last executing test programs: 10m25.863237715s ago: executing program 3 (id=53): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) socket$igmp6(0xa, 0x3, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000093c0)=@delchain={0x310, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x2e0, 0x2, [@TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x8}, @TCA_FLOWER_ACT={0x2d4, 0x3, [@m_connmark={0x2d0, 0x18, 0x0, 0x0, {{0xd}, {0x4}, {0x2a0, 0x6, "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"}, {0xc}, {0xc}}}]}]}}]}, 0x310}, 0x1, 0x0, 0x0, 0x4080}, 0xc810) recvmsg$can_raw(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) 10m24.716317888s ago: executing program 3 (id=60): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000036000000", 0xfe60) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 10m21.312381822s ago: executing program 3 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0xad4d2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$getflags(r3, 0x401) bind$ax25(r3, &(0x7f00000002c0)={{0x3, @default, 0x3}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)={0x33, 0x6, 0x0, {0x8001, 0x100000000000, 0xa, 0x2, '\x00]\x80\x00\x00\x00\x00\x00\x00\x00', 0x8}}, 0x33) syz_fuse_handle_req(r0, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 10m20.806237108s ago: executing program 3 (id=74): mkdirat(0xffffffffffffff9c, 0x0, 0x0) open(0x0, 0x14000, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x29) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file1\x00', 0x10) mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000200)=""/179, 0xb3) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 10m19.873860759s ago: executing program 3 (id=77): bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0xc221d000) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80000, 0x12d) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000001200000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r2, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x80000000, 0x63}}}}, ["", "", "", "", "", ""]}, 0x28}}, 0x24004014) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) 10m19.569513283s ago: executing program 3 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x78}}, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000180)="a87a302f05d22b60c2ee9dc5091b22103bea3fd15304547c4eabaf825e5c05d34e2ae01ce70400000000000000bcfa77440005bffe0593b381a1fa3a3d7d820b445d516df3915459485347bad7", 0x4d}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, r2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000100)=@buf={0x53, &(0x7f00000002c0)="e9af75a0613b6bc8ea3fde3803eeaa39b91bd33f08da4af28f3c9b04537569490e0463d44a7e2a708b5bcd90f72b284a2f64946edb9386151c81268120d4b58b967f656054a2aca3682f6c300ec94c5e99e46a"}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000020000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000003000900"/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000008510000006000000660800000000000018000000000000000000000000000000950000000000000018240000", @ANYRES32=r2, @ANYBLOB="0000004001f0ffff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 10m19.194548459s ago: executing program 32 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x78}}, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000180)="a87a302f05d22b60c2ee9dc5091b22103bea3fd15304547c4eabaf825e5c05d34e2ae01ce70400000000000000bcfa77440005bffe0593b381a1fa3a3d7d820b445d516df3915459485347bad7", 0x4d}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, r2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000100)=@buf={0x53, &(0x7f00000002c0)="e9af75a0613b6bc8ea3fde3803eeaa39b91bd33f08da4af28f3c9b04537569490e0463d44a7e2a708b5bcd90f72b284a2f64946edb9386151c81268120d4b58b967f656054a2aca3682f6c300ec94c5e99e46a"}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000020000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000003000900"/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000008510000006000000660800000000000018000000000000000000000000000000950000000000000018240000", @ANYRES32=r2, @ANYBLOB="0000004001f0ffff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 10m9.724271305s ago: executing program 4 (id=103): r0 = syz_usb_connect$uac1(0x6, 0xf7, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0xac, 0x80, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x4}, [@extension_unit={0xd, 0x24, 0x8, 0x6, 0xffff, 0x1, "54c7c7297cc3"}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x6}, @feature_unit={0xb, 0x24, 0x6, 0x1, 0x1, 0x2, [0xf, 0x5], 0xd2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xb, 0x1, 0x8, "adc4ba5d223f"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x2, 0x2, 0x9, "e40921bb93"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7, 0x0, 0x24, "97"}, @as_header={0x7, 0x24, 0x1, 0x2c, 0xff, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x26, 0x8, 0x1, {0x7, 0x25, 0x1, 0x1, 0x5, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xfa, 0x3, 0x3, 0x9, "03f32b67"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x12, 0x1002}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x9, 0x3, 0x7b, 0xf, '6'}, @as_header={0x7, 0x24, 0x1, 0x29, 0x3, 0x4}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x1, 0x7, 0x8, "ee0320", 'Z'}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xb, 0x1, 0x2, 0xf9, "a663", '>i'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x0, 0x7, {0x7, 0x25, 0x1, 0x0, 0x4, 0x1ff}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x4, 0xc, 0x7, 0x20, 0x31}, 0x3e, &(0x7f0000000200)={0x5, 0xf, 0x3e, 0x3, [@generic={0x1b, 0x10, 0xb, "59852567478faaccb511e70047064510da6ee89a8208643f"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "9d9c37aa92789fa4cdce4e73d56a37e9"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x0, 0x81, 0x6}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44d}}, {0x78, &(0x7f0000000280)=@string={0x78, 0x3, "048c6871f0625f471880474a8ef26a2d50d6b868ced67865e7b0b1cda4bafb27f5809246cc497b9dc7ae3f22d22a140ab5ecee9c63e72d3e00ed11402d282a6f8bbf2fa7c505be710e917d2dcb2957126f7821b4efcb09d13e507bd6fcd6dd2570888e7c2df4e35a931299a55463bb45dbed269c6bb6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41b}}]}) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)={0xfb08d25f04980523, 0x23, 0xbd, {0xbd, 0x24, "6fdf71f5a0e1231906821c3100b77212d994a796978210554e27749fc07a90f065c74003b57386ecfa1d373c79291ed96e96920de51098d5204f43daa928cce5df2919fb297b49155eac79a8531beee5b90dfae0c68751881053cfc05d6387aca391eadbd0c37d55ea483e5ef9afed933303fdf9269e07f43d09677b100e02fc7db28563fd5ad19315bda99309e1cae4df20a98320d29286859934b800db0371e5f294e9aa163b0d2b92a65de8030b2528479218fde0542fafdaf4"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}, &(0x7f00000004c0)={0x0, 0xf, 0x1a, {0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x32, 0x0, 0x1, 0xff7f}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x7, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xc, 0x1, 0xfffe}]}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb3, 0x80, 0x8, 0xfc, "a25965ad", "675f411e"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x18, 0x2, 0x81, 0x5, 0x2, 0xc4}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000600)={0x0, 0x10, 0xea, "426198b27fc9bf76799585d5ee037d44c034a879feae1fb0def8fa8d8922606e2eb2c1f31a4f7c5714470c57216efd806336d2f7891c3a2cd17e2d7dbde12db34a322b5268822bd5463a5bd4337af946c8ce3a2bf3ec7cc87fdbdb619ee5e5f836b1abfaced40dc85c120cf34a401c0fcb829a092cf88709faf6d808285e368ba05e017b36da35210ef9bcd8095791eef72020eb46a72427a7fe52c09e2dcd61fd535555c625f2855003e52ca0f53ebbb9138850b130be161edde3ed13a99feaac6bf2658182fbd5fdd54a3d1813c1f3c73d963648c8b5f20a019a100e434d67bb65d5a5e09b3c5efbab"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x72}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x4}, &(0x7f0000000800)={0x40, 0x7, 0x2}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x1e}, &(0x7f0000000880)={0x40, 0xb, 0x2, "0104"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xc5da}, &(0x7f0000000900)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000940)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000980)={0x40, 0x19, 0x2, "2911"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0xffff}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0xfd}, &(0x7f0000000a40)={0x40, 0x1e, 0x1}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0xff}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x730c1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @private1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 10m7.824872327s ago: executing program 4 (id=110): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000a00)="e8700e444d50a969ff67347cff6127e6a1d198ead1cf8722a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d3008ca325556f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d28fc073eb4070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad09d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11482253f44137ac03e8b494dede", 0xdb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000000}], 0x1, 0x44800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="bfba07bc18900c13ff9828e3741ea60045afbb617a3d8e38f4c22a62250063a1e5aa45fbe8e7499372bb887df98f3d300770", 0x32) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net\x00') getdents(r4, &(0x7f00000001c0)=""/40, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000840)={0x5, r5, 'id0\x00'}) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000008c0)=@newae={0x108, 0x1e, 0x400, 0x70bd2a, 0x25dfdbfc, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d7, 0xa, 0x6c}, @in=@private=0xa010101, 0x9, 0x3507}, [@address_filter={0x28, 0x1a, {@in6=@local, @in6=@private1, 0xb8e803bbdd8181c4, 0x0, 0x1}}, @srcaddr={0x14, 0xd, @in=@rand_addr=0x64010100}, @algo_comp={0x8c, 0x3, {{'lzjh\x00'}, 0x220, "63cbe8228b0bb6c584cd730d9414556b95be33552ec09daf3fb8f3300aa49a2a572f99c38f65630752aed1b6ecff3abd3560fa5dc13ef2d64dc9d285beb586c06cbf7474"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r6, 0x400, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x40000) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000500)=""/145, 0x91) prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, 0x0, 0x0) mlockall(0x3) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r10 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="6a0ad4ff020000007110690003000000950000000000ff00683e513a5d3f23e6170c5cc431bc4eb1a9fc482095"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r10, 0x1e, &(0x7f0000000000)=[r10], 0x1) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYRESOCT=r3, @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10m6.35770835s ago: executing program 4 (id=113): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000), 0x10) socket$packet(0x11, 0x2, 0x300) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') memfd_create(0x0, 0x0) r1 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) 10m4.925812338s ago: executing program 4 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000003c0)='rT', 0x34000}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00000000000000040000000000006e8576a4b1b48d3b7704000004000000000000d810183f4f36eefdea66c6f857ff9f912d5e4651a3a1241102842a7450385f71cbf895497c8681158ff035a6cc2f72b71e44b263adab253d49af998ae501768bc2018f83c2060790c092d08fda9ec61c296c0ed61fd8a9ca08721bd941d056e9f3deb53f36a41e97a7cdc182f344238ae8eed70c245e17fd9969c1635b04b4165f8193", @ANYRES32=0x0], 0x30}], 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000240)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002"], 0xc4}}, 0x4008800) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 10m4.80115647s ago: executing program 4 (id=118): io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) accept4(r0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1, @ANYRES16=r3], 0x4c}}, 0x40000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 10m4.384472391s ago: executing program 4 (id=121): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) r1 = gettid() writev(r0, &(0x7f0000001600)=[{&(0x7f0000001380)="fd3089dc", 0x4}], 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 10m3.168524453s ago: executing program 33 (id=121): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) r1 = gettid() writev(r0, &(0x7f0000001600)=[{&(0x7f0000001380)="fd3089dc", 0x4}], 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m45.162134564s ago: executing program 0 (id=1763): r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffd33) read(r0, &(0x7f0000000280)=""/4083, 0xff3) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000080)={0x9, {0x4, 0x3, 0xc000, 0x401}, {0x0, 0x2, 0x26, 0x1000}, {0xfffffffa, 0x80}}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket(0x2c, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x20040080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xec6) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0xffffffffffffff39, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioperm(0x2, 0x7, 0x13) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/157, 0x9d}], 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x282202, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000001040)={0x1, 0x0, [{0x4b564d01, 0x0, 0x8}]}) mq_timedreceive(r6, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) 1m45.03379944s ago: executing program 0 (id=1764): socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x8000000000000001, 0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) 1m43.577440047s ago: executing program 0 (id=1772): syz_open_dev$loop(0x0, 0x3, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x2, "1cb6e77a7f06123becf11d8c2fe6345c22267d00691883ecf2a60c6444a1e4ec", 0x32314752}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) bind$bt_hci(0xffffffffffffffff, &(0x7f00000003c0)={0x1f, 0xffffffffffffffff, 0x5}, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket(0x1e, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88882, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) rename(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') getsockopt$llc_int(r2, 0x10c, 0x3, 0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x68040200) mmap(&(0x7f0000168000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket(0x2, 0x80805, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, 0x0, &(0x7f00000000c0)) (async) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, 0x0, &(0x7f00000000c0)) 1m43.390483425s ago: executing program 0 (id=1774): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x184) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x1, @loopback, 0x4}], 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x41) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x9, 0x8, 0xa}]}, 0x10) r2 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20) 1m43.201195675s ago: executing program 0 (id=1777): socket$netlink(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x100, 0x12345}) r7 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x1, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x47bc, 0x0, 0x21, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000009ec0)=[{{&(0x7f0000005040)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000005840)=[{&(0x7f00000050c0)="80b61cb2b548dc9b7e12727c60b058be1978be05a25bcafc076a5eba1d1795d0acfd12abbedd3af9d7332eaa6bfbbe5a6880854fdd7d433a25e2d3fdd1da330e846ce05796e1fd055728cbe011c262e28072411d06c92a00f6d295b42c95ba6e0e3b86ef5ffd4f96c2c4211b987194c2f6da81fbac8ca7e941e7823e9522b24ae8ac33f73cceeb2c3c0778d48203f9b69866db63990ee6ad9e13d1f509f773876a5c4ef3fea07250002339768b86355d9f99a7b5a4061d4cea2e90ee1655442b1f4cb91eb20f3e", 0xc7}, {&(0x7f00000051c0)="aeaec06088087df869d96afc60c628730b1ceba57ff8fece6291aedf802b30d400a85abafc4597e817cae4a34d719bf5dac0f2e597d5a7de427c4b22f53b12b191ecbd081e997b6d617ed409a1bb77bcd6818bd9509a1c5fc9fdd421dcc3f2f9f2c1a1654c133a95dc20209e3937b8e6a9a64ae9ca0eace05e1e91434acb26682cccce3ee5ace8cfe9bbe7bcc7d41678ada79f468d3b7b8f764212073d3846c45436913853d68c71febb", 0xaa}, {&(0x7f0000005280)="ba298a7b40e71e1f34ed26df26d8f4c934a63e52dc8e66a648c8e115e6bda9f3a052b7d90f6da65809509b97b936324d0e8f4894099aaa0ac321a7784e81a1d0acd026b32ebea2bec961c55511d0b7248050aeb6276a6e77d684e6f493411e2d3735ec4a10be0d3ce92e03dd78fb867e3ae85e0123871d3322da5ea33beb5526e5029c2009b348417564e1a170045b8b29babc525850dcfbb80e64d68642b1296e2039f4951a3fb020605571111e8ee9df6ade392a", 0xb5}, {&(0x7f0000005340)="d4178055907384d69b6a1704f5bd7cfdb3129332867576135a658851bacd96416e3d32823155e52f0d7292eac1b99b06656204829e04c35845e788f40e57f705a7b43994199ddd0444a3a57e724d260900d39e1cbc9965428ded5834e73ca57987b47376bda31c2eee16793b23b6c1752ab5a838acc8bbae4bc91d97ead2d088d87c91", 0x83}, {&(0x7f0000005400)="613244e025fdc19f551919fea797d84bd1389270f1414c9f5264b4a3e2c0019d78a16667d2ec4b4a1cb96083b7dd31622d4a693faec1cd14b8c3d4500a667786e2341d4eb9540b1afba49d7e2952a1dc5ea527083c13ab8fe9a5e00e0c96457722a776584baa68ad94081a04c882889680d8ae18cee8b4f6a3472d19c92edb0e7e5411", 0x83}, {&(0x7f00000054c0)="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", 0xfb}, {&(0x7f00000055c0)="63dfa7c2328d7631f6422a628db93d705498834103a02de047b5fd5896d8b3a3907473a7f12e26763d9a6371b5eda36aa29899209b1d7a4d2206f17f7cb9417bb3999ae77af894d644d6a1e59085e9ae3be708dc6c7daaa25b0daaee10150a0e428b249cd54d4cd8c93735b36f2d0282c551cc151174f158ea44e7ed30fb5ae74103ffa56901d1617c3d69e3c1d5774eb8851c2f3606c03efc0b", 0x9a}, {&(0x7f0000005680)="043c1f87a7a9b403f4ff44a7bafd26638e79ba52d36ecfe4463cc55141acb62454c2c0dfde653d281b1a2a7a45675689a196bab80290fffc453da4288747fedb18d1e963a46243d03ebd6edccfc3a57c3f7a678f080a25b10355e96665badf9e010bca125abd319085ee44de2abef1f12ef7bb5b30f45f8507de80976dc90c96aa07f6c45fb37ee6a11f5733e8925bfebde1efb73b045c4dd23d320d831186192c45ee150b452d28b5", 0xa9}, {&(0x7f0000005740)="aa9d71582bd21063678f3e2ea7125e0520e5203aa2d85ea95fb7872fee2123b45f7c9d9f178575cda13bde5e6ae97636e061f89c1d7d42cb09f13180fac07107b898320e72ba5e67e9cdd8daead596e4d3e5106290d73458396dc5c1580c3d756646eb48a042d286a78044ee478aaf04e415cfc35d0210b9d1a474830aae505759429a9e79ac0406e94001ab8515b88f9aaef7e64f650d7fef34ef0b01ad3078f32c079855210745f19e566e76c9bad29ef0c430de5c6799b873c8ad04ded9f1005b218be5a5c5788d0dad9611c787e3", 0xd0}], 0x9, &(0x7f00000059c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r6, r6, r0, 0xffffffffffffffff, r3, r10]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r1, r11, r2, r5, r1, 0xffffffffffffffff, r11, r7]}}], 0xa0, 0x40}}, {{&(0x7f0000005a80)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000005ec0)=[{&(0x7f0000005b00)="db99a664af3b55643ddf070a531fae34dc63af1e5b72f087f994455d86428f21212165e56bafc9aa2571766a3b1a1de16ed68ca9aa865c47b402516b0db6d057417250ed9d97ff4ab6eeaa22206c432a2e9d2b21935343703d178d146a9040bf6151d58740ffefe3cec73a52a6f3186eaae871d4e845c8648faec7c7bdf46e86c87c269989a1c07bb15634473235a27b09acd054b766b0aae669522d7255e65057c8d7d6df6995d813cc66db08e100a492f5570061e0c30208b61082d6e3774da7fa502f3395e9d51ec0558a9f89b155ba5280de7c0b62be3921895d3755f922", 0xe0}, {&(0x7f0000005c00)="e4df76bbde69cadd7b41b6df1c63c7f746f995a2548fb6927a93cc48d8d68a652d73645ddfb3ed62d756dd86db4774521a2c5d3f343d2fdf632cde0554fa55f1bcccf183b80fdc0e4b7345d0de319bad09468c48407169a68e0839752ecc2888a382e733435d830a7daa722adaf5", 0x6e}, {&(0x7f0000005c80)="40acec77eb06622bcf497e957f8fc70e8c2c08f98bdcacde7694f506f4525cff490ca4c8ec6ff6bec4806b2a9ba015128f10a397cd69607fda3346299bb1bd70c69525a1a2c2f0865e17742a9be411fae10661f78d5e628a435fa5d4bd4ecaa71db0d856f280521f519e2c3fb6ae576cd9a44bbd6a53d565d9d73626d205a69384c4d0092904f9ee0f9c4f911d1cd866946580c457ce61d0d1cd4e5b105bb4fd8ee2f3a2715fc35ceb0e137c3af66315b1ee61e3fecca12e519ea1bc8185790bcfbdd3185028bc272baa871f8a827cd9723c46086458cd96e3", 0xd9}, {&(0x7f0000005d80)="d99d33bcf295a1bffbdc26dedb2a9b18e644a537aaedeb86dfbef5db81bf08baa25c457e8998e04e074415b626295305749cffac1496102957f311b54b7e7e5af92eae22807cb3018dd13a322105b517285a37c8ae12b6ca3963d932d8e161d900284ac099ec57579a1ed46d36aa8a889bec9f5b07c6e0dc8f4ce411f2a242a2c7c706a44e24779f0f1b72cc1a841e072593d60ba70d93a61d2dd2f912690dd62828833fb1a209db6c321b93", 0xac}, {&(0x7f0000005e40)="fea2f99f2f35453f82605d4c2b23b118583ded7190cd450f672ea9fcd325b71da523e731936723bb066ed73acc3decb2a57291f6c4f574f16a990f4e7711c8ec49b7d1b5aca0b892f1d8a6b25bb0dd0041720a60f9e5d4fa802aeeb605ec", 0x5e}], 0x5, &(0x7f0000005f80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18, 0x5}}, {{&(0x7f0000005fc0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000006500)=[{&(0x7f0000006040)="78943b691c6c93ad049a7ac6b72c0954ca4e5936563d9351d278afeaeb7b130435c2de9b1dae78f1e4e7b2d6647e54f7522733e0f1e26b4d102e0289cbcca7cc30b4dba49c7fe06184802498c6e007f33ecbe3f178b35a7037c1328fd592d0561d027cbbfae860108b135982921f174bd6801614eb96797d94a8773e3b124f5439d644cdb2f5c6a071f9b0606965c55be6e24451e3ab4398dbb33d4fe852972f3c9dc590334032cb8cdbf4ee8f4f443f7aae86c1f68b6b6a2c6954c9fed06941325cbd6f75274f47eebf4f5d653a7171c2bbf6d295c1f8ff6e1d5e4a70f55f6699514f8bbe87d2", 