last executing test programs: 11m8.786300196s ago: executing program 2 (id=331): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x8042, 0x0) io_setup(0x2, &(0x7f0000000180)) read$nci(0xffffffffffffffff, &(0x7f0000000200)=""/4096, 0x1000) 11m8.530137365s ago: executing program 2 (id=335): openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829af"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800"], 0x48}}, 0x0) pipe(&(0x7f0000000140)) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 11m8.240267959s ago: executing program 2 (id=337): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x3, 0x0, 0x1}}, 0x80, 0x0}}], 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x588d}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 11m7.306950633s ago: executing program 2 (id=341): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f00000000c0)=0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r6 = open(&(0x7f0000000080)='./file1\x00', 0x129842, 0x0) sendfile(r6, r5, 0x0, 0x80000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r7, 0x8208200) r8 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r8, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11m6.097222443s ago: executing program 2 (id=350): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'netdevsim0\x00'}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000080000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r6}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r8, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m3.941406009s ago: executing program 2 (id=354): socket(0x1e, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_to_hsr\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x12, 0xc, 0x7, 0x4}}) chroot(0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0) r4 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r4, r6, r5}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x130, 0xa, 0xd0e0000, 0x0, 0x100, 0x268, 0x1d8, 0x1d8, 0x268, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x1, 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x3202, 0xd8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [0x0, 0x4]}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x10, [], 0x0, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 11m3.349891735s ago: executing program 32 (id=354): socket(0x1e, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_to_hsr\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x12, 0xc, 0x7, 0x4}}) chroot(0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0) r4 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r4, r6, r5}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x130, 0xa, 0xd0e0000, 0x0, 0x100, 0x268, 0x1d8, 0x1d8, 0x268, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x1, 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x3202, 0xd8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [0x0, 0x4]}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x10, [], 0x0, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 8m37.453318889s ago: executing program 4 (id=1002): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) io_setup(0x3b, &(0x7f00000010c0)=0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) io_destroy(r1) sendto$x25(r0, 0x0, 0x0, 0xc051, 0x0, 0x0) 8m37.001488149s ago: executing program 4 (id=1005): r0 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000040)) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r1, 0x69, 0x1) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des-generic)\x00'}, 0x58) 8m36.229382346s ago: executing program 4 (id=1010): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00', 0x0, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = epoll_create1(0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x5, 'netpci0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff"], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x3, 0x40000032bf91}) 8m35.901413186s ago: executing program 4 (id=1013): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x0, [{0xd, 0x5}, {0x1, 0x3}, {0x7, 0x5}, {0xb, 0x5}, {0x8, 0x3}, {0xe, 0x5}, {0xa, 0x2}, {0x3, 0x2}]}, @fwd={0x14}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000000040)=""/117, 0x34, 0x81, 0x0, 0x0, 0x10000, @value=r2}, 0x28) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000043c0)=ANY=[@ANYBLOB=')\x00\x00\x00\a'], 0x29) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x1c, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x10) 8m35.874327993s ago: executing program 4 (id=1014): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) 8m35.839175677s ago: executing program 4 (id=1015): sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000040)={0x18, 0x800000, 0x1000c, 0x8}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000800), 0x101000, 0x0) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000004440)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x3ff}}, './file0\x00'}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) fcntl$setstatus(r6, 0x4, 0x42c00) close_range(r5, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x5c21, &(0x7f0000000240)={0x0, 0x0, 0x200, 0x0, 0x22, 0x0, r4}, &(0x7f0000000300), &(0x7f0000000080)) io_uring_enter(r7, 0x1, 0x45d0, 0x1, 0x0, 0x1000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f00000002c0)={0x2, r4}) syz_open_dev$video4linux(&(0x7f0000000000), 0x2ee, 0x282) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000600)={0x3, 0x0, &(0x7f0000000380)=""/145, &(0x7f0000000440)=""/162, &(0x7f0000000500)=""/223, 0xeeee0000}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20002) r10 = dup(r9) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) fcntl$dupfd(r1, 0x406, r2) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x400}, 0xc) 8m20.804112075s ago: executing program 33 (id=1015): sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000040)={0x18, 0x800000, 0x1000c, 0x8}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000800), 0x101000, 0x0) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000004440)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x3ff}}, './file0\x00'}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) fcntl$setstatus(r6, 0x4, 0x42c00) close_range(r5, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x5c21, &(0x7f0000000240)={0x0, 0x0, 0x200, 0x0, 0x22, 0x0, r4}, &(0x7f0000000300), &(0x7f0000000080)) io_uring_enter(r7, 0x1, 0x45d0, 0x1, 0x0, 0x1000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f00000002c0)={0x2, r4}) syz_open_dev$video4linux(&(0x7f0000000000), 0x2ee, 0x282) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000600)={0x3, 0x0, &(0x7f0000000380)=""/145, &(0x7f0000000440)=""/162, &(0x7f0000000500)=""/223, 0xeeee0000}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20002) r10 = dup(r9) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) fcntl$dupfd(r1, 0x406, r2) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x400}, 0xc) 8m0.614404081s ago: executing program 3 (id=1168): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x40, 0x0, 0x46}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000009d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000009e00)={0x0, 0x0, &(0x7f0000009dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fcdbdf256800000008000300", @ANYRES32=r7, @ANYBLOB="1800c7"], 0x34}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x230, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x1d2, 0x7f, [@challenge={0x10, 0x1, 0xf1}, @chsw_timing={0x68, 0x4, {0x7, 0x5}}, @random={0x7, 0xf8, "474c6f8858b0293f60ac3db32015679fbb97eb9da8cdc3423475b5ff768cab624b0328debafe52ee7235386dcc4aee44138b2dff99a0ec88b1556e6a4d90e56d92b202dfe21e5c9160c1eabf075763b5d028839fa6aaf120577d87d76b4cf3750598e056cbac5f103575de442372854a7d118c076b537e31d7153e8a908b062f1e179d7ee4fc2afe2a8c1833577adecaf43e6e945c83e9602a4eeb7597acb20d36b4ddf1a17a867ab1eb72471562da935e952f917f724c1156b4dc7ff773b66f7b14075087be535363f826e7bd3b8ee746b7c967ec3a695db58311e058c5f69702888d67eba8ceda04cedb98a8da2d048bbcc425a887ade2"}, @mesh_id={0x72, 0x6}, @random={0x4, 0xb6, "bf9cc33f6707fcac83d614d89210b90c5f458b600ed8970aba4ef96ff98b694da254e84c89c7f20566d7fc1076fc5bc70ba518d75765ea5425b82c6f9fd408f393e80ceaaa9cd40ef7b282fa9d7640d39e47c8e1f5bc5b3d7a63f277eb96240bd044f8ba1c042fd0e23192bd0ff23684e6b48f21ec0fe734aae8b657de20fd85ecb8f4b447d36599aaceaad24ca8695ffee37efb378099113ef14eb7d168108c04a5722f22e9b3d232bc47cdc9c0bef30d67a3b62eea"}, @challenge={0x10, 0x1, 0xd}, @gcr_ga={0xbd, 0x6, @device_b}]}], @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_HE_OBSS_PD={0x40, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x1}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "6a6b8a3336ffe609"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "a7505dcc309a43ff"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x7f}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "665bb7f03d2378da"}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x4000000}, 0xc014) r8 = fcntl$dupfd(r0, 0x0, r0) write$tun(r8, 0x0, 0xa2) 8m0.399647461s ago: executing program 3 (id=1171): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (fail_nth: 12) 7m59.627096331s ago: executing program 3 (id=1173): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x3ff) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b057e255f9fc7fcd3678acf258357e1e5a90d17a85ed2bb685014e05fe9dd53656818b650ff910557ae37262d1202049fd3e46740a84e73"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r0, 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="9f", 0x1}], 0x1}, 0x3e8) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000000200)={0x0, 0x7, 0xfffffffc, 0x8, 0x3, [], [0x2, 0x0, 0x3, 0x2b7], [0xffffffff, 0x4ea, 0x8000, 0x2], [0x4, 0x7, 0x7fffffffffffffff, 0x1]}) chdir(0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000980)='erofs\x00', 0xc, 0x0) 7m58.688041586s ago: executing program 3 (id=1178): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xa, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$xdp(0x2c, 0x3, 0x0) fstat(0xffffffffffffffff, &(0x7f00000000c0)) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x64, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) (fail_nth: 5) read$FUSE(r4, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd2c}, 0x14}}, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffbffaf, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000001600), 0x0, 0x4004095, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f000001a640)=""/102400, 0x19000, 0x0, 0x0, 0x40020000}, &(0x7f00000008c0)=0x3b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl(0xffffffffffffffff, 0x8b22, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r6, 0x0, 0x24040808) syz_emit_vhci(&(0x7f00000027c0)=ANY=[@ANYBLOB="8fa8b607533f"], 0x6) 7m57.747454845s ago: executing program 3 (id=1185): r0 = fsopen(&(0x7f00000000c0)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x0, "59416d570165203d41bec7080089122c000004002231a11000000900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5417ff863dc9b7ac7740000000000000003de00", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000280)={"f60d510b3b73e0ec03f89a44000000c6620000000000000000000000254700", r3, 0xffffffffffffffff}) r6 = dup(r5) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000b80)={r8, "470e0ed11c38c40371620b5d7067a835"}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="6c776604000008", @ANYRESHEX=r7, @ANYBLOB=',\x00']) 7m57.619759652s ago: executing program 3 (id=1188): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x2, 0x0, 0x34424752, 0x0, 0x8, [{0x0, 0x3}, {}, {0xfffffffe}], 0x0, 0x0, 0x0, 0x2}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x1694, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r7, 0x0, 0x0, 0x8000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendmsg$unix(r7, &(0x7f0000000900)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0}, 0x0) recvmmsg(r7, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0xfffffce7, &(0x7f0000000040)={&(0x7f0000000240)=@delqdisc={0x0, 0x25, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x10, 0x11}, {0x4, 0xfffb}, {0xf, 0xa}}, [@qdisc_kind_options=@q_pfifo_fast, @qdisc_kind_options=@q_hhf={{}, {0x0, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x0, 0x1, 0x7f}, @TCA_HHF_HH_FLOWS_LIMIT={0x0, 0x3, 0x3}, @TCA_HHF_BACKLOG_LIMIT={0x0, 0x1, 0x9}, @TCA_HHF_NON_HH_WEIGHT={0x0, 0x7, 0x1f}, @TCA_HHF_RESET_TIMEOUT={0x0, 0x4, 0x5}, @TCA_HHF_NON_HH_WEIGHT={0x0, 0x7, 0x8000}, @TCA_HHF_RESET_TIMEOUT={0x0, 0x4, 0x40}]}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x7}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0xd}, @TCA_RATE={0x0, 0x5, {0x5, 0x2}}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x4}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x1d}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r8 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r8, 0xc0045543, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) write(r1, &(0x7f0000000100)="0ae865f6de953e8d912e1fc2fccf9544eb207eee6d5d196faad21f2b3ab95e11a8744f9ba01d9c967196087a4928ea1e6c06803ee4764f27be42958436a34bd073962c0f23082e5d5001f6766ebdd4fe4f789d6e465d99b7dfa4e2068eaf0b0b65c118e3890e9ec637909690879e03959bb4c555a9e6d245473fb4f4fe714841c5a8", 0x82) 7m42.503407437s ago: executing program 34 (id=1188): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x2, 0x0, 0x34424752, 0x0, 0x8, [{0x0, 0x3}, {}, {0xfffffffe}], 0x0, 0x0, 0x0, 0x2}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x1694, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r7, 0x0, 0x0, 0x8000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendmsg$unix(r7, &(0x7f0000000900)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0}, 0x0) recvmmsg(r7, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0xfffffce7, &(0x7f0000000040)={&(0x7f0000000240)=@delqdisc={0x0, 0x25, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x10, 0x11}, {0x4, 0xfffb}, {0xf, 0xa}}, [@qdisc_kind_options=@q_pfifo_fast, @qdisc_kind_options=@q_hhf={{}, {0x0, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x0, 0x1, 0x7f}, @TCA_HHF_HH_FLOWS_LIMIT={0x0, 0x3, 0x3}, @TCA_HHF_BACKLOG_LIMIT={0x0, 0x1, 0x9}, @TCA_HHF_NON_HH_WEIGHT={0x0, 0x7, 0x1f}, @TCA_HHF_RESET_TIMEOUT={0x0, 0x4, 0x5}, @TCA_HHF_NON_HH_WEIGHT={0x0, 0x7, 0x8000}, @TCA_HHF_RESET_TIMEOUT={0x0, 0x4, 0x40}]}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x7}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0xd}, @TCA_RATE={0x0, 0x5, {0x5, 0x2}}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x4}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x1d}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r8 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r8, 0xc0045543, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) write(r1, &(0x7f0000000100)="0ae865f6de953e8d912e1fc2fccf9544eb207eee6d5d196faad21f2b3ab95e11a8744f9ba01d9c967196087a4928ea1e6c06803ee4764f27be42958436a34bd073962c0f23082e5d5001f6766ebdd4fe4f789d6e465d99b7dfa4e2068eaf0b0b65c118e3890e9ec637909690879e03959bb4c555a9e6d245473fb4f4fe714841c5a8", 0x82) 5m52.626820315s ago: executing program 6 (id=1691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000540)=0x6e, 0x101800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'netdevsim0\x00'}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000080000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m51.658047191s ago: executing program 6 (id=1695): ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000005c0)={0x0, 0x0, 0x101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000143edd08b82225646cd3010203010902440001000000000904000040000a0000052406000105240000000d2c0f0100000000000000000006241a0000001524120000a318a88b04ba6172443644a3537e392a"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001b0000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) msgget(0x0, 0x614) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) 5m47.195467297s ago: executing program 6 (id=1712): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0xc00007d, 0x80000}) (fail_nth: 6) 5m46.846333167s ago: executing program 6 (id=1714): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x8800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0/../file0/../file0\x00', 0x0, 0x20, &(0x7f0000000000)={[{@gid}]}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_submit(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1d, 0xdc, 0xdb, 0x8, 0x7ca, 0xb800, 0x311f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x42}]}]}, 0x50}}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x84, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x1, 0x1, 0x3, 0x10, 0xa, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x6, 0x24, 0x6, 0x0, 0x0, "df"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x6, 0x9, 0xe6}, [@dmm={0x7, 0x24, 0x14, 0x224, 0x6f}, @mdlm={0x15, 0x24, 0x12, 0x4}, @country_functional={0x6, 0x24, 0x7, 0x30, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x33}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x2, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x98, 0xe}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xfd, 0x42, 0x7f, 0x20, 0x5}, 0x1a, &(0x7f0000000100)={0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x5, 0x2}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa5, 0xd0, 0xf7, 0x7, 0xa1}]}, 0x7, [{0x4c, &(0x7f0000000140)=@string={0x4c, 0x3, "605c903bd50500bed18ed8d847a0843bb37494be21866d1fdd08f723f3ecbe85f248304cf406fcbb34c6fd232dd8ea3736b9b18c96784d6164efe9c9996304fad613d24cfc04ce502e02"}}, {0xed, &(0x7f00000001c0)=@string={0xed, 0x3, "a944bab5ab9bf077b11dd03a264ee262ef2bfcdcd6698e7fcfa040c23775ba8f5a4046752a235346e3e423c36e8211dc069d1f94255ef7b3e0df75329315d48271cf63b3e752797bd38f1af62c52e43e23bb7d90337826ec8c02863927d9c7dd6494e389c7818f2b0345210c5196b4894978fef7fb4b575c6a865f2e9b1a0e67f024db1a9fa12f60796e46ca0d3195035c46f2b834c98aacf34b81175d23c0beaa4207df348449cc7db85e36f7904081c288130f93c0fa95e76112a842bad63c1512f8d9f318b561e9d02648e7a3539d7232e2fcf4c4e644e8822f4b9957cbe298bf57da772e981f8708e3"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc09}}, {0x78, &(0x7f0000000400)=@string={0x78, 0x3, "548d2a77dfc943600c0c087151488b426cd7085d85d4035280bff89bbc5216ddfa89b30371b90f4b83cdf003aa0638859486fbe949af39b97e618067f08dab27bff2679d3ee6ff6180b03bb549daa5479a362910b4f9f20a9e6ac4d10204c85911fb7d0859ef441dc52ec5342846aa46931726518b02"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1404}}]}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r4}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@gettaction={0x24, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(r5, 0x4068aea3, &(0x7f0000000540)) 5m42.916174951s ago: executing program 6 (id=1727): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x2, 0x0, 0x34424752, 0x0, 0x8, [{0x0, 0x3}, {}, {0xfffffffe}], 0x0, 0x0, 0x0, 0x2}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x1694, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r6, 0x0, 0x0, 0x8000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendmsg$unix(r6, &(0x7f0000000900)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0}, 0x0) recvmmsg(r6, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0xfffffce7, &(0x7f0000000040)={&(0x7f0000000240)=@delqdisc={0x0, 0x25, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x10, 0x11}, {0x4, 0xfffb}, {0xf, 0xa}}, [@qdisc_kind_options=@q_pfifo_fast, @qdisc_kind_options=@q_hhf={{}, {0x0, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x0, 0x1, 0x7f}, @TCA_HHF_HH_FLOWS_LIMIT={0x0, 0x3, 0x3}, @TCA_HHF_BACKLOG_LIMIT={0x0, 0x1, 0x9}, @TCA_HHF_NON_HH_WEIGHT={0x0, 0x7, 0x1f}, @TCA_HHF_RESET_TIMEOUT={0x0, 0x4, 0x5}, @TCA_HHF_NON_HH_WEIGHT={0x0, 0x7, 0x8000}, @TCA_HHF_RESET_TIMEOUT={0x0, 0x4, 0x40}]}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x7}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0xd}, @TCA_RATE={0x0, 0x5, {0x5, 0x2}}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x4}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x1d}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r7 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0xc0045543, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) write(r1, &(0x7f0000000100)="0ae865f6de953e8d912e1fc2fccf9544eb207eee6d5d196faad21f2b3ab95e11a8744f9ba01d9c967196087a4928ea1e6c06803ee4764f27be42958436a34bd073962c0f23082e5d5001f6766ebdd4fe4f789d6e465d99b7dfa4e2068eaf0b0b65c118e3890e9ec637909690879e03959bb4c555a9e6d245473fb4f4fe714841c5a8", 0x82) 5m42.599053584s ago: executing program 6 (id=1730): syz_emit_ethernet(0x76, &(0x7f0000000200)=ANY=[@ANYBLOB="79aaaaaaaaaa0cffffff800000000000000000006c00fc010000000000000000000000000001d44cff43feae16c100000000000000aa19eca0a72dd00a56cf40a81f63b2f67244d9758f6dace2e154272e07071890a59c564f1dca4ab8a2c637eea077cfa9133f58b928280c27bf6c502c5644c539b6b3fe1ccc14b9fea21330bf3593e25c9de69b84cecb496d803b94e68eb4050508fd2975553671e3df1d09ff5dc9fe507ea60021db9765288d127113cc1d543df308667fad4183c46d80b687c3f240e005829b1703e6a60bc719"], 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000003c0)) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000063c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) r2 = eventfd2(0x0, 