last executing test programs: 9m10.891835943s ago: executing program 3 (id=4223): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x9, 0x9, 0x0, 0x0, [{{r0}, 0x8000000000000000}, {{r0}, 0x2c0000000000}, {{r0}, 0x4}, {{r0}, 0x4}, {{r0}, 0x6}, {{}, 0x5}, {{r0}, 0xfff}, {{}, 0x100}, {{}, 0x58}]}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x2a36, 0x10100, 0x2000004, 0x20000002}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000340)=0xe) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x401}, 0x1}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0x3}, {0xfff3, 0x5}, {0xc, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x9e}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) request_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, 0x0, 0x0) 9m10.155408621s ago: executing program 3 (id=4225): socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x16d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x30, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f00000001c0)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000022a22064f7000000000000000000006112000000000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x586abc7b6f5091ec, 0xfa00, {0x0, 0x0, 0x13f}}, 0xfdbc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) timerfd_create(0x9, 0x800) 9m9.135509684s ago: executing program 3 (id=4229): r0 = userfaultfd(0x80801) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x6}, 0x18) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 9m8.906801895s ago: executing program 3 (id=4231): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r1, 0x3a, 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180100001c0000000000000000", @ANYRESDEC=0x0], 0x0, 0x40, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x40810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(0x0, 0x3, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40046f41, &(0x7f0000000440)=0x1f) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) 9m8.107424258s ago: executing program 3 (id=4236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x88902, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)="3133013a399b23af8fa6143f4a1cd6e9f6474677cfff4c012c951775e5e3b18ec4efc99cdc1040d75307df3f3542f64c934b62fcc595108a373cbec50df44efca72ae9211e7f12fcfdaee93bd77b187eb4798e4e20c742d176b9997f799064b2c3b0d702c8cca9cd920135682670f7d71de22688ff8f61d5e7b48b44e6e035a942ab6edd6e64e2c91a87a3dbed753b2ff58a5c0305cff70ff1c9c66269242953cfc55ae19502c6fbcce64bcefe14", 0xae}, {&(0x7f0000000900)="5d78ce2032c7e076d8e602d023e6e2081963a3497fd49b24809dafef06435deca3f9278d5fc0b5817cb6bb1d0e7fddb16928db603a103ecba23ca0fbacbaec7ea3a541f2e5757f6762470b", 0x4b}], 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x508, 0x12, 0x800, 0x70bd29, 0x25dfdbff, {0x29, 0x9, 0x4, 0x8, {0x4e21, 0x4e21, [0x69, 0x9, 0x7, 0x800], [0x7d8a0000, 0x7, 0x101, 0x40], r3, [0x0, 0xda9]}, 0x7ff, 0x80}, [@INET_DIAG_REQ_BYTECODE={0xb9, 0x1, "5b39be6d3c1af397b9ccaa747a99ccab8592e6e403d051811437d5a63fc8feafd6bdb2d623a794e5a36a58a0cf24f1b4dd33215c6c48258f181cfab2f24ba56b558054387fbefe94d82f0589b09f3e9495d9d56562404d08ef4f6d25a6517b120f4cf3ff7893725703a515bff70021e268607f7adae5633139b270a105162770680cbbc8fbf14dbcb935dcd6ed4c34a22144637eb95d52b07c6c7f0d46022145e0205edcec4a3b31aa94fd9a6f4bffff4cbccc8873"}, @INET_DIAG_REQ_BYTECODE={0xf7, 0x1, "00494893703c1997b79129a76345007fb32fb78e1cb5ca9be206fabc8c394ff2345adb4ca28afcde3bc6369960dbefa13b13e07aaf91eff8130fb9a07fa7686c9ff313da47352e47937d9f4c79fd2cb0064cc26de2557aefcb45c7ea7ee8ef1f134fbbc2f4ba3c71f1cfa4617bbe4cb0112d44140a5b133acd6cdebf06aca59129441ba7cb129ca296b7680a76b1630fa26ab0a55de6e384ac3bd3fcadcdae39573096d3cc484926bc1337de4e98845945a65250b62e69b7311f3ec3dc66b1a49ac20c0a46360530466ecb4bd5dbc93aa5b748290e007c0d1c087a5b4ee25b4cc2acb6ff1e58e681307a0d2d5fbc8e9804f08c"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "5151e22ee0078497837fc6353a5453dee3e166ac9e305f8de126f39c1ab59182a5b8594f11e6f6fbc730298c1244866b483bcef729d2ac33e11899d71a0f53275c1a35fb7a52ed0851e279b7d9920fed26c95639722b6e4d0b511d8c627add4693ddef7744690c0955518e037b9ccdb07cb29e47dfa6f320d9187617b3b8f3d259c0e1c3b00b64b7d5ea3e32c95fd51187ebd2"}, @INET_DIAG_REQ_BYTECODE={0x85, 0x1, "c2d247b17566049027491e85f45c913282660196a551c1c62f6bb57a7822b3f1fc41585e2e2d2a8c64b8f2866d2a990da5012673e140dbd9b4246747be5274bfb3c1e87957629d8e935a63f2d67b2cf15cb37e8e54b58cdb060e347de8e4fd61ea4a94f72d4ce370c8161dae29b33e566b9f9556569a5926c3a8e6d4f6c77b97a4"}, @INET_DIAG_REQ_BYTECODE={0x32, 