0xe7}, {&(0x7f0000006140)="da0f4611f5264fe6694e354476a83780f543f33c8d2e304047dea08b2749861865bd135975b6ffc9bcf89148161bcd8e1df7a02969505d2fa726cd39e0c0feac16e3a6dd11b5c4309f0479f8d8140acb2b570d0f6c407d32e629bb72a17307b28a47085565881b37f9f05bc2a83467f91d2444db76171d95bff4a7c431d9cb30f0e1b1560f8357abd4b7ed1bee1627b46e914a4131ce1610e3f046c378da5795d1c2fed4ffa6acd4f4193be89f51280de64fbb712ca538752f2862d54d853ba37b43f336770ecf4bb8385c4ec451d2b16ecafa365c", 0xd5}, {&(0x7f0000006240)="db59ba09f578405492d709af72721d9f8ed902cf6fad4591b8ee8c9a7fb1f3221843feb8721058ac0bcfdb3e3a6fcdc7fb4c5fe33ff0e05cbc0ba2ad34b02cbebda41a7230284da912eb08e9b17e98c9509555b25313933eea1a6ab41108a7d86f6e534225175d3f987ef186fe63d0871d5d2bb916a53e59f498f6d98a86c04f09f76c0eb31e13eba8b6f6db5daebbbaa520b1633b38534b", 0x98}, {&(0x7f0000006300)}, {&(0x7f0000006340)="1c57a1155def70accee1c0d4514d2f416677cc15323b1604517a1bdb5cc55a44463547f165660dd3fdda8ad2109f3884f549f0d4d2b1118809591e9c8fa5a12f5b887890991b4924d14ca5ac30c3656a711b67a7dcbc4685476e3250d5c48d95114b07b220bc5e4f642c3401ea11823258fcacc7ef33878920b893cdea5804ac49626c41cec86fe1a7f5f2225452f665933774fcee41514ec395fcf322726d770c92582f8c92aecbccd54a4b5be7ecaf5eb380b42f85dc5c91a27310bc722be4da5639c5bda4f942d3e29b4f54db25d4c49dab042f4b429434bb8a097351", 0xde}, {&(0x7f0000006440)="2013dce5fef44e7a19683aa9ebffda6c2a9d3f3be2b6ea9f092f9bf383098def029846abd8adc251b809cd6d76a13ca7d94f335d730a3d3bebd961feba9e8c710d9d994f13fb15b0675ec2b86e7b1f75e63ac0e93e7a189e283297e27cdfb6b7dc73ac467325183b94a126f2f52ebd675578d353424fb01def71ea88a6db82ff30100e6c0e9511b6374fe4a7e548e440e503f4ce0fd38603d2bd7f421ce098423becf28b680ede1ef27b91a2e9ffb1803e7ca7296d", 0xb5}], 0x6, &(0x7f0000006580)=[@cred={{0x1c}}], 0x20, 0x80}}, {{0x0, 0x0, &(0x7f00000076c0)=[{&(0x7f00000065c0)="85bb1f928b386779d5003965d6d24673141483aeb26cdf4efe9d1459da38e3f4c8e6bbf54015b8baaff248d87eab", 0x2e}, {&(0x7f0000006600)="e27c2112a60eb63efd364ae1a0ec065b823683ef5dd7b8dfc00df78bd6ded810353100f8cef9666cbd3e09cbcbfa3d6440", 0x31}, {&(0x7f0000006640)="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", 0x1000}, {&(0x7f0000007640)="b7fae466e932fe1fcf449b0cf9b92f7a0503003d0e60ed21a6ad8b474b2287ad3af189956297db1b8424214d56999f8f24ddc91d543832703626ac067d57fba9566c1219f9f25f967f1614c8", 0x4c}], 0x4, &(0x7f0000009740)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r11, r2]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r6, r7, 0xffffffffffffffff, r2, r10, r2, r5]}}, @cred={{0x1c}}], 0xb0, 0x4000}}, {{&(0x7f0000009800)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000009c40)=[{&(0x7f0000009880)="ace6e52934bdcc6fc9169790f3eac43970540a05eea95cdd56b1f0bb6d27c0cf694ba1b778f9d08559", 0x29}, {&(0x7f00000098c0)="0ffae6fee796f53251ce42f8c12929bab227688f", 0x14}, {&(0x7f0000009900)="0f211f7183e4274b2a47b171d7fc09c39ad4bbd2ec0a5f1d5ff28db774f4dedbe253c65118ebfad0ad3be037b8dc1a4698f4b1a4ec169ff05d7324afc63fa37bcbd90102df74221a8a2ea9e451775ae9f745e6c1fe44111bc6de4c7b519c8292b24ab51741d70cce13cdabfea9403636be7c08e60477c60f3161bb4378403819313e44f298b6f61c02124da020d419a9330d9a108ef56be5d133882e8f86a7d511df31e306fd2fe6e248296cc95a5dc0388f0f58b93f824f1b452e8201608142fed4e8ef459463", 0xc7}, {&(0x7f0000009a00)="a8c8ce181848e99a099c9f324a4d99a937ab7a65765888a0d8841659e9f2f3e6aa45e62a4603f394e988abdbf40d348ca299d6032acf72620ae5232e8534d61a4ccbb0f9165bdc7abfa5e2fb6cff58c78b42929b120db77d9a5480f10e49fb35aa65e2b5476a1e5d21dfbbdc0d83ca522c75b4d90aa20724f6baa996ac7acd0c01c18b14b0aae8d31cdbfe72d83fc8ed98061a656202c05f160d5d6ed28b63caadc901a42d27e2df159ac19f36a0e6de17b7c6ba3cfb15c171dea85609c465473a64f507053333564d9fa111f9eeb1b985afd221b1a5e937d0ff3ccc14e74229ba98", 0xe2}, {&(0x7f0000009b00)="22f7640d57931dc35f8c8eacc2a7b261dfe3b8aa5520a9a19f6f52c4b58aa18cbc86b45e3ff93ff0c81223b75a5ac911345864c5672c697e58b479e225b4c15277bf4e539d818c050b6f5932ada6fd0c6801325436ac64762326ed0e7e8764d0c6d00c38b75350f3b8dbe886757796de408f9a472e6ef892fcf3438bc5b3e7a518fc60da77ab31e1cab623f67acf2e57fee3182ea6399b162192c4392a5d4bce3df3d667ef7cd2c0672df5759121addcc0cb0744a0bf", 0xb6}, {&(0x7f0000009bc0)="877a", 0x2}, {&(0x7f0000009c00)='#(', 0x2}], 0x7, 0x0, 0x0, 0x80}}, {{&(0x7f0000009cc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000009e80)=[{&(0x7f0000009d40)="efc6665ef54746663789f701a39983d00c35592d14c42c841d5b9ed6272d0ba8ead0f8ce444de8dac68ea50b35a911696dad7c4f2ea0ebd72c388c5602dde9205bec9eaecce7b9d3002b953df5c3bbbdfbcba7f7f6f05cf2da5fc3d72e74734442f274535c974e4f8b3da871ab5b976356f131599ab173e85498c5fb0703bd44f8118a0e752fb49169556f0fdf08a6ce9ab9fc7d4cb7a0be9a84b0548d90dec8da9937e761b8452ca52bef062a2a3f2db9d4e5f0d09424d5b16168dca415324a93cca1d9812ea84aad345e0f2e871a41a0febb8a", 0xd4}, {&(0x7f0000009e40)="968279c1258a37", 0x7}], 0x2, 0x0, 0x0, 0x1}}], 0x6, 0x0) recvmmsg(r10, &(0x7f0000004e80)=[{{&(0x7f00000005c0)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f00000001c0)=""/29, 0x1d}], 0x2, &(0x7f0000000440)=""/59, 0x3b}, 0x19}, {{&(0x7f0000000700)=@un=@abs, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000780)=""/165, 0xa5}, {&(0x7f0000000640)=""/61, 0x3d}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000840)=""/80, 0x50}, {&(0x7f0000000900)=""/150, 0x96}, {&(0x7f00000009c0)=""/104, 0x68}], 0x6, &(0x7f0000001b80)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002b80)=""/153, 0x99}, {&(0x7f0000002c40)=""/222, 0xde}, {&(0x7f0000000ac0)=""/62, 0x3e}, {&(0x7f0000002d40)=""/169, 0xa9}, {&(0x7f0000002e00)=""/165, 0xa5}, {&(0x7f0000002ec0)=""/79, 0x4f}], 0x6, &(0x7f0000002fc0)=""/255, 0xff}, 0x4}, {{&(0x7f00000030c0)=@rc, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/27, 0x1b}, {&(0x7f0000004140)=""/98, 0x62}], 0x3, &(0x7f0000004200)=""/150, 0x96}, 0x3}, {{&(0x7f00000042c0)=@sco={0x1f, @none}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000004340)=""/103, 0x67}], 0x1, &(0x7f0000004400)=""/76, 0x4c}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004480)=""/33, 0x21}, {&(0x7f00000044c0)=""/24, 0x18}, {&(0x7f0000004500)=""/141, 0x8d}, {&(0x7f00000045c0)=""/95, 0x5f}, {&(0x7f0000004640)=""/90, 0x5a}, {&(0x7f00000046c0)=""/101, 0x65}, {&(0x7f0000004740)=""/75, 0x4b}, {&(0x7f00000047c0)=""/237, 0xed}, {&(0x7f00000048c0)=""/31, 0x1f}], 0x9, &(0x7f00000049c0)=""/57, 0x39}, 0x10}, {{&(0x7f0000004a00)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004a80)=""/68, 0x44}, {&(0x7f0000004b00)=""/6, 0x6}, {&(0x7f0000004b40)=""/39, 0x27}, {&(0x7f0000004b80)=""/46, 0x2e}, {&(0x7f0000004bc0)=""/2, 0x2}, {&(0x7f0000004c00)=""/3, 0x3}, {&(0x7f0000004c40)=""/186, 0xba}, {&(0x7f0000004d00)=""/174, 0xae}], 0x8, &(0x7f0000004e40)}, 0x2}], 0x7, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xf0, 0x0, 0xb47, 0x9, 0x0, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206050000000000000000000000000005000100070000000900020073797a300000000012000300686173683a6e65742c706f7274000000050005008a00000005000400040000004165cd87eb434af9d16d0b79d94a7cdb9026e6d711"], 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r12, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000856) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) 1m42.31877304s ago: executing program 0 (id=1780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000600)={0x32}, 0x8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac14140000000000000000000300060000"], 0x50}}, 0x24044084) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, 0x0, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) r5 = socket$netlink(0x10, 0x3, 0x6) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) 1m41.606287811s ago: executing program 34 (id=1780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000600)={0x32}, 0x8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac14140000000000000000000300060000"], 0x50}}, 0x24044084) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, 0x0, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) r5 = socket$netlink(0x10, 0x3, 0x6) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) 40.169930014s ago: executing program 5 (id=2013): socket$igmp6(0xa, 0x3, 0x2) setuid(0xee01) tkill(0x0, 0x13) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000000)='hfsplus\x00', 0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) sched_setattr(r2, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x8, 0x8, 0x40, 0x5}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) r3 = openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r4 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x9) sendfile(r5, r4, 0x0, 0x7ffff000) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r6, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0xf000000, @loopback, 0xffffffff}, 0x1c) write$UHID_SET_REPORT_REPLY(r6, &(0x7f00000007c0)=ANY=[], 0xffe0) 39.175425689s ago: executing program 5 (id=2018): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080), 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r1, 0x851, 0x400000000000000) syz_usb_connect$uac1(0x1, 0x89, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x9, 0xa0, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x40}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x101, 0x4, 0x2, 0x9d5, 0x5c, 0xff}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x100, 0x1, 0x2, 0x15, 0x31, 0x34}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0x0, 0xfb, {0x7, 0x25, 0x1, 0x82, 0x4, 0x1a45}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x3, 0x81, {0x7, 0x25, 0x1, 0x0, 0x9, 0x8}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000080)={0xf97cff8c, 0x8}, 0x10) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) io_uring_setup(0x70ee, &(0x7f0000000000)={0x0, 0xd511, 0x2, 0x2, 0x165}) close(0x3) syz_open_dev$sg(0x0, 0xf9ba, 0x143882) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) close(0x3) listen(r2, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) io_uring_setup(0x6727, &(0x7f0000000180)={0x0, 0x555d, 0x2000, 0x1, 0x23f}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r7, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa54ebb4c33b36d59b8c3d6644c166867f5bd870a8d3398948f333d0650f22631fbf709f105d5343dbed60ee0190646c049af25e0257c91f1a8b56deb8e8b985605fbf1ed9f872f0503707636731b707f6f8d834b09be07733beb98d90df753981b2d7f10ecc8a09000000"], 0x28}}, 0x0) 38.604329995s ago: executing program 2 (id=2024): socket$nl_netfilter(0x10, 0x3, 0xc) setuid(0xee01) tkill(0x0, 0x13) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x0, 0xb, @loopback}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x10000801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) socket$netlink(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x48) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f0000000200)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r2}, 0x38) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000280)={0x0, 0x800, 0x0, 0x0, 0x4, "0062ba7d820000001652bdc5fcbdc8dace6b04"}) syz_open_pts(r5, 0x900) socket$phonet(0x23, 0x2, 0x1) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 37.115424797s ago: executing program 5 (id=2027): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0xd, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x92}}]}, &(0x7f0000000180)='GPL\x00', 0x9}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x80047437, &(0x7f0000000140)=0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000140)=0xb, 0x4) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002200)={0x2020}, 0xffffffac) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d11, &(0x7f0000000200)) sendto$unix(r2, &(0x7f0000000240)="0014", 0x2, 0x4040081, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000018000780050003001f0000000cb90c8008000140ffffffff05000500020000000500010006000000"], 0x64}}, 0x0) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) close(0x3) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000001c0)=0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 37.06805634s ago: executing program 1 (id=2028): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0x18, 0x10, 0x0, 0x7, 0x80ff, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x38}}, 0x0) 37.023913263s ago: executing program 2 (id=2029): r0 = gettid() socketpair(0x23, 0x2, 0x0, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x2000) 36.892674713s ago: executing program 1 (id=2030): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x52, 0x4007, @fd=r5, 0x6, 0x0, 0x0, 0x2, 0x1}) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000040)={0x5, 0x432, 0xa00, 0x8, 0xd, "a4c42ba02a0b3b4335931f2d038553da933b3a"}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0xfffffffc, 0x0, 0xcd7e], [], 0x0, [0x1]}, 0x0, 0x2000}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x3, "060100"}]}, 0x54}}, 0x20000080) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r5) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)={0x48, r8, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00'}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x11}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40400c1) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d800800", @ANYRES32], 0x24}], 0x1}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={@none}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0xf8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc8, 0x2, {{}, [@TCA_NETEM_LOSS={0x8c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x1b, 0x2, {0x101, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x80000001, 0x3, 0x1, 0x1ff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x3, 0x3, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ff, 0x3, 0xfffeffff, 0xc5, 0x401}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffff, 0xb1, 0x7fffffff, 0xde9, 0x42}}, @NETEM_LOSS_GI={0x18, 0x1, {0xc, 0x4, 0x1, 0x0, 0x1000}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xf8}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf70}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) 36.009560309s ago: executing program 2 (id=2032): r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) 35.965840256s ago: executing program 5 (id=2033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect$uac1(0x0, 0x99, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x826e, 0x40, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r2, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000002780)=""/254, 0xfe, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000b40)=""/263, 0x107, 0x0, 0x3, 0x2}}, 0x48) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x9047, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) mount(&(0x7f0000000040)=@filename='\x00', 0x0, &(0x7f0000000040)='ubifs\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) 35.958924163s ago: executing program 1 (id=2034): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000002c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c156", 0x7b}], 0x3, &(0x7f0000000380), 0x0, 0xc4885}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 35.560934859s ago: executing program 2 (id=2036): r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, 0xffffffffffffffff, 0x0, 0xa00369a4}, 0x38) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r5}, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2}, [@offload={0xc, 0x1c, {r5, 0x4}}]}, 0xc4}}, 0x4000000) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x8000, 0x20) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) io_uring_enter(r0, 0x2564, 0x4bf4, 0x1, &(0x7f0000000040)={[0x65f]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r7 = socket$kcm(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8936, &(0x7f0000000000)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x3], 0x0, 0x0, 0x1}}, 0x40) 35.114831809s ago: executing program 1 (id=2038): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x5000000, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 35.007973372s ago: executing program 7 (id=2039): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x37, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@exit, @alu={0x4, 0x0, 0xd, 0x8, 0x5, 0x18, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf2bd}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @ringbuf_query, @ringbuf_query, @alu={0x4, 0x1, 0xc, 0x0, 0xa, 0xfffffffffffffff4, 0xffffffffffffffff}, @generic={0x1, 0x1, 0x0, 0x2, 0xfff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @exit, @generic={0x1, 0xa, 0x6, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0xaf}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @alu={0x4, 0x1, 0x8, 0x0, 0xa, 0xfffffffffffffffe, 0x8}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000), 0x4) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="89", 0x1) sendmsg$kcm(r4, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00008b", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000380)="ca091cc2e088", 0xffe3) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000100)=[0x3, 0x5], 0x0, 0x2}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 34.823721093s ago: executing program 2 (id=2040): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) inotify_init() r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80800) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 34.737678629s ago: executing program 1 (id=2041): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYRES16=0x0], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0xfffffffffffffff3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r1}, 0x18) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f000000d880), 0x80000, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x33, 0x22, 0xe, 0x1b, 0xb, 0x81, 0x3, 0xb3, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000001c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000000)="b1ed367b4d9c04beabd988acc4ba625eaf5783ca51a7740f88667271673255", 0x1f}, {&(0x7f0000000400)="4e19454dbf5297628a087da3d148eec5e6a1275d8d1413e648af81a4c0526ff2ddf93c738d61e7dd440424ae7149fa8123365390220468f92f0d2baf9863532106e533147378542ccab2b3d5f20a59753bd8ec69d780f5edab4896c87901f0affd7c6a522b6f63d2b7d48c341ed6f1fcf1c1121a8671456ab135035400108dc7503d76cadd93e986a764aa63945bdd156cdf29", 0x93}, {&(0x7f00000004c0)="1ec5c280558f11b286e58cf9f7b21485388bd6a711a98f137522a8a0d02b649ab4e05a2e7008e0da8a8c11142f955bdd1e310b504927b588d9c64bb696ee0189f32fb6baa43eb26b385f241e64de2af3dcb3d838cdea70f0f75b5910c45927cd5e7f43fb2e3298eae469c7f39f52ae64a9e66875a4060a82cc9739a9c5693b081080377c1ea102d0dc3da73b0f4c438c8f33088b1114b746bb81", 0x9a}, {&(0x7f0000000580)="5baf8925263d26f1c6deaa41858f7ed6b93a0da2bb1cfaab32c45e420d0440d33b26a003041962ce6cd3089dc48a80964523ed7ab4f5c3912c1e0d6495214987f81a8c98a37573a160a408b822f52b60d9047be5563c3cce87d84b29834749a0f16ee75a42", 0x65}, {&(0x7f0000000600)="b7925127b21cd10503015e6c80c0c47cce352e7a6ef5b4921023ec485c28181388b4ee52d7f03bc1191075fd737a011a410670c5134a4c3adfaad3500651801000717780985b096a4461fe06510a634b023c3bf6eb8321294bd8dc55dbe6336f6b819d54d3eb5f3097953647cbe37aee33", 0x71}, {&(0x7f0000000680)="55df5306c7620511e974a543f46a2b9e89179ac38b47fe3ee030c2a87626e6fc55b44f245ea7473525b020e6a2346933f1fcc81369195b63add201e053248e01c450e0264bc8c373152c832c006ca6f29027498e928ebd028e0d97059fb5c2cd8465b1de235a36d3c3647668527e8eff428f5dbd1459026adda89a2212aa9e8adc5848bb83dd6c75156467ec67ea2b6d30687a5e146ac21325f5c3f463c1ecc6628a083adc84f64b18c9578df6d025dd77eb5f06be7f86bfff30b44d315ea6ea44980256478a56dfaea87d561a5293371650c1161872945af76bfbe3a55b4f8ced78859a18de7fc4c8d25ff3", 0xec}, {&(0x7f0000000780)="2082e47ad43dd110672b82f7ddfe7ff7c0fd74bc8b95314a17a2fa5383ce0e267afe690ee962a580371c39bdccf87c44f2ea40ad88c4143a2ef49bd5005be15f462073192e4e5283fb0d5d7e0b57922cc58c02c1213b3777dba6a90034793e09f7c9b8ef32d4af71aadc8bd18a3783383d2b3aecb2ca9a9e3e3a0b2c38077092ff75bf74fd22b0e969dc4e758b1f993a0f7ab9f4b86d9d7e28a7039a6001bceb23195a2e02f6908027910f0f99b1c62c3972713cb684b56ec72d87c330c86c5eb050e3", 0xc3}], 0x7, 0x0, 0x0, 0x8080}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000000, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r5, 0x407, 0x0) connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(r6, 0x5421, &(0x7f0000000240)=0x1) sendto$inet(r6, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0xfea8, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7bd}}, './file0\x00'}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregs(0xc, r7, 0xffffffffffffdcaf, &(0x7f0000000040)=""/45) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x22af) 34.590980225s ago: executing program 7 (id=2042): socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x8000000000000001, 0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) 34.249376543s ago: executing program 5 (id=2043): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0xffff, @private=0xa010100}, {0x0, @local}, 0x0, {0x2, 0x4e23, @multicast1}, 'wg1\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000fcffffff858000007a0011009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0b9e654d387dbe9abc8ac6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, 