0x0) io_setup(0x3f, &(0x7f0000000080)=0x0) r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000100)={r6, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}}, {{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, r7, 0x4, [0x9, 0x8]}, {r8, 0x0, 0x4, [0x0, 0x3]}, 0x4, [0xffffffff, 0x800]}) io_submit(r3, 0x1, &(0x7f0000001480)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x3f, 0x0, 0x0, 0x1, r2}]) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000000000000000050400000000"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 5m42.342284092s ago: executing program 35 (id=1730): syz_emit_ethernet(0x76, &(0x7f0000000200)=ANY=[@ANYBLOB="79aaaaaaaaaa0cffffff800000000000000000006c00fc010000000000000000000000000001d44cff43feae16c100000000000000aa19eca0a72dd00a56cf40a81f63b2f67244d9758f6dace2e154272e07071890a59c564f1dca4ab8a2c637eea077cfa9133f58b928280c27bf6c502c5644c539b6b3fe1ccc14b9fea21330bf3593e25c9de69b84cecb496d803b94e68eb4050508fd2975553671e3df1d09ff5dc9fe507ea60021db9765288d127113cc1d543df308667fad4183c46d80b687c3f240e005829b1703e6a60bc719"], 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000003c0)) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000063c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) r2 = eventfd2(0x0, 0x0) io_setup(0x3f, &(0x7f0000000080)=0x0) r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000100)={r6, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}}, {{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, r7, 0x4, [0x9, 0x8]}, {r8, 0x0, 0x4, [0x0, 0x3]}, 0x4, [0xffffffff, 0x800]}) io_submit(r3, 0x1, &(0x7f0000001480)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x3f, 0x0, 0x0, 0x1, r2}]) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000000000000000050400000000"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 13.065494104s ago: executing program 1 (id=3041): r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) 11.716505219s ago: executing program 1 (id=3049): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x588d}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) syz_usb_connect(0x5, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12011000be3c3108dd1700558ce1010203010902340001000000000904"], 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 9.01169155s ago: executing program 7 (id=3059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYRES8=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10011}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0x70, 0x1a, 0x400, 0x70bd2c, 0x25dfdbfb, {0xa}, [@generic="4e65dcda1239874feb911f436c7735532d464c5e70d5c96a92", @generic="179f4e885e578d3a6300aee2183f0144a7b463cd2b7d3488fe438366677ba97b681c30ce1529cc91e10675207e8b46f6bb1346a229daefc0cba433d125ecfb58"]}, 0x70}, 0x1, 0x0, 0x0, 0x4000084}, 0x800) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{0x2, 0x6}], {0x4, 0x1}, [], {0x10, 0x2}, {0x20, 0x1}}, 0x2c, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000001640)="5346f7f8", 0x4}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x20}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="000000000000327310125dcaf5222f3f7f876b38aac561540e7b24cd151d0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x32, 0x701, 0xfffffffc, 0x0, {0x6}}, 0x14}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00'/10, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 8.351671472s ago: executing program 1 (id=3060): r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) 8.068218271s ago: executing program 7 (id=3061): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x633, 0x0, 0xff80, {{@in=@broadcast, @in=@multicast2}, {@in6=@empty, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x154}}, 0x0) 8.001215929s ago: executing program 7 (id=3062): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x80000) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002480)={0x7fff, 0x7, {0xffffffffffffffff}, {}, 0x3, 0x4}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(r3, &(0x7f0000003240)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x8001000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x158, 0x2a8, 0x2a8, 0x158, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r9, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r8, r9, &(0x7f00000001c0), 0x8) fcntl$addseals(r9, 0x409, 0x8) fallocate(r9, 0x3, 0x0, 0x3) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000380)=[{0x6, 0x4, 0x0, 0x7ffffffd}]}) r11 = socket$unix(0x1, 0x5, 0x0) r12 = dup2(r11, r10) close_range(r12, 0xffffffffffffffff, 0x0) setresgid(r7, r7, r7) sendmsg$unix(r1, &(0x7f0000000100)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)}, {&(0x7f0000000140)}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000180)="a235de5371e59de4c613b2cea74e4b689bf74566a99ced6802a030f7679278d5f6c1fe99b7b15962dcd0c6dad377df1d13b499d79345d8f1d1a4da998e28ea05aff43be2f0c7c2491b88e49cfa26cc0087837b88f3482827d58272f9709b2fe26e1f11083b96187a4f1a15e61a1098011be9b2", 0x73}, {&(0x7f0000000200)="da42398d9a5b3ecfc589da", 0xb}, {&(0x7f0000002300)="b338777480680a03271fb558dec4515817af0678d11fc865cd01bb57a343cb2f509cfe53643dbc6a1c7aae57823f1f39a3b54d623e65cf908307f7e007f51331191a63512af4c886c67ba67415df1f8822bce26f20667bb1dca88850213f40639ab4e1fcb5ac0aed3397418f6e1aea38be52061ddfefe3a3edf5142d08e0d898a67f3cbc573f41802ea26a8fa4150588081c41ea1b48bdee8a7d3f76f4ed32a9ec32307a", 0xa4}, {&(0x7f00000023c0)="b53b14d52db15522f8d528be9939a6f511a912a0e40d3167a5fe7b1e7d05c355ff9e6b7292d67d1abaa4080504539ed82099b5b65a290edda342d7dc0ada1953e2902494a7328bd18987cf273fb45cf359606c2eadb0cc9f706b96c4da8570f405456b6abcfd5810399aaa82e0216eaa84fcced0bdec6274d1a44e22144c40f5dde7555d381be8a67f7bb55e7d9b1e1cadd7ae8bcd2f25439d23", 0x9a}], 0x8, &(0x7f0000002580)=ANY=[@ANYBLOB="1c00000000000000010000000200000004a07c585bfad5dfe9e0e75e6d042ffb43e4a9f5046c51cca666297b538e7f4814314d719c946d007e2b94c711cc0a1bcde8832abb0600000000000000a855f4583ee23591c89e64b21a30edebc84f5a2db86f", @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1], 0x48, 0x80}, 0x40) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4, 0x7fff7ffc}]}) close_range(r13, 0xffffffffffffffff, 0x0) 7.667315687s ago: executing program 8 (id=3063): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x6f, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES8=r2, @ANYBLOB, @ANYBLOB="18accb2d9e2f5ac9ac1a12c6a90ce791c8a0bb36ea67c822b8013ee63e6f9fded05773df", @ANYBLOB="0000000000000000b702000000000000c50000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xcf, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xd) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r7, &(0x7f0000000d80)={{0x108, 0x0, 0x3, 0x102, 0x20a, 0x9, 0x23f, 0x1}, "6fd95374f8a455a7ad7f6c16e2c7900d21ae21d535c3337dc5108dd0f62e5a0c33268cdbe666f713f87d2751a303176c3b50ee8f675bf3a297337d254e6fde27a164baaae6785bc5d4abcbc065b7aa0918a68a25214322c070de6dadea3b8a0e25524591322163f343c776465fd623523a1b14b643037df533da8bfbacc87245639d7dc9b15e825ee50a5ec211f445e1f0416d0508fc", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7b6) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r8, 0x1, 0x40000, 0x0, {}, [@IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x34}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203010200000000000000000000000000c037b16a7c0000"], 0x1c}}, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) 7.272735577s ago: executing program 1 (id=3064): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="00000000000000113100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r4, 0x1, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x0, 0x2, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x44380, 0x0) write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="fd7a837ade70bf9a0b28556e251a100f5685b93fc648bafdab6794a8a70981bd4a28572d70bf4a4ef0406b1be09833ca47e40a3ec160"], 0x57) r6 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) getsockopt$inet_buf(r6, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) shmget$private(0x0, 0x3000, 0x16001b20, &(0x7f0000ffd000/0x3000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000040)) 7.266809878s ago: executing program 8 (id=3066): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x2, 0x0, 0x34424752, 0x0, 0x8, [{0x0, 0x3}, {}, {0xfffffffe}], 0x0, 0x0, 0x0, 0x2}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x1694, &(0x7f0000000080)) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r7, 0x0, 0x0, 0x8000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendmsg$unix(r7, &(0x7f0000000900)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0}, 0x0) recvmmsg(r7, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@delqdisc={0x88, 0x25, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10, 0x11}, {0x4, 0xfffb}, {0xf, 0xa}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x7f}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x9}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x5}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x8000}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x40}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x5865, 0x31}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000900)="b8b28225ea772f0daee8c7c98100", 0xe}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x4}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x1d}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r9 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r9, 0xc0045543, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) 6.371362574s ago: executing program 7 (id=3068): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001300), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0xcc, 0x15, 0x100, 0x70bd29, 0x25dfdbfe, {0x5, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x79, 0x1, "ea247753942dd4024d9e378134af323ed22790af9b00598a74c18894a22365c8b1026d09824e3bae980d3a83c992cb8526e6ac8b0f32151d8e9885a2af3c4a60c05fd526b0e6dd87041872bf11f1200e25e5f0fa3c2f77fd467816d39187d7895b1e37c7ab7ece583f94c6181e83c032a534d1428d"}, @INET_DIAG_REQ_BYTECODE={0x3a, 0x1, "144ce7f021fb145f85b037be8e4b142223892d7eb663283d53bf3b18faf31604b49714724b67652893f851355723062d201cd00f228b"}]}, 0xcc}}, 0xc5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000100)=r4, 0x8) setsockopt$sock_attach_bpf(r3, 0x1, 0x25, &(0x7f0000000100)=r2, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000640)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r6 = fcntl$dupfd(r5, 0x0, r0) read$char_usb(r2, &(0x7f00000005c0)=""/73, 0x41) connect$unix(r6, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000140)={0xd2b7, 0x4, 0x4}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$MRT6_ASSERT(r8, 0x29, 0xcf, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000068f5a952b6f6f7dd5b252300000700"/31, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r12, &(0x7f0000000300), 0x20000000}, 0x20) recvmsg$unix(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/28, 0x1c}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001cc0)={r12, &(0x7f0000001c80)}, 0x20) close(r11) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x84, &(0x7f0000000640)={0x0, @in={{0xa, 0xce24}}, 0xffff, 0xffff}, 0x90) 6.340250792s ago: executing program 1 (id=3069): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4f549b, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x32]}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x46}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) 6.266722895s ago: executing program 8 (id=3070): setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0xfffffffffffffedc, @broadcast}, 0x2f) r0 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_setup(0x1408, 0x0, &(0x7f0000000500), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000340)=0x4, 0x12) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_to_hsr\x00'}, 0x18) bind$l2tp(r0, &(0x7f00000000c0), 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f00000001c0)={0x2, 0x0, @loopback, 0x18}, 0x10) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1=0x7f000001}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c9200c00080005bcd65f0bac9f2f8509"], 0x11) 6.136630776s ago: executing program 8 (id=3072): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {}, {0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8001}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x5}, "ed"}}]}]}]}}]}, 0x54}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)={r1, 0x1c, "3f966b042bd4a75c486aa6f9625cbaed1a0e638d581edecb1ae6123a"}, &(0x7f0000000200)=0x24) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000003c0)={r5, 0xa, 0x7fff, 0x6}, 0x10) creat(&(0x7f0000000140)='./bus\x00', 0x10e) r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0) r7 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000080)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x2066012, 0xffff}}, 0x50) syz_fuse_handle_req(r9, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl(r11, 0xfffff000, &(0x7f0000000080)) getdents64(r11, 0x0, 0x0) syz_fuse_handle_req(r9, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="10"], 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_STORE(r7, &(0x7f00000000c0)=ANY=[], 0x2b) sendfile(r8, r6, 0x0, 0x4000000053d2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 5.530363756s ago: executing program 8 (id=3077): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x6, 0x4401) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000900)={0x14, &(0x7f0000000780)={0x20, 0x2, 0xff, {0xff, 0x22, "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"}}, &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000940)={0x0, 0x7, 0xa8, "d2fdddc1ce8d7e8589815ac9f7eb465bf17fe0c67b95a0d68b6b5bd9b3d808cf4daba1ea531af5bd206fdc62d768ae690dcba4aa203d2229fb59dc598e937e59fbf5cfd815a8f4b6e0406a44afa894472259584c464cd08c9556963bd7e0fb983dc65889af2f5af349f527a87a09abd9a1bfc07b5c51d14eca772bc8f3439740a22760444704a1c989ee9be8c8fc966674fdb1c265f6eff7e2ef87eb9bf6558e3fdd89858012818f"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000a80)={0x20, 0x81, 0x1, '_'}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20a2010300007a"], &(0x7f0000000b00)={0x20, 0x83, 0x3, "c5eef0"}, &(0x7f0000000b40)={0x20, 0x84, 0x3, "179e1e"}, &(0x7f0000000b80)={0x20, 0x85, 0x3, "d83860"}}) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000300)={0x3, 0x2, 0x3, 0x3, 0xfffffff8, 0x5}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5a20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$sndpcmc(&(0x7f0000002600), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r7, 0xc0844123, 0x20000000) r8 = syz_open_pts(r1, 0x0) dup3(r8, r1, 0x0) io_setup(0x3, &(0x7f00000003c0)) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r9, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 5.150398585s ago: executing program 7 (id=3080): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c04000680000905810300020400000904010000020d00000904010102020d000009058263d1da600000090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x12, 0x10, 0x2010, 0x0, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x6d, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x2, 0x25, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xff, 0x4, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2a, 0x2, 0x1}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x5, 0xf9, 0x7, 0x10, 0xfc}, 0xcd, &(0x7f0000000080)={0x5, 0xf, 0xcd, 0x6, [@generic={0x8d, 0x10, 0xa, "880f0caa02a66a5482abf0a13aafd6280a44d58ed2eb177841eda59b2e6fa2909096cb9942bb82d226b41936356df93f392e1c1e3590d4306e486196e56b995554ff46e36b2b9c9a82be26ab47f47238bad967a2697055bf0356b707cb1e20859cb071cd16f2df0ddf3b96f2ac5fff6073c4cdf13b526ac8edba992495c2737b4a4269d175d3fe3745a8"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x3, 0x2, 0x4, 0x3f}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x6, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x89, 0xab, 0x3, 0x8}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x9, 0xf000, 0x9, [0xff000f, 0xffff30]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x2, 0xe, 0x54c2}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x6d}}, {0xa0, &(0x7f0000000240)=@string={0xa0, 0x3, "26b1e89897557a7e27e696b3f26c479bcc8eb4ba76877d0a0d3680cc5fa2235183423fe491d3e1b72e00132462e0584d1f6eb8a2085bfeab056b5ab7a7209c71e761bcd77885f070d16936900eff18014cbba25b2fe3e43a5a5c78ca3e7bb069bd4b705cd38db7558a6b99068576dee849939479796d7ad1c7a060bce34b2b3656ace82b1c54506d1e415cbd02531cb9b6129eebb8ccecadf88fd63ebf7f"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1009}}, {0xb6, &(0x7f00000003c0)=@string={0xb6, 0x3, "cc33108660b520178fbda147d3bbd1dc3dfcb7fdc2e50936848d41f932148e2f5b0f31c58987491ee28425f8ce61da7395bc9ccb5fe23a75de2643fe731cfa0a089fc85f88c3aea29715b17c476ca04f5f8325842406814945b9504fc1fff8e2f78369e489b4bd055b50560506c2da3c48dacc7d9b86f3f457a876915a24ca0929fbae702fa387ac672611142bfc0a15ce5dc92f82c7f371ef19b8b07424da82b3c43ba0c7b1e65aca8e05964daba8f338d2684f"}}, {0x45, &(0x7f0000000500)=@string={0x45, 0x3, "18473026cef7c966a26005a36d3c76358ad05fb4e1b292900d0d9237b8260a128f5917a98659864db668ba4cc0bc43bfef0347e83b96e4410b0743d71e307d9d5e2288"}}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETDEBUG(r5, 0x400454c9, &(0x7f00000001c0)=0x7) write$cgroup_devices(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c9801288463"], 0xffdd) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000640)={[0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0xc80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], 0xdddd1000, 0x1ac585}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000006c0)={0x14, &(0x7f0000000600)={0x20, 0xe, 0x2e, {0x2e, 0xa, "82e5873d52389c4883700d778685cc5373199ae38772c2b2c1ed08ddc5af7a1cb9b01c92b9d3aab9e7b5a32a"}}, &(0x7f0000000640)={0x0, 0x3, 0x42, @string={0x42, 0x3, "ed5be69cf5a93925531e2e4257a31328028cadf0ef9a585da3710aa588c81847e67f94dbdb6187dd3ff21c3808b31c19855cc8ae6f82b4fc2a7c9ad1e196b75e"}}}, &(0x7f0000000940)={0x34, &(0x7f0000000700)={0x20, 0x12, 0x66, "da8d139217c8d597be4725410ea9248e8366d241489c50e310e9d00339777fe386dcf5c885219b86c81b04482f807c769d2ea225271a1f681c420d71fe20a6fcea9d5574d474d8e1d2030f60c7b8cc104346b5944abf0e20b699997e5831fd12b9b2e2573253"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xc0}, &(0x7f0000000800)={0x20, 0x0, 0x9f, {0x9d, "3dd3e61d497fea1ac5e3b655ce2a6bf10dd9b5a1a9231a32580927c9393a11a8ec3e22be6259560a1aff46c1eeeb6184e72fa5fdec235e8aaddb96710a1d3bd41590ad0c036e593cf3d22237269b5475733369b80ee1f757126ed61579cfbfbe774f507975332fabec5b84e923237b4bd89e469114c47f5e323bc7aa48e06bf974f809fe1a0d01c0caaff892d285f975ab626110a7f98691cc7af7871d"}}, &(0x7f00000008c0)={0x20, 0x1, 0x1}, &(0x7f0000000900)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.091784889s ago: executing program 1 (id=3081): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x2, 0x0, 0x34424752, 0x0, 0x8, [{0x0, 0x3}, {}, {0xfffffffe}], 0x0, 0x0, 0x0, 0x2}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x1694, &(0x7f0000000080)) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r7, 0x0, 0x0, 0x8000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendmsg$unix(r7, &(0x7f0000000900)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0}, 0x0) recvmmsg(r7, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@delqdisc={0x88, 0x25, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10, 0x11}, {0x4, 0xfffb}, {0xf, 0xa}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x7f}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x9}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x5}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x8000}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x40}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x5865, 0x31}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000900)="b8b28225ea772f0daee8c7c98100", 0xe}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x4}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x1d}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r9 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r9, 0xc0045543, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) 3.546315535s ago: executing program 0 (id=3085): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x15, 0x1, 0xffffffff, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800", 0x34325258}) 3.36478177s ago: executing program 0 (id=3088): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007900)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="09000000010000", 0x7) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000b4000040"]) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r6, 0x0, 0x40080) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) 3.064454427s ago: executing program 5 (id=3089): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x6f, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES8=r2, @ANYBLOB, @ANYBLOB="18accb2d9e2f5ac9ac1a12c6a90ce791c8a0bb36ea67c822b8013ee63e6f9fded05773df", @ANYBLOB="0000000000000000b702000000000000c50000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xcf, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xd) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r7, &(0x7f0000000d80)={{0x108, 0x0, 0x3, 0x102, 0x20a, 0x9, 0x23f, 