ./file0 is not a directory [ 2085.083675][ T337] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 2085.086187][T27603] Bluetooth: Loading sysconfig file failed [ 2085.183690][ T354] 9pnet_fd: Insufficient options for proto=fd [ 2085.457919][T20942] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 2085.547534][T27603] ath3k 3-1:0.0: probe with driver ath3k failed with error -16 [ 2085.578318][T27603] usb 3-1: USB disconnect, device number 10 [ 2085.648162][T20942] usb 9-1: Using ep0 maxpacket: 16 [ 2085.672188][T20942] usb 9-1: config index 0 descriptor too short (expected 8192, got 18) [ 2085.689415][T20942] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2085.986875][T20942] usb 9-1: config 0 has no interfaces? [ 2086.006884][T20942] usb 9-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25 [ 2086.034127][T20942] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2086.044361][ T357] overlayfs: failed to resolve './file0': -2 [ 2086.051876][T20942] usb 9-1: Product: syz [ 2086.056644][T20942] usb 9-1: Manufacturer: syz [ 2086.147083][T20942] usb 9-1: SerialNumber: syz [ 2086.195211][T20942] apple-mfi-fastcharge 9-1: config 0 descriptor?? [ 2086.348609][ T376] overlay: ./file0 is not a directory [ 2087.729128][ T396] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2087.912064][T20942] apple-mfi-fastcharge 9-1: USB disconnect, device number 18 [ 2088.500531][T20942] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 2088.706726][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 2088.736559][T20942] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2088.749427][T20942] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2088.759787][T20942] usb 9-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2088.769042][T20942] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2088.836989][ T417] No source specified [ 2089.218880][T20942] usb 9-1: config 0 descriptor?? [ 2089.687901][T20942] Bluetooth: Can't get state to change to load configuration err [ 2089.700632][ T422] overlay: ./file0 is not a directory [ 2089.706317][T20942] Bluetooth: Loading sysconfig file failed [ 2089.716252][T20942] ath3k 9-1:0.0: probe with driver ath3k failed with error -16 [ 2089.860171][T27603] usb 9-1: USB disconnect, device number 19 [ 2091.647392][ T449] 9pnet_fd: Insufficient options for proto=fd [ 2092.063544][ T445] FAULT_INJECTION: forcing a failure. [ 2092.063544][ T445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2092.076618][ T445] CPU: 1 UID: 0 PID: 445 Comm: syz.2.7878 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 2092.076642][ T445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2092.076650][ T445] Call Trace: [ 2092.076655][ T445] [ 2092.076659][ T445] dump_stack_lvl+0x16c/0x1f0 [ 2092.076680][ T445] should_fail_ex+0x512/0x640 [ 2092.076698][ T445] _copy_to_user+0x32/0xd0 [ 2092.076716][ T445] simple_read_from_buffer+0xcb/0x170 [ 2092.076735][ T445] proc_fail_nth_read+0x197/0x270 [ 2092.076752][ T445] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2092.076770][ T445] ? rw_verify_area+0xcf/0x680 [ 2092.076785][ T445] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2092.076802][ T445] vfs_read+0x1e1/0xc70 [ 2092.076820][ T445] ? __pfx___mutex_lock+0x10/0x10 [ 2092.076841][ T445] ? __pfx_vfs_read+0x10/0x10 [ 2092.076861][ T445] ? __fget_files+0x20e/0x3c0 [ 2092.076876][ T445] ksys_read+0x12a/0x240 [ 2092.076892][ T445] ? __pfx_ksys_read+0x10/0x10 [ 2092.076913][ T445] do_syscall_64+0xcd/0x260 [ 2092.076930][ T445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2092.076942][ T445] RIP: 0033:0x7fc918d8d37c [ 2092.076951][ T445] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2092.076962][ T445] RSP: 002b:00007fc919bb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2092.076973][ T445] RAX: ffffffffffffffda RBX: 00007fc918fb5fa0 RCX: 00007fc918d8d37c [ 2092.076980][ T445] RDX: 000000000000000f RSI: 00007fc919bb70a0 RDI: 0000000000000007 [ 2092.076987][ T445] RBP: 00007fc919bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 2092.076993][ T445] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 2092.077000][ T445] R13: 0000000000000000 R14: 00007fc918fb5fa0 R15: 00007ffd60447cb8 [ 2092.077014][ T445] [ 2093.789839][ T478] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2094.785416][ T503] overlay: ./file0 is not a directory [ 2094.855816][ T505] bridge0: port 2(bridge_slave_1) entered disabled state [ 2094.892356][ T505] bridge0: entered allmulticast mode [ 2094.928780][ T506] bridge_slave_1: left allmulticast mode [ 2094.940940][ T506] bridge_slave_1: left promiscuous mode [ 2094.946605][ T508] netlink: 'syz.2.7896': attribute type 10 has an invalid length. [ 2094.956702][ T506] bridge0: port 2(bridge_slave_1) entered disabled state [ 2094.972156][ T506] bridge_slave_0: left allmulticast mode [ 2094.977944][ T506] bridge_slave_0: left promiscuous mode [ 2094.984251][ T506] bridge0: port 1(bridge_slave_0) entered disabled state [ 2095.782589][ T519] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7897'. [ 2096.531702][ T536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7902'. [ 2096.554736][ T536] 9pnet_fd: Insufficient options for proto=fd [ 2097.037817][T20942] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2097.113236][ T545] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7907'. [ 2097.194638][ T547] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2097.217872][T20942] usb 3-1: Using ep0 maxpacket: 16 [ 2097.232093][T20942] usb 3-1: config index 0 descriptor too short (expected 8192, got 18) [ 2097.248089][T20942] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2097.258262][T20942] usb 3-1: config 0 has no interfaces? [ 2097.265892][T20942] usb 3-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25 [ 2097.276479][T20942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2097.286051][T20942] usb 3-1: Product: syz [ 2097.291920][T20942] usb 3-1: Manufacturer: syz [ 2097.306396][T20942] usb 3-1: SerialNumber: syz [ 2097.324552][T20942] apple-mfi-fastcharge 3-1: config 0 descriptor?? [ 2097.998192][ T564] overlayfs: failed to resolve './file1': -2 [ 2098.432371][ T568] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7911'. [ 2098.460328][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.614177][ T574] overlay: ./file0 is not a directory [ 2099.432164][T20942] apple-mfi-fastcharge 3-1: USB disconnect, device number 11 [ 2099.458203][ T582] overlay: ./file0 is not a directory [ 2100.089846][ T586] overlay: ./file0 is not a directory [ 2101.068786][ T612] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7924'. [ 2101.442488][ T623] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7927'. [ 2101.467521][ T623] 9pnet_fd: Insufficient options for proto=fd [ 2102.585283][ T643] overlay: ./file0 is not a directory [ 2102.637852][ T5809] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 2102.953518][ T5809] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 2102.967772][ T5809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2102.978286][ T5809] usb 1-1: config 0 has no interface number 0 [ 2102.984647][ T5809] usb 1-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 2102.996603][ T5809] usb 1-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 2103.007974][ T5809] usb 1-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2103.018490][ T5809] usb 1-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 2103.042411][ T5809] usb 1-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 2103.056248][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2103.065915][ T5809] usb 1-1: Product: syz [ 2103.070591][ T5809] usb 1-1: Manufacturer: syz [ 2103.075318][ T5809] usb 1-1: SerialNumber: syz [ 2103.082303][ T5809] usb 1-1: config 0 descriptor?? [ 2103.092331][ T5809] symbolserial 1-1:0.175: symbol converter detected [ 2103.340389][ T5809] usb 1-1: symbol converter now attached to ttyUSB0 [ 2103.369074][ T635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2103.377614][ T635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2103.478155][T27606] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2103.507558][ T653] netlink: 'syz.8.7935': attribute type 10 has an invalid length. [ 2103.619197][T27606] usb 3-1: device descriptor read/64, error -71 [ 2104.119439][T27604] usb 1-1: USB disconnect, device number 95 [ 2104.129622][T27604] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 2104.140325][T27604] symbolserial 1-1:0.175: device disconnected [ 2104.418019][ T663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7937'. [ 2104.495675][ T663] 9pnet_fd: Insufficient options for proto=fd [ 2104.852890][T27606] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2105.095343][T27606] usb 3-1: device descriptor read/64, error -71 [ 2105.339717][T27606] usb usb3-port1: attempt power cycle [ 2105.968453][T27606] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2106.314140][T27606] usb 3-1: device descriptor read/8, error -71 [ 2106.648006][ T696] overlayfs: failed to resolve './file1': -2 [ 2107.516151][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 2108.407409][T27606] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 2108.568727][T27606] usb 1-1: Using ep0 maxpacket: 16 [ 2108.587336][T27606] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2108.627608][T27606] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2108.668596][T27606] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 2108.697758][T27606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2108.725981][T27606] usb 1-1: config 0 descriptor?? [ 2109.298076][T27606] hid-rmi 0003:1532:011D.0044: hidraw0: USB HID v0.00 Device [HID 1532:011d] on usb-dummy_hcd.0-1/input0 [ 2109.356486][T26212] usb 1-1: USB disconnect, device number 96 [ 2110.143646][ T741] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7957'. [ 2110.246987][ T745] SELinux: Context system_u:object is not valid (left unmapped). [ 2110.280623][ T30] audit: type=1400 audit(2111.212:2047): avc: denied { relabelto } for pid=743 comm="syz.0.7958" name="cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 2110.615902][ T30] audit: type=1400 audit(2111.222:2048): avc: denied { associate } for pid=743 comm="syz.0.7958" name="cgroup.procs" dev="cgroup" ino=236 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 2111.178014][T26212] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2111.261087][ T756] overlayfs: failed to resolve './file1': -2 [ 2111.367835][T26212] usb 3-1: Using ep0 maxpacket: 16 [ 2111.389788][T26212] usb 3-1: config 8 has an invalid interface number: 39 but max is 0 [ 2111.403761][T26212] usb 3-1: config 8 has no interface number 0 [ 2111.410118][T26212] usb 3-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 2111.427018][T26212] usb 3-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2111.437090][T26212] usb 3-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 2111.449995][T26212] usb 3-1: config 8 interface 39 has no altsetting 0 [ 2111.523667][T26212] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 2111.533519][T26212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2111.541672][T26212] usb 3-1: Product: syz [ 2111.558932][T26212] usb 3-1: Manufacturer: syz [ 2111.563547][T26212] usb 3-1: SerialNumber: syz [ 2111.982933][T26212] ipheth 3-1:8.39: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 2112.035508][T26212] ipheth 3-1:8.39: probe with driver ipheth failed with error -22 [ 2112.349842][T26212] usb 9-1: new low-speed USB device number 20 using dummy_hcd [ 2112.823620][T26212] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2113.051461][ T790] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 2113.117639][ T791] [U]  [ 2113.120584][ T791] [U] K{ [ 2113.124156][ T791] [U] T 1ŠFFˊ`GJǘGO/MC [ 2113.133742][ T791] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 2113.150212][ T791] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 2113.165333][ T791] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 2113.200955][ C0] vkms_vblank_simulate: vblank timer overrun [ 2113.213349][ T791] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 2113.236893][ C0] vkms_vblank_simulate: vblank timer overrun [ 2113.244014][ T791] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 2113.255695][ T791] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 2113.269755][ T791] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 2113.366647][ C0] vkms_vblank_simulate: vblank timer overrun [ 2113.374242][ T791] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 2113.384205][ T791] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 2113.397967][ T791] [U] 22Ʃ۩X?0;3U [ 2113.404883][ T791] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 2113.430682][ T791] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 2113.437917][T26212] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2113.458775][ T791] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 2113.467945][ T791] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 2113.475422][ T791] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 2113.487986][ T791] [U] EC [ 2113.492602][ T791] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 2113.976417][ T788] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 2114.126889][T26212] usb 9-1: config 0 descriptor?? [ 2114.393300][T26212] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2114.514339][T27603] usb 3-1: USB disconnect, device number 16 [ 2115.157935][T27603] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2115.245887][T26212] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2115.256533][T26212] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 2115.281643][T26212] asix 9-1:0.0: probe with driver asix failed with error -71 [ 2115.300601][T26212] usb 9-1: USB disconnect, device number 20 [ 2115.329096][T27603] usb 3-1: Using ep0 maxpacket: 16 [ 2115.345860][T27603] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 2115.383175][T27603] usb 3-1: config 252 has no interface number 0 [ 2115.501235][ T819] overlayfs: failed to resolve './file1': -2 [ 2115.591370][T27603] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2115.712337][T27603] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 2115.734192][T27603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2115.753801][T27603] usb 3-1: Product: syz [ 2115.758348][T27603] usb 3-1: Manufacturer: syz [ 2115.762969][T27603] usb 3-1: SerialNumber: syz [ 2115.787671][T27603] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2116.808003][T27603] usb 9-1: new low-speed USB device number 21 using dummy_hcd [ 2116.875575][ T832] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 2116.961340][T16439] usb 3-1: Failed to submit usb control message: -110 [ 2117.003927][T16439] usb 3-1: unable to send the bmi data to the device: -110 [ 2117.030930][T16439] usb 3-1: unable to get target info from device [ 2117.037344][T16439] usb 3-1: could not get target info (-110) [ 2117.049270][T16439] usb 3-1: could not probe fw (-110) [ 2117.232808][T27603] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2117.452876][T27603] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2117.711552][T27603] usb 9-1: config 0 descriptor?? [ 2118.008162][T27603] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2118.180746][T26212] usb 3-1: USB disconnect, device number 17 [ 2118.956930][T27603] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2118.988654][T27603] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 2119.009848][ T858] overlayfs: failed to resolve './file1': -2 [ 2119.078813][T27603] asix 9-1:0.0: probe with driver asix failed with error -71 [ 2119.100351][T27603] usb 9-1: USB disconnect, device number 21 [ 2119.141122][ T867] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7995'. [ 2119.662382][ T878] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7997'. [ 2120.104933][ T892] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2120.307897][ T898] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2120.315030][ T898] overlayfs: failed to set xattr on upper [ 2120.321010][ T898] overlayfs: ...falling back to redirect_dir=nofollow. [ 2120.328074][ T898] overlayfs: ...falling back to metacopy=off. [ 2120.334179][ T898] overlayfs: ...falling back to index=off. [ 2120.340098][ T898] overlayfs: ...falling back to uuid=null. [ 2120.837811][ T5809] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2121.217858][ T5809] usb 3-1: Using ep0 maxpacket: 32 [ 2121.235518][ T5809] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 2121.255068][ T5809] usb 3-1: config 0 has no interface number 0 [ 2121.549202][ T5809] usb 3-1: config 0 interface 85 has no altsetting 0 [ 2121.570429][ T5809] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2121.592652][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2121.608410][ T5809] usb 3-1: Product: syz [ 2121.616881][ T5809] usb 3-1: Manufacturer: syz [ 2121.626293][ T5809] usb 3-1: SerialNumber: syz [ 2121.645103][ T5809] usb 3-1: config 0 descriptor?? [ 2121.664308][ T5809] appletouch 3-1:0.85: Could not find int-in endpoint [ 2121.679972][ T5809] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 2121.698576][T27603] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 2121.698637][ T5809] usbhid 3-1:0.85: couldn't find an input interrupt endpoint [ 2121.827866][T27604] usb 1-1: new low-speed USB device number 97 using dummy_hcd [ 2121.839139][T27603] usb 9-1: device descriptor read/64, error -71 [ 2121.887465][T27606] usb 3-1: USB disconnect, device number 18 [ 2121.989339][T27604] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2122.003280][T27604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2122.024563][T27604] usb 1-1: config 0 descriptor?? [ 2122.078223][T27603] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 2122.227934][T27603] usb 9-1: device descriptor read/64, error -71 [ 2122.238789][T27604] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2122.338615][T27603] usb usb9-port1: attempt power cycle [ 2122.507941][ T943] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 2122.531374][ T943] [U]  [ 2122.534181][ T943] [U] K{ [ 2122.538311][ T943] [U] T 1ŠFFˊ`GJǘGO/MC [ 2122.553970][ T943] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 2122.571270][ T943] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 2122.601775][ T943] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 2122.637446][ C0] vkms_vblank_simulate: vblank timer overrun [ 2122.680685][ T943] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 2122.704272][ C0] vkms_vblank_simulate: vblank timer overrun [ 2122.712493][ T943] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 2122.725235][ T943] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 2122.740431][ T943] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/< 1 [ 2143.602398][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2143.618522][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2143.627116][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2143.635492][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2143.658211][T27605] usb 1-1: Using ep0 maxpacket: 32 [ 2143.670129][T27605] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 2143.684282][T27605] usb 1-1: config 0 has no interface number 0 [ 2143.695870][T27605] usb 1-1: config 0 interface 85 has no altsetting 0 [ 2143.817582][T27605] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2143.837147][T27605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2143.853247][T27605] usb 1-1: Product: syz [ 2143.857495][T27605] usb 1-1: Manufacturer: syz [ 2143.862177][T27605] usb 1-1: SerialNumber: syz [ 2143.868704][ T1314] lo speed is unknown, defaulting to 1000 [ 2143.875061][T27605] usb 1-1: config 0 descriptor?? [ 2143.895250][T27605] appletouch 1-1:0.85: Could not find int-in endpoint [ 2143.918053][T27605] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 2143.950935][T27605] usbhid 1-1:0.85: couldn't find an input interrupt endpoint [ 2143.972947][T16445] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2144.268374][ T1314] hsr0 speed is unknown, defaulting to 1000 [ 2144.284655][ T1306] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 2144.320125][T27605] usb 1-1: USB disconnect, device number 102 [ 2144.426971][T16445] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2144.612810][T16445] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2145.434304][ T1342] netlink: 'syz.5.8124': attribute type 10 has an invalid length. [ 2145.466775][T16445] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2145.631873][ T1314] chnl_net:caif_netlink_parms(): no params data found [ 2145.643209][ T1349] rdma_rxe: rxe_newlink: failed to add lo [ 2145.717894][T27607] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 2145.728191][ T5816] Bluetooth: hci0: command tx timeout [ 2145.797978][ T5809] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 2145.878467][T27607] usb 9-1: Using ep0 maxpacket: 8 [ 2145.893328][T27607] usb 9-1: no configurations [ 2145.910104][T27607] usb 9-1: can't read configurations, error -22 [ 2145.953345][ T5809] usb 1-1: Using ep0 maxpacket: 16 [ 2145.963023][ T5809] usb 1-1: config 8 has an invalid interface number: 39 but max is 0 [ 2145.981041][ T5809] usb 1-1: config 8 has no interface number 0 [ 2145.989897][ T5809] usb 1-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 2145.993199][ T1367] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2146.001912][ T5809] usb 1-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2146.001937][ T5809] usb 1-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 2146.001961][ T5809] usb 1-1: config 8 interface 39 has no altsetting 0 [ 2146.004650][ T5809] usb 1-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 2146.054412][ T1367] overlayfs: failed to set xattr on upper [ 2146.067159][ T1367] overlayfs: ...falling back to redirect_dir=nofollow. [ 2146.074937][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2146.078079][T27607] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 2146.083066][ T1367] overlayfs: ...falling back to metacopy=off. [ 2146.096676][ T5809] usb 1-1: Product: syz [ 2146.096698][ T1367] overlayfs: ...falling back to index=off. [ 2146.106749][ T1367] overlayfs: ...falling back to uuid=null. [ 2146.121124][T20942] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2146.129140][ T5809] usb 1-1: Manufacturer: syz [ 2146.133822][ T5809] usb 1-1: SerialNumber: syz [ 2146.268656][T27607] usb 9-1: Using ep0 maxpacket: 8 [ 2146.285636][T27607] usb 9-1: no configurations [ 2146.290302][T27607] usb 9-1: can't read configurations, error -22 [ 2146.290869][T20942] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2146.296766][T27607] usb usb9-port1: attempt power cycle [ 2146.312038][T20942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2146.320910][T20942] usb 3-1: Product: syz [ 2146.325092][T20942] usb 3-1: Manufacturer: syz [ 2146.332927][T20942] usb 3-1: SerialNumber: syz [ 2146.343958][T20942] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2146.384249][T26212] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2146.393815][T16445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2146.407103][T16445] bond_slave_0: left promiscuous mode [ 2146.414784][T16445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2146.424646][T16445] bond_slave_1: left promiscuous mode [ 2146.431991][T16445] bond0 (unregistering): (slave team0): Releasing backup interface [ 2146.441422][T16445] team0: left promiscuous mode [ 2146.446283][T16445] team_slave_0: left promiscuous mode [ 2146.453163][T16445] team_slave_1: left promiscuous mode [ 2146.461340][T16445] bond0 (unregistering): Released all slaves [ 2146.559048][ T5809] ipheth 1-1:8.39: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 2146.568541][ T5809] ipheth 1-1:8.39: probe with driver ipheth failed with error -22 [ 2146.585591][T16445] bond1 (unregistering): Released all slaves [ 2146.605551][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state [ 2146.614473][ T1314] bridge0: port 1(bridge_slave_0) entered disabled state [ 2146.614581][ C1] usb 3-1: ath9k_htc: invalid pkt_len (fd64) [ 2146.628171][ T1314] bridge_slave_0: entered allmulticast mode [ 2146.635337][ T1314] bridge_slave_0: entered promiscuous mode [ 2146.644237][ T1314] bridge0: port 2(bridge_slave_1) entered blocking state [ 2146.652202][ T1314] bridge0: port 2(bridge_slave_1) entered disabled state [ 2146.659441][T27607] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 2146.659513][ T1314] bridge_slave_1: entered allmulticast mode [ 2146.679415][ T1314] bridge_slave_1: entered promiscuous mode [ 2146.702820][T27607] usb 9-1: Using ep0 maxpacket: 8 [ 2146.710505][T27607] usb 9-1: no configurations [ 2146.715153][T27607] usb 9-1: can't read configurations, error -22 [ 2146.818586][ T1314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2146.847964][T27607] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 2146.851869][ T1314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2146.866624][ T1353] usb 3-1: USB disconnect, device number 23 [ 2146.889155][T27607] usb 9-1: Using ep0 maxpacket: 8 [ 2146.904048][T27607] usb 9-1: no configurations [ 2146.911246][T27607] usb 9-1: can't read configurations, error -22 [ 2146.921850][T27607] usb usb9-port1: unable to enumerate USB device [ 2146.957557][ T1314] team0: Port device team_slave_0 added [ 2146.980728][ T1314] team0: Port device team_slave_1 added [ 2147.018136][ T1314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2147.025157][ T1314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2147.051034][ C0] vkms_vblank_simulate: vblank timer overrun [ 2147.057447][ T1314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2147.079889][ T1314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2147.087006][ T1314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2147.120201][ T1314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2147.198555][ T1314] hsr_slave_0: entered promiscuous mode [ 2147.205694][ T1314] hsr_slave_1: entered promiscuous mode [ 2147.212071][ T1314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2147.220599][ T1314] Cannot create hsr debugfs directory [ 2147.423705][T26212] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2147.479134][ T1379] FAULT_INJECTION: forcing a failure. [ 2147.479134][ T1379] name failslab, interval 1, probability 0, space 0, times 0 [ 2147.492233][ T1379] CPU: 0 UID: 0 PID: 1379 Comm: syz.2.8134 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 2147.492248][ T1379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2147.492254][ T1379] Call Trace: [ 2147.492258][ T1379] [ 2147.492263][ T1379] dump_stack_lvl+0x16c/0x1f0 [ 2147.492283][ T1379] should_fail_ex+0x512/0x640 [ 2147.492299][ T1379] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 2147.492322][ T1379] should_failslab+0xc2/0x120 [ 2147.492335][ T1379] __kmalloc_cache_node_noprof+0x6d/0x420 [ 2147.492352][ T1379] ? __lock_acquire+0x5ca/0x1ba0 [ 2147.492369][ T1379] ? __get_vm_area_node+0x101/0x330 [ 2147.492386][ T1379] __get_vm_area_node+0x101/0x330 [ 2147.492403][ T1379] __vmalloc_node_range_noprof+0x277/0x1540 [ 2147.492419][ T1379] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 2147.492431][ T1379] ? find_held_lock+0x2b/0x80 [ 2147.492448][ T1379] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 2147.492462][ T1379] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2147.492483][ T1379] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 2147.492494][ T1379] __vmalloc_noprof+0x6d/0x90 [ 2147.492510][ T1379] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 2147.492521][ T1379] bpf_prog_alloc_no_stats+0x54/0x630 [ 2147.492531][ T1379] ? security_capable+0x7e/0x260 [ 2147.492546][ T1379] bpf_prog_alloc+0x3b/0x230 [ 2147.492556][ T1379] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2147.492568][ T1379] bpf_prog_load+0x160e/0x2490 [ 2147.492585][ T1379] ? __pfx_bpf_prog_load+0x10/0x10 [ 2147.492598][ T1379] ? avc_has_perm_noaudit+0x149/0x3b0 [ 2147.492620][ T1379] ? selinux_bpf+0xde/0x130 [ 2147.492631][ T1379] ? bpf_lsm_bpf+0x9/0x10 [ 2147.492649][ T1379] __sys_bpf+0x433c/0x4d80 [ 2147.492665][ T1379] ? __pfx___sys_bpf+0x10/0x10 [ 2147.492679][ T1379] ? ksys_write+0x190/0x240 [ 2147.492698][ T1379] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 2147.492723][ T1379] ? fput+0x70/0xf0 [ 2147.492735][ T1379] ? ksys_write+0x1b9/0x240 [ 2147.492751][ T1379] ? __pfx_ksys_write+0x10/0x10 [ 2147.492770][ T1379] __x64_sys_bpf+0x78/0xc0 [ 2147.492784][ T1379] ? lockdep_hardirqs_on+0x7c/0x110 [ 2147.492799][ T1379] do_syscall_64+0xcd/0x260 [ 2147.492815][ T1379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2147.492827][ T1379] RIP: 0033:0x7fc918d8e969 [ 2147.492836][ T1379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2147.492847][ T1379] RSP: 002b:00007fc919bb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2147.492857][ T1379] RAX: ffffffffffffffda RBX: 00007fc918fb5fa0 RCX: 00007fc918d8e969 [ 2147.492864][ T1379] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 2147.492871][ T1379] RBP: 00007fc919bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 2147.492878][ T1379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2147.492884][ T1379] R13: 0000000000000000 R14: 00007fc918fb5fa0 R15: 00007ffd60447cb8 [ 2147.492898][ T1379] [ 2147.492903][ T1379] syz.2.8134: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2147.793605][ T1379] CPU: 0 UID: 0 PID: 1379 Comm: syz.2.8134 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 2147.793621][ T1379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2147.793628][ T1379] Call Trace: [ 2147.793632][ T1379] [ 2147.793636][ T1379] dump_stack_lvl+0x16c/0x1f0 [ 2147.793655][ T1379] warn_alloc+0x248/0x3a0 [ 2147.793668][ T1379] ? __pfx_warn_alloc+0x10/0x10 [ 2147.793680][ T1379] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 2147.793699][ T1379] ? __kasan_kmalloc+0x8a/0xb0 [ 2147.793717][ T1379] ? __get_vm_area_node+0x208/0x330 [ 2147.793735][ T1379] __vmalloc_node_range_noprof+0xd31/0x1540 [ 2147.793751][ T1379] ? find_held_lock+0x2b/0x80 [ 2147.793768][ T1379] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 2147.793783][ T1379] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2147.793804][ T1379] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 2147.793815][ T1379] __vmalloc_noprof+0x6d/0x90 [ 2147.793831][ T1379] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 2147.793842][ T1379] bpf_prog_alloc_no_stats+0x54/0x630 [ 2147.793852][ T1379] ? security_capable+0x7e/0x260 [ 2147.793867][ T1379] bpf_prog_alloc+0x3b/0x230 [ 2147.793877][ T1379] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2147.793889][ T1379] bpf_prog_load+0x160e/0x2490 [ 2147.793906][ T1379] ? __pfx_bpf_prog_load+0x10/0x10 [ 2147.793919][ T1379] ? avc_has_perm_noaudit+0x149/0x3b0 [ 2147.793940][ T1379] ? selinux_bpf+0xde/0x130 [ 2147.793951][ T1379] ? bpf_lsm_bpf+0x9/0x10 [ 2147.793968][ T1379] __sys_bpf+0x433c/0x4d80 [ 2147.793984][ T1379] ? __pfx___sys_bpf+0x10/0x10 [ 2147.793998][ T1379] ? ksys_write+0x190/0x240 [ 2147.794017][ T1379] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 2147.794042][ T1379] ? fput+0x70/0xf0 [ 2147.794053][ T1379] ? ksys_write+0x1b9/0x240 [ 2147.794069][ T1379] ? __pfx_ksys_write+0x10/0x10 [ 2147.794088][ T1379] __x64_sys_bpf+0x78/0xc0 [ 2147.794102][ T1379] ? lockdep_hardirqs_on+0x7c/0x110 [ 2147.794117][ T1379] do_syscall_64+0xcd/0x260 [ 2147.794134][ T1379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2147.794146][ T1379] RIP: 0033:0x7fc918d8e969 [ 2147.794155][ T1379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2147.794166][ T1379] RSP: 002b:00007fc919bb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2147.794176][ T1379] RAX: ffffffffffffffda RBX: 00007fc918fb5fa0 RCX: 00007fc918d8e969 [ 2147.794183][ T1379] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 2147.794190][ T1379] RBP: 00007fc919bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 2147.794196][ T1379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2147.794203][ T1379] R13: 0000000000000000 R14: 00007fc918fb5fa0 R15: 00007ffd60447cb8 [ 2147.794216][ T1379] [ 2147.794221][ T1379] Mem-Info: [ 2148.065244][ T1379] active_anon:11900 inactive_anon:1 isolated_anon:0 [ 2148.065244][ T1379] active_file:26184 inactive_file:41839 isolated_file:0 [ 2148.065244][ T1379] unevictable:768 dirty:463 writeback:0 [ 2148.065244][ T1379] slab_reclaimable:11115 slab_unreclaimable:128111 [ 2148.065244][ T1379] mapped:33235 shmem:9492 pagetables:745 [ 2148.065244][ T1379] sec_pagetables:0 bounce:0 [ 2148.065244][ T1379] kernel_misc_reclaimable:0 [ 2148.065244][ T1379] free:1264951 free_pcp:2128 free_cma:0 [ 2148.110444][ C0] vkms_vblank_simulate: vblank timer overrun [ 2148.116508][ T1379] Node 0 active_anon:47600kB inactive_anon:4kB active_file:104556kB inactive_file:167048kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132816kB dirty:1848kB writeback:0kB shmem:36432kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11056kB pagetables:2980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2148.149999][ C0] vkms_vblank_simulate: vblank timer overrun [ 2148.155990][ T1379] Node 1 active_anon:0kB inactive_anon:0kB active_file:180kB inactive_file:308kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2148.187481][ C0] vkms_vblank_simulate: vblank timer overrun [ 2148.193483][ T1379] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2148.220463][ C0] vkms_vblank_simulate: vblank timer overrun [ 2148.226867][ T1379] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 2148.232601][ T1379] Node 0 DMA32 free:1138980kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:47584kB inactive_anon:4kB active_file:104556kB inactive_file:165220kB unevictable:1536kB writepending:1844kB present:3129332kB managed:2543896kB mlocked:0kB bounce:0kB free_pcp:1076kB local_pcp:596kB free_cma:0kB [ 2148.262973][ C0] vkms_vblank_simulate: vblank timer overrun [ 2148.268983][ T1379] lowmem_reserve[]: 0 0 1 1 1 [ 2148.273658][ T1379] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 2148.300904][ C0] vkms_vblank_simulate: vblank timer overrun [ 2148.306943][ T1379] lowmem_reserve[]: 0 0 0 0 0 [ 2148.311641][ T1379] Node 1 Normal free:3905444kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:180kB inactive_file:308kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:7400kB local_pcp:20kB free_cma:0kB [ 2148.340874][ C0] vkms_vblank_simulate: vblank timer overrun [ 2148.346853][ T1379] lowmem_reserve[]: 0 0 0 0 0 [ 2148.351545][ T1379] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2148.364110][ T1379] Node 0 DMA32: 1164*4kB (UME) 1358*8kB (UME) 435*16kB (UME) 526*32kB (UME) 418*64kB (UME) 189*128kB (UME) 134*256kB (UME) 31*512kB (UME) 17*1024kB (UME) 9*2048kB (UME) 235*4096kB (UM) = 1138832kB [ 2148.383373][ C0] vkms_vblank_simulate: vblank timer overrun [ 2148.389370][ T1379] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 2148.402019][ T5816] Bluetooth: hci0: command 0x041b tx timeout [ 2148.422102][ T1379] Node 1 Normal: 277*4kB (UM) 130*8kB (UME) 218*16kB (UME) 251*32kB (UE) 165*64kB (UME) 68*128kB (UME) 27*256kB (UM) 10*512kB (UME) 4*1024kB (UME) 3*2048kB (ME) 940*4096kB (UM) = 3905444kB [ 2148.441392][ T1379] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2148.451530][ T1379] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2148.468712][T26212] ath9k_htc: Failed to initialize the device [ 2148.481463][ T1353] usb 3-1: ath9k_htc: USB layer deinitialized [ 2148.493624][ T1379] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2148.503186][ T1379] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2148.512598][ T1379] 77513 total pagecache pages [ 2148.517251][ T1379] 1 pages in swap cache [ 2148.521484][ T1379] Free swap = 124992kB [ 2148.525605][ T1379] Total swap = 124996kB [ 2148.529760][ T1379] 2097051 pages RAM [ 2148.533545][ T1379] 0 pages HighMem/MovableOnly [ 2148.538224][ T1379] 428971 pages reserved [ 2148.542347][ T1379] 0 pages cma reserved [ 2148.565098][ T47] usb 1-1: USB disconnect, device number 103 [ 2148.812628][ T1394] overlay: ./file0 is not a directory [ 2149.037997][ T1353] usb 9-1: new low-speed USB device number 39 using dummy_hcd [ 2149.104239][ T47] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 2149.220768][ T1353] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2149.270444][ T1353] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2149.309353][ T47] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 2149.331262][ T1353] usb 9-1: config 0 descriptor?? [ 2149.332556][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2149.346074][ T47] usb 1-1: config 0 descriptor?? [ 2149.353340][ T47] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2149.360806][ T47] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 2149.422896][ T1314] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2149.460086][ T1314] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2149.489765][ T1314] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2149.507011][ T1314] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2149.614541][ T1400] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 2149.649304][ T1400] [U]  [ 2149.652127][ T1400] [U] K{ [ 2149.655843][ T1400] [U] T 1ŠFFˊ`GJǘGO/MC [ 2149.666482][ T1400] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 2149.683527][ T1400] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 2149.705160][ T1390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2149.718174][ T1400] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 2149.762416][ T1400] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 2149.787590][ T1400] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 2149.802062][ T1400] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 2149.817898][ T1400] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 2149.922577][ T1400] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 2149.935507][ T1400] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 2149.949420][ T1400] [U] 22Ʃ۩X?0;3U [ 2149.957289][ T1400] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 2149.983812][ T1400] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 2149.993998][ T1400] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 2150.003380][ T1400] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 2150.011112][ T1400] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 2150.023857][ T1400] [U] EC [ 2150.028684][ T1400] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 2150.072859][ T1390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2150.124244][ T1353] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2150.243282][T26212] usb 1-1: USB disconnect, device number 104 [ 2150.394015][ T1398] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 2150.430670][ T30] audit: type=1400 audit(2151.332:2049): avc: denied { read } for pid=1402 comm="syz.5.8142" lport=48117 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 2150.473222][T31323] Bluetooth: hci0: command 0x041b tx timeout [ 2150.503221][ T30] audit: type=1400 audit(2151.422:2050): avc: denied { setopt } for pid=1402 comm="syz.5.8142" lport=48117 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 2150.642179][ T1407] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2150.645814][ T1314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2150.746308][ T1314] 8021q: adding VLAN 0 to HW filter on device team0 [ 2150.791472][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 2150.798551][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2150.808135][T10251] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2150.943837][ T1353] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2150.956715][ T1353] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 2150.981046][T16439] bridge0: port 2(bridge_slave_1) entered blocking state [ 2150.987995][ T1353] asix 9-1:0.0: probe with driver asix failed with error -71 [ 2150.988153][T16439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2150.997691][ T1353] usb 9-1: USB disconnect, device number 39 [ 2151.022673][T16445] hsr_slave_0: left promiscuous mode [ 2151.028512][T16445] hsr_slave_1: left promiscuous mode [ 2151.034103][T16445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2151.044822][T16445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2151.054705][T16445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2151.071010][T16445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2151.088887][T16445] batadv_slave_0: left allmulticast mode [ 2151.094535][T16445] batadv_slave_0: left promiscuous mode [ 2151.100300][T16445] veth1_macvtap: left promiscuous mode [ 2151.107919][T16445] veth0_macvtap: left promiscuous mode [ 2151.114403][T16445] veth1_vlan: left promiscuous mode [ 2151.126421][T10251] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2151.126506][T16445] veth0_vlan: left promiscuous mode [ 2151.163404][T10251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2151.218018][T10251] usb 3-1: Product: syz [ 2151.222329][T10251] usb 3-1: Manufacturer: syz [ 2151.227055][T10251] usb 3-1: SerialNumber: syz [ 2151.236691][T10251] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2151.252972][ T47] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2151.485903][ C1] usb 3-1: ath9k_htc: invalid pkt_len (fd64) [ 2152.068567][ T1353] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 2152.298339][ T47] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2152.305857][ T1353] usb 9-1: config 8 has an invalid interface number: 80 but max is 0 [ 2152.315275][ T1353] usb 9-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2152.318493][ T47] ath9k_htc: Failed to initialize the device [ 2152.329870][ T1353] usb 9-1: config 8 has no interface number 0 [ 2152.346588][ T1353] usb 9-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2152.377489][ T1353] usb 9-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2152.399040][ T1353] usb 9-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 2152.427441][ T1353] usb 9-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 2152.463890][ T1353] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2152.482789][ T47] usb 3-1: ath9k_htc: USB layer deinitialized [ 2152.491433][ T1353] usb 9-1: NFC: intf ffff888034598000 id ffffffff8f344120 [ 2152.499033][T16445] team0 (unregistering): Port device team_slave_1 removed [ 2152.537869][T31323] Bluetooth: hci0: command 0x041b tx timeout [ 2152.575352][T16445] team0 (unregistering): Port device team_slave_0 removed [ 2152.666946][ T1429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8152'. [ 2152.768459][ T1435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2152.774831][ T1434] netlink: 'syz.0.8153': attribute type 10 has an invalid length. [ 2152.784706][ T1435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2152.792940][ T30] audit: type=1400 audit(2153.742:2051): avc: denied { read } for pid=1418 comm="syz.8.8147" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2152.846420][ T30] audit: type=1400 audit(2153.742:2052): avc: denied { open } for pid=1418 comm="syz.8.8147" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2152.869469][ C0] vkms_vblank_simulate: vblank timer overrun [ 2152.885208][ T30] audit: type=1400 audit(2153.742:2053): avc: denied { ioctl } for pid=1418 comm="syz.8.8147" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2153.199759][ T1351] usb 3-1: USB disconnect, device number 24 [ 2153.260860][ T1435] lo speed is unknown, defaulting to 1000 [ 2153.264796][ T1314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2153.300136][ T1435] hsr0 speed is unknown, defaulting to 1000 [ 2153.514411][ T1314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2153.575827][T16445] IPVS: stop unused estimator thread 0... [ 2154.013549][ T1314] veth0_vlan: entered promiscuous mode [ 2154.023311][ T1314] veth1_vlan: entered promiscuous mode [ 2154.072675][ T1354] usb 9-1: USB disconnect, device number 40 [ 2154.100326][ T1314] veth0_macvtap: entered promiscuous mode [ 2154.354431][ T1314] veth1_macvtap: entered promiscuous mode [ 2154.462388][ T1479] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8162'. [ 2154.618042][T31323] Bluetooth: hci0: command 0x041b tx timeout [ 2155.052117][ T1314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2155.176570][ T1483] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2155.436406][ T1314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2155.465480][ T1314] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2155.480051][ T1314] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2155.491681][ T1314] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2155.508953][ T1314] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2156.291497][T32653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2156.306448][T32653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2156.447557][T16445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2156.480288][T16445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2156.678327][ T5809] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 2156.911102][ T1351] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2156.914493][ T5809] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2156.972963][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2157.018065][ T5809] usb 1-1: Product: syz [ 2157.022235][ T5809] usb 1-1: Manufacturer: syz [ 2157.037816][ T5809] usb 1-1: SerialNumber: syz [ 2157.057434][ T5809] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2157.074069][T10251] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2157.097791][ T1351] usb 3-1: Using ep0 maxpacket: 16 [ 2157.104392][ T1351] usb 3-1: config 102 has an invalid interface number: 37 but max is 0 [ 2157.127205][ T1351] usb 3-1: config 102 has no interface number 0 [ 2157.191189][ T1351] usb 3-1: config 102 interface 37 has no altsetting 0 [ 2157.225121][ T1351] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=a1.4e [ 2157.257961][ T1514] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 2157.275690][ T1351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2157.290637][ C1] usb 1-1: ath9k_htc: invalid pkt_len (fd64) [ 2157.296707][ T1514] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2157.346235][ T1351] usb 3-1: Product: syz [ 2157.400465][ T1351] usb 3-1: Manufacturer: syz [ 2157.414730][ T1351] usb 3-1: SerialNumber: syz [ 2157.671287][ T1498] kvm: kvm [1485]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 2157.770848][ T1521] 9pnet_fd: Insufficient options for proto=fd [ 2158.128599][ T1353] usb 1-1: USB disconnect, device number 105 [ 2158.135151][T10251] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2158.150292][T10251] ath9k_htc: Failed to initialize the device [ 2158.183056][ T1353] usb 1-1: ath9k_htc: USB layer deinitialized [ 2159.713303][ T1351] vmk80xx 3-1:102.37: driver 'vmk80xx' failed to auto-configure device. [ 2159.745653][ T1351] usb 3-1: USB disconnect, device number 25 [ 2159.894726][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.181012][ T1537] netlink: 'syz.2.8178': attribute type 10 has an invalid length. [ 2161.402859][ T1556] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 2161.469186][ T1562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8182'. [ 2161.582062][ T1552] overlay: ./file0 is not a directory [ 2161.765468][ T1576] overlayfs: failed to resolve './file1': -2 [ 2161.878040][ T5809] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 2162.055952][ T5809] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2162.079041][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2162.087101][ T5809] usb 7-1: Product: syz [ 2162.097805][ T5809] usb 7-1: Manufacturer: syz [ 2162.102704][ T5809] usb 7-1: SerialNumber: syz [ 2162.398694][ T1582] openvswitch: netlink: Duplicate or invalid key (type 0). [ 2162.406026][ T1582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2162.468805][ T5809] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2162.477418][ T1584] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2162.511264][ T1584] overlayfs: failed to set xattr on upper [ 2162.521571][ T1584] overlayfs: ...falling back to redirect_dir=nofollow. [ 2162.529099][ T1584] overlayfs: ...falling back to metacopy=off. [ 2162.537414][ T1584] overlayfs: ...falling back to index=off. [ 2162.545691][ T1584] overlayfs: ...falling back to uuid=null. [ 2162.556953][T10251] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2162.594372][ T1589] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8190'. [ 2162.726888][ T1593] netlink: 'syz.8.8191': attribute type 10 has an invalid length. [ 2162.781037][ C1] usb 7-1: ath9k_htc: invalid pkt_len (fd64) [ 2163.248590][ T1569] bond0: entered promiscuous mode [ 2163.253716][ T1569] bond_slave_0: entered promiscuous mode [ 2163.259452][ T1569] bond_slave_1: entered promiscuous mode [ 2163.279909][ T47] usb 7-1: USB disconnect, device number 10 [ 2163.647886][T10251] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 2163.655200][T10251] ath9k_htc: Failed to initialize the device [ 2163.683580][ T1616] FAULT_INJECTION: forcing a failure. [ 2163.683580][ T1616] name failslab, interval 1, probability 0, space 0, times 0 [ 2163.700795][ T47] usb 7-1: ath9k_htc: USB layer deinitialized [ 2163.706978][ T1616] CPU: 1 UID: 0 PID: 1616 Comm: syz.0.8199 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 2163.707003][ T1616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2163.707013][ T1616] Call Trace: [ 2163.707020][ T1616] [ 2163.707028][ T1616] dump_stack_lvl+0x16c/0x1f0 [ 2163.707057][ T1616] should_fail_ex+0x512/0x640 [ 2163.707081][ T1616] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 2163.707102][ T1616] should_failslab+0xc2/0x120 [ 2163.707122][ T1616] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 2163.707141][ T1616] ? __alloc_skb+0x2b2/0x380 [ 2163.707165][ T1616] __alloc_skb+0x2b2/0x380 [ 2163.707184][ T1616] ? __pfx___alloc_skb+0x10/0x10 [ 2163.707207][ T1616] ? find_held_lock+0x2b/0x80 [ 2163.707242][ T1616] tcp_stream_alloc_skb+0x34/0x570 [ 2163.707271][ T1616] tcp_sendmsg_locked+0xec1/0x3930 [ 2163.707316][ T1616] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 2163.707345][ T1616] ? do_raw_spin_lock+0x12c/0x2b0 [ 2163.707365][ T1616] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2163.707391][ T1616] ? __local_bh_enable_ip+0xa4/0x120 [ 2163.707417][ T1616] tcp_sendmsg+0x2e/0x50 [ 2163.707440][ T1616] ? __pfx_tcp_sendmsg+0x10/0x10 [ 2163.707464][ T1616] inet_sendmsg+0xb9/0x140 [ 2163.707498][ T1616] ____sys_sendmsg+0x973/0xc70 [ 2163.707525][ T1616] ? copy_msghdr_from_user+0x10a/0x160 [ 2163.707545][ T1616] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2163.707574][ T1616] ? __pfx__kstrtoull+0x10/0x10 [ 2163.707601][ T1616] ___sys_sendmsg+0x134/0x1d0 [ 2163.707623][ T1616] ? __pfx____sys_sendmsg+0x10/0x10 [ 2163.707657][ T1616] ? find_held_lock+0x2b/0x80 [ 2163.707694][ T1616] __sys_sendmmsg+0x200/0x420 [ 2163.707722][ T1616] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2163.707751][ T1616] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2163.707776][ T1616] ? fput+0x70/0xf0 [ 2163.707788][ T1616] ? ksys_write+0x1b9/0x240 [ 2163.707805][ T1616] ? __pfx_ksys_write+0x10/0x10 [ 2163.707820][ T1616] ? rcu_is_watching+0x12/0xc0 [ 2163.707836][ T1616] __x64_sys_sendmmsg+0x9c/0x100 [ 2163.707849][ T1616] ? lockdep_hardirqs_on+0x7c/0x110 [ 2163.707865][ T1616] do_syscall_64+0xcd/0x260 [ 2163.707883][ T1616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2163.707894][ T1616] RIP: 0033:0x7f3814d8e969 [ 2163.707904][ T1616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2163.707915][ T1616] RSP: 002b:00007f3815cb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2163.707926][ T1616] RAX: ffffffffffffffda RBX: 00007f3814fb5fa0 RCX: 00007f3814d8e969 [ 2163.707933][ T1616] RDX: 0000000000000001 RSI: 0000200000001140 RDI: 0000000000000003 [ 2163.707939][ T1616] RBP: 00007f3815cb5090 R08: 0000000000000000 R09: 0000000000000000 [ 2163.707946][ T1616] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 2163.707952][ T1616] R13: 0000000000000000 R14: 00007f3814fb5fa0 R15: 00007ffd36974148 [ 2163.707967][ T1616] [ 2164.133015][ T1612] overlay: ./file0 is not a directory [ 2164.475891][ T1631] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8202'. [ 2164.907812][ T1353] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2165.067858][ T1353] usb 3-1: Using ep0 maxpacket: 32 [ 2165.086211][ T1353] usb 3-1: config 0 has an invalid descriptor of length 225, skipping remainder of the config [ 2165.110766][ T1353] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2165.163840][ T1353] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2165.179238][ T1353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2165.223517][ T1353] usb 3-1: Product: syz [ 2165.253661][ T1353] usb 3-1: Manufacturer: syz [ 2165.281258][ T1353] usb 3-1: SerialNumber: syz [ 2165.311809][ T1353] usb 3-1: config 0 descriptor?? [ 2165.553281][ T1643] FAULT_INJECTION: forcing a failure. [ 2165.553281][ T1643] name failslab, interval 1, probability 0, space 0, times 0 [ 2165.611108][ T1643] CPU: 1 UID: 0 PID: 1643 Comm: syz.0.8207 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 2165.611125][ T1643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2165.611132][ T1643] Call Trace: [ 2165.611136][ T1643] [ 2165.611141][ T1643] dump_stack_lvl+0x16c/0x1f0 [ 2165.611160][ T1643] should_fail_ex+0x512/0x640 [ 2165.611177][ T1643] ? __kmalloc_noprof+0xbf/0x510 [ 2165.611189][ T1643] ? io_cache_alloc_new+0x45/0xf0 [ 2165.611198][ T1643] should_failslab+0xc2/0x120 [ 2165.611211][ T1643] __kmalloc_noprof+0xd2/0x510 [ 2165.611229][ T1643] io_cache_alloc_new+0x45/0xf0 [ 2165.611240][ T1643] __io_prep_rw+0x227/0xf40 [ 2165.611252][ T1643] ? __pfx___io_prep_rw+0x10/0x10 [ 2165.611263][ T1643] ? mark_held_locks+0x49/0x80 [ 2165.611281][ T1643] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 2165.611296][ T1643] io_prep_rw+0x24/0x220 [ 2165.611307][ T1643] io_prep_readv+0x20/0xa0 [ 2165.611319][ T1643] io_submit_sqes+0x828/0x25d0 [ 2165.611339][ T1643] __do_sys_io_uring_enter+0xd6a/0x1630 [ 2165.611355][ T1643] ? __fget_files+0x20e/0x3c0 [ 2165.611365][ T1643] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 2165.611381][ T1643] ? fput+0x70/0xf0 [ 2165.611393][ T1643] ? ksys_write+0x1b9/0x240 [ 2165.611409][ T1643] ? __pfx_ksys_write+0x10/0x10 [ 2165.611425][ T1643] ? rcu_is_watching+0x12/0xc0 [ 2165.611443][ T1643] do_syscall_64+0xcd/0x260 [ 2165.611460][ T1643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2165.611472][ T1643] RIP: 0033:0x7f3814d8e969 [ 2165.611482][ T1643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2165.611493][ T1643] RSP: 002b:00007f3815cb5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2165.611505][ T1643] RAX: ffffffffffffffda RBX: 00007f3814fb5fa0 RCX: 00007f3814d8e969 [ 2165.611512][ T1643] RDX: 0000000000000000 RSI: 00000000100847c0 RDI: 0000000000000003 [ 2165.611518][ T1643] RBP: 00007f3815cb5090 R08: 0000000000000000 R09: 0000000000000000 [ 2165.611525][ T1643] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 2165.611531][ T1643] R13: 0000000000000000 R14: 00007f3814fb5fa0 R15: 00007ffd36974148 [ 2165.611546][ T1643] [ 2166.042662][ T1653] overlayfs: failed to resolve './file1': -2 [ 2166.318260][ T1354] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2167.040099][ T1354] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2167.051258][ T1354] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2167.063370][ T1354] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2167.083657][ T1354] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2167.106773][ T1660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8212'. [ 2167.115984][ T1652] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2167.123708][ T1660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8212'. [ 2167.140298][ T1354] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2167.775294][ T1652] 9pnet_fd: Insufficient options for proto=fd [ 2167.793348][ T47] usb 3-1: USB disconnect, device number 26 [ 2167.799340][T10251] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 2167.957363][ T1354] usb 7-1: USB disconnect, device number 11 [ 2167.981776][T10251] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2167.995046][T10251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2168.003303][T10251] usb 1-1: Product: syz [ 2168.009439][T10251] usb 1-1: Manufacturer: syz [ 2168.014196][T10251] usb 1-1: SerialNumber: syz [ 2168.193863][ T1680] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2168.201024][ T1680] overlayfs: failed to set xattr on upper [ 2168.208667][ T1680] overlayfs: ...falling back to redirect_dir=nofollow. [ 2168.217304][ T1680] overlayfs: ...falling back to metacopy=off. [ 2168.219041][T10251] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2168.223628][ T1680] overlayfs: ...falling back to index=off. [ 2168.237403][ T1680] overlayfs: ...falling back to uuid=null. [ 2168.401969][ T47] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2169.493794][ C1] usb 1-1: ath9k_htc: invalid pkt_len (fd64) [ 2169.500884][ T47] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2169.507889][ T47] ath9k_htc: Failed to initialize the device [ 2169.536765][ T47] usb 1-1: ath9k_htc: USB layer deinitialized [ 2169.608508][ T1689] 9pnet_fd: Insufficient options for proto=fd [ 2170.064748][T10251] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 2170.090882][ T5809] usb 1-1: USB disconnect, device number 106 [ 2170.258272][T10251] usb 9-1: Using ep0 maxpacket: 16 [ 2170.277588][T10251] usb 9-1: config index 0 descriptor too short (expected 8192, got 18) [ 2170.293301][T10251] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2170.317821][T10251] usb 9-1: config 0 has no interfaces? [ 2170.326420][T10251] usb 9-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25 [ 2170.335496][T10251] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2170.347968][T10251] usb 9-1: Product: syz [ 2170.352180][T10251] usb 9-1: Manufacturer: syz [ 2170.357068][T10251] usb 9-1: SerialNumber: syz [ 2170.368315][ T47] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2170.406671][T10251] apple-mfi-fastcharge 9-1: config 0 descriptor?? [ 2170.541113][ T47] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 2170.557088][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2170.576618][ T47] usb 3-1: config 0 descriptor?? [ 2170.590104][ T47] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2170.598617][ T47] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 2170.831213][ T1692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2170.872689][ T1692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2171.620887][ T5809] usb 3-1: USB disconnect, device number 27 [ 2171.632781][ T1716] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2171.777139][T10251] apple-mfi-fastcharge 9-1: USB disconnect, device number 41 [ 2172.119552][ T1722] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2172.126843][ T1722] overlayfs: failed to set xattr on upper [ 2172.132664][ T1722] overlayfs: ...falling back to redirect_dir=nofollow. [ 2172.139519][ T1722] overlayfs: ...falling back to metacopy=off. [ 2172.145553][ T1722] overlayfs: ...falling back to index=off. [ 2172.151432][ T1722] overlayfs: ...falling back to uuid=null. [ 2172.170953][ T1727] bridge0: port 2(bridge_slave_1) entered disabled state [ 2172.178260][ T1727] bridge0: port 1(bridge_slave_0) entered disabled state [ 2172.186011][ T1727] bridge0: entered allmulticast mode [ 2172.232126][ T1727] bridge_slave_1: left allmulticast mode [ 2172.245301][ T1727] bridge_slave_1: left promiscuous mode [ 2172.280543][ T1727] bridge0: port 2(bridge_slave_1) entered disabled state [ 2172.557266][ T1727] bridge_slave_0: left allmulticast mode [ 2172.563305][ T1727] bridge_slave_0: left promiscuous mode [ 2172.742513][ T1733] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8231'. [ 2172.909659][ T1733] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8231'. [ 2172.939180][ T1727] bridge0: port 1(bridge_slave_0) entered disabled state [ 2173.113188][ T1741] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 2173.297900][ T47] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 2173.779580][T10251] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2173.781782][ T1755] FAULT_INJECTION: forcing a failure. [ 2173.781782][ T1755] name failslab, interval 1, probability 0, space 0, times 0 [ 2173.800594][ T1755] CPU: 0 UID: 0 PID: 1755 Comm: syz.6.8240 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 2173.800618][ T1755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2173.800628][ T1755] Call Trace: [ 2173.800635][ T1755] [ 2173.800642][ T1755] dump_stack_lvl+0x16c/0x1f0 [ 2173.800672][ T1755] should_fail_ex+0x512/0x640 [ 2173.800699][ T1755] should_failslab+0xc2/0x120 [ 2173.800718][ T1755] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2173.800736][ T1755] ? skb_clone+0x190/0x3f0 [ 2173.800761][ T1755] skb_clone+0x190/0x3f0 [ 2173.800778][ T1755] netlink_deliver_tap+0xabd/0xd30 [ 2173.800795][ T1755] netlink_dump+0xb6d/0xd00 [ 2173.800814][ T1755] ? __pfx_netlink_dump+0x10/0x10 [ 2173.800846][ T1755] ? kfree_skbmem+0x1a4/0x1f0 [ 2173.800875][ T1755] ? kfree_skbmem+0x1a4/0x1f0 [ 2173.800901][ T1755] netlink_recvmsg+0xa15/0xf20 [ 2173.800924][ T1755] ? __pfx_netlink_recvmsg+0x10/0x10 [ 2173.800962][ T1755] sock_recvmsg+0x1f9/0x250 [ 2173.800988][ T1755] sock_read_iter+0x2b9/0x3b0 [ 2173.801012][ T1755] ? __pfx_sock_read_iter+0x10/0x10 [ 2173.801047][ T1755] ? __pfx_file_has_perm+0x10/0x10 [ 2173.801073][ T1755] do_iter_readv_writev+0x735/0x950 [ 2173.801100][ T1755] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 2173.801123][ T1755] ? selinux_file_permission+0x11f/0x580 [ 2173.801154][ T1755] ? bpf_lsm_file_permission+0x9/0x10 [ 2173.801177][ T1755] ? security_file_permission+0x71/0x210 [ 2173.801212][ T1755] ? rw_verify_area+0xcf/0x680 [ 2173.801237][ T1755] vfs_readv+0x4c5/0x8a0 [ 2173.801270][ T1755] ? __pfx_vfs_readv+0x10/0x10 [ 2173.801314][ T1755] ? __fget_files+0x20e/0x3c0 [ 2173.801328][ T1755] ? __fget_files+0x190/0x3c0 [ 2173.801351][ T1755] ? do_readv+0x295/0x330 [ 2173.801373][ T1755] do_readv+0x295/0x330 [ 2173.801397][ T1755] ? __pfx_do_readv+0x10/0x10 [ 2173.801419][ T1755] ? rcu_is_watching+0x12/0xc0 [ 2173.801445][ T1755] do_syscall_64+0xcd/0x260 [ 2173.801463][ T1755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2173.801475][ T1755] RIP: 0033:0x7f8524b8e969 [ 2173.801485][ T1755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2173.801497][ T1755] RSP: 002b:00007f85229f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2173.801508][ T1755] RAX: ffffffffffffffda RBX: 00007f8524db6080 RCX: 00007f8524b8e969 [ 2173.801515][ T1755] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2173.801521][ T1755] RBP: 00007f85229f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2173.801528][ T1755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2173.801534][ T1755] R13: 0000000000000000 R14: 00007f8524db6080 R15: 00007ffdf5059a48 [ 2173.801548][ T1755] [ 2174.065032][ C0] vkms_vblank_simulate: vblank timer overrun [ 2174.537706][ T47] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2174.575988][ T47] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 2174.586161][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2174.594797][T10251] usb 3-1: Using ep0 maxpacket: 32 [ 2174.601899][ T1758] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8241'. [ 2174.652621][T10251] usb 3-1: config 0 has an invalid descriptor of length 225, skipping remainder of the config [ 2174.727935][T10251] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2174.737012][ T47] usb 1-1: Product: syz [ 2174.771420][ T47] usb 1-1: Manufacturer: syz [ 2174.776166][ T47] usb 1-1: SerialNumber: syz [ 2174.782714][T10251] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2174.797523][T10251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2174.806193][T10251] usb 3-1: Product: syz [ 2174.815645][T10251] usb 3-1: Manufacturer: syz [ 2174.820534][T10251] usb 3-1: SerialNumber: syz [ 2174.851913][T10251] usb 3-1: config 0 descriptor?? [ 2175.393257][ T5809] usb 3-1: USB disconnect, device number 28 [ 2175.517819][T10251] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2175.588731][ T47] usb 1-1: selecting invalid altsetting 1 [ 2175.595454][ T47] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 2175.595598][ T47] dvb_usb_lmedm04 1-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 2175.613930][ T47] usb 1-1: USB disconnect, device number 107 [ 2175.669416][T10251] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2175.767950][T10251] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2175.776848][T10251] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2175.846387][T10251] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2175.858526][T10251] usb 7-1: config 0 descriptor?? [ 2176.310490][T10251] Bluetooth: Can't get state to change to load configuration err [ 2176.427843][T10251] Bluetooth: Loading sysconfig file failed [ 2176.447967][T10251] ath3k 7-1:0.0: probe with driver ath3k failed with error -16 [ 2176.927017][ T1799] overlay: ./file0 is not a directory [ 2176.977803][ T1352] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 2177.098220][ T1354] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2177.137865][ T1352] usb 9-1: Using ep0 maxpacket: 8 [ 2177.146213][ T1352] usb 9-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 2177.155589][ T1352] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 2177.163621][ T1352] usb 9-1: Product: syz [ 2177.168253][ T1352] usb 9-1: Manufacturer: syz [ 2177.172869][ T1352] usb 9-1: SerialNumber: syz [ 2177.180134][ T1352] usb 9-1: config 0 descriptor?? [ 2177.187231][ T1352] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 2177.247814][ T1354] usb 3-1: Using ep0 maxpacket: 16 [ 2177.254581][ T1354] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 2177.262978][ T1354] usb 3-1: config 252 has no interface number 0 [ 2177.269421][ T1354] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2177.283047][ T1354] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 2177.292220][ T1354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2177.300335][ T1354] usb 3-1: Product: syz [ 2177.304587][ T1354] usb 3-1: Manufacturer: syz [ 2177.310244][ T1354] usb 3-1: SerialNumber: syz [ 2177.353812][ T1354] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2177.815188][ T1352] input: gspca_zc3xx as /devices/platform/dummy_hcd.8/usb9/9-1/input/input80 [ 2177.855957][T10251] usb 7-1: USB disconnect, device number 12 [ 2178.017936][ T47] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 2178.037058][ T1791] netlink: 64985 bytes leftover after parsing attributes in process `syz.8.8250'. [ 2178.066341][ T1352] usb 9-1: USB disconnect, device number 42 [ 2178.187773][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 2178.204460][ T47] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 2178.217766][ T47] usb 1-1: config 0 has no interface number 0 [ 2178.223844][ T47] usb 1-1: config 0 interface 85 has no altsetting 0 [ 2178.236785][ T47] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2178.245906][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2178.253961][ T47] usb 1-1: Product: syz [ 2178.258200][ T47] usb 1-1: Manufacturer: syz [ 2178.262846][ T47] usb 1-1: SerialNumber: syz [ 2178.271022][ T47] usb 1-1: config 0 descriptor?? [ 2178.277859][ T47] appletouch 1-1:0.85: Could not find int-in endpoint [ 2178.285239][ T47] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 2178.297099][ T47] usbhid 1-1:0.85: couldn't find an input interrupt endpoint [ 2178.370207][T16430] usb 3-1: Failed to submit usb control message: -110 [ 2178.377429][T16430] usb 3-1: unable to send the bmi data to the device: -110 [ 2178.385189][T16430] usb 3-1: unable to get target info from device [ 2178.391705][T16430] usb 3-1: could not get target info (-110) [ 2178.397626][T16430] usb 3-1: could not probe fw (-110) [ 2178.482734][ T1805] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 2178.503175][ T1352] usb 1-1: USB disconnect, device number 108 [ 2178.759807][ T1819] overlay: ./file0 is not a directory [ 2179.517975][ T47] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 2179.920484][ T1353] usb 3-1: USB disconnect, device number 29 [ 2179.969784][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 2180.016635][ T47] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2180.055913][ T1842] 9pnet_fd: Insufficient options for proto=fd [ 2180.069131][ T47] usb 1-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2180.102602][ T47] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2180.167351][ T47] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2180.205196][ T47] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2180.229320][ T47] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2180.242571][ T47] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 2180.251783][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2180.266019][ T47] usb 1-1: config 0 descriptor?? [ 2180.501751][ T1859] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2180.558138][ T1859] overlayfs: failed to set xattr on upper [ 2180.586685][ T1859] overlayfs: ...falling back to redirect_dir=nofollow. [ 2180.633366][ T1859] overlayfs: ...falling back to metacopy=off. [ 2180.661604][ T1859] overlayfs: ...falling back to index=off. [ 2180.685028][ T1859] overlayfs: ...falling back to uuid=null. [ 2180.715980][ T47] hid-thrustmaster 0003:044F:B65D.0045: unknown main item tag 0x0 [ 2180.726382][ T47] hid-thrustmaster 0003:044F:B65D.0045: unknown main item tag 0x0 [ 2180.745280][ T47] hid-thrustmaster 0003:044F:B65D.0045: unknown main item tag 0x0 [ 2180.755753][ T47] hid-thrustmaster 0003:044F:B65D.0045: unknown main item tag 0x0 [ 2180.790047][ T47] hid-thrustmaster 0003:044F:B65D.0045: unknown main item tag 0x0 [ 2180.804266][ T47] hid-thrustmaster 0003:044F:B65D.0045: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 2180.826312][ T47] hid-thrustmaster 0003:044F:B65D.0045: setup data couldn't be sent [ 2181.340513][ T1868] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2181.486772][ C1] hid-thrustmaster 0003:044F:B65D.0045: URB to get model id failed with error -71 [ 2181.498183][ T1354] usb 1-1: USB disconnect, device number 109 [ 2181.530164][ T47] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2181.545693][ T47] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2181.593487][ T47] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2181.651825][ T1875] 9pnet_fd: Insufficient options for proto=fd [ 2181.713977][ T47] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2182.008126][ T47] rtc rtc0: __rtc_set_alarm: err=-22 [ 2182.068906][T10251] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 2182.192015][ T1880] fuse: Bad value for 'fd' [ 2182.284423][T10251] usb 7-1: Using ep0 maxpacket: 16 [ 2182.311242][T10251] usb 7-1: config index 0 descriptor too short (expected 8192, got 18) [ 2182.340578][T10251] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2182.367865][T10251] usb 7-1: config 0 has no interfaces? [ 2182.375414][T10251] usb 7-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25 [ 2182.408263][T10251] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2182.416344][T10251] usb 7-1: Product: syz [ 2182.423566][T10251] usb 7-1: Manufacturer: syz [ 2182.428215][T10251] usb 7-1: SerialNumber: syz [ 2182.434825][T10251] apple-mfi-fastcharge 7-1: config 0 descriptor?? [ 2182.550761][ T1352] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2182.806233][ T1896] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2183.173791][ T1352] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2183.185681][ T1352] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2183.201523][ T1352] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2183.213896][ T1352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2183.235453][ T1352] usb 3-1: config 0 descriptor?? [ 2183.579871][ T1352] Bluetooth: Can't get state to change to load ram patch err [ 2183.587291][ T1352] Bluetooth: Loading patch file failed [ 2183.602444][ T1352] ath3k 3-1:0.0: probe with driver ath3k failed with error -121 [ 2184.050745][ T1881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2184.075000][ T1881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2184.139391][ T1908] overlayfs: failed to resolve './file1': -2 [ 2184.151171][T10251] apple-mfi-fastcharge 7-1: USB disconnect, device number 13 [ 2184.186112][ T1910] netlink: 'syz.6.8288': attribute type 10 has an invalid length. [ 2184.244515][ T1910] 8021q: adding VLAN 0 to HW filter on device team0 [ 2184.253171][ T1910] team0: entered promiscuous mode [ 2184.259889][ T1910] team_slave_0: entered promiscuous mode [ 2184.265677][ T1910] team_slave_1: entered promiscuous mode [ 2184.272068][ T1910] bond0: (slave team0): Enslaving as an active interface with an up link [ 2184.378785][ T1917] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2184.467805][ T5809] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 2184.649716][ T5809] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 2184.763546][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2184.782457][ T5809] usb 1-1: config 0 descriptor?? [ 2184.792311][ T5809] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2184.802973][ T5809] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 2185.003613][ T1912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2185.012366][ T1912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2185.025212][ T5809] usb 1-1: USB disconnect, device number 110 [ 2185.270008][ T1929] FAULT_INJECTION: forcing a failure. [ 2185.270008][ T1929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2185.289868][ T1929] CPU: 0 UID: 0 PID: 1929 Comm: syz.6.8295 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 2185.289893][ T1929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2185.289904][ T1929] Call Trace: [ 2185.289911][ T1929] [ 2185.289918][ T1929] dump_stack_lvl+0x16c/0x1f0 [ 2185.289948][ T1929] should_fail_ex+0x512/0x640 [ 2185.289977][ T1929] _copy_from_iter+0x2a4/0x15b0 [ 2185.290006][ T1929] ? __alloc_skb+0x200/0x380 [ 2185.290028][ T1929] ? __pfx__copy_from_iter+0x10/0x10 [ 2185.290056][ T1929] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2185.290088][ T1929] netlink_sendmsg+0x829/0xdd0 [ 2185.290116][ T1929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2185.290155][ T1929] ____sys_sendmsg+0xa95/0xc70 [ 2185.290183][ T1929] ? copy_msghdr_from_user+0x10a/0x160 [ 2185.290204][ T1929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2185.290241][ T1929] ___sys_sendmsg+0x134/0x1d0 [ 2185.290265][ T1929] ? __pfx____sys_sendmsg+0x10/0x10 [ 2185.290318][ T1929] __sys_sendmsg+0x16d/0x220 [ 2185.290341][ T1929] ? __pfx___sys_sendmsg+0x10/0x10 [ 2185.290369][ T1929] ? rcu_is_watching+0x12/0xc0 [ 2185.290398][ T1929] do_syscall_64+0xcd/0x260 [ 2185.290427][ T1929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2185.290445][ T1929] RIP: 0033:0x7f8524b8e969 [ 2185.290461][ T1929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2185.290479][ T1929] RSP: 002b:00007f852592e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2185.290496][ T1929] RAX: ffffffffffffffda RBX: 00007f8524db5fa0 RCX: 00007f8524b8e969 [ 2185.290508][ T1929] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 2185.290519][ T1929] RBP: 00007f852592e090 R08: 0000000000000000 R09: 0000000000000000 [ 2185.290530][ T1929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2185.290540][ T1929] R13: 0000000000000000 R14: 00007f8524db5fa0 R15: 00007ffdf5059a48 [ 2185.290565][ T1929] [ 2185.490581][ C0] vkms_vblank_simulate: vblank timer overrun [ 2185.533652][ T1354] usb 3-1: USB disconnect, device number 30 [ 2186.198849][ T1935] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 2186.206669][ T5809] IPVS: starting estimator thread 0... [ 2186.290749][ T1935] [U]  [ 2186.293603][ T1935] [U] K{ [ 2186.297450][ T1935] [U] T 1ŠFFˊ`GJǘGO/MC [ 2186.308080][ T1936] IPVS: using max 39 ests per chain, 93600 per kthread [ 2186.315072][ T1935] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 2186.331922][ T1935] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 2186.348100][ T1935] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 2186.391306][ T1935] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 2186.418679][ T1935] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 2186.431355][ T1935] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 2186.446129][ T1935] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 2186.549541][ T1935] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 2186.559793][ T1935] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 2186.573641][ T1935] [U] 22Ʃ۩X?0;3U [ 