0x0, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xd, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x5, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xe0a42, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = io_uring_setup(0x5cbe, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r6, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006014}, 0x1) r7 = syz_io_uring_setup(0x3, &(0x7f0000000640)={0x0, 0xec28, 0x800, 0x1, 0x444, 0x0, r4}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 33.853809936s ago: executing program 5 (id=2044): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = timerfd_create(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRES32=r1, @ANYRESOCT=0x0]) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000000)=0x3) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0x0, 0x2}, 0x1}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0x1}, 0x2}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r5) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast}) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000300)=ANY=[@ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0xc, 0x7fff7ffc}]}) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r8 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0x0) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r9, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dsp(0xffffffffffffff9c, &(0x7f0000000740), 0x80000, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x97, &(0x7f00000003c0)=ANY=[@ANYBLOB="12011003020000082505a1a440000102030109028500020104e449e2ad0000011d0d00000a240600012000dd130605240005000d240f0103000000660004000806241a81002008240703e6410600072414050000041524120200a317a88b045e4f01a607c0ffcb7e392a0905810340000001010904010000020d00000904010102020d000009058202080009f805090503061edfd5c2f28f35199f256d67ac7dce75194c024f3454874603cbaa9b98e1133ac853c9943ea5f1934186be302a524040f891bd"], &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x140, 0x7, 0x81, 0x3, 0x40, 0x9}, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="050f1d00030710011e8401000a1003820000080807000710020a34d205"], 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41f}}]}) 33.853312849s ago: executing program 1 (id=2045): syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000d000109022400011b00000009040000022a3e740009058bff7f000013010905"], 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x1, 0x8, 0x3, 0xc31495af, {{0x7, 0x4, 0x2, 0x5, 0x1c, 0x67, 0x0, 0x7f, 0x4, 0x0, @multicast2, @local, {[@timestamp={0x44, 0x4, 0xf, 0x0, 0xb}, @noop]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000480)={@local, @empty}, &(0x7f00000004c0)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'geneve1\x00'}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x841}, 0x20008801) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x9, 0x5, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000004c0), 0x3f, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r3, &(0x7f0000000300), &(0x7f0000000200)=""/35}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$rose(0xffffffffffffffff, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x1, 0x2}]}}}}}}}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="0100fdffffff040000001300000008000300", @ANYRES32=r2, @ANYBLOB="06001200000000000600b500850100000400ffffffffff000014008100"], 0x50}, 0x1, 0x0, 0x0, 0x45}, 0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) 33.650154403s ago: executing program 7 (id=2046): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r0 = syz_io_uring_setup(0x1e10, 0x0, &(0x7f0000000100), &(0x7f0000000080)) futex(&(0x7f000000cffc), 0x100, 0x0, 0x0, &(0x7f0000000200)=0x2000000, 0x300) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d66642c7266646a8b3df745bb", @ANYRESHEX=r0, @ANYBLOB=',\x00']) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) writev(r2, &(0x7f00000014c0)=[{&(0x7f00000001c0)="e4384d01", 0x4}, {&(0x7f0000000440)="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", 0x1000}], 0x2) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) 31.945912779s ago: executing program 6 (id=2048): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x0, 0x411}}}, 0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000400)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4081}, 0x40) (fail_nth: 4) 31.677966702s ago: executing program 6 (id=2051): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) shutdown(r2, 0x1) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r3, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) (async, rerun: 64) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (rerun: 64) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) (async) getdents64(r6, &(0x7f00000133c0)=""/4090, 0xffa) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 31.633521119s ago: executing program 7 (id=2052): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x83) readlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=""/19, 0x13) readahead(r0, 0x7fffffff, 0x10000) 31.537944183s ago: executing program 7 (id=2053): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x12f0, 0x1148, 0x12, 0x60d, 0x0, 0x202, 0x1220, 0x2e8, 0x2e8, 0x1220, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @remote, [0xff, 0xffffffff], [0x0, 0x100000001], 'ip6gre0\x00', 'macsec0\x00', {}, {0xff}, 0x3b}, 0x0, 0x1100, 0x1148, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x2, 0x1, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0x3ff, {0xfffffffffffffff9}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1350) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r0, 0x0}]) 31.464930632s ago: executing program 6 (id=2054): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x400000000000003a, 0x4, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x9) 31.422278737s ago: executing program 7 (id=2055): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYRES16=0x0], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0xfffffffffffffff3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r1}, 0x18) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f000000d880), 0x80000, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x33, 0x22, 0xe, 0x1b, 0xb, 0x81, 0x3, 0xb3, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000001c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000000)="b1ed367b4d9c04beabd988acc4ba625eaf5783ca51a7740f88667271673255", 0x1f}, {&(0x7f0000000400)="4e19454dbf5297628a087da3d148eec5e6a1275d8d1413e648af81a4c0526ff2ddf93c738d61e7dd440424ae7149fa8123365390220468f92f0d2baf9863532106e533147378542ccab2b3d5f20a59753bd8ec69d780f5edab4896c87901f0affd7c6a522b6f63d2b7d48c341ed6f1fcf1c1121a8671456ab135035400108dc7503d76cadd93e986a764aa63945bdd156cdf29", 0x93}, {&(0x7f00000004c0)="1ec5c280558f11b286e58cf9f7b21485388bd6a711a98f137522a8a0d02b649ab4e05a2e7008e0da8a8c11142f955bdd1e310b504927b588d9c64bb696ee0189f32fb6baa43eb26b385f241e64de2af3dcb3d838cdea70f0f75b5910c45927cd5e7f43fb2e3298eae469c7f39f52ae64a9e66875a4060a82cc9739a9c5693b081080377c1ea102d0dc3da73b0f4c438c8f33088b1114b746bb81", 0x9a}, {&(0x7f0000000580)="5baf8925263d26f1c6deaa41858f7ed6b93a0da2bb1cfaab32c45e420d0440d33b26a003041962ce6cd3089dc48a80964523ed7ab4f5c3912c1e0d6495214987f81a8c98a37573a160a408b822f52b60d9047be5563c3cce87d84b29834749a0f16ee75a42", 0x65}, {&(0x7f0000000600)="b7925127b21cd10503015e6c80c0c47cce352e7a6ef5b4921023ec485c28181388b4ee52d7f03bc1191075fd737a011a410670c5134a4c3adfaad3500651801000717780985b096a4461fe06510a634b023c3bf6eb8321294bd8dc55dbe6336f6b819d54d3eb5f3097953647cbe37aee33", 0x71}, {&(0x7f0000000680)="55df5306c7620511e974a543f46a2b9e89179ac38b47fe3ee030c2a87626e6fc55b44f245ea7473525b020e6a2346933f1fcc81369195b63add201e053248e01c450e0264bc8c373152c832c006ca6f29027498e928ebd028e0d97059fb5c2cd8465b1de235a36d3c3647668527e8eff428f5dbd1459026adda89a2212aa9e8adc5848bb83dd6c75156467ec67ea2b6d30687a5e146ac21325f5c3f463c1ecc6628a083adc84f64b18c9578df6d025dd77eb5f06be7f86bfff30b44d315ea6ea44980256478a56dfaea87d561a5293371650c1161872945af76bfbe3a55b4f8ced78859a18de7fc4c8d25ff3", 0xec}, {&(0x7f0000000780)="2082e47ad43dd110672b82f7ddfe7ff7c0fd74bc8b95314a17a2fa5383ce0e267afe690ee962a580371c39bdccf87c44f2ea40ad88c4143a2ef49bd5005be15f462073192e4e5283fb0d5d7e0b57922cc58c02c1213b3777dba6a90034793e09f7c9b8ef32d4af71aadc8bd18a3783383d2b3aecb2ca9a9e3e3a0b2c38077092ff75bf74fd22b0e969dc4e758b1f993a0f7ab9f4b86d9d7e28a7039a6001bceb23195a2e02f6908027910f0f99b1c62c3972713cb684b56ec72d87c330c86c5eb050e3", 0xc3}], 0x7, 0x0, 0x0, 0x8080}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000000, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r5, 0x407, 0x0) connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(r6, 0x5421, &(0x7f0000000240)=0x1) sendto$inet(r6, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0xfea8, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7bd}}, './file0\x00'}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregs(0xc, r7, 0xffffffffffffdcaf, &(0x7f0000000040)=""/45) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x22af) 31.322704608s ago: executing program 2 (id=2056): socket$inet6(0xa, 0x200000000003, 0x87) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d763"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000280)={0x6, 0x5, 0x7, 0xff}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) finit_module(r5, 0x0, 0x3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='rxrpc_connect_call\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r10, 0xfff}, 0x8) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) dup(r8) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310300000000000000000900000008000600", @ANYRES32=r0, @ANYBLOB="08000300", @ANYRES64=r7], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x80) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[], 0x0) 31.277756111s ago: executing program 6 (id=2057): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) io_submit(0x0, 0x0, 0x0) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000640), 0x0) prlimit64(0x0, 0x1, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000ac0)={0x0, 0xd0}, &(0x7f0000000b00)=0x8) 0s ago: executing program 35 (id=2055): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYRES16=0x0], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0xfffffffffffffff3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r1}, 0x18) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f000000d880), 0x80000, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x33, 0x22, 0xe, 0x1b, 0xb, 0x81, 0x3, 0xb3, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000001c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000000)="b1ed367b4d9c04beabd988acc4ba625eaf5783ca51a7740f88667271673255", 0x1f}, {&(0x7f0000000400)="4e19454dbf5297628a087da3d148eec5e6a1275d8d1413e648af81a4c0526ff2ddf93c738d61e7dd440424ae7149fa8123365390220468f92f0d2baf9863532106e533147378542ccab2b3d5f20a59753bd8ec69d780f5edab4896c87901f0affd7c6a522b6f63d2b7d48c341ed6f1fcf1c1121a8671456ab135035400108dc7503d76cadd93e986a764aa63945bdd156cdf29", 0x93}, {&(0x7f00000004c0)="1ec5c280558f11b286e58cf9f7b21485388bd6a711a98f137522a8a0d02b649ab4e05a2e7008e0da8a8c11142f955bdd1e310b504927b588d9c64bb696ee0189f32fb6baa43eb26b385f241e64de2af3dcb3d838cdea70f0f75b5910c45927cd5e7f43fb2e3298eae469c7f39f52ae64a9e66875a4060a82cc9739a9c5693b081080377c1ea102d0dc3da73b0f4c438c8f33088b1114b746bb81", 0x9a}, {&(0x7f0000000580)="5baf8925263d26f1c6deaa41858f7ed6b93a0da2bb1cfaab32c45e420d0440d33b26a003041962ce6cd3089dc48a80964523ed7ab4f5c3912c1e0d6495214987f81a8c98a37573a160a408b822f52b60d9047be5563c3cce87d84b29834749a0f16ee75a42", 0x65}, {&(0x7f0000000600)="b7925127b21cd10503015e6c80c0c47cce352e7a6ef5b4921023ec485c28181388b4ee52d7f03bc1191075fd737a011a410670c5134a4c3adfaad3500651801000717780985b096a4461fe06510a634b023c3bf6eb8321294bd8dc55dbe6336f6b819d54d3eb5f3097953647cbe37aee33", 0x71}, {&(0x7f0000000680)="55df5306c7620511e974a543f46a2b9e89179ac38b47fe3ee030c2a87626e6fc55b44f245ea7473525b020e6a2346933f1fcc81369195b63add201e053248e01c450e0264bc8c373152c832c006ca6f29027498e928ebd028e0d97059fb5c2cd8465b1de235a36d3c3647668527e8eff428f5dbd1459026adda89a2212aa9e8adc5848bb83dd6c75156467ec67ea2b6d30687a5e146ac21325f5c3f463c1ecc6628a083adc84f64b18c9578df6d025dd77eb5f06be7f86bfff30b44d315ea6ea44980256478a56dfaea87d561a5293371650c1161872945af76bfbe3a55b4f8ced78859a18de7fc4c8d25ff3", 0xec}, {&(0x7f0000000780)="2082e47ad43dd110672b82f7ddfe7ff7c0fd74bc8b95314a17a2fa5383ce0e267afe690ee962a580371c39bdccf87c44f2ea40ad88c4143a2ef49bd5005be15f462073192e4e5283fb0d5d7e0b57922cc58c02c1213b3777dba6a90034793e09f7c9b8ef32d4af71aadc8bd18a3783383d2b3aecb2ca9a9e3e3a0b2c38077092ff75bf74fd22b0e969dc4e758b1f993a0f7ab9f4b86d9d7e28a7039a6001bceb23195a2e02f6908027910f0f99b1c62c3972713cb684b56ec72d87c330c86c5eb050e3", 0xc3}], 0x7, 0x0, 0x0, 0x8080}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000000, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r5, 0x407, 0x0) connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(r6, 0x5421, &(0x7f0000000240)=0x1) sendto$inet(r6, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0xfea8, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7bd}}, './file0\x00'}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregs(0xc, r7, 0xffffffffffffdcaf, &(0x7f0000000040)=""/45) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x22af) kernel console output (not intermixed with test programs): Œæ»ƒå¸”蚚幾캧ã¢ï–«ì•˜ê¹½â•œí‹»ã³ƒëœ§à ©éªèº‰ë ‰ì˜¶è¾µé’芓徂ãžîˆŠ [ 575.081091][T12058] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 575.095901][ T30] audit: type=1400 audit(1753416296.971:1227): avc: denied { read } for pid=12055 comm="syz.2.1554" laddr=fe80::cfa:68ff:fef2:1f8e lport=8 faddr=ff02::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 575.121082][ C0] vkms_vblank_simulate: vblank timer overrun [ 575.128934][T12070] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 575.209111][T12072] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1558'. [ 575.242380][ T5838] gspca_sunplus: reg_r err -110 [ 575.264386][T12074] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1559'. [ 575.298720][ T48] usbhid 7-1:1.0: can't add hid device: -71 [ 575.314231][ T48] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 575.328033][ T48] usb 7-1: USB disconnect, device number 48 [ 575.404874][T12079] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1561'. [ 575.419574][T12079] x_tables: ip_tables: udp match: only valid for protocol 17 [ 576.062417][ T30] audit: type=1400 audit(1753416297.611:1228): avc: denied { read } for pid=12080 comm="syz.1.1562" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 576.090686][ T30] audit: type=1400 audit(1753416297.611:1229): avc: denied { open } for pid=12080 comm="syz.1.1562" path="/292/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 576.114790][ T30] audit: type=1400 audit(1753416297.611:1230): avc: denied { ioctl } for pid=12080 comm="syz.1.1562" path="/292/file0/file0" dev="fuse" ino=64 ioctlcmd=0x935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 576.119769][T12086] netlink: 'syz.5.1563': attribute type 1 has an invalid length. [ 576.139346][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.163523][ T5838] usb 3-1: USB disconnect, device number 69 [ 576.288830][ T30] audit: type=1400 audit(1753416298.161:1231): avc: denied { unmount } for pid=6466 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 576.487409][T12101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1567'. [ 576.500639][T12101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1567'. [ 576.592301][ T48] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 576.647002][T12107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1570'. [ 576.707544][T12107] IPVS: persistence engine module ip_vs_pe_ not found [ 576.745504][ T48] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 576.755918][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.767525][ T48] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 576.777026][ T48] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 576.785262][ T48] usb 7-1: Manufacturer: syz [ 576.799768][ T48] usb 7-1: config 0 descriptor?? [ 576.913780][ T48] rc_core: IR keymap rc-hauppauge not found [ 576.920319][ T48] Registered IR keymap rc-empty [ 576.933241][ T48] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 576.954882][ T48] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input26 [ 577.011401][ C1] igorplugusb 7-1:0.0: Error: urb status = -32 [ 577.033399][ T48] usb 7-1: USB disconnect, device number 49 [ 577.536692][T12128] netlink: 'syz.5.1577': attribute type 1 has an invalid length. [ 577.891529][T12141] wg1 speed is unknown, defaulting to 1000 [ 577.911922][ T9] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 578.064029][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 578.075267][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 578.085695][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 578.094955][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.108975][T12131] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 578.127628][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 578.343337][ T48] usb 6-1: USB disconnect, device number 52 [ 578.744778][ T30] audit: type=1400 audit(1753416300.621:1232): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 579.382110][ T5887] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 579.572607][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 579.653508][ T5887] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 579.715947][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.766367][ T5887] usb 2-1: Product: syz [ 579.793447][ T5887] usb 2-1: Manufacturer: syz [ 579.830570][ T5887] usb 2-1: SerialNumber: syz [ 579.950510][ T5887] usb 2-1: config 0 descriptor?? [ 580.029801][ T5887] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 580.337982][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1589'. [ 581.024104][ T5887] gspca_ov534_9: reg_w failed -71 [ 581.885852][ T5887] gspca_ov534_9: Unknown sensor 0000 [ 581.885901][ T5887] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 581.911982][ T5887] usb 2-1: USB disconnect, device number 61 [ 582.022802][ T48] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 582.254627][ T5838] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 583.083515][ T48] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 583.265486][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 583.275257][ T5838] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 583.284929][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 583.294697][ T5838] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 583.304464][ T5838] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 583.313905][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.487347][ T48] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 583.499428][ T48] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 583.508644][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.535304][T12193] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 583.555366][ T48] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 583.567658][ T30] audit: type=1400 audit(1753416305.441:1233): avc: denied { map } for pid=12208 comm="syz.1.1603" path="socket:[79422]" dev="sockfs" ino=79422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 583.609401][ T5838] usb 6-1: config 0 descriptor?? [ 583.701801][T12211] trusted_key: encrypted_key: insufficient parameters specified [ 583.800476][ T30] audit: type=1400 audit(1753416305.471:1234): avc: denied { read } for pid=12208 comm="syz.1.1603" path="socket:[79422]" dev="sockfs" ino=79422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 585.111887][ T48] usb 7-1: USB disconnect, device number 50 [ 585.125910][ T5838] hdpvr 6-1:0.0: unexpected answer of status request, len -71 [ 585.134472][ T5838] hdpvr 6-1:0.0: device init failed [ 585.139850][ T5838] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 585.152874][ T5838] usb 6-1: USB disconnect, device number 53 [ 585.207425][T12217] IPVS: length: 202 != 8 [ 585.305086][T12222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1605'. [ 585.424647][T12222] vlan2: entered promiscuous mode [ 585.429967][T12222] bridge0: entered promiscuous mode [ 585.439802][T12222] vlan2: entered allmulticast mode [ 585.445368][T12222] bridge0: entered allmulticast mode [ 585.745793][ T30] audit: type=1400 audit(1753416307.621:1235): avc: denied { write } for pid=12227 comm="syz.1.