0x1}, "6fd95374f8a455a7ad7f6c16e2c7900d21ae21d535c3337dc5108dd0f62e5a0c33268cdbe666f713f87d2751a303176c3b50ee8f675bf3a297337d254e6fde27a164baaae6785bc5d4abcbc065b7aa0918a68a25214322c070de6dadea3b8a0e25524591322163f343c776465fd623523a1b14b643037df533da8bfbacc87245639d7dc9b15e825ee50a5ec211f445e1f0416d0508fc", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7b6) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r8, 0x1, 0x40000, 0x0, {}, [@IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x34}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203010200000000000000000000000000c037b16a7c0000"], 0x1c}}, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) 1.839842627s ago: executing program 5 (id=3090): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) (async) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r5}}, 0x48) (async) close(r4) (async) listen(r3, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000ac0)={{0x12, 0x1, 0x0, 0xc6, 0xa3, 0x88, 0x40, 0x4f1, 0x3008, 0x4abe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa1, 0x0, 0x2, 0xa5, 0xd2, 0x71, 0x0, [], [{{0x9, 0x5, 0xe, 0x3, 0x8, 0x5, 0x0, 0xbe}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x8, 0x9, 0x9}}]}}]}}]}}, 0x0) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 1.784804704s ago: executing program 0 (id=3091): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x7, 0x0, 0x0, @void, @value}, 0x10) 1.757654586s ago: executing program 7 (id=3092): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x7}, {0x0}, &(0x7f00000011c0), 0x0, 0x60, 0xffffffff00000003}}], 0x48, 0x8004}, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x5b04, 0x0) 1.630447212s ago: executing program 0 (id=3093): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x13, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 1.540540534s ago: executing program 5 (id=3094): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x6}}}, 0x24}}, 0x80000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0xe9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffdf004fff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000300)={0x40000, 0x82}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001b00)=ANY=[@ANYBLOB="280e0000120001002abd7000fcdbdf25e0000001000000000000000000000000000004d500003300"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8001) setuid(0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) 1.519749901s ago: executing program 0 (id=3095): mkdir(&(0x7f0000000300)='./file0\x00', 0xd) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x12}, 0x10) r2 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read(r2, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x44}}, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000003290001002bbd7000fddbdf250300000004ae5e25b8c450d3593a79aeda86bca7324978289f5b1ef7c5e97c2f6887f1087dbd699e05f87653bd7c030cbf68dda069aa01b950443faba2a768879e927909b928b58d4f67f40c51ad924fb0403e555860a94bde68fc37c0dda691006886cd"], 0x14}, 0x1, 0x0, 0x0, 0x4814}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x5, 0xbc}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r8, 0x101, 0x800, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_FAMILY={0x5, 0xd, 0xa}]}, 0x2c}}, 0x0) 677.077817ms ago: executing program 0 (id=3096): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYRES8=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{0x2, 0x6}], {0x4, 0x1}, [], {0x10, 0x2}, {0x20, 0x1}}, 0x2c, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000001640)="5346f7f8", 0x4}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x20}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="000000000000327310125dcaf5222f3f7f876b38aac561540e7b24cd151d0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x32, 0x701, 0xfffffffc, 0x0, {0x6}}, 0x14}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00'/10, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 654.043265ms ago: executing program 5 (id=3097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) (fail_nth: 5) 569.079881ms ago: executing program 5 (id=3098): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0xe18, 0x2c, 0xd2f, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0xde8, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x5, 0x0, 0x9, 0x8000, {0x10, 0x0, 0x5c, 0x9, 0x6, 0x7}, {0x6, 0x2, 0x8, 0x6, 0x2000, 0x2}, 0x2, 0xa, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x621d, 0x400, 0x200, 0x4, 0x1, 0x8, 0x6, 0x0, 0x3a, 0x1000, 0xc, 0xb, 0x6, 0x40, 0x9, 0x2, 0xfffffffe, 0x4, 0x9, 0x4, 0x58, 0x7, 0x7, 0x8000, 0xffffff7f, 0xa93a, 0x6, 0x3, 0x100, 0x6, 0x6, 0x3, 0x7, 0x7fffffff, 0x4, 0x0, 0x0, 0x4, 0x931, 0x7, 0x2, 0x1ff, 0x1, 0x2, 0x7f, 0x80000001, 0x6, 0x7, 0x629f, 0xb, 0x7fffffff, 0x4, 0x2, 0x3, 0x2, 0x8, 0x6, 0x0, 0x6, 0x6, 0x76c, 0x1, 0x1000, 0x401, 0x6be3, 0x1, 0x7, 0x400, 0x0, 0x6, 0x3a6, 0x0, 0x8, 0x10001, 0x10000, 0x3ff, 0x9e6, 0x6, 0x4, 0x101, 0x9, 0x7, 0x4, 0xea2, 0x1, 0x1, 0x7, 0x6, 0xd, 0x8, 0x5292593a, 0x7, 0x3, 0x7be, 0x7, 0x5, 0x0, 0xc232, 0xff, 0x1, 0x1, 0x4, 0xc, 0x1, 0xaf, 0x3, 0x414, 0xffffffff, 0xc, 0x1000, 0x4, 0x0, 0x0, 0x3, 0x200, 0x6, 0x8, 0x4, 0x0, 0x4, 0x5, 0xe3a, 0xff, 0xa, 0x0, 0x10001, 0x0, 0x9, 0x527, 0x12, 0x8000, 0x88dc, 0x4, 0x9, 0x6, 0x7fffffff, 0x3, 0x1, 0x101, 0x1, 0x7fffffff, 0x7, 0x10001, 0x0, 0x6, 0x7, 0x6, 0x123, 0x7, 0x3, 0x6, 0x400, 0x1, 0x7, 0x0, 0x0, 0x200, 0x84ba, 0x80, 0x5, 0x69, 0x2, 0x1, 0xac2, 0x100, 0x4, 0x8, 0x5, 0x6, 0x5, 0x7, 0x9, 0x4, 0x4d12, 0xa37, 0x7, 0x2, 0x8, 0x6, 0x6, 0x5, 0x5e0, 0xfffffff6, 0x9, 0x401, 0x101, 0x7, 0x7f24, 0x37080000, 0x3, 0x3891, 0x46, 0x1000, 0x3e0b, 0x1000, 0xfc8, 0x6, 0x6, 0x8, 0x8, 0x10001, 0xe, 0x1, 0x4, 0x3, 0x5, 0x4, 0x6, 0x8, 0x5, 0x7, 0x7fffffff, 0x8, 0x0, 0x400, 0x5, 0x9, 0x7, 0x8, 0x8, 0x3dc8, 0x1, 0x80000001, 0x401, 0x1, 0x7fff, 0x4fa6, 0x2, 0x9c86, 0xa, 0x1, 0xffffffff, 0x3, 0x9, 0x10, 0xfffffff9, 0x2, 0x81, 0xffffffff, 0x5, 0xfffffffc, 0x3, 0x0, 0x1, 0xf38, 0x5, 0x1, 0x4, 0xfffffffa, 0x5, 0x9, 0x9c3c, 0x7, 0x0, 0xfffffffe, 0x8001]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x8, 0x10, 0x2, 0xb, 0x401, 0x4, 0xfffffffb, 0xa7ec, 0x1, 0x2, 0x80000001, 0xc, 0x2, 0x2, 0x8, 0x0, 0x53e12ee5, 0x5, 0xe288, 0x8, 0xfd2, 0x9, 0xed9, 0x1, 0x8, 0x5, 0x1, 0x355, 0xfcdf, 0x5, 0x6, 0x8, 0x16ad9851, 0x9, 0x8, 0x3, 0x7f, 0x7fffffff, 0x7, 0x2, 0xf9, 0xe, 0x200, 0xf5da, 0x1, 0x8, 0x7, 0xffff, 0x77f17684, 0x5, 0x7, 0x5, 0x748, 0x80, 0x8c3a, 0x1, 0x4c, 0x6, 0x5c, 0x8000, 0xfff, 0x8000, 0x1, 0x0, 0x2, 0xfff, 0x4, 0x8, 0x3, 0x7, 0x4000b, 0xa2d, 0x5, 0x7b1e, 0x5, 0x1, 0x2, 0xffffffff, 0xbd, 0xaa, 0x3, 0xfffff001, 0x1, 0x1, 0x2, 0x2, 0x7, 0x7fff, 0x9, 0x7, 0x3, 0x80000000, 0x6, 0x5, 0x2, 0xb, 0x6, 0x7ff, 0x30, 0x1000, 0x2, 0x4, 0x4260, 0x4, 0x9, 0x5, 0x4, 0xfffffff7, 0x2, 0x10001, 0x7, 0xa4, 0x101, 0x7fff, 0x6, 0xfffffffa, 0x2, 0x7, 0x8, 0xfc, 0x9, 0x4, 0xfffffff9, 0x6, 0x25, 0x7f, 0x81, 0x8, 0x6, 0x95, 0x9, 0x6, 0x7fff, 0x2, 0x1, 0x9, 0x1010000, 0x8, 0x8, 0x6, 0x0, 0x5, 0x8c8, 0x0, 0xff, 0x7, 0x3, 0xfffffff7, 0x101, 0x6, 0x0, 0x6, 0x9, 0xfe3, 0x400, 0xf6, 0x80000001, 0x4, 0x1, 0x48247f10, 0x6, 0x4, 0x5, 0x1, 0x3, 0x5, 0x100, 0x80000001, 0x6b7, 0x3, 0x2db, 0x1, 0xa2, 0x2cd1fc03, 0x1, 0x2, 0x80, 0x5, 0x0, 0x3f, 0x5, 0x0, 0x4, 0xfffffffb, 0x7, 0xfa1b, 0x7, 0x5, 0x0, 0x6, 0x81, 0xb4d, 0xffffffff, 0x7f, 0x8, 0x50b8, 0x3, 0x6, 0x1, 0x1, 0x9, 0x8, 0x5, 0x200, 0x8, 0x9, 0x14, 0x5, 0x7, 0x3, 0x7fffffff, 0x1000, 0x7ff, 0x1, 0xffff, 0x1, 0xc, 0x253a, 0x3, 0xfffffffc, 0x400, 0x10, 0xff, 0xbf7, 0x7, 0x7fffffff, 0x8000, 0x2, 0x9417, 0x6, 0x2, 0xfffffffb, 0x0, 0x7, 0x5, 0x7ff, 0x1, 0x9, 0x2c8, 0x7fffffff, 0x7, 0x6, 0x0, 0x5, 0x0, 0x64cd0ae9, 0x0, 0x12e, 0x8, 0xb, 0x80000001, 0x40000000, 0x40, 0x3, 0x3]}]}, @TCA_BASIC_ACT={0xc4, 0x3, [@m_skbedit={0xc0, 0x1a, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}]}, {0x8a, 0x6, "502243bb78331aaf3fda74fe01b3b72e0f0f395cc7d4df36e041175ab509acf21a8d486b133d8240e56a96e36a0c0b7f8e3fca1999a1c51fa991a9843c679dae63926556848161c7cb14fc869acb0e13c3013e0ad30889552f23b6ff75fcfd9b5f0c08c4789207ee8835de25ec028b0324273334498d80acda8c797d9ae70d69a0539e997843"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0xf}}, @TCA_BASIC_ACT={0x4b8, 0x3, [@m_mpls={0x64, 0x16, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x8a54c}, @TCA_MPLS_LABEL={0x8, 0x5, 0xa286d}, @TCA_MPLS_TTL={0x5, 0x7, 0x22}]}, {0x1d, 0x6, "9a4d9a15b346803ae70653d9ebe7bf889e6acf2fcc5bc3b812"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x190, 0x7, 0x0, 0x0, {{0xf}, {0x7c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x43}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xaea}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xd}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0xe6, 0x6, "e71c94d76d80abf8c9bac9b1379e9dcf248329ee70a3f08b54de916db006edaa7fbad89564926040c5c788e11e35cd5f5026a68b7f6ffac90548cb1da078c3738b0ce7850b001f656499a2036b3c317b6254570cfe477f1cd62f4bcb305aa606cb86b737b33577a5776794a3752166c44be7ce6b844d4a92b83d3ac4bb6612bf856c0761ed45f15061f417af9df2618661087928fa62362c9930f3bab6fb91aa8a26cf156f903af8c8d6de9520d600ebb29b89720fdf39e6629ef1217831bcf563dcc3723c3cc666d75ca4f723604f9aad09b1c0f8a40f00e9a6a347baa2d8b00559"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x150, 0x1a, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6a}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1e}, @TCA_CTINFO_ACT={0x18, 0x3, {0xc0, 0xa, 0x8, 0x8000, 0x8}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}]}, {0xc9, 0x6, "86793ec9ed2e3d52bb4546f5b1816f382c7bb636f076196ec5b72ad3f0c2d5079c560ca6065838279d64616849e68dc3058fce3acf95de449fd91695aa77404ca2c1c654a9756abbe268e535c7f27183e5e58fa9351c3f1908cb4fdba14ce269295ea22b62d7fd09f50a88b28574abee5df86c92236f06d94a79dc452798acd56a0b14772f08f0d160be7a13fbb49d082c8b44c712278c11f6fe738f4c29cbc42119a683423550b140376670aa7194c38cbe6830f2ac213dae6f94d64647be6df6d0996312"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x170, 0x1a, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x1, 0x101, 0x9}, 0x69}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x1ff, 0x2, 0x8000, 0x3}, 0x73}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0x100, 0x4, 0x81, 0x5}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xfffffff7, 0x2, 0x2, 0x9}, 0x35}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0x4, 0xffffffffffffffff, 0xc4e, 0x693da12c}, 0x47}}]}, {0xb6, 0x6, "002869183c06d3dde25a62002f0b80aa5b3b66d4780a09a2b27bf99eb750338d3eec67e54809669a7bff985ef85c9550470079e420959b7a371cbc9c88177eb911639cbbcb37f826f909e707069426fbe5f391d00a99209d7ea58c5c9bf4e9d2a9903f0b0327182bdfb549f938211459b4b108f08ecd335d0dde7d298864378ab4909e653a497b200b7bb88eeb2c87ea6b9b63447420f882feff2388b4e727cafc47eaa2dd39fa9f2136010370bfbbf61575"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfffc, 0x8}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xa}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x9}}]}}]}, 0xe18}, 0x1, 0x0, 0x0, 0x1}, 0x0) 26.936474ms ago: executing program 5 (id=3099): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x2d, 0x2000000, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x7}}, 0x30) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000480), 0x4080, 0x0) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000500), 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close(r3) 0s ago: executing program 8 (id=3100): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x6f, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES8=r2, @ANYBLOB, @ANYBLOB="18accb2d9e2f5ac9ac1a12c6a90ce791c8a0bb36ea67c822b8013ee63e6f9fded05773df", @ANYBLOB="0000000000000000b702000000000000c50000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xcf, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xd) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r7, &(0x7f0000000d80)={{0x108, 0x0, 0x3, 0x102, 0x20a, 0x9, 0x23f, 0x1}, "6fd95374f8a455a7ad7f6c16e2c7900d21ae21d535c3337dc5108dd0f62e5a0c33268cdbe666f713f87d2751a303176c3b50ee8f675bf3a297337d254e6fde27a164baaae6785bc5d4abcbc065b7aa0918a68a25214322c070de6dadea3b8a0e25524591322163f343c776465fd623523a1b14b643037df533da8bfbacc87245639d7dc9b15e825ee50a5ec211f445e1f0416d0508fcad09bcc1e5a00c1fc7cf0ae789fd056ef3836d6928052128be", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7cf) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r8, 0x1, 0x40000, 0x0, {}, [@IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x34}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203010200000000000000000000000000c037b16a7c0000"], 0x1c}}, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): T5894] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 715.928699][ T5894] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 715.946755][ T5894] usb 2-1: can't read configurations, error -61 [ 715.960340][ T5894] usb usb2-port1: unable to enumerate USB device [ 716.034922][T15763] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2706'. [ 716.124116][T15767] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2707'. [ 716.646718][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 716.646740][ T29] audit: type=1400 audit(1733151197.260:1117): avc: denied { create } for pid=15771 comm="syz.1.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 716.749291][T10672] IPVS: starting estimator thread 0... [ 716.836662][T15775] IPVS: using max 34 ests per chain, 81600 per kthread [ 716.966666][ T5894] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 717.127369][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 717.140575][ T5866] usb 1-1: reset high-speed USB device number 60 using dummy_hcd [ 717.150328][ T5894] usb 2-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 5.00 [ 717.159561][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 717.167722][ T5894] usb 2-1: Product: syz [ 717.171881][ T5894] usb 2-1: SerialNumber: syz [ 717.177744][ T5894] usb 2-1: config 0 descriptor?? [ 717.184049][ T5894] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 717.803707][ T5894] usb 2-1: Detected FT2232C/D [ 717.813636][ T864] usb 9-1: 0:2 : does not exist [ 717.837734][ T864] usb 9-1: unit 5: unexpected type 0x09 [ 717.899123][ T864] usb 9-1: USB disconnect, device number 18 [ 718.356920][ T5894] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 718.365302][ T5894] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 718.421590][ T5894] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 718.542981][ T5894] usb 2-1: USB disconnect, device number 71 [ 718.578192][ T5894] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 718.591112][T15797] FAULT_INJECTION: forcing a failure. [ 718.591112][T15797] name failslab, interval 1, probability 0, space 0, times 0 [ 718.606431][T15797] CPU: 0 UID: 0 PID: 15797 Comm: syz.1.2717 Not tainted 6.13.0-rc1-syzkaller #0 [ 718.609050][T10672] usb 1-1: USB disconnect, device number 60 [ 718.615490][T15797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 718.615511][T15797] Call Trace: [ 718.615519][T15797] [ 718.615529][T15797] dump_stack_lvl+0x16c/0x1f0 [ 718.615560][T15797] should_fail_ex+0x497/0x5b0 [ 718.647058][T15797] ? fs_reclaim_acquire+0xae/0x150 [ 718.652254][T15797] should_failslab+0xc2/0x120 [ 718.656943][T15797] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 718.662762][T15797] ? __alloc_skb+0x2b1/0x380 [ 718.667372][T15797] __alloc_skb+0x2b1/0x380 [ 718.671771][T15797] ? __pfx___alloc_skb+0x10/0x10 [ 718.676694][T15797] ? rcu_is_watching+0x12/0xc0 [ 718.681455][T15797] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 718.686819][T15797] ? kmem_cache_alloc_noprof+0x279/0x3d0 [ 718.692453][T15797] ? audit_log_start+0x2bc/0x7e0 [ 718.697382][T15797] audit_log_start+0x2e1/0x7e0 [ 718.702130][T15797] ? __pfx_audit_log_start+0x10/0x10 [ 718.707403][T15797] ? __pfx_lock_release+0x10/0x10 [ 718.712418][T15797] ? migrate_enable+0x1ef/0x260 [ 718.717256][T15797] ? __pfx_migrate_enable+0x10/0x10 [ 718.722454][T15797] audit_seccomp+0x61/0x280 [ 718.726951][T15797] __seccomp_filter+0x816/0xf40 [ 718.731880][T15797] ? __pfx___seccomp_filter+0x10/0x10 [ 718.737243][T15797] ? fput+0x67/0x440 [ 718.741125][T15797] ? ksys_write+0x1ba/0x250 [ 718.745614][T15797] __secure_computing+0x26c/0x3f0 [ 718.750635][T15797] syscall_trace_enter+0x8b/0x260 [ 718.755647][T15797] do_syscall_64+0x1ee/0x250 [ 718.760228][T15797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.766108][T15797] RIP: 0033:0x7f45d7b80849 [ 718.770510][T15797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.790102][T15797] RSP: 002b:00007f45d895e058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 718.798510][T15797] RAX: ffffffffffffffda RBX: 00007f45d7d45fa0 RCX: 00007f45d7b80849 [ 718.806472][T15797] RDX: 0000000020000200 RSI: 00000000200003c0 RDI: 0000000000000000 [ 718.814451][T15797] RBP: 00007f45d895e0a0 R08: 0000000020000180 R09: 0000000000000000 [ 718.822432][T15797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.830405][T15797] R13: 0000000000000000 R14: 00007f45d7d45fa0 R15: 00007fffaa0e7a78 [ 718.838379][T15797] [ 718.846618][ T29] audit: type=1326 audit(1733151199.220:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.1.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d7b80849 code=0x7ffc0000 [ 718.872791][ T29] audit: type=1326 audit(1733151199.220:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.1.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f45d7b80849 code=0x7ffc0000 [ 718.876861][T15797] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 718.904175][ T29] audit: type=1326 audit(1733151199.220:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.1.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d7b80849 code=0x7ffc0000 [ 718.914250][ T5894] ftdi_sio 2-1:0.0: device disconnected [ 718.928154][ T29] audit: type=1326 audit(1733151199.220:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.1.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f45d7b80849 code=0x7ffc0000 [ 718.956968][ T29] audit: type=1326 audit(1733151199.220:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.1.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d7b80849 code=0x7ffc0000 [ 719.037090][ T29] audit: type=1326 audit(1733151199.220:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.1.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f45d7b80849 code=0x7ffc0000 [ 719.061240][ T29] audit: type=1326 audit(1733151199.220:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.1.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d7b80849 code=0x7ffc0000 [ 719.089463][ T29] audit: type=1326 audit(1733151199.220:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.1.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45d7b7f1b0 code=0x7ffc0000 [ 720.451482][T15816] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2723'. [ 720.494760][T15816] netlink: 'syz.0.2723': attribute type 10 has an invalid length. [ 720.531867][T15816] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.560534][T15816] bond0: (slave team0): Enslaving as an active interface with an up link [ 721.096810][T10672] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 721.247415][T10672] usb 9-1: device descriptor read/64, error -71 [ 721.489044][T10672] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 721.718710][T10672] usb 9-1: device descriptor read/64, error -71 [ 721.988204][T10672] usb usb9-port1: attempt power cycle [ 722.044093][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 722.044109][ T29] audit: type=1400 audit(1733151202.670:1133): avc: denied { setattr } for pid=15860 comm="syz.0.2737" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 722.356692][T10672] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 722.420082][T10672] usb 9-1: device descriptor read/8, error -71 [ 722.565757][ T29] audit: type=1400 audit(1733151203.190:1134): avc: denied { bind } for pid=15871 comm="syz.1.