2186.581437][ T1935] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 2186.607566][ T1935] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 2186.617918][ T1935] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 2186.627047][ T1935] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 2186.634794][ T1935] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 2186.647262][ T1935] [U] EC [ 2186.651921][ T1935] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 2187.848936][ T1931] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 2188.376562][ T1955] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2188.812574][ T1966] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2189.978570][ T1978] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2190.014376][ T1978] overlayfs: failed to set xattr on upper [ 2190.058815][ T1978] overlayfs: ...falling back to redirect_dir=nofollow. [ 2190.167607][ T1978] overlayfs: ...falling back to metacopy=off. [ 2190.174549][ T1978] overlayfs: ...falling back to index=off. [ 2190.181518][ T1978] overlayfs: ...falling back to uuid=null. [ 2190.203262][ T30] audit: type=1400 audit(2447.137:2054): avc: denied { read } for pid=1980 comm="syz.6.8309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2190.647855][ T1352] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2190.820204][ T1352] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 2190.854052][ T1352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2190.904160][ T1352] usb 3-1: config 0 descriptor?? [ 2190.937031][ T1352] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2190.959788][ T1352] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 2190.999906][T31323] Bluetooth: hci0: unexpected event for opcode 0x0407 [ 2191.305619][ T1985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2191.326328][ T1985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2191.488370][ T1352] usb 3-1: USB disconnect, device number 31 [ 2191.593429][ T2011] netlink: 'syz.8.8318': attribute type 10 has an invalid length. [ 2191.665924][ T30] audit: type=1400 audit(2448.627:2055): avc: denied { read append } for pid=2012 comm="syz.6.8319" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 2191.695983][ T30] audit: type=1400 audit(2448.627:2056): avc: denied { open } for pid=2012 comm="syz.6.8319" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 2191.719380][ C0] vkms_vblank_simulate: vblank timer overrun [ 2191.789906][ T2018] random: crng reseeded on system resumption [ 2192.018699][ T2021] ptrace attach of "./syz-executor exec"[31046] was attempted by "./syz-executor exec"[2021] [ 2192.043937][ T2022] syz.8.8320 (2022): /proc/2022/oom_adj is deprecated, please use /proc/2022/oom_score_adj instead. [ 2192.369431][ T2023] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8319'. [ 2192.477948][ T2025] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2192.487801][ T2023] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8319'. [ 2193.857524][ T2051] mkiss: ax0: crc mode is auto. [ 2194.087977][ T2059] netlink: 'syz.6.8330': attribute type 10 has an invalid length. [ 2195.177493][ T2067] lo speed is unknown, defaulting to 1000 [ 2195.189059][ T2067] hsr0 speed is unknown, defaulting to 1000 [ 2195.257778][ T1353] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 2195.419454][ T1353] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2195.458668][ T1353] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2195.531489][ T1353] usb 9-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2195.562645][ T1353] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2195.587806][ T1354] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2195.618282][ T1353] usb 9-1: config 0 descriptor?? [ 2195.635522][ T2066] mmap: syz.6.8333 (2066): VmData 25972736 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 2195.700424][ T2075] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2195.771892][ T1354] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 2195.783969][ T1354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2195.808588][ T1354] usb 3-1: config 0 descriptor?? [ 2195.821702][ T1354] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2195.862172][ T1354] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 2196.026948][ T2071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2196.097451][ T1353] Bluetooth: Can't get state to change to load configuration err [ 2196.110375][ T2071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2196.118006][ T1353] Bluetooth: Loading sysconfig file failed [ 2196.275126][ T5809] usb 3-1: USB disconnect, device number 32 [ 2196.280793][ T1353] ath3k 9-1:0.0: probe with driver ath3k failed with error -16 [ 2196.319833][ T2086] openvswitch: netlink: Duplicate or invalid key (type 0). [ 2196.327416][ T2086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2196.547128][ T2091] netlink: 'syz.5.8340': attribute type 1 has an invalid length. [ 2196.614791][ T2091] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 2196.630108][T32653] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2196.630829][ T2091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2197.495247][ T5809] usb 9-1: USB disconnect, device number 43 [ 2197.818082][T10251] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 2197.867839][ T47] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 2197.967407][ T2091] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 2198.007180][ T2091] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 2198.082365][ T2091] bond1 (unregistering): Released all slaves [ 2198.098008][T10251] usb 7-1: Using ep0 maxpacket: 16 [ 2198.105976][ T47] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2198.127159][T10251] usb 7-1: config 252 has an invalid interface number: 15 but max is 0 [ 2198.143772][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2198.161853][T10251] usb 7-1: config 252 has no interface number 0 [ 2198.185189][ T47] usb 1-1: Product: syz [ 2198.194639][T10251] usb 7-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2198.214527][ T47] usb 1-1: Manufacturer: syz [ 2198.234513][ T47] usb 1-1: SerialNumber: syz [ 2198.251032][T10251] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 2198.277318][ T47] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2198.292134][T10251] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2198.308450][ T5809] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2198.332616][T10251] usb 7-1: Product: syz [ 2198.356321][T10251] usb 7-1: Manufacturer: syz [ 2198.375939][T10251] usb 7-1: SerialNumber: syz [ 2198.453954][T10251] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2198.625516][ C1] usb 1-1: ath9k_htc: invalid pkt_len (fd64) [ 2199.191426][T16439] usb 7-1: Failed to submit usb control message: -71 [ 2199.198804][T20942] usb 7-1: USB disconnect, device number 14 [ 2199.220643][T16439] usb 7-1: unable to send the bmi data to the device: -71 [ 2199.237861][T16439] usb 7-1: unable to get target info from device [ 2199.244512][T16439] usb 7-1: could not get target info (-71) [ 2199.389227][T16439] usb 7-1: could not probe fw (-71) [ 2199.480252][ T5809] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2199.520081][ T5809] ath9k_htc: Failed to initialize the device [ 2199.666840][ T5809] usb 1-1: ath9k_htc: USB layer deinitialized [ 2200.054308][T27607] usb 1-1: USB disconnect, device number 111 [ 2200.164542][ T2151] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 2200.995095][ T2163] netlink: 164 bytes leftover after parsing attributes in process `syz.8.8355'. [ 2201.377904][ T47] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 2201.869431][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2201.930939][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2201.984776][ T47] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2202.032583][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2202.055768][ T47] usb 1-1: config 0 descriptor?? [ 2202.193959][T27607] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 2202.357991][T27607] usb 9-1: Using ep0 maxpacket: 32 [ 2202.376068][T27607] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 2202.386770][T27607] usb 9-1: config 0 has no interface number 0 [ 2202.393166][T27607] usb 9-1: config 0 interface 85 has no altsetting 0 [ 2202.404728][T27607] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2202.414497][T27607] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2202.422603][T27607] usb 9-1: Product: syz [ 2202.426987][T27607] usb 9-1: Manufacturer: syz [ 2202.431814][T27607] usb 9-1: SerialNumber: syz [ 2202.439854][T27607] usb 9-1: config 0 descriptor?? [ 2202.449512][T27607] appletouch 9-1:0.85: Could not find int-in endpoint [ 2202.456365][T27607] appletouch 9-1:0.85: probe with driver appletouch failed with error -5 [ 2202.465944][T27607] usbhid 9-1:0.85: couldn't find an input interrupt endpoint [ 2202.485059][ T47] cp2112 0003:10C4:EA90.0046: unknown main item tag 0x6 [ 2202.498386][ T47] cp2112 0003:10C4:EA90.0046: unknown main item tag 0x0 [ 2202.506460][ T47] cp2112 0003:10C4:EA90.0046: unknown global tag 0xe [ 2202.526695][ T47] cp2112 0003:10C4:EA90.0046: item 0 1 1 14 parsing failed [ 2202.559235][ T47] cp2112 0003:10C4:EA90.0046: parse failed [ 2202.566620][ T47] cp2112 0003:10C4:EA90.0046: probe with driver cp2112 failed with error -22 [ 2202.667577][ T2176] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 2202.727066][T27607] usb 9-1: USB disconnect, device number 44 [ 2202.853279][ T2184] overlayfs: failed to resolve './file1': -2 [ 2202.981507][T27607] usb 1-1: USB disconnect, device number 112 [ 2204.768928][ T2224] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.8372'. [ 2204.896384][ T2224] lo speed is unknown, defaulting to 1000 [ 2205.079142][ T2224] hsr0 speed is unknown, defaulting to 1000 [ 2206.816621][ T2249] overlayfs: failed to resolve './file1': -2 [ 2207.070681][ T2257] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8381'. [ 2207.102009][ T2257] gfs2: not a GFS2 filesystem [ 2207.110661][ T5809] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 2207.268007][ T5809] usb 7-1: Using ep0 maxpacket: 16 [ 2207.423592][ T5809] usb 7-1: config 252 has an invalid interface number: 15 but max is 0 [ 2207.467890][ T5809] usb 7-1: config 252 has no interface number 0 [ 2207.474391][ T5809] usb 7-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2207.478138][ T30] audit: type=1400 audit(2464.447:2057): avc: denied { setopt } for pid=2256 comm="syz.0.8382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2207.506478][ T5809] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 2207.516723][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2207.536749][ T5809] usb 7-1: Product: syz [ 2207.563597][ T5809] usb 7-1: Manufacturer: syz [ 2208.064488][ T5809] usb 7-1: SerialNumber: syz [ 2209.164989][ T5809] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2209.898460][T27607] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2209.964709][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2209.974275][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2209.982597][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2209.990133][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2209.998215][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2210.054098][T16439] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2210.101021][ T2293] lo speed is unknown, defaulting to 1000 [ 2210.108819][ T2293] hsr0 speed is unknown, defaulting to 1000 [ 2210.155742][T16439] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2210.192749][T27607] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2210.220782][T32653] usb 7-1: Failed to submit usb control message: -110 [ 2210.229802][T32653] usb 7-1: unable to send the bmi data to the device: -110 [ 2210.233509][T27607] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2210.246911][T32653] usb 7-1: unable to get target info from device [ 2210.254184][T32653] usb 7-1: could not get target info (-110) [ 2210.260002][T27607] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 72 [ 2210.260272][T32653] usb 7-1: could not probe fw (-110) [ 2210.381453][ T1351] usb 7-1: USB disconnect, device number 15 [ 2210.383439][T16439] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2210.410745][T27607] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2211.406296][T27607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2211.424781][T27607] usb 3-1: Product: syz [ 2211.434873][T27607] usb 3-1: Manufacturer: syz [ 2211.647027][T27607] usb 3-1: SerialNumber: syz [ 2211.672261][ T2289] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2211.706452][T16439] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2212.042433][T27607] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2212.058072][ T5816] Bluetooth: hci2: command tx timeout [ 2212.550673][T27607] usb 3-1: USB disconnect, device number 33 [ 2212.569538][ T2320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2320 comm=syz.8.8403 [ 2212.584276][T27607] usblp0: removed [ 2212.593871][ T2320] netlink: 'syz.8.8403': attribute type 1 has an invalid length. [ 2213.800441][T16439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2213.813245][T16439] bond_slave_0: left promiscuous mode [ 2213.819936][T16439] bond_slave_0: left allmulticast mode [ 2214.227830][ T5816] Bluetooth: hci2: command tx timeout [ 2214.287757][T16439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2214.300031][T16439] bond_slave_1: left promiscuous mode [ 2214.307442][T16439] bond_slave_1: left allmulticast mode [ 2214.321901][T16439] bond0 (unregistering): Released all slaves [ 2214.681991][ T2293] chnl_net:caif_netlink_parms(): no params data found [ 2215.168453][ T2320] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2215.275470][ T2323] ================================================================== [ 2215.291781][ T2323] BUG: KASAN: global-out-of-bounds in fib6_ifdown+0x7f5/0x8f0 [ 2215.299255][ T2323] Read of size 8 at addr ffffffff9af9f5b0 by task syz.8.8403/2323 [ 2215.307059][ T2323] [ 2215.309383][ T2323] CPU: 1 UID: 0 PID: 2323 Comm: syz.8.8403 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 2215.309409][ T2323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2215.309423][ T2323] Call Trace: [ 2215.309430][ T2323] [ 2215.309439][ T2323] dump_stack_lvl+0x116/0x1f0 [ 2215.309470][ T2323] print_report+0xc3/0x670 [ 2215.309491][ T2323] ? __virt_addr_valid+0x5e/0x590 [ 2215.309519][ T2323] ? __phys_addr+0xc6/0x150 [ 2215.309547][ T2323] ? fib6_ifdown+0x7f5/0x8f0 [ 2215.309567][ T2323] kasan_report+0xe0/0x110 [ 2215.309588][ T2323] ? fib6_ifdown+0x7f5/0x8f0 [ 2215.309612][ T2323] fib6_ifdown+0x7f5/0x8f0 [ 2215.309634][ T2323] ? __pfx_fib6_ifdown+0x10/0x10 [ 2215.309656][ T2323] fib6_clean_node+0x2a7/0x5b0 [ 2215.309678][ T2323] ? __pfx_fib6_clean_node+0x10/0x10 [ 2215.309704][ T2323] fib6_walk_continue+0x452/0x8d0 [ 2215.309736][ T2323] fib6_walk+0x182/0x370 [ 2215.309754][ T2323] ? __pfx_fib6_ifdown+0x10/0x10 [ 2215.309775][ T2323] fib6_clean_tree+0xd4/0x110 [ 2215.309792][ T2323] ? __pfx_fib6_clean_tree+0x10/0x10 [ 2215.309813][ T2323] ? __pfx_fib6_clean_node+0x10/0x10 [ 2215.309834][ T2323] ? __pfx_fib6_ifdown+0x10/0x10 [ 2215.309858][ T2323] ? __pfx_fib6_ifdown+0x10/0x10 [ 2215.309878][ T2323] __fib6_clean_all+0x107/0x2d0 [ 2215.309899][ T2323] rt6_disable_ip+0x2ec/0x990 [ 2215.309927][ T2323] ? __mutex_trylock_common+0xe9/0x250 [ 2215.309958][ T2323] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2215.309987][ T2323] ? __pfx_rt6_disable_ip+0x10/0x10 [ 2215.310016][ T2323] ? rcu_is_watching+0x12/0xc0 [ 2215.310041][ T2323] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 2215.310066][ T2323] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 2215.310097][ T2323] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 2215.310120][ T2323] ? tls_dev_event+0xfd/0x10b0 [ 2215.310144][ T2323] addrconf_notify+0x220/0x19e0 [ 2215.310169][ T2323] ? ip6mr_device_event+0x1bc/0x230 [ 2215.310199][ T2323] notifier_call_chain+0xbc/0x410 [ 2215.310225][ T2323] ? __pfx_addrconf_notify+0x10/0x10 [ 2215.310259][ T2323] call_netdevice_notifiers_info+0xbe/0x140 [ 2215.310289][ T2323] unregister_netdevice_many_notify+0xf9a/0x26f0 [ 2215.310319][ T2323] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 2215.310346][ T2323] ? __pfx___dev_notify_flags+0x10/0x10 [ 2215.310366][ T2323] ? __dev_change_flags+0x3d5/0x720 [ 2215.310388][ T2323] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 2215.310418][ T2323] rtnl_newlink+0x171e/0x2000 [ 2215.310444][ T2323] ? __pfx_rtnl_newlink+0x10/0x10 [ 2215.310466][ T2323] ? find_held_lock+0x2b/0x80 [ 2215.310489][ T2323] ? avc_has_perm_noaudit+0x117/0x3b0 [ 2215.310511][ T2323] ? avc_has_perm_noaudit+0x149/0x3b0 [ 2215.310543][ T2323] ? find_held_lock+0x2b/0x80 [ 2215.310565][ T2323] ? __pfx_rtnl_newlink+0x10/0x10 [ 2215.310586][ T2323] ? __pfx_rtnl_newlink+0x10/0x10 [ 2215.310607][ T2323] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 2215.310630][ T2323] ? __pfx_rtnl_newlink+0x10/0x10 [ 2215.310653][ T2323] rtnetlink_rcv_msg+0x95b/0xe90 [ 2215.310677][ T2323] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2215.310707][ T2323] netlink_rcv_skb+0x16a/0x440 [ 2215.310732][ T2323] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2215.310755][ T2323] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2215.310787][ T2323] ? netlink_deliver_tap+0x1ae/0xd30 [ 2215.310812][ T2323] netlink_unicast+0x53d/0x7f0 [ 2215.310838][ T2323] ? __pfx_netlink_unicast+0x10/0x10 [ 2215.310865][ T2323] netlink_sendmsg+0x8d1/0xdd0 [ 2215.310891][ T2323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2215.310920][ T2323] ____sys_sendmsg+0xa95/0xc70 [ 2215.310947][ T2323] ? copy_msghdr_from_user+0x10a/0x160 [ 2215.310969][ T2323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2215.310996][ T2323] ? find_held_lock+0x2b/0x80 [ 2215.311018][ T2323] ? do_pte_missing+0x87c/0x3fb0 [ 2215.311049][ T2323] ___sys_sendmsg+0x134/0x1d0 [ 2215.311071][ T2323] ? __pfx____sys_sendmsg+0x10/0x10 [ 2215.311107][ T2323] __sys_sendmsg+0x16d/0x220 [ 2215.311129][ T2323] ? __pfx___sys_sendmsg+0x10/0x10 [ 2215.311150][ T2323] ? find_held_lock+0x2b/0x80 [ 2215.311176][ T2323] ? do_user_addr_fault+0x843/0x1370 [ 2215.311200][ T2323] do_syscall_64+0xcd/0x260 [ 2215.311234][ T2323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2215.311254][ T2323] RIP: 0033:0x7ffb1298e969 [ 2215.311270][ T2323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2215.311290][ T2323] RSP: 002b:00007ffb137e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2215.311311][ T2323] RAX: ffffffffffffffda RBX: 00007ffb12bb6080 RCX: 00007ffb1298e969 [ 2215.311326][ T2323] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 2215.311339][ T2323] RBP: 00007ffb12a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 2215.311352][ T2323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2215.311364][ T2323] R13: 0000000000000001 R14: 00007ffb12bb6080 R15: 00007ffcc4f95928 [ 2215.311383][ T2323] [ 2215.311390][ T2323] [ 2215.780723][ T2323] The buggy address belongs to the variable: [ 2215.786682][ T2323] __key.0+0x30/0x40 [ 2215.790565][ T2323] [ 2215.792869][ T2323] The buggy address belongs to the physical page: [ 2215.799258][ T2323] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1af9f [ 2215.807999][ T2323] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 2215.815877][ T2323] raw: 00fff00000002000 ffffea00006be7c8 ffffea00006be7c8 0000000000000000 [ 2215.824442][ T2323] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 2215.833003][ T2323] page dumped because: kasan: bad access detected [ 2215.839392][ T2323] page_owner info is not present (never set?) [ 2215.845434][ T2323] [ 2215.847741][ T2323] Memory state around the buggy address: [ 2215.853348][ T2323] ffffffff9af9f480: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 2215.861389][ T2323] ffffffff9af9f500: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 2215.869434][ T2323] >ffffffff9af9f580: 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2215.877471][ T2323] ^ [ 2215.883083][ T2323] ffffffff9af9f600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f9 [ 2215.891129][ T2323] ffffffff9af9f680: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 2215.899172][ T2323] ================================================================== [ 2215.907313][ T2323] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2215.914512][ T2323] CPU: 1 UID: 0 PID: 2323 Comm: syz.8.8403 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 2215.926486][ T2323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2215.936528][ T2323] Call Trace: [ 2215.939790][ T2323] [ 2215.942706][ T2323] dump_stack_lvl+0x3d/0x1f0 [ 2215.947289][ T2323] panic+0x71c/0x800 [ 2215.951178][ T2323] ? __pfx_panic+0x10/0x10 [ 2215.955585][ T2323] ? mark_held_locks+0x49/0x80 [ 2215.960342][ T2323] ? fib6_ifdown+0x7f5/0x8f0 [ 2215.964921][ T2323] ? fib6_ifdown+0x7f5/0x8f0 [ 2215.969497][ T2323] check_panic_on_warn+0xab/0xb0 [ 2215.974420][ T2323] end_report+0x107/0x170 [ 2215.978733][ T2323] kasan_report+0xee/0x110 [ 2215.983135][ T2323] ? fib6_ifdown+0x7f5/0x8f0 [ 2215.987716][ T2323] fib6_ifdown+0x7f5/0x8f0 [ 2215.992129][ T2323] ? __pfx_fib6_ifdown+0x10/0x10 [ 2215.997051][ T2323] fib6_clean_node+0x2a7/0x5b0 [ 2216.001801][ T2323] ? __pfx_fib6_clean_node+0x10/0x10 [ 2216.007073][ T2323] fib6_walk_continue+0x452/0x8d0 [ 2216.012092][ T2323] fib6_walk+0x182/0x370 [ 2216.016319][ T2323] ? __pfx_fib6_ifdown+0x10/0x10 [ 2216.021247][ T2323] fib6_clean_tree+0xd4/0x110 [ 2216.025909][ T2323] ? __pfx_fib6_clean_tree+0x10/0x10 [ 2216.031181][ T2323] ? __pfx_fib6_clean_node+0x10/0x10 [ 2216.036451][ T2323] ? __pfx_fib6_ifdown+0x10/0x10 [ 2216.041376][ T2323] ? __pfx_fib6_ifdown+0x10/0x10 [ 2216.046299][ T2323] __fib6_clean_all+0x107/0x2d0 [ 2216.051135][ T2323] rt6_disable_ip+0x2ec/0x990 [ 2216.055805][ T2323] ? __mutex_trylock_common+0xe9/0x250 [ 2216.061257][ T2323] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2216.067141][ T2323] ? __pfx_rt6_disable_ip+0x10/0x10 [ 2216.072331][ T2323] ? rcu_is_watching+0x12/0xc0 [ 2216.077083][ T2323] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 2216.082531][ T2323] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 2216.088156][ T2323] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 2216.094035][ T2323] ? tls_dev_event+0xfd/0x10b0 [ 2216.098788][ T2323] addrconf_notify+0x220/0x19e0 [ 2216.103629][ T2323] ? ip6mr_device_event+0x1bc/0x230 [ 2216.108820][ T2323] notifier_call_chain+0xbc/0x410 [ 2216.113836][ T2323] ? __pfx_addrconf_notify+0x10/0x10 [ 2216.119112][ T2323] call_netdevice_notifiers_info+0xbe/0x140 [ 2216.124996][ T2323] unregister_netdevice_many_notify+0xf9a/0x26f0 [ 2216.131319][ T2323] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 2216.138069][ T2323] ? __pfx___dev_notify_flags+0x10/0x10 [ 2216.143598][ T2323] ? __dev_change_flags+0x3d5/0x720 [ 2216.148785][ T2323] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 2216.155016][ T2323] rtnl_newlink+0x171e/0x2000 [ 2216.159687][ T2323] ? __pfx_rtnl_newlink+0x10/0x10 [ 2216.164698][ T2323] ? find_held_lock+0x2b/0x80 [ 2216.169363][ T2323] ? avc_has_perm_noaudit+0x117/0x3b0 [ 2216.174721][ T2323] ? avc_has_perm_noaudit+0x149/0x3b0 [ 2216.180089][ T2323] ? find_held_lock+0x2b/0x80 [ 2216.184750][ T2323] ? __pfx_rtnl_newlink+0x10/0x10 [ 2216.189760][ T2323] ? __pfx_rtnl_newlink+0x10/0x10 [ 2216.194770][ T2323] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 2216.199871][ T2323] ? __pfx_rtnl_newlink+0x10/0x10 [ 2216.204883][ T2323] rtnetlink_rcv_msg+0x95b/0xe90 [ 2216.209809][ T2323] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2216.215260][ T2323] netlink_rcv_skb+0x16a/0x440 [ 2216.220014][ T2323] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2216.225475][ T2323] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2216.230767][ T2323] ? netlink_deliver_tap+0x1ae/0xd30 [ 2216.236042][ T2323] netlink_unicast+0x53d/0x7f0 [ 2216.240801][ T2323] ? __pfx_netlink_unicast+0x10/0x10 [ 2216.246083][ T2323] netlink_sendmsg+0x8d1/0xdd0 [ 2216.250839][ T2323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2216.256119][ T2323] ____sys_sendmsg+0xa95/0xc70 [ 2216.260878][ T2323] ? copy_msghdr_from_user+0x10a/0x160 [ 2216.266322][ T2323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2216.271601][ T2323] ? find_held_lock+0x2b/0x80 [ 2216.276270][ T2323] ? do_pte_missing+0x87c/0x3fb0 [ 2216.281206][ T2323] ___sys_sendmsg+0x134/0x1d0 [ 2216.285872][ T2323] ? __pfx____sys_sendmsg+0x10/0x10 [ 2216.291070][ T2323] __sys_sendmsg+0x16d/0x220 [ 2216.295648][ T2323] ? __pfx___sys_sendmsg+0x10/0x10 [ 2216.300748][ T2323] ? find_held_lock+0x2b/0x80 [ 2216.305413][ T2323] ? do_user_addr_fault+0x843/0x1370 [ 2216.310692][ T2323] do_syscall_64+0xcd/0x260 [ 2216.315192][ T2323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2216.321074][ T2323] RIP: 0033:0x7ffb1298e969 [ 2216.325475][ T2323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2216.345071][ T2323] RSP: 002b:00007ffb137e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2216.353472][ T2323] RAX: ffffffffffffffda RBX: 00007ffb12bb6080 RCX: 00007ffb1298e969 [ 2216.361430][ T2323] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 2216.369385][ T2323] RBP: 00007ffb12a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 2216.377342][ T2323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2216.385299][ T2323] R13: 0000000000000001 R14: 00007ffb12bb6080 R15: 00007ffcc4f95928 [ 2216.393265][ T2323] [ 2216.396448][ T2323] Kernel Offset: disabled [ 2216.400751][ T2323] Rebooting in 86400 seconds..