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 585.923373][T12235] 9pnet_virtio: no channels available for device syz [ 586.328481][ T5838] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 586.512181][ T5838] usb 2-1: Using ep0 maxpacket: 32 [ 586.587555][ T5838] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 586.674766][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.755555][ T5838] usb 2-1: Product: syz [ 586.794961][ T5838] usb 2-1: Manufacturer: syz [ 587.014814][ T5838] usb 2-1: SerialNumber: syz [ 587.021589][ T5838] usb 2-1: config 0 descriptor?? [ 587.036675][ T5838] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 588.333905][T12259] FAULT_INJECTION: forcing a failure. [ 588.333905][T12259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.364993][ T48] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 588.384729][T12259] CPU: 1 UID: 0 PID: 12259 Comm: syz.2.1619 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 588.384759][T12259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 588.384769][T12259] Call Trace: [ 588.384775][T12259] [ 588.384782][T12259] dump_stack_lvl+0x16c/0x1f0 [ 588.384806][T12259] should_fail_ex+0x512/0x640 [ 588.384836][T12259] _copy_from_iter+0x29f/0x16f0 [ 588.384857][T12259] ? __alloc_skb+0x200/0x380 [ 588.384884][T12259] ? __pfx__copy_from_iter+0x10/0x10 [ 588.384904][T12259] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 588.384931][T12259] netlink_sendmsg+0x829/0xdd0 [ 588.384956][T12259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.384985][T12259] ____sys_sendmsg+0xa98/0xc70 [ 588.385008][T12259] ? copy_msghdr_from_user+0x10a/0x160 [ 588.385025][T12259] ? __pfx_____sys_sendmsg+0x10/0x10 [ 588.385057][T12259] ___sys_sendmsg+0x134/0x1d0 [ 588.385076][T12259] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.385091][T12259] ? __lock_acquire+0x622/0x1c90 [ 588.385140][T12259] __sys_sendmsg+0x16d/0x220 [ 588.385157][T12259] ? __pfx___sys_sendmsg+0x10/0x10 [ 588.385190][T12259] do_syscall_64+0xcd/0x4c0 [ 588.385210][T12259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.385228][T12259] RIP: 0033:0x7f1694d8e9a9 [ 588.385243][T12259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.385260][T12259] RSP: 002b:00007f1695b2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.385278][T12259] RAX: ffffffffffffffda RBX: 00007f1694fb5fa0 RCX: 00007f1694d8e9a9 [ 588.385289][T12259] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000007 [ 588.385300][T12259] RBP: 00007f1695b2e090 R08: 0000000000000000 R09: 0000000000000000 [ 588.385310][T12259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.385319][T12259] R13: 0000000000000000 R14: 00007f1694fb5fa0 R15: 00007ffc81dfd518 [ 588.385343][T12259] [ 588.511800][ T5997] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 588.621933][ T48] usb 7-1: Using ep0 maxpacket: 32 [ 588.650265][ T5838] gspca_ov534_9: reg_w failed -71 [ 588.681400][ T48] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 588.700631][ T48] usb 7-1: config 0 has no interface number 0 [ 588.719983][ T48] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 588.731848][ T48] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.739950][ T48] usb 7-1: Product: syz [ 588.748073][ T48] usb 7-1: Manufacturer: syz [ 588.780709][ T48] usb 7-1: SerialNumber: syz [ 588.961829][ T5838] gspca_ov534_9: Unknown sensor 0000 [ 588.963022][ T5838] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 589.081458][ T5997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 589.155214][ T5997] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 589.207554][ T5838] usb 2-1: USB disconnect, device number 62 [ 589.244409][ T5997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 589.353311][ T5997] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 589.460335][ T5997] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 589.552469][ T5997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.609297][ T48] usb 7-1: config 0 descriptor?? [ 589.616720][ T48] smsc95xx v2.0.0 [ 589.627378][ T5997] usb 6-1: config 0 descriptor?? [ 589.768581][T12281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1628'. [ 590.038447][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1622'. [ 590.047556][T12265] netlink: 'syz.6.1622': attribute type 21 has an invalid length. [ 590.231137][ T48] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 590.783673][ T48] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 590.825115][ T5997] hdpvr 6-1:0.0: unexpected answer of status request, len -71 [ 590.845135][ T5997] hdpvr 6-1:0.0: device init failed [ 590.850449][ T5997] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 590.881405][ T5997] usb 6-1: USB disconnect, device number 54 [ 590.911246][ T30] audit: type=1326 audit(1753416312.781:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12290 comm="syz.2.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1694d8e9a9 code=0x7ffc0000 [ 590.942854][T12291] SELinux: Context system_u:object_r:ssh_agent_exec_t:s0 is not valid (left unmapped). [ 590.962362][ T30] audit: type=1326 audit(1753416312.811:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12290 comm="syz.2.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1694d8e9a9 code=0x7ffc0000 [ 590.989324][ T30] audit: type=1326 audit(1753416312.811:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12290 comm="syz.2.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1694d8e9a9 code=0x7ffc0000 [ 591.012776][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.024135][ T30] audit: type=1326 audit(1753416312.821:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12290 comm="syz.2.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1694d8e9a9 code=0x7ffc0000 [ 591.068543][ T30] audit: type=1326 audit(1753416312.821:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12290 comm="syz.2.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1694d8e9a9 code=0x7ffc0000 [ 591.091954][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.094726][ T48] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 591.107607][ T30] audit: type=1326 audit(1753416312.821:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12290 comm="syz.2.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1694d8e9a9 code=0x7ffc0000 [ 591.139116][ T30] audit: type=1326 audit(1753416312.821:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12290 comm="syz.2.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1694d8e9a9 code=0x7ffc0000 [ 591.162567][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.172450][ T30] audit: type=1326 audit(1753416312.821:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12290 comm="syz.2.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f1694d8e9a9 code=0x7ffc0000 [ 591.180726][ T48] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32 [ 591.195944][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.196361][ T30] audit: type=1400 audit(1753416312.821:1244): avc: denied { connect } for pid=12292 comm="syz.1.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 591.551050][ T48] usb 7-1: USB disconnect, device number 51 [ 591.554715][ T30] audit: type=1400 audit(1753416312.831:1245): avc: denied { relabelto } for pid=12290 comm="syz.2.1630" name="file0" dev="tmpfs" ino=1769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:ssh_agent_exec_t:s0" [ 591.660869][ T5887] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 591.893728][ T5887] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 592.699700][T12315] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1639'. [ 592.731780][T12315] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.731800][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.748508][T12315] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.767719][ T5887] usb 3-1: config 0 descriptor?? [ 593.101865][ T5887] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 593.124116][T12317] overlay: ./file0 is not a directory [ 593.250057][T12321] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1641'. [ 593.552702][T12323] netlink: 'syz.2.1633': attribute type 1 has an invalid length. [ 593.560548][T12323] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1633'. [ 594.325773][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1647'. [ 594.952794][T12345] Cannot find del_set index 3 as target [ 596.177834][ T5887] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 596.463267][ T5887] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 596.481927][ T5887] asix 3-1:0.0: probe with driver asix failed with error -71 [ 596.492350][ T5887] usb 3-1: USB disconnect, device number 70 [ 596.652615][T12363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1654'. [ 597.123096][T12371] overlayfs: failed to resolve './file0': -2 [ 598.279250][T12384] netlink: 'syz.1.1656': attribute type 10 has an invalid length. [ 598.345978][T12384] batman_adv: batadv0: Adding interface: wlan0 [ 598.363646][T12384] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.442208][T12384] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 598.584310][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 598.584324][ T30] audit: type=1400 audit(1753416320.461:1256): avc: denied { write } for pid=12391 comm="syz.2.1665" name="file0" dev="tmpfs" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 598.637882][ T30] audit: type=1400 audit(1753416320.461:1257): avc: denied { open } for pid=12391 comm="syz.2.1665" path="/342/file0" dev="tmpfs" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 598.671614][ T30] audit: type=1400 audit(1753416320.461:1258): avc: denied { ioctl } for pid=12391 comm="syz.2.1665" path="/342/file0" dev="tmpfs" ino=1792 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 598.722611][ T5944] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 599.245429][ T30] audit: type=1400 audit(1753416321.121:1259): avc: denied { lock } for pid=12410 comm="syz.5.1671" path="socket:[80222]" dev="sockfs" ino=80222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 599.348729][T12415] veth0_vlan: entered allmulticast mode [ 599.377716][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1670'. [ 599.386743][T12415] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 599.394494][T12415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.404295][T12415] syz_tun: entered allmulticast mode [ 599.431300][T12417] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1673'. [ 599.443768][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'. [ 599.791893][ T5997] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 599.818340][T12421] fuse: Bad value for 'fd' [ 599.838344][ T30] audit: type=1326 audit(1753416321.711:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12410 comm="syz.5.1671" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f733298e9a9 code=0x0 [ 599.941801][ T5997] usb 2-1: Using ep0 maxpacket: 8 [ 599.950610][ T5997] usb 2-1: config 6 has an invalid interface number: 171 but max is 0 [ 599.963947][ T5997] usb 2-1: config 6 has no interface number 0 [ 599.973417][ T5997] usb 2-1: config 6 interface 171 altsetting 8 endpoint 0x6 has invalid maxpacket 576, setting to 64 [ 599.987367][ T5997] usb 2-1: config 6 interface 171 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 600.005352][ T5997] usb 2-1: config 6 interface 171 altsetting 8 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 600.025256][ T5997] usb 2-1: config 6 interface 171 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 600.040890][ T5997] usb 2-1: config 6 interface 171 has no altsetting 0 [ 600.061344][ T5997] usb 2-1: Dual-Role OTG device on HNP port [ 600.068880][ T5997] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=d1.1e [ 600.092784][ T5997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.100825][ T5997] usb 2-1: Product: syz [ 600.111883][ T5997] usb 2-1: Manufacturer: syz [ 600.116525][ T5997] usb 2-1: SerialNumber: syz [ 600.178536][T12429] 9pnet_fd: Insufficient options for proto=fd [ 600.310412][T12431] tipc: Enabled bearer , priority 10 [ 600.896771][ T30] audit: type=1400 audit(1753416322.771:1261): avc: denied { getopt } for pid=12419 comm="syz.1.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 600.924100][ T5997] usb_ehset_test 2-1:6.171: probe with driver usb_ehset_test failed with error -32 [ 600.942242][ T5997] usb 2-1: USB disconnect, device number 63 [ 601.070424][ T30] audit: type=1400 audit(1753416322.931:1262): avc: denied { bind } for pid=12437 comm="syz.5.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 601.071477][T12440] tipc: Enabling of bearer rejected, failed to enable media [ 601.368187][T12441] blktrace: Concurrent blktraces are not allowed on sg0 [ 601.386461][ T30] audit: type=1400 audit(1753416322.931:1263): avc: denied { node_bind } for pid=12437 comm="syz.5.1679" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 601.458684][ T30] audit: type=1804 audit(1753416323.331:1264): pid=12443 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1680" name="/newroot/259/file0" dev="tmpfs" ino=1392 res=1 errno=0 [ 602.803268][ T30] audit: type=1326 audit(1753416324.681:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12453 comm="syz.1.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f913338e9a9 code=0x7ffc0000 [ 602.949542][T12461] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 603.343644][T12479] Lens A: ================= START STATUS ================= [ 603.466882][T12479] Lens A: Focus, Absolute: 0 [ 603.473311][T12479] Lens A: ================== END STATUS ================== [ 603.585803][T12483] overlayfs: failed to resolve './file0': -2 [ 603.592489][ T5900] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 604.222026][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 604.235807][ T5900] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 604.243566][ T5900] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 604.276196][ T5900] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 604.294467][ T5900] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 604.329262][ T5900] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 604.352410][ T5944] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 604.400862][ T5900] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 604.409533][ T5900] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 604.447826][ T5900] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 604.520410][ T5944] usb 6-1: Using ep0 maxpacket: 32 [ 604.544473][ T5900] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 604.549391][ T5944] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 604.583383][ T5944] usb 6-1: config 0 has no interface number 0 [ 604.592908][ T5900] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 604.608568][ T5944] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 604.625978][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 604.625993][ T30] audit: type=1400 audit(1753416326.501:1305): avc: denied { getopt } for pid=12500 comm="syz.6.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 604.662959][ T5944] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 604.679976][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.703804][ T5944] usb 6-1: Product: syz [ 604.713933][ T5944] usb 6-1: Manufacturer: syz [ 604.719723][ T5944] usb 6-1: SerialNumber: syz [ 604.725780][ T5900] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 604.727918][ T5944] usb 6-1: config 0 descriptor?? [ 604.744739][ T5944] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 604.756250][ T5944] em28xx 6-1:0.132: Video interface 132 found: [ 604.765100][ T5900] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 604.799219][ T5900] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 604.830441][ T5900] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 604.842792][ T5900] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 604.857101][ T5900] usb 3-1: string descriptor 0 read error: -22 [ 604.867016][ T5900] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 604.877674][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.891364][ T5900] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 605.369682][ T5944] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 605.674668][ T5900] usb 3-1: USB disconnect, device number 71 [ 605.683059][T12510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12510 comm=syz.0.1703 [ 605.801263][T12517] /dev/nullb0: Can't open blockdev [ 605.846132][T12519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.911324][ T5944] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 605.925434][ T5944] em28xx 6-1:0.132: board has no eeprom [ 606.191935][ T5944] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 606.201546][ T5944] em28xx 6-1:0.132: analog set to bulk mode. [ 606.208212][ T9] em28xx 6-1:0.132: Registering V4L2 extension [ 606.543127][ T5997] usb 6-1: USB disconnect, device number 56 [ 606.810637][ T9] em28xx 6-1:0.132: reading from i2c device at 0x4a failed: couldn't get the received message from the bridge (error=-5) [ 606.852426][ T5900] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 606.883451][ T5997] em28xx 6-1:0.132: Disconnecting em28xx [ 606.889672][T12530] FAULT_INJECTION: forcing a failure. [ 606.889672][T12530] name failslab, interval 1, probability 0, space 0, times 0 [ 606.902511][T12530] CPU: 1 UID: 0 PID: 12530 Comm: syz.1.1710 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 606.902536][T12530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 606.902546][T12530] Call Trace: [ 606.902551][T12530] [ 606.902557][T12530] dump_stack_lvl+0x16c/0x1f0 [ 606.902579][T12530] should_fail_ex+0x512/0x640 [ 606.902606][T12530] ? fs_reclaim_acquire+0xae/0x150 [ 606.902629][T12530] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 606.902646][T12530] should_failslab+0xc2/0x120 [ 606.902664][T12530] __kmalloc_noprof+0xd2/0x510 [ 606.902694][T12530] tomoyo_realpath_from_path+0xc2/0x6e0 [ 606.902714][T12530] ? tomoyo_profile+0x47/0x60 [ 606.902734][T12530] tomoyo_path_number_perm+0x245/0x580 [ 606.902756][T12530] ? tomoyo_path_number_perm+0x237/0x580 [ 606.902781][T12530] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 606.902806][T12530] ? find_held_lock+0x2b/0x80 [ 606.902845][T12530] ? find_held_lock+0x2b/0x80 [ 606.902864][T12530] ? hook_file_ioctl_common+0x145/0x410 [ 606.902890][T12530] ? __fget_files+0x20e/0x3c0 [ 606.902909][T12530] security_file_ioctl+0x9b/0x240 [ 606.902926][T12530] __x64_sys_ioctl+0xb7/0x210 [ 606.902949][T12530] do_syscall_64+0xcd/0x4c0 [ 606.902965][T12530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.902983][T12530] RIP: 0033:0x7f913338e9a9 [ 606.902996][T12530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.903012][T12530] RSP: 002b:00007f91342b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.903028][T12530] RAX: ffffffffffffffda RBX: 00007f91335b6080 RCX: 00007f913338e9a9 [ 606.903039][T12530] RDX: 00002000000001c0 RSI: 00000000000089f5 RDI: 000000000000000a [ 606.903048][T12530] RBP: 00007f91342b9090 R08: 0000000000000000 R09: 0000000000000000 [ 606.903057][T12530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.903067][T12530] R13: 0000000000000000 R14: 00007f91335b6080 R15: 00007ffee58a4a88 [ 606.903087][T12530] [ 606.903094][T12530] ERROR: Out of memory at tomoyo_realpath_from_path. [ 607.061251][ T9] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 607.125431][ T9] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 607.134307][ T9] em28xx 6-1:0.132: No AC97 audio processor [ 607.143324][ T9] usb 6-1: Decoder not found [ 607.148642][ T9] em28xx 6-1:0.132: failed to create media graph [ 607.164183][ T9] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 607.171858][ T9] em28xx 6-1:0.132: Remote control support is not available for this card. [ 607.180543][ T5997] em28xx 6-1:0.132: Closing input extension [ 607.198372][ T5997] em28xx 6-1:0.132: Freeing device [ 607.284564][ T5900] usb 3-1: config 6 has an invalid interface number: 144 but max is 1 [ 607.307548][ T5900] usb 3-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 607.322321][ T5900] usb 3-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 607.333986][ T30] audit: type=1400 audit(1753416329.211:1306): avc: denied { map } for pid=12541 comm="syz.1.1715" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 607.362797][ T5900] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 607.374972][ T5900] usb 3-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 607.384294][ T5900] usb 3-1: config 6 has no interface number 0 [ 607.390427][ T5900] usb 3-1: config 6 interface 144 altsetting 0 endpoint 0x2 has an invalid bInterval 36, changing to 7 [ 607.402148][ T5900] usb 3-1: config 6 interface 144 altsetting 0 endpoint 0x2 has invalid maxpacket 2028, setting to 1024 [ 607.413419][ T5913] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 607.421563][ T5900] usb 3-1: config 6 interface 144 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 607.437271][ T5900] usb 3-1: New USB device found, idVendor=413c, idProduct=8136, bcdDevice=c6.d4 [ 607.446604][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.454645][ T5900] usb 3-1: Product: Ð’ [ 607.458718][ T5900] usb 3-1: Manufacturer: 䚫斚㕾꜡Ĩ댥闻춭⾱î¾èˆŠê¬¶è¹·ç°…໖ౄí—é°î­ºéŒƒæ±€æˆã°¢áˆì¼£î’¶ä•ƒåŸá¯¡ï¬†ç…™ì¿ï¤‡å“±î§¹ì¯€ [ 607.472944][ T5900] usb 3-1: SerialNumber: Ј [ 607.577446][T12555] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.1718'. [ 607.588668][ T5913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 607.600513][ T5913] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 607.611167][ T5913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 607.622208][ T5913] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 607.632809][ T5913] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 607.642490][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.655767][ T5913] usb 7-1: config 0 descriptor?? [ 607.705688][T12524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.772119][T12524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.864847][ T5913] hdpvr 7-1:0.0: unexpected answer of status request, len -71 [ 607.878329][ T5913] hdpvr 7-1:0.0: device init failed [ 608.380963][ T5913] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 608.393247][ T5913] usb 7-1: USB disconnect, device number 52 [ 608.407729][ T5900] option 3-1:6.144: GSM modem (1-port) converter detected [ 608.438276][ T5900] usb 3-1: USB disconnect, device number 72 [ 608.449834][ T5900] option 3-1:6.144: device disconnected [ 608.831910][ T30] audit: type=1400 audit(1753416330.701:1307): avc: denied { map } for pid=12570 comm="syz.0.1722" path="socket:[81119]" dev="sockfs" ino=81119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 609.035877][ T30] audit: type=1326 audit(1753416330.911:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12570 comm="syz.0.