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 722.678954][T15875] FAULT_INJECTION: forcing a failure. [ 722.678954][T15875] name failslab, interval 1, probability 0, space 0, times 0 [ 722.692508][T15875] CPU: 1 UID: 0 PID: 15875 Comm: syz.5.2738 Not tainted 6.13.0-rc1-syzkaller #0 [ 722.701540][T15875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 722.711602][T15875] Call Trace: [ 722.714878][T15875] [ 722.717806][T15875] dump_stack_lvl+0x16c/0x1f0 [ 722.722491][T15875] should_fail_ex+0x497/0x5b0 [ 722.727178][T15875] should_failslab+0xc2/0x120 [ 722.731859][T15875] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 722.737674][T15875] ? __alloc_skb+0x2b1/0x380 [ 722.742276][T15875] __alloc_skb+0x2b1/0x380 [ 722.746784][T15875] ? __pfx___alloc_skb+0x10/0x10 [ 722.751738][T15875] ? xfrm_alloc_compat+0x68/0x1290 [ 722.756859][T15875] ? xfrm_alloc_compat+0xad2/0x1290 [ 722.762065][T15875] xfrm_alloc_compat+0xb9c/0x1290 [ 722.767099][T15875] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 722.772567][T15875] xfrm_send_acquire+0x675/0xc40 [ 722.777512][T15875] ? __pfx_xfrm_send_acquire+0x10/0x10 [ 722.782974][T15875] ? trace_lock_acquire+0x14e/0x1f0 [ 722.788183][T15875] ? lock_acquire+0x2f/0xb0 [ 722.792690][T15875] ? km_query+0x43/0x260 [ 722.796940][T15875] km_query+0xb1/0x260 [ 722.801011][T15875] xfrm_state_find+0x371d/0x7c10 [ 722.805950][T15875] ? finish_task_switch.isra.0+0x220/0xcc0 [ 722.811758][T15875] ? avic_init_vmcb+0x6ea/0x1250 [ 722.816710][T15875] ? __pfx_xfrm_state_find+0x10/0x10 [ 722.821996][T15875] ? hlock_class+0x4e/0x130 [ 722.826509][T15875] ? __pfx___schedule+0x10/0x10 [ 722.831358][T15875] ? __pfx_mark_lock+0x10/0x10 [ 722.836135][T15875] xfrm_resolve_and_create_bundle+0x4b0/0x3530 [ 722.842317][T15875] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 722.848916][T15875] ? __rcu_read_unlock+0x2b4/0x580 [ 722.854031][T15875] ? xfrm_policy_lookup_bytype+0x10b/0x19f0 [ 722.859947][T15875] ? ip6_dst_lookup_tail.constprop.0+0x854/0x2150 [ 722.866377][T15875] ? xfrm_expand_policies.constprop.0+0x250/0x6a0 [ 722.872886][T15875] xfrm_lookup_with_ifid+0x524/0x1e40 [ 722.878255][T15875] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 722.884052][T15875] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 722.890725][T15875] xfrm_lookup_route+0x3b/0x200 [ 722.895579][T15875] ip6_dst_lookup_flow+0x15c/0x1d0 [ 722.900676][T15875] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 722.906299][T15875] tcp_v6_connect+0xe07/0x20e0 [ 722.911083][T15875] ? __pfx___schedule+0x10/0x10 [ 722.915946][T15875] ? __pfx_tcp_v6_connect+0x10/0x10 [ 722.921246][T15875] ? mark_held_locks+0x9f/0xe0 [ 722.926019][T15875] ? __inet_stream_connect+0x3c7/0x1020 [ 722.931562][T15875] __inet_stream_connect+0x3c7/0x1020 [ 722.936926][T15875] ? find_held_lock+0x2d/0x110 [ 722.941681][T15875] ? __pfx___inet_stream_connect+0x10/0x10 [ 722.947481][T15875] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 722.952844][T15875] ? __pfx_inet_stream_connect+0x10/0x10 [ 722.958464][T15875] ? mark_held_locks+0x9f/0xe0 [ 722.963219][T15875] ? __local_bh_enable_ip+0xa4/0x120 [ 722.968495][T15875] ? __pfx_inet_stream_connect+0x10/0x10 [ 722.974115][T15875] inet_stream_connect+0x57/0xa0 [ 722.979147][T15875] __sys_connect_file+0x13e/0x1a0 [ 722.984168][T15875] __sys_connect+0x14f/0x170 [ 722.988835][T15875] ? __pfx___sys_connect+0x10/0x10 [ 722.993935][T15875] ? fdget_pos+0x24b/0x390 [ 722.998346][T15875] ? __pfx_ksys_write+0x10/0x10 [ 723.003186][T15875] __x64_sys_connect+0x72/0xb0 [ 723.007952][T15875] ? lockdep_hardirqs_on+0x7c/0x110 [ 723.013138][T15875] do_syscall_64+0xcd/0x250 [ 723.017630][T15875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.023510][T15875] RIP: 0033:0x7f6facf80849 [ 723.027907][T15875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.047539][T15875] RSP: 002b:00007f6fadd70058 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 723.056013][T15875] RAX: ffffffffffffffda RBX: 00007f6fad146160 RCX: 00007f6facf80849 [ 723.063998][T15875] RDX: 000000000000001c RSI: 00000000200001c0 RDI: 000000000000000c [ 723.071962][T15875] RBP: 00007f6fadd700a0 R08: 0000000000000000 R09: 0000000000000000 [ 723.080004][T15875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.087972][T15875] R13: 0000000000000000 R14: 00007f6fad146160 R15: 00007ffd35d80e18 [ 723.096026][T15875] [ 723.105020][T10672] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 723.117285][ T29] audit: type=1400 audit(1733151203.300:1135): avc: denied { bind } for pid=15869 comm="syz.5.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 723.138070][T10672] usb 9-1: device descriptor read/8, error -71 [ 723.201602][T15867] syz.0.2737 (15867): drop_caches: 2 [ 723.226728][ T5894] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 723.246895][T10672] usb usb9-port1: unable to enumerate USB device [ 723.426676][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 723.465725][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 723.491241][ T5894] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 723.504282][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 723.514614][ T5894] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 723.535963][ T5894] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 723.555943][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.571688][ T5894] usb 2-1: Product: syz [ 723.575895][ T5894] usb 2-1: Manufacturer: syz [ 723.586684][ T5894] usb 2-1: SerialNumber: syz [ 723.593007][ T5894] usb 2-1: config 0 descriptor?? [ 723.744376][T15886] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 723.750926][T15886] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 724.101282][T15872] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 724.113050][ C1] port100 2-1:0.0: NFC: Urb failure (status -71) [ 724.119681][ T5894] port100 2-1:0.0: NFC: Could not get supported command types [ 724.215445][T15889] netlink: 'syz.0.2744': attribute type 1 has an invalid length. [ 724.286721][ T29] audit: type=1400 audit(1733151204.890:1136): avc: denied { accept } for pid=15888 comm="syz.8.2743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 724.323740][ T46] usb 2-1: USB disconnect, device number 72 [ 724.836248][T15911] FAULT_INJECTION: forcing a failure. [ 724.836248][T15911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.849778][T15911] CPU: 0 UID: 0 PID: 15911 Comm: syz.0.2750 Not tainted 6.13.0-rc1-syzkaller #0 [ 724.858808][T15911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 724.868847][T15911] Call Trace: [ 724.872112][T15911] [ 724.875026][T15911] dump_stack_lvl+0x16c/0x1f0 [ 724.879695][T15911] should_fail_ex+0x497/0x5b0 [ 724.884381][T15911] _copy_from_iter+0x2a1/0x1560 [ 724.889215][T15911] ? trace_lock_acquire+0x14e/0x1f0 [ 724.894430][T15911] ? __alloc_skb+0x1fe/0x380 [ 724.899046][T15911] ? __pfx__copy_from_iter+0x10/0x10 [ 724.904337][T15911] ? __virt_addr_valid+0x1a4/0x590 [ 724.909477][T15911] ? __virt_addr_valid+0x5e/0x590 [ 724.914496][T15911] ? __phys_addr_symbol+0x30/0x80 [ 724.919510][T15911] ? __check_object_size+0x488/0x710 [ 724.924789][T15911] netlink_sendmsg+0x813/0xd70 [ 724.929551][T15911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 724.934831][T15911] ____sys_sendmsg+0xaaf/0xc90 [ 724.939583][T15911] ? copy_msghdr_from_user+0x10b/0x160 [ 724.945024][T15911] ? __pfx_____sys_sendmsg+0x10/0x10 [ 724.950309][T15911] ___sys_sendmsg+0x135/0x1e0 [ 724.954968][T15911] ? __pfx____sys_sendmsg+0x10/0x10 [ 724.960157][T15911] ? __pfx_lock_release+0x10/0x10 [ 724.965165][T15911] ? trace_lock_acquire+0x14e/0x1f0 [ 724.970358][T15911] ? __fget_files+0x206/0x3a0 [ 724.975022][T15911] __sys_sendmsg+0x16e/0x220 [ 724.979594][T15911] ? __pfx___sys_sendmsg+0x10/0x10 [ 724.984698][T15911] do_syscall_64+0xcd/0x250 [ 724.989191][T15911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.995069][T15911] RIP: 0033:0x7f61cb980849 [ 724.999467][T15911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.019058][T15911] RSP: 002b:00007f61cc78a058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 725.027465][T15911] RAX: ffffffffffffffda RBX: 00007f61cbb46160 RCX: 00007f61cb980849 [ 725.035420][T15911] RDX: 0000000020000000 RSI: 00000000200000c0 RDI: 0000000000000006 [ 725.043377][T15911] RBP: 00007f61cc78a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 725.051330][T15911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.059286][T15911] R13: 0000000000000000 R14: 00007f61cbb46160 R15: 00007ffd5f406e38 [ 725.067264][T15911] [ 725.305861][T10672] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 726.316921][T10672] usb 6-1: Using ep0 maxpacket: 32 [ 726.329795][T10672] usb 6-1: config 0 has no interfaces? [ 726.616408][T15924] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 726.721393][ T5865] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 726.761713][T15926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2756'. [ 727.156587][T15931] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 727.163057][T15931] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 727.459077][T10672] usb 6-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 727.468185][T10672] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.476212][T10672] usb 6-1: Product: syz [ 727.480549][T10672] usb 6-1: Manufacturer: syz [ 727.485178][T10672] usb 6-1: SerialNumber: syz [ 727.527331][ T5865] usb 9-1: config 0 has an invalid interface number: 30 but max is 0 [ 727.535577][ T5865] usb 9-1: config 0 has no interface number 0 [ 727.541713][ T5865] usb 9-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 727.550857][ T5865] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.592404][ T5865] usb 9-1: config 0 descriptor?? [ 727.617481][T10672] usb 6-1: config 0 descriptor?? [ 727.638370][T10672] usb 6-1: can't set config #0, error -71 [ 727.640157][ T5865] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 727.651405][ T5865] usb 9-1: setting power ON [ 727.655987][ T5865] dvb-usb: bulk message failed: -22 (2/0) [ 727.659970][T10672] usb 6-1: USB disconnect, device number 61 [ 727.788976][ T29] audit: type=1400 audit(1733151208.319:1137): avc: denied { ioctl } for pid=15938 comm="syz.0.2761" path="pid:[4026532793]" dev="nsfs" ino=4026532793 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 728.162790][T15941] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 728.404252][ T5865] dvb-usb: bulk message failed: -22 (1/0) [ 728.413500][T15917] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 728.422740][T15917] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 728.431531][T15917] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 728.440289][T15917] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 728.449260][T15917] geneve3: entered promiscuous mode [ 728.454506][T15917] geneve3: entered allmulticast mode [ 728.542300][ T5865] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 728.555044][ T5865] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 728.569306][ T5865] dvb_usb_cxusb 9-1:0.30: probe with driver dvb_usb_cxusb failed with error -22 [ 728.599964][ T5865] usb 9-1: USB disconnect, device number 23 [ 728.812056][T15957] FAULT_INJECTION: forcing a failure. [ 728.812056][T15957] name failslab, interval 1, probability 0, space 0, times 0 [ 728.836716][T15957] CPU: 1 UID: 0 PID: 15957 Comm: syz.0.2763 Not tainted 6.13.0-rc1-syzkaller #0 [ 728.845780][T15957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 728.855842][T15957] Call Trace: [ 728.859120][T15957] [ 728.862078][T15957] dump_stack_lvl+0x16c/0x1f0 [ 728.866768][T15957] should_fail_ex+0x497/0x5b0 [ 728.871496][T15957] ? fs_reclaim_acquire+0xae/0x150 [ 728.876619][T15957] should_failslab+0xc2/0x120 [ 728.881312][T15957] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 728.887122][T15957] ? __alloc_skb+0x2b1/0x380 [ 728.891728][T15957] __alloc_skb+0x2b1/0x380 [ 728.896155][T15957] ? __pfx___alloc_skb+0x10/0x10 [ 728.901096][T15957] ? selinux_socket_getpeersec_dgram+0x1a5/0x370 [ 728.907431][T15957] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 728.914124][T15957] netlink_alloc_large_skb+0x69/0x130 [ 728.919520][T15957] netlink_sendmsg+0x689/0xd70 [ 728.924335][T15957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 728.929665][T15957] ____sys_sendmsg+0xaaf/0xc90 [ 728.934464][T15957] ? copy_msghdr_from_user+0x10b/0x160 [ 728.939944][T15957] ? __pfx_____sys_sendmsg+0x10/0x10 [ 728.945261][T15957] ___sys_sendmsg+0x135/0x1e0 [ 728.949961][T15957] ? __pfx____sys_sendmsg+0x10/0x10 [ 728.955153][T15957] ? __pfx_lock_release+0x10/0x10 [ 728.960197][T15957] ? trace_lock_acquire+0x14e/0x1f0 [ 728.965390][T15957] ? __fget_files+0x206/0x3a0 [ 728.970056][T15957] __sys_sendmsg+0x16e/0x220 [ 728.974629][T15957] ? __pfx___sys_sendmsg+0x10/0x10 [ 728.979919][T15957] do_syscall_64+0xcd/0x250 [ 728.984419][T15957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.990342][T15957] RIP: 0033:0x7f61cb980849 [ 728.994788][T15957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.014395][T15957] RSP: 002b:00007f61cc7cc058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.022797][T15957] RAX: ffffffffffffffda RBX: 00007f61cbb45fa0 RCX: 00007f61cb980849 [ 729.030752][T15957] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 729.038725][T15957] RBP: 00007f61cc7cc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 729.046707][T15957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.054673][T15957] R13: 0000000000000000 R14: 00007f61cbb45fa0 R15: 00007ffd5f406e38 [ 729.062736][T15957] [ 729.250302][T15968] overlayfs: failed to resolve './file0/file0': -2 [ 729.284886][T15968] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 729.476850][ T29] audit: type=1400 audit(1733151209.871:1138): avc: denied { write } for pid=15958 comm="syz.1.2766" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 730.934617][ T29] audit: type=1400 audit(1733151211.274:1139): avc: denied { read } for pid=16002 comm="syz.7.2779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 731.049418][ T29] audit: type=1400 audit(1733151211.359:1140): avc: denied { connect } for pid=16012 comm="syz.5.2783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 731.104241][T16013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.119844][ T29] audit: type=1400 audit(1733151211.415:1141): avc: denied { ioctl } for pid=16012 comm="syz.5.2783" path="socket:[62883]" dev="sockfs" ino=62883 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 731.148502][T16013] bond0: (slave rose0): Enslaving as an active interface with an up link [ 731.949480][T13322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.097280][T13322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.252396][T16013] bond0: (slave rose0): Releasing backup interface [ 732.928178][T16055] FAULT_INJECTION: forcing a failure. [ 732.928178][T16055] name failslab, interval 1, probability 0, space 0, times 0 [ 732.941350][T16055] CPU: 1 UID: 0 PID: 16055 Comm: syz.7.2788 Not tainted 6.13.0-rc1-syzkaller #0 [ 732.950389][T16055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 732.960447][T16055] Call Trace: [ 732.963726][T16055] [ 732.966657][T16055] dump_stack_lvl+0x16c/0x1f0 [ 732.971349][T16055] should_fail_ex+0x497/0x5b0 [ 732.976034][T16055] ? fs_reclaim_acquire+0xae/0x150 [ 732.981159][T16055] should_failslab+0xc2/0x120 [ 732.985841][T16055] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 732.991655][T16055] ? __d_alloc+0x31/0xaa0 [ 732.996078][T16055] ? __pfx_gadgetfs_fill_super+0x10/0x10 [ 733.001714][T16055] __d_alloc+0x31/0xaa0 [ 733.005874][T16055] ? __pfx_gadgetfs_fill_super+0x10/0x10 [ 733.011509][T16055] d_alloc+0x4a/0x1e0 [ 733.015499][T16055] ? __pfx_gadgetfs_fill_super+0x10/0x10 [ 733.021217][T16055] d_alloc_name+0x84/0xb0 [ 733.025567][T16055] ? __pfx_d_alloc_name+0x10/0x10 [ 733.030618][T16055] gadgetfs_create_file+0x3e/0xb0 [ 733.035657][T16055] gadgetfs_fill_super+0x321/0x470 [ 733.040778][T16055] get_tree_single+0xdf/0x190 [ 733.045479][T16055] vfs_get_tree+0x8f/0x380 [ 733.049898][T16055] vfs_cmd_create+0xd7/0x2a0 [ 733.054498][T16055] __do_sys_fsconfig+0x7ba/0xbe0 [ 733.059442][T16055] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 733.064921][T16055] do_syscall_64+0xcd/0x250 [ 733.069434][T16055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.075331][T16055] RIP: 0033:0x7f105e780849 [ 733.079750][T16055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.099370][T16055] RSP: 002b:00007f105c5d5058 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 733.107789][T16055] RAX: ffffffffffffffda RBX: 00007f105e946160 RCX: 00007f105e780849 [ 733.115759][T16055] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000008 [ 733.123730][T16055] RBP: 00007f105c5d50a0 R08: 0000000000000000 R09: 0000000000000000 [ 733.131698][T16055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 733.139667][T16055] R13: 0000000000000000 R14: 00007f105e946160 R15: 00007ffe4c91e0d8 [ 733.147652][T16055] [ 734.254837][T16064] bond0: Error: Cannot enslave bond to itself. [ 734.437987][T16072] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2796'. [ 734.943817][T16090] FAULT_INJECTION: forcing a failure. [ 734.943817][T16090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.979285][T16090] CPU: 0 UID: 0 PID: 16090 Comm: syz.5.2798 Not tainted 6.13.0-rc1-syzkaller #0 [ 734.988362][T16090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 734.998518][T16090] Call Trace: [ 735.001800][T16090] [ 735.004732][T16090] dump_stack_lvl+0x16c/0x1f0 [ 735.009431][T16090] should_fail_ex+0x497/0x5b0 [ 735.014125][T16090] _copy_to_user+0x32/0xd0 [ 735.018553][T16090] simple_read_from_buffer+0xd0/0x160 [ 735.023949][T16090] proc_fail_nth_read+0x198/0x270 [ 735.028995][T16090] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 735.034566][T16090] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 735.040128][T16090] vfs_read+0x1df/0xbe0 [ 735.044290][T16090] ? __fget_files+0x1fc/0x3a0 [ 735.048971][T16090] ? __pfx___mutex_lock+0x10/0x10 [ 735.054015][T16090] ? __pfx_vfs_read+0x10/0x10 [ 735.058700][T16090] ? __fget_files+0x206/0x3a0 [ 735.063385][T16090] ksys_read+0x12b/0x250 [ 735.067632][T16090] ? __pfx_ksys_read+0x10/0x10 [ 735.072413][T16090] do_syscall_64+0xcd/0x250 [ 735.076921][T16090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.082844][T16090] RIP: 0033:0x7f6facf7f25c [ 735.087257][T16090] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 735.106863][T16090] RSP: 002b:00007f6fadd91050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 735.115286][T16090] RAX: ffffffffffffffda RBX: 00007f6fad146080 RCX: 00007f6facf7f25c [ 735.123253][T16090] RDX: 000000000000000f RSI: 00007f6fadd910b0 RDI: 0000000000000005 [ 735.131221][T16090] RBP: 00007f6fadd910a0 R08: 0000000000000000 R09: 0000000000000000 [ 735.139199][T16090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.147194][T16090] R13: 0000000000000001 R14: 00007f6fad146080 R15: 00007ffd35d80e18 [ 735.155188][T16090] [ 735.426256][ T5894] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 735.434551][T16100] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2800'. [ 735.641742][T16117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16117 comm=syz.1.2804 [ 735.678577][T16119] netlink: 'syz.1.2804': attribute type 1 has an invalid length. [ 735.711233][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 735.718263][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.729626][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.736197][T16119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 735.750639][T16117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16117 comm=syz.1.2804 [ 735.757233][ T5894] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 735.764483][T16117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16117 comm=syz.1.2804 [ 735.785491][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.789100][T16117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16117 comm=syz.1.2804 [ 735.807598][T16117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16117 comm=syz.1.2804 [ 735.808190][ T5894] usb 1-1: config 0 descriptor?? [ 735.820340][T16117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16117 comm=syz.1.2804 [ 735.837821][T16117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16117 comm=syz.1.2804 [ 735.850792][T16117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16117 comm=syz.1.2804 [ 735.865850][T16117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16117 comm=syz.1.2804 [ 735.878643][T16117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16117 comm=syz.1.2804 [ 736.067598][ T5825] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 736.595658][ T5894] usbhid 1-1:0.0: can't add hid device: -71 [ 736.609320][ T5894] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 736.624832][ T5894] usb 1-1: USB disconnect, device number 61 [ 737.621077][T12635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.250038][T12635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.572695][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2819'. [ 738.581915][T16180] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2819'. [ 738.611189][T15446] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 738.624033][T15446] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 738.635058][T15446] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 738.645690][T15446] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 738.653356][T15446] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 738.730364][T15446] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 738.869316][T16181] chnl_net:caif_netlink_parms(): no params data found [ 739.010535][T16181] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.020855][T16181] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.029246][T16181] bridge_slave_0: entered allmulticast mode [ 739.036277][T16181] bridge_slave_0: entered promiscuous mode [ 739.043897][T16181] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.051553][T16181] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.058913][T16181] bridge_slave_1: entered allmulticast mode [ 739.065873][T16181] bridge_slave_1: entered promiscuous mode [ 739.103962][T16181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.117685][T16181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.132193][ T5894] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 739.261507][T16181] team0: Port device team_slave_0 added [ 739.374267][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 739.419658][ T5894] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 739.441919][T16181] team0: Port device team_slave_1 added [ 739.532873][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.609486][ T5894] usb 6-1: Product: syz [ 739.614257][ T5894] usb 6-1: Manufacturer: syz [ 739.619364][ T5894] usb 6-1: SerialNumber: syz [ 739.626411][ T5894] usb 6-1: config 0 descriptor?? [ 739.630603][T16181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.633261][ T5894] usb 6-1: active config #0 != 1 ?? [ 739.639189][T16181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.669914][T16181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.682661][T16181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.689660][T16181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.716052][T16181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.745361][T16181] hsr_slave_0: entered promiscuous mode [ 739.751481][T16181] hsr_slave_1: entered promiscuous mode [ 739.757540][T16181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 739.765135][T16181] Cannot create hsr debugfs directory [ 739.854684][ T5894] usb 6-1: USB disconnect, device number 62 [ 739.885359][T16181] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.915122][ T9] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 740.000866][T16181] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.097536][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 740.104022][ T9] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 740.105667][T16181] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.112214][ T9] usb 9-1: config 0 has no interface number 0 [ 740.282593][T16213] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 740.289087][T16213] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 740.411298][T16181] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.514099][ T9] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 740.524067][ T9] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 740.534039][ T9] usb 9-1: config 0 interface 41 has no altsetting 0 [ 740.542491][ T9] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 740.551650][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.559700][ T9] usb 9-1: Product: syz [ 740.563871][ T9] usb 9-1: Manufacturer: syz [ 740.568516][ T9] usb 9-1: SerialNumber: syz [ 740.584746][ T9] usb 9-1: config 0 descriptor?? [ 740.591455][T16207] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 740.607545][T16207] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 740.669848][T16181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 740.699259][T16181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 740.721012][T16181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 740.732111][T16181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 740.803074][T16181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.827353][T16181] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.875310][T16181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 740.885981][T16181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 740.897618][T15446] Bluetooth: hci0: command tx timeout [ 740.913574][T16218] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 740.913574][T16218] The task syz.8.2826 (16218) triggered the difference, watch for misbehavior. [ 740.921047][T13593] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.939157][T13593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.967771][T16218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.979275][T16218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.988452][T13593] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.995630][T13593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.041454][T16218] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 741.071239][T16218] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 741.091153][T16227] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2830'. [ 741.111105][T16181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.151186][T16181] veth0_vlan: entered promiscuous mode [ 741.165244][T16181] veth1_vlan: entered promiscuous mode [ 741.194356][T16181] veth0_macvtap: entered promiscuous mode [ 741.203951][T16181] veth1_macvtap: entered promiscuous mode [ 741.215499][T10672] kernel write not supported for file /1668/net/ip_vs_stats (pid: 10672 comm: kworker/1:7) [ 741.219760][T16181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.227754][ T46] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 741.237802][T16181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.269667][T16181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.279438][T16181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.288548][T16181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.299167][T16181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.446688][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 741.453173][ T46] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 741.461459][ T46] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 741.470495][T13322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.474075][ T46] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 741.480023][T13322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.489078][ T46] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 741.507062][ T46] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 741.521596][ T46] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 741.532383][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.541021][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.549064][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.815619][ T8] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 742.008846][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 742.057482][ T8] usb 6-1: config 0 has an invalid interface number: 65 but max is 0 [ 742.125877][ T8] usb 6-1: config 0 has no interface number 0 [ 742.152979][ T46] usb 2-1: usb_control_msg returned -32 [ 742.158737][ T46] usbtmc 2-1:16.0: can't read capabilities [ 742.192055][ T8] usb 6-1: New USB device found, idVendor=1bc7, idProduct=1010, bcdDevice=b1.ff [ 742.201524][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.206946][T16242] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2835'. [ 742.209660][ T8] usb 6-1: Product: syz [ 742.224546][ T8] usb 6-1: Manufacturer: syz [ 742.229325][ T8] usb 6-1: SerialNumber: syz [ 742.244472][ T8] usb 6-1: config 0 descriptor?? [ 742.255801][ T8] option 6-1:0.65: GSM modem (1-port) converter detected [ 742.287100][ T8] usb 6-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 743.105736][ T46] usb 6-1: USB disconnect, device number 63 [ 743.114752][ T46] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 743.124435][ T46] option 6-1:0.65: device disconnected [ 743.130706][T15446] Bluetooth: hci0: command tx timeout [ 743.197218][ T9] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 743.210244][ T9] usb 9-1: USB disconnect, device number 24 [ 743.276474][T16249] Bluetooth: MGMT ver 1.23 [ 743.719508][T12635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.267969][ T8] usb 2-1: USB disconnect, device number 73 [ 744.339363][ T9] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 744.384255][T16267] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 744.390675][T16267] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 744.420144][T12635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.514389][ T29] audit: type=1400 audit(1733151479.946:1142): avc: denied { read } for pid=16265 comm="syz.8.2842" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 744.761368][ T29] audit: type=1400 audit(1733151479.946:1143): avc: denied { open } for pid=16265 comm="syz.8.2842" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 744.785341][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 744.793392][ T9] usb 6-1: config 222 has an invalid interface number: 239 but max is 0 [ 744.816359][ T9] usb 6-1: config 222 contains an unexpected descriptor of type 0x1, skipping [ 744.834887][ T9] usb 6-1: config 222 contains an unexpected descriptor of type 0x1, skipping [ 744.844071][ T9] usb 6-1: config 222 contains an unexpected descriptor of type 0x2, skipping [ 744.853166][ T9] usb 6-1: config 222 has no interface number 0 [ 744.859642][ T9] usb 6-1: config 222 interface 239 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 744.871836][ T9] usb 6-1: config 222 interface 239 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 744.882951][ T9] usb 6-1: config 222 interface 239 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 744.907975][ T9] usb 6-1: config 222 interface 239 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 744.923301][ T9] usb 6-1: config 222 interface 239 altsetting 0 endpoint 0x5 has invalid maxpacket 17617, setting to 64 [ 744.935505][ T9] usb 6-1: config 222 interface 239 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 744.947922][ T9] usb 6-1: config 222 interface 239 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 744.959325][ T9] usb 6-1: config 222 interface 239 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 744.970410][ T9] usb 6-1: config 222 interface 239 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 744.983152][ T9] usb 6-1: New USB device found, idVendor=1737, idProduct=0078, bcdDevice=ed.6d [ 744.994777][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.003004][ T9] usb 6-1: Product: syz [ 745.007682][ T9] usb 6-1: Manufacturer: syz [ 745.442899][T15446] Bluetooth: hci0: command tx timeout [ 746.005501][ T9] usb 6-1: SerialNumber: syz [ 746.011971][ T9] usb 6-1: Interface #239 referenced by multiple IADs [ 746.026187][T16259] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 746.041274][T16259] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 746.594505][ T9] usb 6-1: USB disconnect, device number 64 [ 746.658855][ T8] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 746.844585][ T8] usb 2-1: config 0 has an invalid interface number: 114 but max is 0 [ 746.857587][ T8] usb 2-1: config 0 has no interface number 0 [ 746.869939][ T8] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 746.882740][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.893451][ T8] usb 2-1: Product: syz [ 746.897680][ T8] usb 2-1: Manufacturer: syz [ 746.910231][ T8] usb 2-1: SerialNumber: syz [ 746.916575][ T8] usb 2-1: config 0 descriptor?? [ 746.922935][ T8] peak_usb 2-1:0.114: probe with driver peak_usb failed with error 114 [ 747.171539][ T46] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 747.342719][ T46] usb 6-1: Using ep0 maxpacket: 8 [ 747.351227][ T46] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 747.375405][ T46] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 747.385703][ T864] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 747.448539][ T46] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 747.494212][ T46] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 747.494892][ T29] audit: type=1400 audit(1733151482.696:1144): avc: denied { getopt } for pid=16272 comm="syz.1.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 747.512543][ T46] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 747.652745][T15446] Bluetooth: hci0: command tx timeout [ 747.675829][ T46] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 747.685332][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.706019][ T864] usb 9-1: Using ep0 maxpacket: 32 [ 747.714753][ T864] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 747.723104][ T864] usb 9-1: config 0 has no interface number 0 [ 747.732600][ T864] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 747.742123][ T864] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.750930][ T864] usb 9-1: Product: syz [ 747.755503][ T864] usb 9-1: Manufacturer: syz [ 747.760888][ T864] usb 9-1: SerialNumber: syz [ 747.808594][ T864] usb 9-1: config 0 descriptor?? [ 747.875354][T16309] netlink: 'syz.1.2844': attribute type 5 has an invalid length. [ 747.914839][ T864] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 748.026099][ T46] usb 6-1: usb_control_msg returned -32 [ 748.032929][ T46] usbtmc 6-1:16.0: can't read capabilities [ 748.175641][ T864] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 748.204565][ T864] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 748.377980][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 11 [ 748.510388][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.516951][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.535178][T16317] syzkaller1: entered promiscuous mode [ 748.560631][T16317] syzkaller1: entered allmulticast mode [ 749.196438][T13602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.319079][ T46] usb 2-1: USB disconnect, device number 74 [ 750.175802][ T29] audit: type=1400 audit(1733151485.241:1145): avc: denied { connect } for pid=16322 comm="syz.1.2860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 750.196750][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 750.310732][ T864] usb 9-1: USB disconnect, device number 25 [ 750.316844][ T46] usb 6-1: USB disconnect, device number 65 [ 750.438039][ T864] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 750.455891][ T864] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 750.483393][ T864] quatech2 9-1:0.51: device disconnected [ 750.560657][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.715164][T16349] SET target dimension over the limit! [ 750.753616][T16349] sit0: entered allmulticast mode [ 751.207969][T16358] FAULT_INJECTION: forcing a failure. [ 751.207969][T16358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.223936][T16358] CPU: 0 UID: 0 PID: 16358 Comm: syz.8.2871 Not tainted 6.13.0-rc1-syzkaller #0 [ 751.233007][T16358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 751.243438][T16358] Call Trace: [ 751.243466][T16358] [ 751.243476][T16358] dump_stack_lvl+0x16c/0x1f0 [ 751.254368][T16358] should_fail_ex+0x497/0x5b0 [ 751.259076][T16358] _copy_to_user+0x32/0xd0 [ 751.263498][T16358] simple_read_from_buffer+0xd0/0x160 [ 751.268867][T16358] proc_fail_nth_read+0x198/0x270 [ 751.273898][T16358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 751.279455][T16358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 751.285003][T16358] vfs_read+0x1df/0xbe0 [ 751.289179][T16358] ? __fget_files+0x1fc/0x3a0 [ 751.293860][T16358] ? __pfx___mutex_lock+0x10/0x10 [ 751.298888][T16358] ? __pfx_vfs_read+0x10/0x10 [ 751.303634][T16358] ? __fget_files+0x206/0x3a0 [ 751.308292][T16358] ksys_read+0x12b/0x250 [ 751.312512][T16358] ? __pfx_ksys_read+0x10/0x10 [ 751.317256][T16358] do_syscall_64+0xcd/0x250 [ 751.321772][T16358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.327674][T16358] RIP: 0033:0x7ff61b97f25c [ 751.332097][T16358] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 751.351719][T16358] RSP: 002b:00007ff61c80a050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 751.360142][T16358] RAX: ffffffffffffffda RBX: 00007ff61bb45fa0 RCX: 00007ff61b97f25c [ 751.368095][T16358] RDX: 000000000000000f RSI: 00007ff61c80a0b0 RDI: 0000000000000005 [ 751.376065][T16358] RBP: 00007ff61c80a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 751.384114][T16358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 751.392091][T16358] R13: 0000000000000000 R14: 00007ff61bb45fa0 R15: 00007fffb1d19408 [ 751.400092][T16358] [ 752.128854][ T29] audit: type=1400 audit(1733151487.055:1146): avc: denied { mount } for pid=16367 comm="syz.5.2875" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 752.198303][ T29] audit: type=1400 audit(1733151487.168:1147): avc: denied { map } for pid=16367 comm="syz.5.2875" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 752.228143][ T29] audit: type=1400 audit(1733151487.168:1148): avc: denied { ioctl } for pid=16367 comm="syz.5.2875" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 752.314440][ T8] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 752.322628][ T9] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 752.394941][ T29] audit: type=1400 audit(1733151487.336:1149): avc: denied { unmount } for pid=7145 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 752.602232][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 752.608309][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 752.661981][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 752.754989][ T8] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 752.764736][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 752.775875][ T8] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 752.806980][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 752.816929][ T8] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 752.843581][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 752.854090][ T8] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 752.878983][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 752.892305][ T8] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 752.908514][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 752.917910][ T8] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 752.988346][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.000602][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.210723][T16395] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 753.217179][T16395] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 753.843621][ T8] usb 9-1: usb_control_msg returned -32 [ 753.849397][ T8] usbtmc 9-1:16.0: can't read capabilities [ 753.865992][ T9] usb 2-1: usb_control_msg returned -32 [ 753.871723][ T9] usbtmc 2-1:16.0: can't read capabilities [ 754.138978][T16408] netlink: 'syz.5.2887': attribute type 15 has an invalid length. [ 755.665314][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.884701][ T29] audit: type=1400 audit(1733151490.619:1150): avc: denied { read } for pid=16423 comm="syz.5.2891" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 756.614251][ T29] audit: type=1400 audit(1733151490.638:1151): avc: denied { open } for pid=16423 comm="syz.5.2891" path="/506/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 756.720205][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.879176][ T29] audit: type=1400 audit(1733151490.638:1152): avc: denied { ioctl } for pid=16423 comm="syz.5.2891" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x2201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 756.990798][ T9] usb 9-1: USB disconnect, device number 26 [ 757.130929][ T29] audit: type=1400 audit(1733151491.770:1153): avc: denied { append } for pid=16436 comm="syz.1.2896" name="001" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 757.155368][ T864] usb 2-1: USB disconnect, device number 75 [ 757.475920][T16444] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 757.482389][T16444] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 757.776709][ T864] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 757.992406][ T864] usb 2-1: device descriptor read/64, error -71 [ 758.161430][T10672] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 758.247170][ T864] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 758.301446][T16453] netlink: 'syz.7.2898': attribute type 15 has an invalid length. [ 758.343344][T10672] usb 9-1: Using ep0 maxpacket: 32 [ 758.349936][T10672] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.364474][T10672] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 758.375874][T10672] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 758.385350][T10672] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.394354][ T864] usb 2-1: device descriptor read/64, error -71 [ 758.899518][T10672] usb 9-1: config 0 descriptor?? [ 759.007022][ T864] usb usb2-port1: attempt power cycle [ 759.369713][ T864] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 759.407153][ T864] usb 2-1: device descriptor read/8, error -71 [ 759.697527][ T864] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 759.722831][ T864] usb 2-1: device descriptor read/8, error -71 [ 760.227405][ T864] usb usb2-port1: unable to enumerate USB device [ 760.319393][T16475] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2904'. [ 760.390318][T16478] nbd: must specify an index to disconnect [ 761.286421][T15446] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 761.619654][T13315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.669443][T16488] block device autoloading is deprecated and will be removed. [ 761.801443][ T8] usb 9-1: USB disconnect, device number 27 [ 761.860454][ T5893] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 761.875250][ T29] audit: type=1400 audit(1733151496.222:1154): avc: denied { getopt } for pid=16492 comm="syz.8.2910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 762.016356][T16500] syz.8.2912: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 762.016379][ T29] audit: type=1400 audit(1733151496.344:1155): avc: denied { setopt } for pid=16499 comm="syz.8.2912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 762.049267][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 762.054903][T16500] ,cpuset=/,mems_allowed=0-1 [ 762.060105][T16500] CPU: 0 UID: 0 PID: 16500 Comm: syz.8.2912 Not tainted 6.13.0-rc1-syzkaller #0 [ 