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8838e9a9 code=0x7ffc0000 [ 609.069109][ T30] audit: type=1326 audit(1753416330.911:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12570 comm="syz.0.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8838e9a9 code=0x7ffc0000 [ 609.096960][ T30] audit: type=1326 audit(1753416330.911:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12570 comm="syz.0.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fdf8838e9a9 code=0x7ffc0000 [ 609.125505][ T30] audit: type=1326 audit(1753416330.911:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12570 comm="syz.0.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8838e9a9 code=0x7ffc0000 [ 609.247173][ T30] audit: type=1326 audit(1753416330.911:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12570 comm="syz.0.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8838e9a9 code=0x7ffc0000 [ 609.285220][ T30] audit: type=1326 audit(1753416330.941:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12570 comm="syz.0.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf8838e9a9 code=0x7ffc0000 [ 609.320911][ T30] audit: type=1326 audit(1753416330.941:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12570 comm="syz.0.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf8838e9a9 code=0x7ffc0000 [ 609.365713][T12587] x_tables: duplicate underflow at hook 3 [ 609.490145][ T5830] block nbd0: Receive control failed (result -107) [ 609.501782][T12587] nbd0: detected capacity change from 0 to 63 [ 609.657753][T12591] netlink: 'syz.2.1727': attribute type 10 has an invalid length. [ 609.666289][T12591] tipc: Resetting bearer [ 609.747516][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1727'. [ 609.859272][T12601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1732'. [ 609.958223][T12602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1732'. [ 610.011782][T12596] bridge_slave_1: left allmulticast mode [ 610.017485][T12596] bridge_slave_1: left promiscuous mode [ 610.027412][T12596] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.379904][T12596] bridge_slave_0: left allmulticast mode [ 610.397026][T12617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1736'. [ 610.408930][T12596] bridge_slave_0: left promiscuous mode [ 610.418924][T12596] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.474646][ T9] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 610.644410][ T9] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 610.785076][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 610.785092][ T30] audit: type=1400 audit(1753416332.661:1331): avc: denied { setattr } for pid=12619 comm="syz.1.1735" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 610.788386][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.887412][T12596] tipc: Disabling bearer [ 610.909092][ T9] usb 7-1: Product: syz [ 610.913477][ T9] usb 7-1: Manufacturer: syz [ 610.918234][ T9] usb 7-1: SerialNumber: syz [ 610.931029][ T9] usb 7-1: config 0 descriptor?? [ 610.948508][ T9] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 053 [ 611.046281][ T30] audit: type=1400 audit(1753416332.921:1332): avc: denied { setopt } for pid=12629 comm="syz.2.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 611.069498][ T30] audit: type=1400 audit(1753416332.941:1333): avc: denied { connect } for pid=12629 comm="syz.2.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 611.141918][ T5887] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 611.394336][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1734'. [ 611.403263][T12613] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1734'. [ 611.418646][ T9] (null): failure reading functionality [ 611.471801][ T5887] usb 6-1: device descriptor read/64, error -71 [ 611.625220][ T9] i2c i2c-1: failure reading functionality [ 611.633312][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 611.640515][ T9] usb 7-1: USB disconnect, device number 53 [ 611.721994][ T5887] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 611.871831][ T5887] usb 6-1: device descriptor read/64, error -71 [ 611.984139][ T5887] usb usb6-port1: attempt power cycle [ 612.166052][T12651] ptrace attach of "./syz-executor exec"[6466] was attempted by "./syz-executor exec"[12651] [ 612.333492][ T5887] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 612.362426][ T5887] usb 6-1: device descriptor read/8, error -71 [ 612.432111][ T9] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 612.445702][ T30] audit: type=1400 audit(1753416334.321:1334): avc: denied { shutdown } for pid=12654 comm="syz.2.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 612.601513][ T9] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 612.603003][ T5887] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 612.611939][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 612.632455][ T5887] usb 6-1: device descriptor read/8, error -71 [ 612.637445][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 612.666265][ T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 612.690749][ T9] usb 7-1: Product: syz [ 612.697211][ T9] usb 7-1: Manufacturer: syz [ 612.702410][T12664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1753'. [ 612.714131][ T9] usb 7-1: SerialNumber: syz [ 612.736750][ T9] usb 7-1: config 0 descriptor?? [ 612.742090][ T5887] usb usb6-port1: unable to enumerate USB device [ 612.759706][ T9] usb 7-1: selecting invalid altsetting 0 [ 613.041124][ T5838] usb 7-1: USB disconnect, device number 54 [ 613.047251][ T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 613.154220][T12677] bad cache= option: no%e [ 613.154220][T12677] [ 613.160800][T12677] CIFS: VFS: bad cache= option: no%e [ 613.631738][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 613.638525][ T9] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 613.647334][ T9] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 613.655982][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 613.665141][ T9] usb 3-1: config 1 has no interface number 0 [ 613.671243][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 613.683717][ T9] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 613.697366][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 613.706509][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.718588][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 614.191555][T12688] wg1 speed is unknown, defaulting to 1000 [ 614.968427][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 615.584788][T12687] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1758'. [ 615.611801][ T30] audit: type=1400 audit(1753416337.321:1335): avc: denied { read write } for pid=12683 comm="syz.5.1760" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 615.641831][ T30] audit: type=1400 audit(1753416337.321:1336): avc: denied { open } for pid=12683 comm="syz.5.1760" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 615.654381][ T5887] usb 3-1: USB disconnect, device number 73 [ 615.686314][ T5887] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 615.736004][T12687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.744523][T12687] batadv_slave_0: entered promiscuous mode [ 616.113257][ T5900] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 616.293708][ T5900] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 616.320103][ T5900] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 616.347184][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.372841][ T5900] usb 6-1: Product: syz [ 616.383313][ T5900] usb 6-1: Manufacturer: syz [ 616.397326][ T5900] usb 6-1: SerialNumber: syz [ 616.419859][ T5900] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 616.481578][T12714] FAULT_INJECTION: forcing a failure. [ 616.481578][T12714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.498645][T12714] CPU: 0 UID: 0 PID: 12714 Comm: syz.2.1769 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 616.498671][T12714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 616.498681][T12714] Call Trace: [ 616.498688][T12714] [ 616.498694][T12714] dump_stack_lvl+0x16c/0x1f0 [ 616.498716][T12714] should_fail_ex+0x512/0x640 [ 616.498746][T12714] _copy_from_user+0x2e/0xd0 [ 616.498763][T12714] do_fb_ioctl+0x290/0x7e0 [ 616.498786][T12714] ? __pfx_do_fb_ioctl+0x10/0x10 [ 616.498810][T12714] ? do_vfs_ioctl+0x523/0x1a60 [ 616.498862][T12714] ? selinux_file_ioctl+0x180/0x270 [ 616.498882][T12714] fb_ioctl+0xe5/0x150 [ 616.498898][T12714] ? __pfx_fb_ioctl+0x10/0x10 [ 616.498916][T12714] __x64_sys_ioctl+0x18e/0x210 [ 616.498931][T12714] do_syscall_64+0xcd/0x4c0 [ 616.498942][T12714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.498954][T12714] RIP: 0033:0x7f1694d8e9a9 [ 616.498963][T12714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.498975][T12714] RSP: 002b:00007f1695b2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 616.498991][T12714] RAX: ffffffffffffffda RBX: 00007f1694fb5fa0 RCX: 00007f1694d8e9a9 [ 616.499003][T12714] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 616.499013][T12714] RBP: 00007f1695b2e090 R08: 0000000000000000 R09: 0000000000000000 [ 616.499022][T12714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.499031][T12714] R13: 0000000000000000 R14: 00007f1694fb5fa0 R15: 00007ffc81dfd518 [ 616.499052][T12714] [ 616.732394][ T5887] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 616.896532][ T5887] usb 2-1: config index 0 descriptor too short (expected 14996, got 120) [ 616.905173][ T5887] usb 2-1: config 29 has too many interfaces: 211, using maximum allowed: 32 [ 616.914217][ T5887] usb 2-1: config 29 has an invalid descriptor of length 0, skipping remainder of the config [ 616.924556][ T5887] usb 2-1: config 29 has 3 interfaces, different from the descriptor's value: 211 [ 616.934053][ T5887] usb 2-1: config 29 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 616.949300][ T5887] usb 2-1: config 29 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 616.967923][ T5887] usb 2-1: config 29 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 24576, setting to 1023 [ 616.982842][ T5887] usb 2-1: config 29 interface 1 has no altsetting 0 [ 617.072167][T12721] overlayfs: failed to resolve './file0': -2 [ 617.435170][T12696] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1761'. [ 617.529625][ T5887] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 617.539006][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.547126][ T5887] usb 2-1: Product: syz [ 617.551335][ T5887] usb 2-1: Manufacturer: syz [ 617.556039][ T5887] usb 2-1: SerialNumber: syz [ 617.600724][ T30] audit: type=1326 audit(1753416339.471:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.5.1761" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f733298e9a9 code=0x0 [ 617.677173][T12724] wg1 speed is unknown, defaulting to 1000 [ 617.728699][ T30] audit: type=1400 audit(1753416339.541:1338): avc: denied { rename } for pid=12723 comm="syz.0.1772" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 617.789386][ T5900] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 617.810372][T12707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.839271][T12707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.887625][ T5887] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 617.925350][ T5887] usb 2-1: USB disconnect, device number 64 [ 619.034678][ T30] audit: type=1400 audit(1753416340.911:1339): avc: denied { ioctl } for pid=12746 comm="syz.1.1779" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 619.349800][ T9] usb 6-1: USB disconnect, device number 61 [ 619.935722][T12769] overlayfs: failed to resolve './file0': -2 [ 620.120399][ T30] audit: type=1400 audit(1753416341.991:1340): avc: denied { read } for pid=12762 comm="syz.1.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 620.318029][ T9] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 620.428612][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 620.439200][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 620.449037][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 620.523715][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 620.535732][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 620.551508][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 620.562217][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 620.575807][ T9] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 620.575941][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 620.595626][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.616201][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 620.621222][ T9] usb 6-1: config 0 descriptor?? [ 620.634111][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 620.651209][ T30] audit: type=1400 audit(1753416342.521:1341): avc: denied { mounton } for pid=12772 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 620.653355][T12782] netlink: 'syz.1.1790': attribute type 1 has an invalid length. [ 620.680693][ T5941] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 620.694736][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1790'. [ 620.705265][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 620.757060][T12772] wg1 speed is unknown, defaulting to 1000 [ 620.862487][ T5941] usb 7-1: Using ep0 maxpacket: 8 [ 620.870128][ T5941] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.883151][ T5941] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 620.970813][ T5941] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 620.995531][ T5941] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 621.007108][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.015824][ T5941] usb 7-1: Product: âšë–šì˜å‚¼ç¸æ²ë·‹ä‘žïœì˜ä›–ေå•ä¿½ï¬ä•™é†œì«·é—깊옊ﭤ죧镉䩶ê©â™•é¾ªë¯”羽鶗붽ئҋ⻯Ⴙ೬ᆡ侧諚åšé­ç¯ç°Œì½·î‰¹æ‹·ëªèž™Õªë«™ë¥£ï¤ä‚„눙뇄㳤層̄詔Ẕ蚃鯈ₒæ£ï–⊡ê¡ç‰«è´¬é¬Œê¶´ã†´á–½ [ 621.051992][T12788] tipc: Started in network mode [ 621.057202][T12788] tipc: Node identity 080211000001, cluster identity 4711 [ 621.068247][T12788] tipc: Enabled bearer , priority 0 [ 621.132643][T12788] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 621.144325][T12788] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 621.152164][ T5941] usb 7-1: Manufacturer: à ’ [ 621.158619][ T5941] usb 7-1: SerialNumber: Љ [ 621.173937][ T9] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 621.197021][T12788] tipc: Resetting bearer [ 621.220937][ T2953] tipc: Resetting bearer [ 621.418374][T12774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.433217][T12774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.508820][ T5941] cdc_ncm 7-1:1.0: bind() failure [ 621.570186][ T5941] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 621.619818][ T5941] cdc_ncm 7-1:1.1: bind() failure [ 621.630157][ T9] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 621.660551][ T5941] usb 7-1: USB disconnect, device number 55 [ 621.698294][T12791] syzkaller0: mtu greater than device maximum [ 621.826405][T12794] team0 (unregistering): Port device team_slave_0 removed [ 621.841352][T12794] team0 (unregistering): Port device team_slave_1 removed [ 621.887184][T12772] chnl_net:caif_netlink_parms(): no params data found [ 621.927499][ T5900] usb 6-1: USB disconnect, device number 62 [ 622.061971][ T5941] tipc: Node number set to 134418688 [ 622.409193][T12808] netlink: 'syz.1.1797': attribute type 10 has an invalid length. [ 622.422390][T12772] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.532601][T12772] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.714021][ T5846] Bluetooth: hci0: command tx timeout [ 622.714214][T12772] bridge_slave_0: entered allmulticast mode [ 622.727058][T12772] bridge_slave_0: entered promiscuous mode [ 622.754529][T12772] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.767755][T12772] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.853948][T12772] bridge_slave_1: entered allmulticast mode [ 622.860695][T12772] bridge_slave_1: entered promiscuous mode [ 622.965713][T12772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.018716][T12772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.131774][T12818] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1799'. [ 623.496731][T12772] team0: Port device team_slave_0 added [ 623.507525][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1802'. [ 623.534207][T12772] team0: Port device team_slave_1 added [ 623.581599][T12832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.592756][T12832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.743145][T12838] usb usb8: usbfs: process 12838 (syz.1.1805) did not claim interface 0 before use [ 623.925623][T12772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.938677][T12772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.982699][T12772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.019917][T12772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.034606][T12772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.070870][T12772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.151147][T12772] hsr_slave_0: entered promiscuous mode [ 624.176076][T12772] hsr_slave_1: entered promiscuous mode [ 624.189980][T12772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 624.209924][T12772] Cannot create hsr debugfs directory [ 624.261813][ T5941] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 624.282264][ T9] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 624.337012][T12857] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1813'. [ 624.419408][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.442883][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.454187][ T5941] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 624.468474][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.476095][T12772] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 624.476446][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.490254][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 624.500942][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.501355][T12772] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 624.509854][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 624.528431][ T5941] usb 2-1: config 0 descriptor?? [ 624.533801][ T9] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 624.544453][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 624.550324][T12772] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 624.563473][ T9] usb 3-1: string descriptor 0 read error: -22 [ 624.569943][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 624.582139][T12772] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 624.602005][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.613701][T12865] trusted_key: encrypted_key: key user:syz not found [ 624.631302][ T9] usb 3-1: 0:2 : does not exist [ 624.772114][ T5846] Bluetooth: hci0: command tx timeout [ 624.794856][T12772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.823004][T12772] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.867771][T12772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 624.878556][T12772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 625.591714][T12849] SELinux: failed to load policy [ 625.600509][ T5941] usb 2-1: string descriptor 0 read error: -22 [ 625.622775][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.629925][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.814600][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.821842][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.237397][T12894] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 626.261399][ T5941] input: HID 256c:006d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0008/input/input28 [ 626.372403][ T5941] uclogic 0003:256C:006D.0008: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 626.445062][T12772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.481785][ T9] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 626.643965][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.677517][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 626.745664][ T9] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 626.790711][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.837071][ T9] usb 7-1: config 0 descriptor?? [ 626.856207][ T5846] Bluetooth: hci0: command tx timeout [ 626.858466][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 626.869484][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 626.882567][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 626.895781][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 626.903619][ T9] usb 7-1: media controller created [ 626.910475][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 626.950548][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 626.964994][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 626.968430][T12772] veth0_vlan: entered promiscuous mode [ 626.987760][T12772] veth1_vlan: entered promiscuous mode [ 626.998225][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input29 [ 627.016968][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 627.022813][T12772] veth0_macvtap: entered promiscuous mode [ 627.039656][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 627.058106][T12772] veth1_macvtap: entered promiscuous mode [ 627.063646][ T9] usb 3-1: USB disconnect, device number 74 [ 627.136378][T12772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.160612][T12772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.189243][T12772] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.194048][ T5941] dvb-usb: bulk message failed: -22 (1/0) [ 627.216631][ T30] audit: type=1400 audit(1753416349.081:1342): avc: denied { map } for pid=12905 comm="syz.5.1823" path="socket:[83121]" dev="sockfs" ino=83121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 627.335216][ T5941] dvb-usb: error while querying for an remote control event. [ 627.345279][T12772] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.365234][T12772] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.374492][T12772] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.579592][ T5941] dvb-usb: bulk message failed: -22 (1/0) [ 627.595517][ T30] audit: type=1400 audit(1753416349.191:1343): avc: denied { connect } for pid=12906 comm="syz.2.