762.069120][T16500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 762.079164][T16500] Call Trace: [ 762.082437][T16500] [ 762.085366][T16500] dump_stack_lvl+0x16c/0x1f0 [ 762.086600][T16501] netlink: zone id is out of range [ 762.090047][T16500] warn_alloc+0x24d/0x3a0 [ 762.095218][T16501] netlink: zone id is out of range [ 762.099447][T16500] ? __pfx_warn_alloc+0x10/0x10 [ 762.099471][T16500] ? __pfx_stack_trace_save+0x10/0x10 [ 762.099502][T16500] ? kasan_save_stack+0x42/0x60 [ 762.099519][T16500] ? kasan_save_stack+0x33/0x60 [ 762.099537][T16500] ? kasan_save_track+0x14/0x30 [ 762.099554][T16500] ? __kasan_kmalloc+0xaa/0xb0 [ 762.099570][T16500] ? xskq_create+0x52/0x1d0 [ 762.099589][T16500] ? do_sock_setsockopt+0x222/0x480 [ 762.099609][T16500] ? __sys_setsockopt+0x1a0/0x230 [ 762.099625][T16500] ? __x64_sys_setsockopt+0xbd/0x160 [ 762.105560][T16501] netlink: zone id is out of range [ 762.109533][T16500] __vmalloc_node_range_noprof+0x10df/0x1530 [ 762.109565][T16500] ? xskq_create+0xfb/0x1d0 [ 762.109588][T16500] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 762.109614][T16500] ? xskq_create+0xfb/0x1d0 [ 762.109633][T16500] vmalloc_user_noprof+0x6b/0x90 [ 762.109652][T16500] ? xskq_create+0xfb/0x1d0 [ 762.115040][ T46] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 762.119821][T16500] xskq_create+0xfb/0x1d0 [ 762.119848][T16500] xsk_setsockopt+0x757/0xa10 [ 762.119866][T16500] ? __pfx_xsk_setsockopt+0x10/0x10 [ 762.119889][T16500] ? selinux_socket_setsockopt+0x6a/0x80 [ 762.119913][T16500] ? __pfx_xsk_setsockopt+0x10/0x10 [ 762.119930][T16500] do_sock_setsockopt+0x222/0x480 [ 762.119952][T16500] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 762.119973][T16500] ? lock_acquire+0x2f/0xb0 [ 762.120004][T16500] __sys_setsockopt+0x1a0/0x230 [ 762.125704][T16501] netlink: zone id is out of range [ 762.129646][T16500] __x64_sys_setsockopt+0xbd/0x160 [ 762.129666][T16500] ? do_syscall_64+0x91/0x250 [ 762.129689][T16500] ? lockdep_hardirqs_on+0x7c/0x110 [ 762.129710][T16500] do_syscall_64+0xcd/0x250 [ 762.129735][T16500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.134537][T16501] netlink: zone id is out of range [ 762.138935][T16500] RIP: 0033:0x7ff61b980849 [ 762.138953][T16500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.138971][T16500] RSP: 002b:00007ff61c80a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 762.138990][T16500] RAX: ffffffffffffffda RBX: 00007ff61bb45fa0 RCX: 00007ff61b980849 [ 762.139003][T16500] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 762.139015][T16500] RBP: 00007ff61b9f3986 R08: 0000000000000020 R09: 0000000000000000 [ 762.139027][T16500] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 762.139039][T16500] R13: 0000000000000000 R14: 00007ff61bb45fa0 R15: 00007fffb1d19408 [ 762.139060][T16500] [ 762.140537][T13602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.146323][T16501] netlink: zone id is out of range [ 762.150040][T16500] Mem-Info: [ 762.155181][T16501] netlink: zone id is out of range [ 762.160033][T16500] active_anon:7247 inactive_anon:44 isolated_anon:0 [ 762.160033][T16500] active_file:7995 inactive_file:51260 isolated_file:0 [ 762.160033][T16500] unevictable:768 dirty:371 writeback:0 [ 762.160033][T16500] slab_reclaimable:9383 slab_unreclaimable:112771 [ 762.160033][T16500] mapped:40019 shmem:4785 pagetables:832 [ 762.160033][T16500] sec_pagetables:0 bounce:0 [ 762.160033][T16500] kernel_misc_reclaimable:0 [ 762.160033][T16500] free:1288606 free_pcp:4176 free_cma:0 [ 762.160083][T16500] Node 0 active_anon:28988kB inactive_anon:176kB active_file:31980kB inactive_file:204968kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:160076kB dirty:1484kB writeback:0kB shmem:17604kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11852kB pagetables:3328kB sec_pagetables:0kB all_unreclaimable? no [ 762.198686][T16501] netlink: zone id is out of range [ 762.201120][T16500] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 762.332102][ T46] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 762.336656][ T5893] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 762.347134][ T46] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 762.352715][ T5893] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 762.352742][ T5893] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 762.352766][ T5893] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 762.352790][ T5893] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 762.352825][ T5893] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 762.352845][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.356459][ T46] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 762.469671][T16500] Node 0 [ 762.492969][ T46] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 762.500987][T16500] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 762.509084][ T46] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 762.520537][T16500] lowmem_reserve[]: [ 762.530521][ T46] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 762.543502][T16500] 0 [ 762.548991][ T46] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 762.562722][T16500] 2459 [ 762.571113][ T46] usb 6-1: Product: syz [ 762.579036][T16500] 2459 [ 762.588175][ T46] usb 6-1: Manufacturer: syz [ 762.590857][T16500] 0 0 [ 762.678409][ T5893] usb 2-1: usb_control_msg returned -32 [ 762.680292][ T46] cdc_wdm 6-1:1.0: skipping garbage [ 762.681111][ T5893] usbtmc 2-1:16.0: can't read capabilities [ 762.687608][ T46] cdc_wdm 6-1:1.0: skipping garbage [ 762.700815][T16500] [ 762.705813][T16500] Node 0 DMA32 free:1223896kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:28988kB inactive_anon:176kB active_file:31980kB inactive_file:204868kB unevictable:1536kB writepending:1484kB present:3129332kB managed:2547180kB mlocked:0kB bounce:0kB free_pcp:16704kB local_pcp:15880kB free_cma:0kB [ 762.725193][ T46] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 762.741680][T16500] lowmem_reserve[]: 0 0 0 0 0 [ 762.744428][ T46] cdc_wdm 6-1:1.0: Unknown control protocol [ 762.747483][T16500] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 762.780437][T16500] lowmem_reserve[]: 0 0 0 0 0 [ 762.785186][T16500] Node 1 Normal free:3914620kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 762.814070][T16500] lowmem_reserve[]: 0 0 0 0 0 [ 762.818796][T16500] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 762.831633][T16500] Node 0 DMA32: 588*4kB (UME) 555*8kB (UME) 291*16kB (UME) 173*32kB (UME) 194*64kB (UME) 190*128kB (UME) 88*256kB (UME) 270*512kB (UME) 259*1024kB (UM) 19*2048kB (UM) 172*4096kB (UME) = 1223128kB [ 762.906971][T16500] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 762.921846][T16500] Node 1 Normal: 243*4kB (UME) 70*8kB (UME) 56*16kB (UME) 202*32kB (UME) 93*64kB (UME) 37*128kB (UME) 21*256kB (UME) 11*512kB (UME) 1*1024kB (M) 4*2048kB (UME) 946*4096kB (M) = 3914620kB [ 762.942764][T16500] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 762.953808][T16500] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 762.963315][T16500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 762.972982][ T8] usb 6-1: USB disconnect, device number 66 [ 762.979832][T16500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 762.989258][T16500] 61234 total pagecache pages [ 762.990522][T16506] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 762.995808][T16500] 44 pages in swap cache [ 763.002111][T16506] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 763.006682][T16500] Free swap = 124196kB [ 763.017535][T16500] Total swap = 124996kB [ 763.018109][T16506] ALSA: mixer_oss: invalid OSS volume 'DIÇIT' [ 763.021717][T16500] 2097051 pages RAM [ 763.031634][T16500] 0 pages HighMem/MovableOnly [ 763.036582][T16500] 428598 pages reserved [ 763.040895][T16500] 0 pages cma reserved [ 764.243359][T16517] serio: Serial port ptm0 [ 764.639048][T16525] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2918'. [ 765.070625][T16527] fuse: Bad value for 'fd' [ 765.405523][ T864] usb 2-1: USB disconnect, device number 80 [ 765.446642][T16541] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2923'. [ 765.665976][T16547] fuse: Bad value for 'fd' [ 765.741062][ T8] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 766.630027][ T8] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 766.640766][ T8] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 766.702449][ T8] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 766.711782][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.720849][ T8] usb 6-1: Product: syz [ 766.728593][T16554] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2927'. [ 767.023839][ T8] usb 6-1: Manufacturer: syz [ 767.030624][ T8] usb 6-1: SerialNumber: syz [ 767.034581][ T864] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 767.036723][ T8] usb 6-1: config 0 descriptor?? [ 767.083067][T16539] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 767.090478][T16539] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 767.113725][T16556] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 767.169521][T16556] kvm: pic: non byte read [ 767.174711][T16556] kvm: pic: level sensitive irq not supported [ 767.174812][T16556] kvm: pic: non byte read [ 767.186046][T16556] kvm: pic: level sensitive irq not supported [ 767.186142][T16556] kvm: pic: non byte read [ 767.197172][T16556] kvm: pic: level sensitive irq not supported [ 767.197215][T16556] kvm: pic: non byte read [ 767.327244][T16539] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 767.336630][T16539] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 767.675683][ T11] net_ratelimit: 5 callbacks suppressed [ 767.675701][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.696275][ T864] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 767.708211][ T864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.718414][ T864] usb 2-1: config 0 has no interface number 0 [ 767.724622][ T864] usb 2-1: config 0 interface 168 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 767.735755][ T864] usb 2-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 767.745746][ T864] usb 2-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 767.759397][ T864] usb 2-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 767.768831][ T864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.777826][T10672] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 767.786453][ T864] usb 2-1: config 0 descriptor?? [ 767.795448][ T864] HFC-S_USB 2-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 767.796302][ T8] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 767.964674][T10672] usb 9-1: Using ep0 maxpacket: 16 [ 767.971848][T10672] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.983720][T10672] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 767.998249][T10672] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 768.007487][T10672] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.017021][T10672] usb 9-1: config 0 descriptor?? [ 768.361892][T13593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.440331][ T8] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 768.454228][ T8] usb 6-1: USB disconnect, device number 67 [ 768.469064][T10672] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.001F/input/input42 [ 768.546095][T10672] microsoft 0003:045E:07DA.001F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 768.924548][T16562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.933114][T16562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.942136][ T8] usb 9-1: USB disconnect, device number 28 [ 769.290630][ T5865] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 769.454508][ T29] audit: type=1400 audit(1733151503.135:1156): avc: denied { create } for pid=16592 comm="syz.5.2936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 769.611132][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 769.663452][ T5865] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 769.712367][ T5865] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 769.736175][ T5865] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 769.738667][T10672] usb 2-1: USB disconnect, device number 81 [ 769.749942][ T5865] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 769.762207][ T5865] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 769.775302][ T5865] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 769.784638][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.874175][ T29] audit: type=1400 audit(1733151503.696:1157): avc: denied { write } for pid=16610 comm="syz.8.2941" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 769.904403][ T29] audit: type=1400 audit(1733151503.724:1158): avc: denied { append } for pid=16610 comm="syz.8.2941" name="usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 769.940430][ T29] audit: type=1400 audit(1733151503.762:1159): avc: denied { ioctl } for pid=16610 comm="syz.8.2941" path="/dev/usbmon1" dev="devtmpfs" ino=717 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 770.094165][ T29] audit: type=1400 audit(1733151503.911:1160): avc: denied { setattr } for pid=16615 comm="syz.7.2943" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 770.118988][T16616] binder: 16615:16616 ioctl c0306201 20000480 returned -22 [ 770.275870][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 770.283595][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 770.492638][ T5865] usb 1-1: usb_control_msg returned -32 [ 770.498717][ T5865] usbtmc 1-1:16.0: can't read capabilities [ 770.500900][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 770.506158][T16619] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2944'. [ 770.512083][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 770.529072][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 770.536541][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 770.544136][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 770.551626][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 770.559300][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 770.566948][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 770.574522][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 770.582062][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 770.752654][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 770.760653][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 770.768575][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 770.776535][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 770.791020][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 770.798788][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 770.806824][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 770.815140][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 770.823266][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.539040][T16635] FAULT_INJECTION: forcing a failure. [ 771.539040][T16635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.545302][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.559832][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.567451][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.574871][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.582460][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.590044][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.597471][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.605162][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.610386][T16635] CPU: 0 UID: 0 PID: 16635 Comm: syz.8.2947 Not tainted 6.13.0-rc1-syzkaller #0 [ 771.612844][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.621528][T16635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 771.621545][T16635] Call Trace: [ 771.621553][T16635] [ 771.621561][T16635] dump_stack_lvl+0x16c/0x1f0 [ 771.621589][T16635] should_fail_ex+0x497/0x5b0 [ 771.621618][T16635] _copy_from_iter+0x2a1/0x1560 [ 771.621640][T16635] ? _copy_from_iter+0x15e/0x1560 [ 771.621658][T16635] ? __pfx__copy_from_iter+0x10/0x10 [ 771.621678][T16635] ? __pfx__copy_from_iter+0x10/0x10 [ 771.621695][T16635] ? __virt_addr_valid+0x1a4/0x590 [ 771.621726][T16635] copy_page_from_iter+0xa5/0x120 [ 771.629128][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.639149][T16635] skb_copy_datagram_from_iter+0x29b/0x710 [ 771.639207][T16635] tun_get_user+0x199c/0x3e40 [ 771.639245][T16635] ? find_held_lock+0x2d/0x110 [ 771.639277][T16635] ? __pfx_tun_get_user+0x10/0x10 [ 771.639312][T16635] ? find_held_lock+0x2d/0x110 [ 771.639347][T16635] ? __pfx_lock_release+0x10/0x10 [ 771.639386][T16635] tun_chr_write_iter+0xdc/0x210 [ 771.639421][T16635] vfs_write+0x5ae/0x1150 [ 771.639446][T16635] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 771.639481][T16635] ? __pfx_vfs_write+0x10/0x10 [ 771.639506][T16635] ? __fget_files+0x40/0x3a0 [ 771.639542][T16635] ksys_write+0x12b/0x250 [ 771.643074][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.645763][T16635] ? __pfx_ksys_write+0x10/0x10 [ 771.650418][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.655056][T16635] do_syscall_64+0xcd/0x250 [ 771.655083][T16635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.655106][T16635] RIP: 0033:0x7ff61b97f2ff [ 771.655123][T16635] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 8e 02 00 48 [ 771.655141][T16635] RSP: 002b:00007ff61c80a020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 771.655160][T16635] RAX: ffffffffffffffda RBX: 00007ff61bb45fa0 RCX: 00007ff61b97f2ff [ 771.655172][T16635] RDX: 000000000000fe53 RSI: 0000000020000440 RDI: 00000000000000c8 [ 771.655184][T16635] RBP: 00007ff61c80a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 771.655195][T16635] R10: 000000000000fe53 R11: 0000000000000293 R12: 0000000000000002 [ 771.655206][T16635] R13: 0000000000000000 R14: 00007ff61bb45fa0 R15: 00007fffb1d19408 [ 771.655230][T16635] [ 771.865693][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.873289][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.880943][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.888500][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.897855][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.905553][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.913580][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.921390][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.928923][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.936568][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.944105][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.951585][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.959152][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.966722][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.974253][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.981804][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.989353][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 771.996947][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.004491][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.012053][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.019666][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.027392][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.034880][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.042458][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.052658][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.060233][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.067765][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.075319][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.082909][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.090419][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.097940][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.105483][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.113119][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.120585][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.128229][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.135897][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.143402][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.150992][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.156663][T16642] fuse: Bad value for 'fd' [ 772.158600][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.174864][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.183554][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.192218][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.201985][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.424990][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.439681][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.447393][ T29] audit: type=1400 audit(1733151506.081:1161): avc: denied { map } for pid=16644 comm="syz.8.2950" path="socket:[65817]" dev="sockfs" ino=65817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 772.473032][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.473713][ T29] audit: type=1400 audit(1733151506.081:1162): avc: denied { read } for pid=16644 comm="syz.8.2950" path="socket:[65817]" dev="sockfs" ino=65817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 772.510225][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.520126][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.529945][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.539738][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.548338][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.558178][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.568118][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.576864][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.585561][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.594253][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.602973][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.611688][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.621422][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.630080][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.639860][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.648512][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.655990][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.664630][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.860026][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.867732][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.875269][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.883366][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.890780][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.898490][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.906085][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.913483][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.921001][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.928459][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.936094][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.943498][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.950819][ T5865] usb 1-1: USB disconnect, device number 62 [ 772.950937][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.964227][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.971714][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.979186][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.986591][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 772.994300][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.001756][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.009367][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.016825][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.086292][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.094170][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.101683][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.109815][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.120439][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.128677][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.137181][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.145759][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.153707][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.161171][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.168563][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.176045][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.183718][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.191175][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.198850][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.206324][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.207946][T16658] netlink: 'syz.1.2954': attribute type 8 has an invalid length. [ 773.221725][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.230826][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.238303][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.238410][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2954'. [ 773.245767][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.245794][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.245812][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.245830][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.245847][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.245865][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.245882][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.306563][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.314026][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.321498][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.328895][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.336591][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.344210][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.351619][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.359094][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.366584][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.373991][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.381447][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.388920][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.396424][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.403914][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.411644][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.419154][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.426560][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.434058][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.441559][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.449604][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.457314][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.464796][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.472308][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.479899][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.487443][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.494945][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.502402][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.509804][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.517309][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.524791][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.532318][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.539839][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.548026][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.548638][T16663] FAULT_INJECTION: forcing a failure. [ 773.548638][T16663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.555645][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.555665][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.555681][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.569274][T16663] CPU: 0 UID: 0 PID: 16663 Comm: syz.1.2955 Not tainted 6.13.0-rc1-syzkaller #0 [ 773.569301][T16663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 773.569310][T16663] Call Trace: [ 773.569316][T16663] [ 773.569323][T16663] dump_stack_lvl+0x16c/0x1f0 [ 773.569351][T16663] should_fail_ex+0x497/0x5b0 [ 773.576743][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.584056][T16663] _copy_from_iter+0x2a1/0x1560 [ 773.584078][T16663] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 773.591495][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.600435][T16663] ? __pfx__copy_from_iter+0x10/0x10 [ 773.600465][T16663] ? alloc_pages_mpol_noprof+0x315/0x610 [ 773.600492][T16663] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 773.610766][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.613834][T16663] copy_page_from_iter+0xa5/0x120 [ 773.616798][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.621398][T16663] pipe_write+0xd1e/0x1b30 [ 773.621430][T16663] ? __pfx_pipe_write+0x10/0x10 [ 773.626153][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.634963][T16663] ? selinux_file_permission+0x11f/0x580 [ 773.635009][T16663] ? bpf_lsm_file_permission+0x9/0x10 [ 773.635031][T16663] ? security_file_permission+0x71/0x210 [ 773.635064][T16663] vfs_write+0x5ae/0x1150 [ 773.635084][T16663] ? __pfx_pipe_write+0x10/0x10 [ 773.640103][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.646221][T16663] ? __pfx_vfs_write+0x10/0x10 [ 773.646244][T16663] ? __fget_files+0x40/0x3a0 [ 773.646275][T16663] ksys_write+0x207/0x250 [ 773.646294][T16663] ? __pfx_ksys_write+0x10/0x10 [ 773.653724][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.658888][T16663] do_syscall_64+0xcd/0x250 [ 773.664893][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.670567][T16663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.670598][T16663] RIP: 0033:0x7f45d7b80849 [ 773.670612][T16663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.670629][T16663] RSP: 002b:00007f45d893d058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 773.670650][T16663] RAX: ffffffffffffffda RBX: 00007f45d7d46080 RCX: 00007f45d7b80849 [ 773.670663][T16663] RDX: 0000000000010010 RSI: 0000000020020240 RDI: 0000000000000004 [ 773.670674][T16663] RBP: 00007f45d893d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 773.670685][T16663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 773.670696][T16663] R13: 0000000000000001 R14: 00007f45d7d46080 R15: 00007fffaa0e7a78 [ 773.678225][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.683088][T16663] [ 773.835647][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.843381][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.862972][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.878618][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.901512][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.909013][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.916424][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.924285][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.931777][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.939180][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.946719][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.954193][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.961608][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.969104][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.976573][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.984122][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.991700][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 773.999231][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 774.006789][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 774.014286][ T5894] hid-generic 0003:000F:0000.0020: unknown main item tag 0x0 [ 774.028652][ T5894] hid-generic 0003:000F:0000.0020: hidraw0: USB HID v0.04 Device [syz1] on syz1 [ 774.544852][ T5894] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 775.130176][T10672] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 775.192213][ T5893] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 775.257204][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 775.263813][ T5894] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 775.272217][ T5894] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 775.283299][ T5894] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 775.309211][ T5894] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 775.326378][ T5894] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 775.339855][ T5894] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 775.349215][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.365161][T10672] usb 2-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=b4.99 [ 775.374628][T10672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.385356][T10672] usb 2-1: Product: syz [ 775.390056][T10672] usb 2-1: Manufacturer: syz [ 775.395223][T10672] usb 2-1: SerialNumber: syz [ 775.401667][T10672] usb 2-1: config 0 descriptor?? [ 775.417558][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 775.430374][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 775.923964][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 775.977099][ T5893] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 775.986354][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.001756][ T5893] usb 6-1: Product: syz [ 776.002222][ T5894] usb 1-1: usb_control_msg returned -32 [ 776.006069][ T5893] usb 6-1: Manufacturer: syz [ 776.011757][ T5894] usbtmc 1-1:16.0: can't read capabilities [ 776.018785][ T5893] usb 6-1: SerialNumber: syz [ 776.020264][ T5893] usb 6-1: config 0 descriptor?? [ 776.029435][T10672] rtsx_usb 2-1:0.0: probe with driver rtsx_usb failed with error -22 [ 776.044571][ T5893] redrat3 6-1:0.0: Couldn't find all endpoints [ 776.048986][T10672] usb 2-1: USB disconnect, device number 82 [ 776.271022][T16692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.299459][T16692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.308397][T10672] usb 6-1: USB disconnect, device number 68 [ 777.406960][T12635] tipc: Subscription rejected, illegal request [ 778.203300][ T29] audit: type=1400 audit(1733151511.488:1163): avc: denied { read } for pid=16744 comm="syz.1.2982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 778.677408][ T5893] usb 1-1: USB disconnect, device number 63 [ 778.794350][ T46] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 778.928797][T16767] FAULT_INJECTION: forcing a failure. [ 778.928797][T16767] name failslab, interval 1, probability 0, space 0, times 0 [ 778.942245][T16767] CPU: 0 UID: 0 PID: 16767 Comm: syz.5.2989 Not tainted 6.13.0-rc1-syzkaller #0 [ 778.951279][T16767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 778.961319][T16767] Call Trace: [ 778.964600][T16767] [ 778.967523][T16767] dump_stack_lvl+0x16c/0x1f0 [ 778.972186][T16767] should_fail_ex+0x497/0x5b0 [ 778.976860][T16767] ? fs_reclaim_acquire+0xae/0x150 [ 778.981969][T16767] should_failslab+0xc2/0x120 [ 778.986646][T16767] __kmalloc_cache_noprof+0x68/0x410 [ 778.991949][T16767] rds_cong_from_addr+0x50/0x540 [ 778.996886][T16767] ? __kmalloc_noprof+0x23b/0x510 [ 779.001917][T16767] rds_cong_get_maps+0x21/0xe0 [ 779.006671][T16767] ? __ipv6_addr_type+0x225/0x300 [ 779.011687][T16767] __rds_conn_create+0xb06/0x2370 [ 779.016703][T16767] ? __pfx___rds_conn_create+0x10/0x10 [ 779.022177][T16767] ? lockdep_init_map_type+0x16d/0x7d0 [ 779.027641][T16767] ? rcu_is_watching+0x12/0xc0 [ 779.032428][T16767] rds_conn_create_outgoing+0x44/0x60 [ 779.037815][T16767] rds_sendmsg+0xe47/0x31a0 [ 779.042341][T16767] ? __pfx_rds_sendmsg+0x10/0x10 [ 779.047284][T16767] ? __pfx_sock_has_perm+0x10/0x10 [ 779.051129][ T46] usb 9-1: Using ep0 maxpacket: 16 [ 779.052449][T16767] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 779.064346][T16767] ? trace_lock_acquire+0x14e/0x1f0 [ 779.069567][T16767] ? __might_fault+0xe3/0x190 [ 779.074263][T16767] ? ____sys_sendmsg+0xaaf/0xc90 [ 779.079205][T16767] ____sys_sendmsg+0xaaf/0xc90 [ 779.083983][T16767] ? __pfx_____sys_sendmsg+0x10/0x10 [ 779.089270][T16767] ___sys_sendmsg+0x135/0x1e0 [ 779.093936][T16767] ? __pfx____sys_sendmsg+0x10/0x10 [ 779.099127][T16767] ? __pfx_lock_release+0x10/0x10 [ 779.104139][T16767] ? trace_lock_acquire+0x14e/0x1f0 [ 779.109365][T16767] ? __fget_files+0x206/0x3a0 [ 779.114084][T16767] __sys_sendmsg+0x16e/0x220 [ 779.118749][T16767] ? __pfx___sys_sendmsg+0x10/0x10 [ 779.123859][T16767] do_syscall_64+0xcd/0x250 [ 779.128353][T16767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.134239][T16767] RIP: 0033:0x7f6facf80849 [ 779.138731][T16767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.158334][T16767] RSP: 002b:00007f6faddb2058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 779.166764][T16767] RAX: ffffffffffffffda RBX: 00007f6fad145fa0 RCX: 00007f6facf80849 [ 779.174780][T16767] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 779.182753][T16767] RBP: 00007f6faddb20a0 R08: 0000000000000000 R09: 0000000000000000 [ 779.190720][T16767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.198679][T16767] R13: 0000000000000000 R14: 00007f6fad145fa0 R15: 00007ffd35d80e18 [ 779.206644][T16767] [ 779.209716][ C0] vkms_vblank_simulate: vblank timer overrun [ 779.234552][ T46] usb 9-1: config 222 has an invalid interface number: 239 but max is 0 [ 779.243412][ T46] usb 9-1: config 222 has no interface number 0 [ 779.251996][ T46] usb 9-1: New USB device found, idVendor=1737, idProduct=0078, bcdDevice=ed.6d [ 779.261395][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.270759][ T46] usb 9-1: Product: syz [ 779.275040][ T46] usb 9-1: Manufacturer: syz [ 779.279790][ T46] usb 9-1: SerialNumber: syz [ 779.478557][ T5893] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 779.618114][T16778] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 779.624587][T16778] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 779.635457][ T5893] usb 1-1: device descriptor read/64, error -71 [ 779.895504][ T5893] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 780.025130][T16782] fuse: Bad value for 'fd' [ 780.056169][ T46] usb 9-1: USB disconnect, device number 29 [ 780.079044][T13593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.090389][T13315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.479067][T16784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.489266][T16784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.497928][T16784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.511492][T16784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.515866][ T5893] usb 1-1: device descriptor read/64, error -71 [ 780.526999][T16784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.539777][T16784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.550201][ T29] audit: type=1400 audit(1733151513.686:1164): avc: denied { bind } for pid=16783 comm="syz.5.2993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 780.645189][ T5893] usb usb1-port1: attempt power cycle [ 780.783005][T16799] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3000'. [ 780.805119][T16800] xt_CT: No such helper "pptp" [ 780.867848][ T29] audit: type=1400 audit(1733151513.976:1165): avc: denied { mount } for pid=16802 comm="syz.1.3001" name="/" dev="rpc_pipefs" ino=66397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 780.868957][ T8] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 780.901785][T16804] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 780.912975][ T46] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 780.921203][T16804] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 781.007515][ T5893] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 781.031198][ T5893] usb 1-1: device descriptor read/8, error -71 [ 781.082267][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 781.092382][ T8] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 781.108508][ T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 781.119327][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 781.133930][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 781.160218][ T8] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 781.212744][ T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 781.220112][ T29] audit: type=1400 audit(1733151514.304:1166): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 781.221966][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.275559][ T46] usb 9-1: Using ep0 maxpacket: 8 [ 781.282184][ T46] usb 9-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 781.292786][ T46] usb 9-1: config 6 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 781.309969][ T46] usb 9-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 781.319247][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.327399][ T46] usb 9-1: Product: syz [ 781.332578][ T46] usb 9-1: Manufacturer: syz [ 781.337191][ T46] usb 9-1: SerialNumber: syz [ 781.344421][ T46] hso 9-1:6.0: Can't find BULK IN endpoint [ 781.416918][ T5893] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 781.422517][T16812] fuse: Bad value for 'fd' [ 781.668965][ T46] usb 9-1: USB disconnect, device number 30 [ 781.988617][ T8] usb 6-1: usb_control_msg returned -32 [ 781.998748][ T8] usbtmc 6-1:16.0: can't read capabilities [ 782.054947][ T5893] usb 1-1: device descriptor read/8, error -71 [ 783.075805][ T5893] usb usb1-port1: unable to enumerate USB device [ 784.800641][T16844] fuse: Bad value for 'fd' [ 785.272556][T16847] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3014'. [ 785.275943][ T46] usb 6-1: USB disconnect, device number 69 [ 785.281910][T16847] netlink: 264 bytes leftover after parsing attributes in process `syz.8.3014'. [ 785.304959][T16847] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3014'. [ 785.941261][ T5894] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 786.182082][T13315] net_ratelimit: 1 callbacks suppressed [ 786.182104][T13315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.202626][ T5894] usb 9-1: Using ep0 maxpacket: 32 [ 786.210312][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.232817][ T5894] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 786.416802][ T5894] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 786.478303][ T5894] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 786.489804][ T5894] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.498241][ T5894] usb 9-1: Product: syz [ 786.502640][ T5894] usb 9-1: Manufacturer: syz [ 786.507502][ T5894] usb 9-1: SerialNumber: syz [ 786.953347][ T29] audit: type=1400 audit(1733151519.682:1167): avc: denied { accept } for pid=16846 comm="syz.8.3014" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 787.094707][ T29] audit: type=1400 audit(1733151519.794:1168): avc: denied { write } for pid=16846 comm="syz.8.3014" path="socket:[66508]" dev="sockfs" ino=66508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 787.371448][ T29] audit: type=1400 audit(1733151520.066:1169): avc: denied { setopt } for pid=16888 comm="syz.1.