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 627.597280][ T5941] dvb-usb: error while querying for an remote control event. [ 627.730171][ T5941] usb 7-1: USB disconnect, device number 56 [ 627.761270][ T5941] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 627.938728][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.985341][ T9] usb 2-1: USB disconnect, device number 65 [ 628.040530][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.210543][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.219902][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.237298][ T30] audit: type=1400 audit(1753416350.111:1344): avc: denied { mounton } for pid=12772 comm="syz-executor" path="/root/syzkaller.QiiPVD/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 628.271004][ T30] audit: type=1400 audit(1753416350.121:1345): avc: denied { mounton } for pid=12772 comm="syz-executor" path="/root/syzkaller.QiiPVD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 628.315224][ T30] audit: type=1400 audit(1753416350.121:1346): avc: denied { mounton } for pid=12772 comm="syz-executor" path="/root/syzkaller.QiiPVD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=82817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 628.315462][ T30] audit: type=1400 audit(1753416350.141:1347): avc: denied { mounton } for pid=12772 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 628.315694][ T30] audit: type=1400 audit(1753416350.141:1348): avc: denied { mounton } for pid=12772 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 628.573555][T12927] ptrace attach of "./syz-executor exec"[12772] was attempted by ""[12927] [ 628.935214][ T5846] Bluetooth: hci0: command tx timeout [ 629.054142][ T30] audit: type=1400 audit(1753416350.921:1349): avc: denied { link } for pid=12934 comm="syz.7.1830" name="#18" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 629.473632][ T9] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 629.611773][ T9] usb 7-1: device descriptor read/64, error -71 [ 629.621859][T12712] usb 3-1: new low-speed USB device number 75 using dummy_hcd [ 629.815750][T12712] usb 3-1: unable to get BOS descriptor or descriptor too short [ 629.825013][T12712] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 629.834043][T12712] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 629.847222][T12712] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 629.858950][T12712] usb 3-1: string descriptor 0 read error: -22 [ 629.862896][ T9] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 629.865653][T12712] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 629.882220][T12712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.899053][T12712] usb 3-1: 0:2 : does not exist [ 630.011870][ T9] usb 7-1: device descriptor read/64, error -71 [ 630.098521][T12941] SELinux: failed to load policy [ 630.132685][ T9] usb usb7-port1: attempt power cycle [ 630.471709][ T9] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 630.502395][ T9] usb 7-1: device descriptor read/8, error -71 [ 630.755791][ T9] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 630.805602][ T9] usb 7-1: device descriptor read/8, error -71 [ 630.839559][T12949] ref_ctr increment failed for inode: 0x31 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807db9c600 [ 630.942523][ T9] usb usb7-port1: unable to enumerate USB device [ 630.972045][ T30] audit: type=1400 audit(1753416352.841:1350): avc: denied { connect } for pid=12952 comm="syz.5.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 631.034977][ T30] audit: type=1400 audit(1753416352.911:1351): avc: denied { listen } for pid=12952 comm="syz.5.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 631.044388][T12958] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1835'. [ 632.414146][ T30] audit: type=1400 audit(1753416354.221:1352): avc: denied { mount } for pid=12937 comm="syz.6.1831" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 632.583693][T12969] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1840'. [ 632.676049][ T9] usb 3-1: USB disconnect, device number 75 [ 632.690003][ T30] audit: type=1400 audit(1753416354.221:1353): avc: denied { remount } for pid=12937 comm="syz.6.1831" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 632.938810][T12988] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1845'. [ 633.092985][T12990] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12990 comm=syz.1.1844 [ 633.135808][ T30] audit: type=1400 audit(1753416355.011:1354): avc: denied { remount } for pid=12979 comm="syz.1.1844" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 633.739747][ T30] audit: type=1400 audit(1753416355.611:1355): avc: denied { unmount } for pid=6466 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 633.988950][T13001] overlayfs: failed to resolve './file0': -2 [ 634.031848][T12712] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 634.384872][T12712] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.396242][T12712] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.407465][T12712] usb 2-1: config 0 interface 0 has no altsetting 0 [ 634.414250][T12712] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 634.423330][T12712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.433501][T12712] usb 2-1: config 0 descriptor?? [ 634.582388][ T30] audit: type=1400 audit(1753416356.451:1356): avc: denied { read } for pid=13009 comm="syz.5.1851" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 634.611371][ T30] audit: type=1400 audit(1753416356.461:1357): avc: denied { open } for pid=13009 comm="syz.5.1851" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 635.934021][T12993] netlink: 'syz.1.1847': attribute type 11 has an invalid length. [ 636.017357][T12993] loop3: detected capacity change from 0 to 7 [ 636.075463][T12993] Dev loop3: unable to read RDB block 7 [ 636.231465][T12993] loop3: unable to read partition table [ 636.241871][T12993] loop3: partition table beyond EOD, truncated [ 636.248143][T12993] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 636.776398][T12993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.777493][T13023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1853'. [ 636.822066][T12993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.152144][T13028] netlink: 'syz.6.1857': attribute type 1 has an invalid length. [ 637.212666][T12712] usbhid 2-1:0.0: can't add hid device: -71 [ 637.218681][T12712] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 637.727949][T12712] usb 2-1: USB disconnect, device number 66 [ 638.161043][T13028] 8021q: adding VLAN 0 to HW filter on device bond2 [ 638.183617][T13033] Falling back ldisc for ptm0. [ 638.201699][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1857'. [ 638.274890][T13030] veth9: entered promiscuous mode [ 638.295554][T13030] bond2: (slave veth9): Enslaving as an active interface with a down link [ 638.388060][T13051] usb usb8: usbfs: process 13051 (syz.5.1861) did not claim interface 0 before use [ 638.476449][T13057] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=272 sclass=netlink_xfrm_socket pid=13057 comm=syz.1.1859 [ 638.581783][ T30] audit: type=1400 audit(1753416360.451:1358): avc: denied { read } for pid=13043 comm="syz.1.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 638.771958][ T9] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 638.811755][ T5900] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 638.933764][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 638.950089][ T30] audit: type=1400 audit(1753416360.821:1359): avc: denied { setopt } for pid=13066 comm="syz.2.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 638.963026][ T5900] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 638.981300][ T5900] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 638.994528][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 638.997885][ T5900] usb 7-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 639.004396][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 639.032153][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.049924][ T5900] usb 7-1: config 0 descriptor?? [ 639.352694][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 639.359474][ T30] audit: type=1326 audit(1753416361.201:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.2.1866" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1694d8e9a9 code=0x0 [ 639.370422][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 639.385607][ C1] vkms_vblank_simulate: vblank timer overrun [ 639.543064][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.445257][ T9] usb 6-1: config 0 descriptor?? [ 640.450484][ T30] audit: type=1400 audit(1753416361.481:1361): avc: denied { block_suspend } for pid=13072 comm="syz.7.1867" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 640.489953][ T30] audit: type=1400 audit(1753416361.511:1362): avc: denied { module_load } for pid=13072 comm="syz.7.1867" path="/sys/power/wakeup_count" dev="sysfs" ino=1408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 640.586931][T13081] usb usb8: usbfs: process 13081 (syz.2.1870) did not claim interface 0 before use [ 640.607518][ T5900] usbhid 7-1:0.0: can't add hid device: -71 [ 640.627582][ T5900] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 640.636326][T13078] can: request_module (can-proto-5) failed. [ 640.651273][ T5900] usb 7-1: USB disconnect, device number 61 [ 640.662619][T13086] netlink: 'syz.7.1871': attribute type 5 has an invalid length. [ 640.678361][ T9] hdpvr 6-1:0.0: unexpected answer of status request, len -71 [ 640.680798][T13086] netlink: 'syz.7.1871': attribute type 7 has an invalid length. [ 640.695008][ T9] hdpvr 6-1:0.0: device init failed [ 640.725705][ T9] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 640.737872][ T9] usb 6-1: USB disconnect, device number 64 [ 640.756340][T13086] : entered promiscuous mode [ 641.200229][T13100] usb usb8: usbfs: process 13100 (syz.2.1875) did not claim interface 0 before use [ 641.455692][T13105] FAULT_INJECTION: forcing a failure. [ 641.455692][T13105] name failslab, interval 1, probability 0, space 0, times 0 [ 641.468603][T13105] CPU: 0 UID: 0 PID: 13105 Comm: syz.6.1876 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 641.468629][T13105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 641.468640][T13105] Call Trace: [ 641.468646][T13105] [ 641.468653][T13105] dump_stack_lvl+0x16c/0x1f0 [ 641.468676][T13105] should_fail_ex+0x512/0x640 [ 641.468703][T13105] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 641.468738][T13105] should_failslab+0xc2/0x120 [ 641.468756][T13105] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 641.468782][T13105] ? mas_alloc_nodes+0x18b/0x8b0 [ 641.468812][T13105] mas_alloc_nodes+0x18b/0x8b0 [ 641.468843][T13105] mas_node_count_gfp+0x105/0x130 [ 641.468870][T13105] mas_preallocate+0x7e0/0xde0 [ 641.468888][T13105] ? __memcg_slab_post_alloc_hook+0x3f2/0x960 [ 641.468913][T13105] ? __pfx_mas_preallocate+0x10/0x10 [ 641.468942][T13105] ? anon_vma_name+0x75/0x100 [ 641.468966][T13105] __split_vma+0x34a/0x1070 [ 641.468994][T13105] ? __pfx___split_vma+0x10/0x10 [ 641.469025][T13105] ? __pfx___schedule+0x10/0x10 [ 641.469057][T13105] vma_modify+0x16dc/0x2030 [ 641.469087][T13105] ? irqentry_exit+0x3b/0x90 [ 641.469103][T13105] ? __pfx_vma_modify+0x10/0x10 [ 641.469135][T13105] vma_modify_flags+0x212/0x2d0 [ 641.469160][T13105] ? __pfx_vma_modify_flags+0x10/0x10 [ 641.469204][T13105] mlock_fixup+0x27c/0xe50 [ 641.469233][T13105] apply_vma_lock_flags+0x261/0x390 [ 641.469261][T13105] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 641.469286][T13105] ? __pfx___might_resched+0x10/0x10 [ 641.469310][T13105] ? trace_sched_exit_tp+0xde/0x130 [ 641.469340][T13105] ? __pfx_down_write_killable+0x10/0x10 [ 641.469368][T13105] do_mlock+0x2ac/0x810 [ 641.469393][T13105] ? __pfx___schedule+0x10/0x10 [ 641.469418][T13105] ? __pfx_do_mlock+0x10/0x10 [ 641.469445][T13105] ? fput+0x70/0xf0 [ 641.469464][T13105] ? ksys_write+0x1ac/0x250 [ 641.469495][T13105] __x64_sys_mlock2+0xbd/0x100 [ 641.469521][T13105] do_syscall_64+0xcd/0x4c0 [ 641.469541][T13105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.469559][T13105] RIP: 0033:0x7fb4caf8e9a9 [ 641.469574][T13105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.469591][T13105] RSP: 002b:00007fb4cbe7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 641.469609][T13105] RAX: ffffffffffffffda RBX: 00007fb4cb1b6160 RCX: 00007fb4caf8e9a9 [ 641.469621][T13105] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000004000 [ 641.469631][T13105] RBP: 00007fb4cbe7a090 R08: 0000000000000000 R09: 0000000000000000 [ 641.469641][T13105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.469651][T13105] R13: 0000000000000000 R14: 00007fb4cb1b6160 R15: 00007ffc2a54e0c8 [ 641.469676][T13105] [ 641.743491][T13103] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1876'. [ 641.752378][T13103] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1876'. [ 642.084539][T13107] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1877'. [ 643.701861][ T5944] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 643.777248][ T5900] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 644.161592][ T30] audit: type=1400 audit(1753416365.831:1363): avc: denied { map } for pid=13134 comm="syz.7.1886" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 644.185339][ C1] vkms_vblank_simulate: vblank timer overrun [ 644.193513][ T30] audit: type=1400 audit(1753416365.831:1364): avc: denied { execute } for pid=13134 comm="syz.7.1886" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 644.217517][ C1] vkms_vblank_simulate: vblank timer overrun [ 644.251834][ T5900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 644.271762][ T5900] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 644.273441][ T5944] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 644.282021][ T5900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 644.293003][ T5944] usb 3-1: config 0 has no interface number 0 [ 644.299920][ T5900] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 644.308102][ T5944] usb 3-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 644.320062][ T5900] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 644.324977][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.337238][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.342203][ T5944] usb 3-1: Product: syz [ 644.354225][ T5944] usb 3-1: Manufacturer: syz [ 644.358875][ T5944] usb 3-1: SerialNumber: syz [ 644.367014][ T5900] usb 7-1: config 0 descriptor?? [ 644.367420][ T5944] usb 3-1: config 0 descriptor?? [ 646.674362][ T5900] hdpvr 7-1:0.0: unexpected answer of status request, len -71 [ 646.683986][ T5900] hdpvr 7-1:0.0: device init failed [ 646.689383][ T5900] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 646.733571][ T5900] usb 7-1: USB disconnect, device number 62 [ 646.756886][ T5944] usb 3-1: probing VID:PID(2201:012C) [ 646.778483][ T5944] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 646.817883][T13149] usb usb8: usbfs: process 13149 (syz.1.1888) did not claim interface 0 before use [ 646.843857][ T5944] vub300 3-1:0.239: probe with driver vub300 failed with error -22 [ 646.860224][ T5944] usb 3-1: USB disconnect, device number 76 [ 647.521781][ T30] audit: type=1400 audit(1753416369.391:1365): avc: denied { execute } for pid=13151 comm="syz.2.1890" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 647.552244][T13153] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1890'. [ 647.612348][T13163] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1892'. [ 647.644402][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1892'. [ 648.003415][T13180] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.010802][T13180] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.018697][T13180] bridge0: entered allmulticast mode [ 648.071943][ T5900] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 648.262452][T13186] overlayfs: failed to resolve './file0': -2 [ 648.389158][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 648.589898][ T5900] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 648.759133][ T5900] usb 2-1: config 179 has no interface number 0 [ 648.772344][ T5900] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 648.794984][T13180] bridge_slave_1: left allmulticast mode [ 648.800975][ T5900] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 648.814818][T13180] bridge_slave_1: left promiscuous mode [ 648.820511][ T5900] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 648.834348][T13180] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.841756][ T5900] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 648.858321][T13189] FAULT_INJECTION: forcing a failure. [ 648.858321][T13189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.861262][ T5900] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 648.885952][ T5900] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 648.895845][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.911844][T13189] CPU: 1 UID: 0 PID: 13189 Comm: syz.5.1899 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 648.911875][T13189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 648.911885][T13189] Call Trace: [ 648.911891][T13189] [ 648.911899][T13189] dump_stack_lvl+0x16c/0x1f0 [ 648.911923][T13189] should_fail_ex+0x512/0x640 [ 648.911954][T13189] _copy_to_user+0x32/0xd0 [ 648.911973][T13189] simple_read_from_buffer+0xcb/0x170 [ 648.912003][T13189] proc_fail_nth_read+0x197/0x270 [ 648.912030][T13189] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 648.912057][T13189] ? rw_verify_area+0xcf/0x680 [ 648.912080][T13189] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 648.912106][T13189] vfs_read+0x1e1/0xc60 [ 648.912135][T13189] ? __pfx___mutex_lock+0x10/0x10 [ 648.912153][T13189] ? __pfx_vfs_read+0x10/0x10 [ 648.912185][T13189] ? __fget_files+0x20e/0x3c0 [ 648.912209][T13189] ksys_read+0x12a/0x250 [ 648.912233][T13189] ? __pfx_ksys_read+0x10/0x10 [ 648.912258][T13189] ? ksys_fadvise64_64+0xcd/0x130 [ 648.912291][T13189] do_syscall_64+0xcd/0x4c0 [ 648.912311][T13189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.912329][T13189] RIP: 0033:0x7f733298d3bc [ 648.912343][T13189] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 