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 787.454940][ T29] audit: type=1400 audit(1733151520.150:1170): avc: denied { unmount } for pid=16181 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 787.461190][T10672] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 787.589586][T16897] netlink: 'syz.0.3026': attribute type 1 has an invalid length. [ 787.655111][ T29] audit: type=1400 audit(1733151520.327:1171): avc: denied { name_bind } for pid=16896 comm="syz.0.3026" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 787.658331][T10672] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 787.676480][ T29] audit: type=1400 audit(1733151520.327:1172): avc: denied { node_bind } for pid=16896 comm="syz.0.3026" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 787.727502][T10672] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.745768][T10672] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 787.756201][ T29] audit: type=1326 audit(1733151520.430:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16893 comm="syz.1.3025" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f45d7b80849 code=0x0 [ 787.762492][T10672] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 787.793349][T10672] usb 6-1: Manufacturer: syz [ 787.832227][T10672] usb 6-1: config 0 descriptor?? [ 788.009706][T10672] rc_core: IR keymap rc-hauppauge not found [ 788.015892][T10672] Registered IR keymap rc-empty [ 788.023801][T10672] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 788.034938][T10672] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input44 [ 788.162014][T16908] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3027'. [ 788.537492][ T5894] usb 9-1: 0:2 : does not exist [ 788.551207][ T5894] usb 9-1: USB disconnect, device number 31 [ 788.574140][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 788.585767][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 788.606561][ T29] audit: type=1400 audit(1733151521.216:1174): avc: denied { write } for pid=16912 comm="syz.8.3028" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 788.632456][ T46] usb 6-1: USB disconnect, device number 70 [ 788.651512][ T29] audit: type=1400 audit(1733151521.254:1175): avc: denied { ioctl } for pid=16912 comm="syz.8.3028" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 788.679551][ T29] audit: type=1400 audit(1733151521.254:1176): avc: denied { setopt } for pid=16912 comm="syz.8.3028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 788.817951][T16917] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 788.824499][T16917] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 788.876679][T16917] vhci_hcd vhci_hcd.0: Device attached [ 789.074954][ T8] vhci_hcd: vhci_device speed not set [ 789.089077][T16920] vhci_hcd: connection closed [ 789.126488][T13602] vhci_hcd: stop threads [ 789.147567][T13602] vhci_hcd: release socket [ 789.147615][ T8] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 789.161017][T13602] vhci_hcd: disconnect device [ 789.190559][ T8] usb 47-1: enqueue for inactive port 0 [ 789.311227][ T8] vhci_hcd: vhci_device speed not set [ 789.359020][T16929] FAULT_INJECTION: forcing a failure. [ 789.359020][T16929] name failslab, interval 1, probability 0, space 0, times 0 [ 789.390040][T16929] CPU: 0 UID: 0 PID: 16929 Comm: syz.1.3033 Not tainted 6.13.0-rc1-syzkaller #0 [ 789.399135][T16929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 789.409210][T16929] Call Trace: [ 789.412479][T16929] [ 789.415417][T16929] dump_stack_lvl+0x16c/0x1f0 [ 789.420117][T16929] should_fail_ex+0x497/0x5b0 [ 789.424785][T16929] ? fs_reclaim_acquire+0xae/0x150 [ 789.429922][T16929] should_failslab+0xc2/0x120 [ 789.434579][T16929] __kmalloc_noprof+0xcb/0x510 [ 789.439324][T16929] lsm_blob_alloc+0x68/0x90 [ 789.443806][T16929] security_sk_alloc+0x30/0x270 [ 789.448647][T16929] sk_prot_alloc+0x1c7/0x2a0 [ 789.453226][T16929] sk_alloc+0x36/0xb90 [ 789.457292][T16929] bpf_prog_test_run_skb+0x32b/0x2270 [ 789.462672][T16929] ? lock_acquire+0x2f/0xb0 [ 789.467185][T16929] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 789.473001][T16929] ? fput+0x67/0x440 [ 789.477007][T16929] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 789.482846][T16929] __sys_bpf+0xfc6/0x49c0 [ 789.487203][T16929] ? __pfx_lock_release+0x10/0x10 [ 789.492323][T16929] ? __pfx___sys_bpf+0x10/0x10 [ 789.497098][T16929] ? vfs_write+0x306/0x1150 [ 789.501589][T16929] ? __mutex_unlock_slowpath+0x164/0x690 [ 789.507285][T16929] ? fput+0x67/0x440 [ 789.511190][T16929] ? ksys_write+0x1ba/0x250 [ 789.515686][T16929] ? __pfx_ksys_write+0x10/0x10 [ 789.520529][T16929] __x64_sys_bpf+0x78/0xc0 [ 789.524936][T16929] ? lockdep_hardirqs_on+0x7c/0x110 [ 789.530124][T16929] do_syscall_64+0xcd/0x250 [ 789.534725][T16929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.540627][T16929] RIP: 0033:0x7f45d7b80849 [ 789.545037][T16929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 789.564636][T16929] RSP: 002b:00007f45d895e058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 789.573041][T16929] RAX: ffffffffffffffda RBX: 00007f45d7d45fa0 RCX: 00007f45d7b80849 [ 789.580998][T16929] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 789.588973][T16929] RBP: 00007f45d895e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 789.596945][T16929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.604903][T16929] R13: 0000000000000000 R14: 00007f45d7d45fa0 R15: 00007fffaa0e7a78 [ 789.612868][T16929] [ 792.598023][T16988] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 792.604486][T16988] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 792.685907][T13315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.695764][T13315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.027261][ T46] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 793.269382][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 793.277019][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.289213][ T46] usb 2-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=e1.8c [ 793.299366][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.318418][ T46] usb 2-1: Product: syz [ 793.324139][ T46] usb 2-1: Manufacturer: syz [ 793.328811][ T46] usb 2-1: SerialNumber: syz [ 793.337346][ T46] usb 2-1: config 0 descriptor?? [ 793.345088][ T46] cypress_m8 2-1:0.0: HID->COM RS232 Adapter converter detected [ 793.353365][ T46] cyphidcom ttyUSB0: required endpoint is missing [ 793.547304][ T5893] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 793.719810][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.730945][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.740743][ T5893] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 793.749870][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.759176][ T5893] usb 9-1: config 0 descriptor?? [ 793.764258][ T8] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 793.932206][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 793.940890][ T8] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 793.950437][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.959112][ T8] usb 1-1: Product: syz [ 793.963354][ T8] usb 1-1: Manufacturer: syz [ 793.968092][ T8] usb 1-1: SerialNumber: syz [ 793.974347][ T8] usb 1-1: config 0 descriptor?? [ 794.203305][ T8] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 794.217952][ T5893] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0 [ 794.225385][ T5893] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0 [ 794.234442][ T5893] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0D8C:0022.0021/input/input45 [ 794.248862][ T5893] cm6533_jd 0003:0D8C:0022.0021: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.8-1/input0 [ 794.370648][ T9] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 794.541723][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 794.580510][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 794.655825][ T9] usb 6-1: config 0 has no interface number 0 [ 794.696090][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 794.776492][T16994] IPv6: addrconf: prefix option has invalid lifetime [ 794.788429][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 794.816901][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.827159][ T46] usb 2-1: USB disconnect, device number 83 [ 794.834178][ T46] cypress_m8 2-1:0.0: device disconnected [ 794.857536][ T9] usb 6-1: config 0 descriptor?? [ 794.877470][ T9] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 794.960642][ T9] usb 9-1: USB disconnect, device number 32 [ 795.111258][ T46] usb 6-1: USB disconnect, device number 71 [ 795.608588][T17034] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3063'. [ 796.241325][T17048] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 796.248311][T17048] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 796.675544][ T8] usb write operation failed. (-71) [ 796.785034][ T8] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 796.810714][ T8] dvbdev: DVB: registering new adapter (Terratec H7) [ 796.827068][ T8] usb 1-1: media controller created [ 796.869747][ T8] usb read operation failed. (-71) [ 796.875503][ T8] usb write operation failed. (-71) [ 796.913942][ T8] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 796.961439][T17057] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 796.979100][T17058] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 1 [ 796.981153][ T8] usb 1-1: USB disconnect, device number 68 [ 796.995359][T17059] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 2 [ 797.016725][T17061] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 3 [ 797.059945][T17064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3071'. [ 797.134093][T17070] [U]  [ 797.264309][T17064] tipc: Enabling of bearer rejected, failed to enable media [ 797.595613][T17077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.604680][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.741107][T17081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3076'. [ 798.091852][T17086] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.101425][T17086] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.305083][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.602840][T17097] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 798.609299][T17097] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 799.218927][T13593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.353159][ T8] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 799.555455][ T8] usb 9-1: Using ep0 maxpacket: 32 [ 799.572970][ T8] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.584991][ T8] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 799.594285][ T8] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 799.643627][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.687123][ T8] usb 9-1: config 0 descriptor?? [ 800.016930][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 800.036648][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 800.046464][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 800.059316][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 800.069027][ T5825] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 800.076312][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 800.238446][T17112] chnl_net:caif_netlink_parms(): no params data found [ 800.507914][T17122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3089'. [ 801.553634][T17112] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.564669][T17112] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.576297][T17112] bridge_slave_0: entered allmulticast mode [ 801.583301][T17112] bridge_slave_0: entered promiscuous mode [ 801.591025][T17112] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.598294][T17112] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.629842][T17112] bridge_slave_1: entered allmulticast mode [ 801.644151][T17112] bridge_slave_1: entered promiscuous mode [ 801.688795][T17112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.704710][T17112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.411529][T15446] Bluetooth: hci2: command tx timeout [ 802.472137][T17112] team0: Port device team_slave_0 added [ 802.488756][T17112] team0: Port device team_slave_1 added [ 802.551061][T17112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.558161][T17112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.585964][T17112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.615925][T17112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.626632][T17112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.668948][T17112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.175989][ T46] usb 9-1: USB disconnect, device number 33 [ 803.190789][ C1] ------------[ cut here ]------------ [ 803.196996][ C1] WARNING: CPU: 1 PID: 0 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x6f6/0x8b0 [ 803.206265][ C1] Modules linked in: [ 803.210231][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc1-syzkaller #0 [ 803.218961][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 803.229074][ C1] RIP: 0010:inet_sock_destruct+0x6f6/0x8b0 [ 803.234922][ C1] Code: 0f 0b 90 e9 fa fd ff ff e8 87 72 ee f7 90 0f 0b 90 e9 30 fe ff ff e8 79 72 ee f7 90 0f 0b 90 e9 84 fd ff ff e8 6b 72 ee f7 90 <0f> 0b 90 e9 8f fe ff ff e8 3d 5a 51 f8 e9 65 fc ff ff 48 89 ef e8 [ 803.254587][ C1] RSP: 0018:ffffc90000a18da0 EFLAGS: 00010246 [ 803.260692][ C1] RAX: 0000000000000000 RBX: ffff888031c88d80 RCX: ffffffff89ab9235 [ 803.268726][ C1] RDX: ffff88801d294880 RSI: ffffffff89ab93a5 RDI: 0000000000000005 [ 803.276759][ C1] RBP: 0000000000000fec R08: 0000000000000005 R09: 0000000000000000 [ 803.284760][ C1] R10: 0000000000000fec R11: 0000000000000000 R12: ffff888031c88da8 [ 803.292753][ C1] R13: ffff888031c88e10 R14: 0000000000000000 R15: 0000000000000001 [ 803.300915][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 803.309897][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 803.316498][ C1] CR2: 0000000020404030 CR3: 000000000df7e000 CR4: 00000000003526f0 [ 803.324553][ C1] DR0: 0000000000000003 DR1: 0000000000000004 DR2: 0000000100000000 [ 803.332611][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 803.340651][ C1] Call Trace: [ 803.343968][ C1] [ 803.346875][ C1] ? __warn+0xea/0x3c0 [ 803.351007][ C1] ? inet_sock_destruct+0x6f6/0x8b0 [ 803.356262][ C1] ? report_bug+0x3c0/0x580 [ 803.360834][ C1] ? handle_bug+0x54/0xa0 [ 803.365278][ C1] ? exc_invalid_op+0x17/0x50 [ 803.370014][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 803.375145][ C1] ? inet_sock_destruct+0x585/0x8b0 [ 803.380403][ C1] ? inet_sock_destruct+0x6f5/0x8b0 [ 803.385680][ C1] ? inet_sock_destruct+0x6f6/0x8b0 [ 803.390938][ C1] ? inet6_cleanup_sock+0x117/0x210 [ 803.396219][ C1] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 803.401924][ C1] ? rcu_core+0x79b/0x14d0 [ 803.406171][T17167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3099'. [ 803.406395][ C1] __sk_destruct+0x4d/0x720 [ 803.419900][ C1] ? rcu_core+0x79b/0x14d0 [ 803.424367][ C1] rcu_core+0x79d/0x14d0 [ 803.425891][T17166] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3100'. [ 803.428671][ C1] ? __pfx_rcu_core+0x10/0x10 [ 803.442480][ C1] handle_softirqs+0x213/0x8f0 [ 803.447323][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 803.452643][ C1] __irq_exit_rcu+0x109/0x170 [ 803.457352][ C1] irq_exit_rcu+0x9/0x30 [ 803.459675][T17163] [U]  [ 803.461621][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 803.470036][ C1] [ 803.472974][ C1] [ 803.475922][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 803.481970][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 803.487285][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 d8 f4 d9 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 48 66 b3 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 803.506928][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 803.512995][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b29c759 [ 803.520951][ C1] RDX: 0000000000000001 RSI: ffff888143ef4800 RDI: ffff888143ef4864 [ 803.528925][ C1] RBP: ffff888143ef4864 R08: 0000000000000001 R09: ffffed10170e6fed [ 803.537177][ C1] R10: ffff8880b8737f6b R11: 0000000000000000 R12: ffff8881476e9800 [ 803.545148][ C1] R13: ffffffff8ee14960 R14: 0000000000000001 R15: 0000000000000000 [ 803.553125][ C1] ? ct_kernel_exit+0x139/0x190 [ 803.557987][ C1] acpi_idle_enter+0xc5/0x160 [ 803.562653][ C1] cpuidle_enter_state+0xaa/0x4f0 [ 803.567675][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 803.573464][ C1] cpuidle_enter+0x4e/0xa0 [ 803.577895][ C1] do_idle+0x310/0x3f0 [ 803.581977][ C1] ? __pfx_do_idle+0x10/0x10 [ 803.586691][ C1] cpu_startup_entry+0x4f/0x60 [ 803.591442][ C1] start_secondary+0x222/0x2b0 [ 803.596216][ C1] ? __pfx_start_secondary+0x10/0x10 [ 803.601537][ C1] common_startup_64+0x13e/0x148 [ 803.606542][ C1] [ 803.609590][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 803.617050][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc1-syzkaller #0 [ 803.625622][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 803.635660][ C1] Call Trace: [ 803.638922][ C1] [ 803.641748][ C1] dump_stack_lvl+0x3d/0x1f0 [ 803.646336][ C1] panic+0x71d/0x800 [ 803.650230][ C1] ? __pfx_panic+0x10/0x10 [ 803.654645][ C1] ? show_trace_log_lvl+0x29d/0x3d0 [ 803.659864][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 803.664969][ C1] ? inet_sock_destruct+0x6f6/0x8b0 [ 803.670237][ C1] check_panic_on_warn+0xab/0xb0 [ 803.675158][ C1] __warn+0xf6/0x3c0 [ 803.679035][ C1] ? inet_sock_destruct+0x6f6/0x8b0 [ 803.684217][ C1] report_bug+0x3c0/0x580 [ 803.688528][ C1] handle_bug+0x54/0xa0 [ 803.692670][ C1] exc_invalid_op+0x17/0x50 [ 803.697175][ C1] asm_exc_invalid_op+0x1a/0x20 [ 803.702008][ C1] RIP: 0010:inet_sock_destruct+0x6f6/0x8b0 [ 803.707796][ C1] Code: 0f 0b 90 e9 fa fd ff ff e8 87 72 ee f7 90 0f 0b 90 e9 30 fe ff ff e8 79 72 ee f7 90 0f 0b 90 e9 84 fd ff ff e8 6b 72 ee f7 90 <0f> 0b 90 e9 8f fe ff ff e8 3d 5a 51 f8 e9 65 fc ff ff 48 89 ef e8 [ 803.727404][ C1] RSP: 0018:ffffc90000a18da0 EFLAGS: 00010246 [ 803.733475][ C1] RAX: 0000000000000000 RBX: ffff888031c88d80 RCX: ffffffff89ab9235 [ 803.741428][ C1] RDX: ffff88801d294880 RSI: ffffffff89ab93a5 RDI: 0000000000000005 [ 803.749469][ C1] RBP: 0000000000000fec R08: 0000000000000005 R09: 0000000000000000 [ 803.757431][ C1] R10: 0000000000000fec R11: 0000000000000000 R12: ffff888031c88da8 [ 803.765497][ C1] R13: ffff888031c88e10 R14: 0000000000000000 R15: 0000000000000001 [ 803.773470][ C1] ? inet_sock_destruct+0x585/0x8b0 [ 803.778661][ C1] ? inet_sock_destruct+0x6f5/0x8b0 [ 803.783844][ C1] ? inet6_cleanup_sock+0x117/0x210 [ 803.789032][ C1] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 803.794660][ C1] ? rcu_core+0x79b/0x14d0 [ 803.799056][ C1] __sk_destruct+0x4d/0x720 [ 803.803550][ C1] ? rcu_core+0x79b/0x14d0 [ 803.807957][ C1] rcu_core+0x79d/0x14d0 [ 803.812202][ C1] ? __pfx_rcu_core+0x10/0x10 [ 803.816880][ C1] handle_softirqs+0x213/0x8f0 [ 803.821638][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 803.826910][ C1] __irq_exit_rcu+0x109/0x170 [ 803.831572][ C1] irq_exit_rcu+0x9/0x30 [ 803.835828][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 803.841486][ C1] [ 803.844396][ C1] [ 803.847307][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 803.853280][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 803.858586][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 d8 f4 d9 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 48 66 b3 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 803.878184][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 803.884234][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b29c759 [ 803.892187][ C1] RDX: 0000000000000001 RSI: ffff888143ef4800 RDI: ffff888143ef4864 [ 803.900144][ C1] RBP: ffff888143ef4864 R08: 0000000000000001 R09: ffffed10170e6fed [ 803.908395][ C1] R10: ffff8880b8737f6b R11: 0000000000000000 R12: ffff8881476e9800 [ 803.916362][ C1] R13: ffffffff8ee14960 R14: 0000000000000001 R15: 0000000000000000 [ 803.924318][ C1] ? ct_kernel_exit+0x139/0x190 [ 803.929174][ C1] acpi_idle_enter+0xc5/0x160 [ 803.933869][ C1] cpuidle_enter_state+0xaa/0x4f0 [ 803.938900][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 803.944723][ C1] cpuidle_enter+0x4e/0xa0 [ 803.949168][ C1] do_idle+0x310/0x3f0 [ 803.953266][ C1] ? __pfx_do_idle+0x10/0x10 [ 803.957842][ C1] cpu_startup_entry+0x4f/0x60 [ 803.962599][ C1] start_secondary+0x222/0x2b0 [ 803.967344][ C1] ? __pfx_start_secondary+0x10/0x10 [ 803.972706][ C1] common_startup_64+0x13e/0x148 [ 803.977634][ C1] [ 803.980878][ C1] Kernel Offset: disabled [ 803.985249][ C1] Rebooting in 86400 seconds..