648.912360][T13189] RSP: 002b:00007f73337e6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 648.912378][T13189] RAX: ffffffffffffffda RBX: 00007f7332bb5fa0 RCX: 00007f733298d3bc [ 648.912389][T13189] RDX: 000000000000000f RSI: 00007f73337e60a0 RDI: 0000000000000004 [ 648.912399][T13189] RBP: 00007f73337e6090 R08: 0000000000000000 R09: 0000000000000000 [ 648.912409][T13189] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 648.912420][T13189] R13: 0000000000000000 R14: 00007f7332bb5fa0 R15: 00007ffdd842c8f8 [ 648.912444][T13189] [ 649.107418][ C1] vkms_vblank_simulate: vblank timer overrun [ 649.140736][T13163] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 649.217302][T13180] bridge_slave_0: left allmulticast mode [ 649.252306][T13180] bridge_slave_0: left promiscuous mode [ 649.265772][T13180] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.863985][T13199] ip6erspan0: entered promiscuous mode [ 650.557201][T13209] pim6reg1: renamed from bridge_slave_0 (while UP) [ 650.615550][ T30] audit: type=1400 audit(1753416372.491:1366): avc: denied { mounton } for pid=13210 comm="syz.5.1905" path="/proc/1092/cgroup" dev="proc" ino=84524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 650.639380][ T30] audit: type=1400 audit(1753416372.491:1367): avc: denied { remount } for pid=13210 comm="syz.5.1905" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 650.851866][ T5941] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 650.877998][ T9] usb 2-1: USB disconnect, device number 67 [ 650.878009][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 650.878044][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 650.902332][ C1] vkms_vblank_simulate: vblank timer overrun [ 651.015675][ T5941] usb 6-1: config 0 has an invalid interface number: 178 but max is 0 [ 651.024200][ T5941] usb 6-1: config 0 has no interface number 0 [ 651.030303][ T5941] usb 6-1: config 0 interface 178 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 651.031882][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1906'. [ 651.044658][ T5941] usb 6-1: config 0 interface 178 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 651.068059][ T5941] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 651.078002][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.093256][ T5941] usb 6-1: Product: syz [ 651.094381][T13214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1906'. [ 651.098386][ T5941] usb 6-1: Manufacturer: syz [ 651.111370][ T5941] usb 6-1: SerialNumber: syz [ 651.123760][ T5941] usb 6-1: config 0 descriptor?? [ 651.135423][ T5941] redrat3 6-1:0.178: Couldn't find all endpoints [ 652.064920][T13211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.077169][T13211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.090335][ T5838] usb 6-1: USB disconnect, device number 65 [ 652.180254][T13224] overlayfs: workdir and upperdir must reside under the same mount [ 652.208443][ T30] audit: type=1400 audit(1753416374.081:1368): avc: denied { remount } for pid=13223 comm="syz.6.1909" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 652.233484][T13224] option changes via remount are deprecated (pid=13223 comm=syz.6.1909) [ 652.300614][ T30] audit: type=1400 audit(1753416374.171:1369): avc: denied { unmount } for pid=6466 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 652.411436][T13226] siw: device registration error -23 [ 652.836332][ T30] audit: type=1400 audit(1753416374.711:1370): avc: denied { write } for pid=13229 comm="syz.2.1912" dev="sockfs" ino=85164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 652.839269][T13230] 9pnet_fd: Insufficient options for proto=fd [ 653.930790][T13246] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1915'. [ 654.497512][T13254] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1910'. [ 654.508326][T13254] overlayfs: failed to resolve './file0': -2 [ 655.251900][ T30] audit: type=1400 audit(1753416377.001:1371): avc: denied { watch_sb watch_reads } for pid=13267 comm="syz.6.1922" path="/308/file1" dev="tmpfs" ino=1659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 655.796721][T13276] overlayfs: failed to resolve './file0': -2 [ 657.904120][ T30] audit: type=1400 audit(1753416379.781:1372): avc: denied { connect } for pid=13292 comm="syz.6.1930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 658.012111][T13297] overlayfs: failed to resolve './file0': -2 [ 658.511817][T13301] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1932'. [ 658.538905][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1932'. [ 658.791992][ T5913] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 658.951958][ T5913] usb 6-1: Using ep0 maxpacket: 8 [ 659.031311][T13309] cgroup: none used incorrectly [ 659.032010][ T5913] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 659.101253][ T5913] usb 6-1: config 179 has no interface number 0 [ 659.108074][ T5913] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 659.121343][ T5913] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 659.135867][ T5913] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 659.147681][T13310] netlink: 'syz.1.1934': attribute type 10 has an invalid length. [ 659.165526][T13310] team0: Device ipvlan1 failed to register rx_handler [ 659.178287][ T5913] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 659.212998][ T5913] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 659.227126][ T5913] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 659.239088][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.308864][T13301] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 659.494980][T13312] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1935'. [ 659.555035][T13312] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1935'. [ 659.576904][T13312] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 659.921929][ T5838] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 661.362609][ T5838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.372626][ T5838] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 661.385809][ T5838] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 661.395131][ T5838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.412491][ T5838] usb 7-1: config 0 descriptor?? [ 661.530238][ T5944] usb 6-1: USB disconnect, device number 66 [ 661.530238][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 661.530279][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 661.797749][T13331] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 661.845520][T13337] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1944'. [ 661.860731][T13337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.923484][T13337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.933854][ T5838] kovaplus 0003:1E7D:2D50.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0 [ 662.317526][T13344] FAULT_INJECTION: forcing a failure. [ 662.317526][T13344] name failslab, interval 1, probability 0, space 0, times 0 [ 662.331880][T13344] CPU: 1 UID: 0 PID: 13344 Comm: syz.5.1946 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 662.331907][T13344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 662.331918][T13344] Call Trace: [ 662.331923][T13344] [ 662.331930][T13344] dump_stack_lvl+0x16c/0x1f0 [ 662.331954][T13344] should_fail_ex+0x512/0x640 [ 662.331980][T13344] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 662.332007][T13344] should_failslab+0xc2/0x120 [ 662.332024][T13344] __kmalloc_cache_noprof+0x6a/0x3e0 [ 662.332048][T13344] ? __igmp_group_dropped+0x6ea/0xe80 [ 662.332070][T13344] __igmp_group_dropped+0x6ea/0xe80 [ 662.332094][T13344] ? __pfx___igmp_group_dropped+0x10/0x10 [ 662.332116][T13344] ? __local_bh_enable_ip+0xa4/0x120 [ 662.332137][T13344] ? lockdep_hardirqs_on+0x7c/0x110 [ 662.332174][T13344] __ip_mc_dec_group+0x413/0x5b0 [ 662.332197][T13344] ip_mc_leave_group+0x29c/0x510 [ 662.332220][T13344] ip_mc_msfilter+0x951/0xc10 [ 662.332238][T13344] ? _copy_from_user+0x59/0xd0 [ 662.332259][T13344] ? __pfx_ip_mc_msfilter+0x10/0x10 [ 662.332280][T13344] ? __local_bh_enable_ip+0xa4/0x120 [ 662.332300][T13344] ? ip_setsockopt+0x59/0xf0 [ 662.332327][T13344] do_ip_setsockopt+0x2eca/0x3240 [ 662.332353][T13344] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 662.332376][T13344] ? avc_has_perm_noaudit+0x149/0x3b0 [ 662.332400][T13344] ? avc_has_perm+0x11a/0x1c0 [ 662.332421][T13344] ? __pfx_avc_has_perm+0x10/0x10 [ 662.332446][T13344] ip_setsockopt+0x59/0xf0 [ 662.332477][T13344] ipv6_setsockopt+0x155/0x170 [ 662.332503][T13344] sctp_setsockopt+0x169/0xb870 [ 662.332529][T13344] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 662.332563][T13344] ? __pfx_sctp_setsockopt+0x10/0x10 [ 662.332587][T13344] ? find_held_lock+0x2b/0x80 [ 662.332613][T13344] ? selinux_socket_setsockopt+0x6a/0x80 [ 662.332637][T13344] ? sock_common_setsockopt+0x2e/0xf0 [ 662.332657][T13344] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 662.332681][T13344] do_sock_setsockopt+0xf0/0x1d0 [ 662.332704][T13344] __sys_setsockopt+0x1a0/0x230 [ 662.332736][T13344] __x64_sys_setsockopt+0xbd/0x160 [ 662.332760][T13344] ? do_syscall_64+0x91/0x4c0 [ 662.332776][T13344] ? lockdep_hardirqs_on+0x7c/0x110 [ 662.332802][T13344] do_syscall_64+0xcd/0x4c0 [ 662.332821][T13344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.332839][T13344] RIP: 0033:0x7f733298e9a9 [ 662.332854][T13344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.332871][T13344] RSP: 002b:00007f73337e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 662.332888][T13344] RAX: ffffffffffffffda RBX: 00007f7332bb5fa0 RCX: 00007f733298e9a9 [ 662.332899][T13344] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000004 [ 662.332910][T13344] RBP: 00007f73337e6090 R08: 0000000000000010 R09: 0000000000000000 [ 662.332920][T13344] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 662.332932][T13344] R13: 0000000000000000 R14: 00007f7332bb5fa0 R15: 00007ffdd842c8f8 [ 662.332955][T13344] [ 662.638063][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.728684][T12712] usb 3-1: new low-speed USB device number 77 using dummy_hcd [ 662.777761][T13315] netlink: 'syz.6.1936': attribute type 1 has an invalid length. [ 662.891001][T13315] 8021q: adding VLAN 0 to HW filter on device bond3 [ 662.899071][T12712] usb 3-1: unable to get BOS descriptor or descriptor too short [ 662.909081][T12712] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 662.919561][T12712] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 662.933860][T12712] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 662.945804][T12712] usb 3-1: string descriptor 0 read error: -22 [ 662.952268][T12712] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 662.961332][T12712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.980597][T12712] usb 3-1: 0:2 : does not exist [ 663.173835][T13315] tmpfs: Bad value for 'mpol' [ 663.241739][ T5944] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 663.408759][T13315] bond3: (slave gretap1): making interface the new active one [ 663.436373][T13315] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 663.449858][T13342] SELinux: failed to load policy [ 663.459086][ T5838] kovaplus 0003:1E7D:2D50.0009: couldn't init struct kovaplus_device [ 663.467614][ T5838] kovaplus 0003:1E7D:2D50.0009: couldn't install mouse [ 663.477087][ T5838] kovaplus 0003:1E7D:2D50.0009: probe with driver kovaplus failed with error -71 [ 663.488169][ T5838] usb 7-1: USB disconnect, device number 63 [ 663.553059][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 663.562889][ T5944] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 663.572795][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 663.582679][ T5944] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 663.592480][ T5944] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 663.601750][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.615795][ T5944] usb 6-1: config 0 descriptor?? [ 663.829544][ T5944] hdpvr 6-1:0.0: unexpected answer of status request, len -71 [ 663.910271][ T5944] hdpvr 6-1:0.0: device init failed [ 663.918435][ T5944] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 663.930784][ T5944] usb 6-1: USB disconnect, device number 67 [ 664.288049][T13373] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1953'. [ 664.321007][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1953'. [ 664.581777][T12712] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 664.832595][ T30] audit: type=1400 audit(1753416386.631:1373): avc: denied { bind } for pid=13377 comm="syz.5.1955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 664.891711][T12712] usb 7-1: Using ep0 maxpacket: 8 [ 664.910386][T12712] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 664.921516][T12712] usb 7-1: config 179 has no interface number 0 [ 664.927955][T12712] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 664.939358][T12712] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 664.950930][T12712] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 664.962225][T12712] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 664.973748][T12712] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 664.988658][T12712] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 665.001513][T12712] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.016064][T13373] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 665.362571][T12712] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 665.588918][ T5944] usb 3-1: USB disconnect, device number 77 [ 665.601997][T12712] usb 6-1: Using ep0 maxpacket: 32 [ 665.627099][T12712] usb 6-1: config 2 has an invalid interface number: 228 but max is 0 [ 665.641188][T12712] usb 6-1: config 2 has no interface number 0 [ 665.659096][T12712] usb 6-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=47.8d [ 665.677632][T12712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.772623][T12712] usb 6-1: Product: syz [ 665.948803][T12712] usb 6-1: Manufacturer: syz [ 665.964839][T12712] usb 6-1: SerialNumber: syz [ 666.017748][T12712] snd_usb_variax 6-1:2.228: Line 6 Variax Workbench found [ 666.066258][T13394] Invalid source name [ 666.070423][T13394] UBIFS error (pid: 13394): cannot open "ubifs", error -22 [ 666.082576][ T30] audit: type=1400 audit(1753416387.931:1374): avc: denied { append } for pid=13391 comm="syz.2.1959" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 666.138455][T12712] usb 6-1: selecting invalid altsetting 1 [ 666.237613][T12712] snd_usb_variax 6-1:2.228: set_interface failed [ 666.309703][T13382] netlink: 'syz.5.1956': attribute type 1 has an invalid length. [ 666.313879][T12712] snd_usb_variax 6-1:2.228: Line 6 Variax Workbench now disconnected [ 666.319294][T13382] netlink: 15 bytes leftover after parsing attributes in process `syz.5.1956'. [ 666.349370][T13382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.362276][T13382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.483197][T12712] snd_usb_variax 6-1:2.228: probe with driver snd_usb_variax failed with error -22 [ 666.495715][T12712] usb 6-1: USB disconnect, device number 68 [ 667.418186][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 667.418190][ T5941] usb 7-1: USB disconnect, device number 64 [ 667.418230][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 667.440788][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.853402][ T5944] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 668.983023][T13422] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1968'. [ 668.992580][T13422] ip6gretap0: entered promiscuous mode [ 669.005109][T13422] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1968'. [ 669.323879][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 669.376088][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.436941][ T5944] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 669.477410][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.533100][ T5944] usb 2-1: config 0 descriptor?? [ 669.789181][T13425] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1966'. [ 669.990387][ T5944] elo 0003:04E7:0030.000A: item fetching failed at offset 0/3 [ 670.057793][ T5944] elo 0003:04E7:0030.000A: parse failed [ 670.104554][ T5944] elo 0003:04E7:0030.000A: probe with driver elo failed with error -22 [ 670.925524][ T5944] usb 7-1: new low-speed USB device number 65 using dummy_hcd [ 671.092749][ T5941] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 671.137342][ T5944] usb 7-1: unable to get BOS descriptor or descriptor too short [ 671.179551][ T5944] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 671.203170][ T5944] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 671.228939][ T5944] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 671.299515][ T5941] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 671.352775][ T5944] usb 7-1: string descriptor 0 read error: -22 [ 671.377822][ T5941] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 671.402316][ T5944] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 671.459431][ T5944] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.470267][ T5941] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 671.490133][ T9] usb 2-1: USB disconnect, device number 68 [ 671.518758][ T5944] usb 7-1: 0:2 : does not exist [ 671.532357][ T5941] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 671.551088][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 671.561443][ T5941] usb 6-1: Product: syz [ 671.580738][ T5941] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 671.854951][ T5941] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 671.992830][T13428] SELinux: failed to load policy [ 672.077259][T13448] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1976'. [ 672.145204][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1976'. [ 672.208297][ T5941] usb 7-1: USB disconnect, device number 65 [ 672.235812][ T5944] Process accounting resumed [ 672.248524][T13460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.401970][ T9] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 672.551682][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 672.567610][ T9] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 672.589142][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.607883][ T9] usb 3-1: config 0 descriptor?? [ 672.620845][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 673.488062][T12712] usb 6-1: USB disconnect, device number 69 [ 674.477995][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 674.521905][ T5944] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 674.696030][ T5944] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 674.710148][ T9] gspca_vc032x: reg_w err -71 [ 674.718647][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 674.730269][ T5944] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 674.741496][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 674.750406][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 674.755913][ T5944] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 674.771864][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 674.777209][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 674.786785][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 674.792458][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 674.798226][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 674.807991][ T5944] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 674.821278][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 674.833418][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 674.838826][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 674.850669][ T5944] usb 6-1: Product: syz [ 674.855061][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 674.860347][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 674.866605][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 674.872867][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 674.878341][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 674.885256][ T5944] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 674.892458][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 674.897743][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 675.370235][ T9] gspca_vc032x: Unknown sensor... [ 675.375424][ T9] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 675.389392][ T5944] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 675.427284][ T9] usb 3-1: USB disconnect, device number 78 [ 675.684963][T13496] FAULT_INJECTION: forcing a failure. [ 675.684963][T13496] name failslab, interval 1, probability 0, space 0, times 0 [ 675.698476][T13496] CPU: 0 UID: 0 PID: 13496 Comm: syz.7.1991 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 675.698496][T13496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 675.698502][T13496] Call Trace: [ 675.698507][T13496] [ 675.698512][T13496] dump_stack_lvl+0x16c/0x1f0 [ 675.698530][T13496] should_fail_ex+0x512/0x640 [ 675.698548][T13496] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 675.698568][T13496] should_failslab+0xc2/0x120 [ 675.698579][T13496] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 675.698596][T13496] ? getname_flags.part.0+0x4c/0x550 [ 675.698613][T13496] getname_flags.part.0+0x4c/0x550 [ 675.698628][T13496] getname_flags+0x93/0xf0 [ 675.698644][T13496] do_sys_openat2+0xb8/0x1d0 [ 675.698658][T13496] ? __pfx_do_sys_openat2+0x10/0x10 [ 675.698672][T13496] ? __fget_files+0x20e/0x3c0 [ 675.698685][T13496] __x64_sys_openat+0x174/0x210 [ 675.698698][T13496] ? __pfx___x64_sys_openat+0x10/0x10 [ 675.698710][T13496] ? ksys_write+0x1ac/0x250 [ 675.698731][T13496] do_syscall_64+0xcd/0x4c0 [ 675.698744][T13496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.698759][T13496] RIP: 0033:0x7f1da7d8e9a9 [ 675.698769][T13496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.698781][T13496] RSP: 002b:00007f1da8c51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 675.698793][T13496] RAX: ffffffffffffffda RBX: 00007f1da7fb5fa0 RCX: 00007f1da7d8e9a9 [ 675.698800][T13496] RDX: 000000000000275a RSI: 0000200000000240 RDI: ffffffffffffff9c [ 675.698807][T13496] RBP: 00007f1da8c51090 R08: 0000000000000000 R09: 0000000000000000 [ 675.698814][T13496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.698820][T13496] R13: 0000000000000000 R14: 00007f1da7fb5fa0 R15: 00007ffde17256b8 [ 675.698834][T13496] [ 675.885084][ T5944] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 675.911772][ T5913] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 676.041704][ T5944] usb 7-1: Using ep0 maxpacket: 8 [ 676.048669][ T5944] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 676.056901][ T5944] usb 7-1: config 0 has no interface number 0 [ 676.063240][ T5944] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 676.074229][ T5944] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 676.086018][ T5944] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 676.123649][ T5944] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 676.133638][ T5913] usb 2-1: unable to get BOS descriptor or descriptor too short [ 676.144591][ T5944] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 676.149141][ T5913] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 676.162717][ T5913] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 676.622535][ T5944] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.640225][ T5944] usb 7-1: config 0 descriptor?? [ 676.644010][ T5913] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 676.660400][ T5913] usb 2-1: string descriptor 0 read error: -22 [ 676.667135][ T5913] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 676.680260][ T5944] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 676.680397][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.711947][ T5913] usb 2-1: 0:2 : does not exist [ 676.952101][T13495] SELinux: failed to load policy [ 677.059283][ T5944] usb 2-1: USB disconnect, device number 69 [ 677.094218][ T9] usb 7-1: USB disconnect, device number 66 [ 677.102034][ T9] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 677.277533][ T5913] usb 6-1: USB disconnect, device number 70 [ 677.836240][ T5913] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 678.003196][ T5913] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 678.013592][ T5913] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 678.025350][ T5913] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 678.040528][ T5913] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 678.058732][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 678.067044][ T5913] usb 2-1: Product: syz [ 678.075923][ T5913] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 678.083611][ T5913] usb 2-1: invalid MIDI out EP 0 [ 678.108656][ T5913] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 678.141038][T13525] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2000'. [ 678.179033][T13525] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2000'. [ 679.028861][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2003'. [ 679.184839][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2002'. [ 679.209122][T13535] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 679.249597][T13535] netlink: 120 bytes leftover after parsing attributes in process `syz.6.2002'. [ 679.599801][ T9] usb 2-1: USB disconnect, device number 70 [ 679.629148][T13551] pim6reg1: entered promiscuous mode [ 679.637287][T13551] pim6reg1: entered allmulticast mode [ 679.889024][T13558] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2009'. [ 679.899499][T13558] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2009'. [ 680.266859][T13562] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 680.971072][T13567] Bluetooth: Invalid byte 00 after esc byte [ 681.227547][ T30] audit: type=1326 audit(1753416659.095:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13575 comm="syz.7.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da7d8e9a9 code=0x7ffc0000 [ 681.251909][ T30] audit: type=1326 audit(1753416659.115:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13575 comm="syz.7.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da7d8e9a9 code=0x7ffc0000 [ 681.278075][ T30] audit: type=1326 audit(1753416659.115:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13575 comm="syz.7.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1da7d8e9a9 code=0x7ffc0000 [ 681.315507][ T30] audit: type=1326 audit(1753416659.115:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13575 comm="syz.7.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da7d8e9a9 code=0x7ffc0000 [ 681.354829][ T30] audit: type=1326 audit(1753416659.125:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13575 comm="syz.7.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da7d8e9a9 code=0x7ffc0000 [ 681.384922][ T30] audit: type=1326 audit(1753416659.145:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13575 comm="syz.7.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1da7d8e9a9 code=0x7ffc0000 [ 681.387381][T13578] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 681.408454][ C1] vkms_vblank_simulate: vblank timer overrun [ 681.409017][ T30] audit: type=1326 audit(1753416659.145:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13575 comm="syz.7.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da7d8e9a9 code=0x7ffc0000 [ 681.454119][ T30] audit: type=1326 audit(1753416659.145:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13575 comm="syz.7.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da7d8e9a9 code=0x7ffc0000 [ 681.478327][ T30] audit: type=1326 audit(1753416659.175:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13575 comm="syz.7.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f1da7d8e9a9 code=0x7ffc0000 [ 681.504144][ T30] audit: type=1326 audit(1753416659.175:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13575 comm="syz.7.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da7d8e9a9 code=0x7ffc0000 [ 681.837298][T13582] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2016'. [ 682.030898][T13585] fuse: Bad value for 'fd' [ 682.044284][T13585] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2017'. [ 682.222144][T13595] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2021'. [ 682.292068][ T5944] usb 6-1: new low-speed USB device number 71 using dummy_hcd [ 682.422574][ T6096] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 682.435533][T13599] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 682.463633][ T5944] usb 6-1: unable to get BOS descriptor or descriptor too short [ 682.476535][ T5944] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 682.485614][ T5944] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 682.496340][ T5944] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 682.508173][ T5944] usb 6-1: string descriptor 0 read error: -22 [ 682.522183][ T5944] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 682.535764][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.559157][ T5944] usb 6-1: 0:2 : does not exist [ 682.828997][T13587] SELinux: failed to load policy [ 682.859410][ T5944] usb 6-1: USB disconnect, device number 71 [ 683.052029][ T5830] Bluetooth: hci5: command 0x1003 tx timeout [ 683.053440][ T5846] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 684.267176][T13621] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2027'. [ 685.119907][T13627] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 685.222958][T13630] batman_adv: batadv0: Adding interface: ipvlan0 [ 685.392015][T13630] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.610739][T13630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.621942][T13630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.699557][T13630] batman_adv: batadv0: Interface activated: ipvlan0 [ 685.935200][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.941638][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.066522][T13644] loop2: detected capacity change from 0 to 7 [ 686.121780][T13644] Dev loop2: unable to read RDB block 7 [ 686.127418][T13644] loop2: unable to read partition table [ 686.150346][T13644] loop2: partition table beyond EOD, truncated [ 686.164333][T13648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2038'. [ 686.186096][T13644] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 686.301832][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 686.351688][ T9] usb 7-1: new low-speed USB device number 67 using dummy_hcd [ 686.513786][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 686.568417][ T9] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 686.589129][ T9] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 686.604690][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 686.619465][ T9] usb 7-1: string descriptor 0 read error: -22 [ 686.625996][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 686.640580][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.655089][ T9] usb 7-1: 0:2 : does not exist [ 687.208793][T13646] SELinux: failed to load policy [ 687.231078][T13667] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2043'. [ 687.240679][T13667] netlink: 'syz.5.2043': attribute type 4 has an invalid length. [ 687.261701][ T5997] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 687.328604][ T5944] usb 7-1: USB disconnect, device number 67 [ 687.413453][ T5997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 687.423439][ T5997] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 687.433750][ T5997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 687.444076][ T5997] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 687.454321][ T5997] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 687.463423][ T5997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.473751][ T5997] usb 3-1: config 0 descriptor?? [ 687.574502][T12712] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 687.582541][ T5913] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 687.721773][T12712] usb 6-1: device descriptor read/64, error -71 [ 688.971955][ T5913] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 688.986314][ T5997] hdpvr 3-1:0.0: unexpected answer of status request, len -71 [ 688.997444][ T5997] hdpvr 3-1:0.0: device init failed [ 689.001792][ T5913] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 689.002851][ T5997] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 689.026666][ T5997] usb 3-1: USB disconnect, device number 79 [ 689.045359][ T5913] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 689.059596][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 689.076838][ T5913] usb 2-1: Product: syz [ 689.104331][ T5913] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 689.122444][ T5913] usb 2-1: invalid MIDI out EP 0 [ 689.147657][ T5913] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 689.222357][T12712] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 689.260868][T13687] FAULT_INJECTION: forcing a failure. [ 689.260868][T13687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.274228][T13687] CPU: 1 UID: 0 PID: 13687 Comm: syz.6.2050 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 689.274259][T13687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 689.274271][T13687] Call Trace: [ 689.274278][T13687] [ 689.274285][T13687] dump_stack_lvl+0x16c/0x1f0 [ 689.274310][T13687] should_fail_ex+0x512/0x640 [ 689.274340][T13687] _copy_from_iter+0x29f/0x16f0 [ 689.274362][T13687] ? __alloc_skb+0x200/0x380 [ 689.274390][T13687] ? __pfx__copy_from_iter+0x10/0x10 [ 689.274409][T13687] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 689.274438][T13687] netlink_sendmsg+0x829/0xdd0 [ 689.274464][T13687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.274494][T13687] ____sys_sendmsg+0xa98/0xc70 [ 689.274516][T13687] ? copy_msghdr_from_user+0x10a/0x160 [ 689.274533][T13687] ? __pfx_____sys_sendmsg+0x10/0x10 [ 689.274566][T13687] ___sys_sendmsg+0x134/0x1d0 [ 689.274585][T13687] ? __pfx____sys_sendmsg+0x10/0x10 [ 689.274600][T13687] ? __lock_acquire+0x622/0x1c90 [ 689.274650][T13687] __sys_sendmsg+0x16d/0x220 [ 689.274667][T13687] ? __pfx___sys_sendmsg+0x10/0x10 [ 689.274694][T13687] ? fput+0x70/0xf0 [ 689.274718][T13687] do_syscall_64+0xcd/0x4c0 [ 689.274737][T13687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.274755][T13687] RIP: 0033:0x7fb4caf8e9a9 [ 689.274770][T13687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.274787][T13687] RSP: 002b:00007fb4cbebc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 689.274804][T13687] RAX: ffffffffffffffda RBX: 00007fb4cb1b5fa0 RCX: 00007fb4caf8e9a9 [ 689.274816][T13687] RDX: 0000000000000040 RSI: 0000200000000440 RDI: 0000000000000003 [ 689.274826][T13687] RBP: 00007fb4cbebc090 R08: 0000000000000000 R09: 0000000000000000 [ 689.274837][T13687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.274848][T13687] R13: 0000000000000000 R14: 00007fb4cb1b5fa0 R15: 00007ffc2a54e0c8 [ 689.274871][T13687] [ 689.541760][T12712] usb 6-1: device descriptor read/64, error -71 [ 689.652038][T12712] usb usb6-port1: attempt power cycle [ 690.001718][T12712] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 694.211616][ C0] sched: DL replenish lagged too much [ 694.218253][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 694.309351][T12712] usb 6-1: device descriptor read/8, error -71 [ 708.942645][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 737.106469][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 748.336507][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.355199][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 798.535814][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 808.892919][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 816.368687][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 837.261586][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 837.268572][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5887/1:b..l [ 837.277065][ C1] rcu: (detected by 1, t=10502 jiffies, g=64545, q=383 ncpus=2) [ 837.284781][ C1] task:kworker/1:4 state:R running task stack:20872 pid:5887 tgid:5887 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 837.299699][ C1] Workqueue: events_power_efficient gc_worker [ 837.305801][ C1] Call Trace: [ 837.309078][ C1] [ 837.312014][ C1] __schedule+0x116a/0x5dd0 [ 837.316528][ C1] ? find_held_lock+0x2b/0x80 [ 837.321234][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 837.327086][ C1] ? __pfx___schedule+0x10/0x10 [ 837.331968][ C1] ? find_held_lock+0x2b/0x80 [ 837.336668][ C1] ? mark_held_locks+0x49/0x80 [ 837.341451][ C1] preempt_schedule_irq+0x51/0x90 [ 837.347271][ C1] irqentry_exit+0x36/0x90 [ 837.351692][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 837.357677][ C1] RIP: 0010:lock_release+0x183/0x2f0 [ 837.362960][ C1] Code: 0f c1 05 48 bd 37 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 5d 7b 37 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 837.382574][ C1] RSP: 0018:ffffc900042ffb10 EFLAGS: 00000206 [ 837.388645][ C1] RAX: 0215caf6eef4e900 RBX: ffffffff8e5c4e00 RCX: ffffc900042ffb1c [ 837.396621][ C1] RDX: 0000000000000002 RSI: ffffffff8de0ae75 RDI: ffffffff8c157460 [ 837.404612][ C1] RBP: ffffffff9b26fa8c R08: 0000000000000001 R09: 0000000000000000 [ 837.412583][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff89ab7489 [ 837.420569][ C1] R13: 0000000000000206 R14: ffff888026e5c880 R15: 0000000000000003 [ 837.428547][ C1] ? gc_worker+0x999/0x16e0 [ 837.433075][ C1] gc_worker+0x99e/0x16e0 [ 837.437408][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 837.443053][ C1] ? __pfx_gc_worker+0x10/0x10 [ 837.447836][ C1] ? rcu_is_watching+0x12/0xc0 [ 837.452635][ C1] process_one_work+0x9cf/0x1b70 [ 837.457593][ C1] ? __pfx_psi_avgs_work+0x10/0x10 [ 837.462713][ C1] ? __pfx_process_one_work+0x10/0x10 [ 837.468098][ C1] ? assign_work+0x1a0/0x250 [ 837.472693][ C1] worker_thread+0x6c8/0xf10 [ 837.477292][ C1] ? __kthread_parkme+0x19e/0x250 [ 837.482324][ C1] ? __pfx_worker_thread+0x10/0x10 [ 837.487470][ C1] kthread+0x3c5/0x780 [ 837.491545][ C1] ? __pfx_kthread+0x10/0x10 [ 837.496130][ C1] ? rcu_is_watching+0x12/0xc0 [ 837.500898][ C1] ? __pfx_kthread+0x10/0x10 [ 837.505487][ C1] ret_from_fork+0x5d4/0x6f0 [ 837.510083][ C1] ? __pfx_kthread+0x10/0x10 [ 837.514673][ C1] ret_from_fork_asm+0x1a/0x30 [ 837.519456][ C1] [ 837.522486][ C1] rcu: rcu_preempt kthread starved for 2082 jiffies! g64545 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 837.533605][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 837.543578][ C1] rcu: RCU grace-period kthread stack dump: [ 837.549468][ C1] task:rcu_preempt state:R running task stack:27768 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 837.562971][ C1] Call Trace: [ 837.566251][ C1] [ 837.569184][ C1] __schedule+0x116a/0x5dd0 [ 837.573719][ C1] ? __pfx___schedule+0x10/0x10 [ 837.578588][ C1] ? find_held_lock+0x2b/0x80 [ 837.583270][ C1] ? schedule+0x2d7/0x3a0 [ 837.587618][ C1] schedule+0xe7/0x3a0 [ 837.591715][ C1] schedule_timeout+0x123/0x290 [ 837.596597][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 837.601995][ C1] ? __pfx_process_timeout+0x10/0x10 [ 837.607298][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 837.613118][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 837.618595][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 837.623365][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 837.628651][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 837.633858][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 837.638793][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 837.643648][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 837.649466][ C1] rcu_gp_kthread+0x270/0x380 [ 837.654145][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 837.659339][ C1] ? rcu_is_watching+0x12/0xc0 [ 837.664105][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 837.669310][ C1] ? __kthread_parkme+0x19e/0x250 [ 837.674340][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 837.679535][ C1] kthread+0x3c5/0x780 [ 837.683605][ C1] ? __pfx_kthread+0x10/0x10 [ 837.688197][ C1] ? rcu_is_watching+0x12/0xc0 [ 837.692963][ C1] ? __pfx_kthread+0x10/0x10 [ 837.697552][ C1] ret_from_fork+0x5d4/0x6f0 [ 837.702146][ C1] ? __pfx_kthread+0x10/0x10 [ 837.706733][ C1] ret_from_fork_asm+0x1a/0x30 [ 837.711515][ C1] [ 837.714530][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 837.720848][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 837.732477][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 837.742533][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 837.748180][ C1] Code: 6b 6d 02 e9 83 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 89 23 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 837.767796][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 837.773866][ C1] RAX: 00000000037fb7ef RBX: 0000000000000001 RCX: ffffffff8b868c99 [ 837.781837][ C1] RDX: 0000000000000000 RSI: ffffffff8de300f6 RDI: ffffffff8c157460 [ 837.789807][ C1] RBP: ffffed1003c56488 R08: 0000000000000001 R09: ffffed10170a6645 [ 837.797776][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 837.805746][ C1] R13: ffff88801e2b2440 R14: ffffffff90a94150 R15: 0000000000000000 [ 837.813722][ C1] FS: 0000000000000000(0000) GS:ffff888124820000(0000) knlGS:0000000000000000 [ 837.822655][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 837.829260][ C1] CR2: 000055558c3f45c8 CR3: 000000006f7cc000 CR4: 00000000003526f0 [ 837.837240][ C1] Call Trace: [ 837.840522][ C1] [ 837.843450][ C1] default_idle+0x13/0x20 [ 837.847788][ C1] default_idle_call+0x6d/0xb0 [ 837.852555][ C1] do_idle+0x391/0x510 [ 837.856632][ C1] ? __pfx_do_idle+0x10/0x10 [ 837.861238][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 837.866445][ C1] cpu_startup_entry+0x4f/0x60 [ 837.871223][ C1] start_secondary+0x21d/0x2b0 [ 837.875990][ C1] ? __pfx_start_secondary+0x10/0x10 [ 837.881283][ C1] common_startup_64+0x13e/0x148 [ 837.886232][ C1]