0x1, "c346139f5e0ed165a309965ba8d57e8c73f2741285edbce447fbd34bd176c33fc99aec4b64a8dff336025e79f779"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "9077ec5c5451e1c574a51b83c9f59fff67652cb8969fc159a6f9316f703b403478c41c3bc1e46e44cd167fd3ab393ed897d2da4efb25ba011491f4ba08f320bdb3514677984f99d021c272e5cb276a794fd5ef6c025c090776f809e4a4dca0464b36faa853a065bb7c86719788b1ae54a5998b716eb4f0fb95d020fccfede0763e367f57de21af5d39adaeadb998bad00cd8e8968f667fd4841ced190599090cc70179e6dd96ba9a611300f160d7b4dce2b740149335b793de1ee95f1a4e17aea1086e5a90a621cdfe0e88b997eaa00f9879908988a2ea9835c6003df90f1cee"}, @INET_DIAG_REQ_BYTECODE={0xd0, 0x1, "1797d8b6f28607ce40576dd2b0699a471a2b3152a63d4df6f9a8d9fcaccf7fbc0dc114d80c3d9153c62de7140f6fdc1a861c1ac884ff6430a13d2fc6f20dde893bdc0f377bd627c98a521a6fbfe36cea7180895382c70f793167aa4306bc6794fdd51067b851d53eef9a0fa05a98591107736231af98af2160dca5bd22fabd1fe96b81533f9cc19354e4b0574050fae2a3e0584937ed4a27f88efa98b9658ae5cca3b488a27abdb1b19082a2ee54411d5379bc0fbf35988b7f221f85c7695862ae304aeb217d414eb78f0024"}]}, 0x508}, 0x1, 0x0, 0x0, 0x24044003}, 0x20000080) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x6, &(0x7f0000003040)={0x2, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f0000000040)={0x1d, ""/29}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="08000002"], 0xdc) 9m6.931327098s ago: executing program 3 (id=4239): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(r1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x4001, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000040) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002400000000948000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c0003801800038014000100626f6e"], 0xfc}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_CIDR={0x0, 0x3, 0xd9}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0xfffffffffffffd94}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x4) r8 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) 9m5.798768777s ago: executing program 32 (id=4239): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(r1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x4001, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000040) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002400000000948000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c0003801800038014000100626f6e"], 0xfc}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_CIDR={0x0, 0x3, 0xd9}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0xfffffffffffffd94}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x4) r8 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) 4m52.642248487s ago: executing program 4 (id=5134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m52.426607002s ago: executing program 4 (id=5136): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {0x5943}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xffff8000}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2ca2}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x47d6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffc00}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80000000}, {}, {}, {}, {0x0, 0x40000000, 0x1}, {0x2}, {}, {0x80000}, {0x0, 0x0, 0x0, 0xffffffff, 0x6}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0x4}, {}, {0x0, 0x0, 0x0, 0x400}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x9d}], [{}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x6}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe94}}, 0x0) (fail_nth: 5) 4m52.154106046s ago: executing program 4 (id=5137): r0 = add_key$user(&(0x7f0000000240), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1d", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000740)="69bf05d40ff7e03db3ddca537c6c5612321b25d32064e9ed643d462211406432e87c4d40383939ab8276bfc0294ba021d1ccf9b6b32d1b6c9e8c9737ca2d08305301693ef20a414ca24bed3736d182271d197fc2146a9f55070f3f31155b9081ecbd0fcc0296c88eac143394a776955e8a075194717757c9e085976cac66fd4c5bc83183df2db8205863d7f803e302420e7fc5315861803024f921932a49a4283f6a7d8ab2cbd629e984582467fd6ca63598d554677517903644dc2ef01f8dec", 0xc0, 0xffffffffffffffff) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000340)={0x3e, 0x4f2, 0x4}) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r1, r1}, &(0x7f00000002c0)=""/46, 0x2e, &(0x7f0000000380)={&(0x7f0000000300)={'sha224-generic\x00'}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2420835e0100"/17, @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0xffffff7f}, 0x84) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r6, 0x4b32, 0xf1a) r7 = syz_open_procfs(0x0, &(0x7f0000000880)='ns\x00') fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r8, &(0x7f0000000240)=""/241, 0xf1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r10, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x44885}, 0xbb394114d641bdae) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r11, 0x3ba0, &(0x7f0000000080)={0x48}) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r12, 0x400455c8, 0x4) ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000040)=0x30) 4m48.540757283s ago: executing program 4 (id=5149): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0xf0ffff) 4m46.642295819s ago: executing program 4 (id=5151): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r1, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000440)=0x80) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000002c0)=0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x110, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd88500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) creat(0x0, 0xecf86c37d53049e1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x3c, 0x107, 0x70bd2c, 0x0, {0x3, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x11}, 0x1, 0x0, 0x0, 0xc000}, 0x400c801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f00000001c0)=[{r5}], 0x1, 0x0, 0x0, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r6 = fsopen(&(0x7f00000004c0)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000680)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) close(r6) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) 4m44.780992234s ago: executing program 4 (id=5157): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x20008, 0x100008b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x9}, &(0x7f0000000200)=0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x847c2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x383102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$video4linux(&(0x7f0000000280), 0x8042, 0x109401) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f00000001c0)={0x0, 0x1000f, 0x2018}) socket$inet6(0xa, 0x4, 0x80000082) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000180)='./file0/../file0\x00', r3, &(0x7f0000000140)='./file0/../file0/file0\x00', 0x70) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f0000001380)=[{0x6, 0x4c, 0x0, 0x0, @tick, {0x5}, {}, @connect={{}, {0xcd}}}, {0xc, 0x0, 0x0, 0x0, @tick=0xd0000000, {}, {0xff}, @result={0x1}}, {0x10, 0x7f, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x7c}, @raw32={[0x7f, 0x3]}}, {0x8, 0x0, 0x0, 0x0, @tick=0x6, {0x0, 0x9}, {0x80}, @queue={0x7, {0x1000, 0x10000}}}], 0x70) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000200), &(0x7f0000000500)=0x4) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000480)={0x9, 0x3}) r5 = memfd_create(&(0x7f00000006c0)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) fstatfs(r5, &(0x7f00000003c0)=""/146) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 4m44.211093774s ago: executing program 33 (id=5157): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x20008, 0x100008b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x9}, &(0x7f0000000200)=0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x847c2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x383102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$video4linux(&(0x7f0000000280), 0x8042, 0x109401) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f00000001c0)={0x0, 0x1000f, 0x2018}) socket$inet6(0xa, 0x4, 0x80000082) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000180)='./file0/../file0\x00', r3, &(0x7f0000000140)='./file0/../file0/file0\x00', 0x70) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f0000001380)=[{0x6, 0x4c, 0x0, 0x0, @tick, {0x5}, {}, @connect={{}, {0xcd}}}, {0xc, 0x0, 0x0, 0x0, @tick=0xd0000000, {}, {0xff}, @result={0x1}}, {0x10, 0x7f, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x7c}, @raw32={[0x7f, 0x3]}}, {0x8, 0x0, 0x0, 0x0, @tick=0x6, {0x0, 0x9}, {0x80}, @queue={0x7, {0x1000, 0x10000}}}], 0x70) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000200), &(0x7f0000000500)=0x4) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000480)={0x9, 0x3}) r5 = memfd_create(&(0x7f00000006c0)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) fstatfs(r5, &(0x7f00000003c0)=""/146) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 9.604935561s ago: executing program 2 (id=6206): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_pidfd_open(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4200, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, 0x0) 8.665871994s ago: executing program 2 (id=6207): syz_usb_connect(0x0, 0x38, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0xe8, 0x42, 0x1a, 0x20, 0x19d2, 0x199, 0xd35f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x7, 0x3, 0x10, 0x0, [{{0x9, 0x4, 0x1, 0x5, 0x2, 0x5d, 0xf8, 0xe9, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x0, 0x4, 0xe1}}, {{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0xfe, 0x10, [@generic={0x2, 0x23}]}}]}}]}}]}}, 0x0) 8.067296412s ago: executing program 1 (id=6211): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="b800000019000100fcffffff00000000ac141423000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f90925090987f70e06d038e7ff7fc6e5539b3243078b089b3b33386d090890e0878f0e1ac6e7049b334c959b4a9a240f5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e809ea02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203821b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18809a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348071f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed2bf1f847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aea019c982cd3b43eaeb1a5fb135c0c7dce61a0b29aa328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a06007c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d8c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687ea84afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb8052ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000340)={0x6, @pix={0x0, 0x800, 0x32344d59, 0x2, 0x7, 0x59, 0x8, 0x5, 0x1, 0x7, 0x1, 0x5}}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) iopl(0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f0000000640)={0x48000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0xe68, 0x30, 0x1, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x78b, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x8}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0xe}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x81, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0xd, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x8, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x2}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x8, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x5, 0x10000, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x4}, {0x4, 0x7, 0x7fffffff, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x1ff, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x0, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x3}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x3, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae47, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x3de, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x4, 0x401, 0x4, 0xffffffff, 0x80}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x5}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1000, 0x8, 0x6, 0x1}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0x0, 0x8, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x2, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0x4, 0xfffffff8, 0x7, 0x8, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x110001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x400003}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fd8000, 0x2, 0x0, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x3, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0xfffffffb}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x200, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x6, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x0, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x0, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x400005, 0x3}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x8, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x8, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x8, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x7, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x5, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x9, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x3}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x4, 0x3, 0x0, [0x0, 0x18000000], [0x8200, 0x1]}}}) socket$nl_generic(0x10, 0x3, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 7.03957987s ago: executing program 2 (id=6213): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r2 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) lseek(r1, 0x289e0cb5, 0x0) gettid() r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1, 0xb3, &(0x7f000000cf3d)=""/179, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x46, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000fffffffa000000000000000000000000470194060a16d5918a5da01500000000000000d0359a39d6a70be05b3444f0cb6f60980058f76c0be0f5959735c6c6b51345272eb9c5e382b73e562c7e8e7ec57877ba82c406e104eca72b81115cc6dac59ffc92ac770debb2c4903c9d41d7c5293d4f4d6d69e4385c9c10e3ead0ef03d9e7a719f98d0000"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x0) listen(r3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 7.03881895s ago: executing program 1 (id=6214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff0200000000"], 0xfdef) 6.375100482s ago: executing program 2 (id=6216): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x11, r1, 0x10000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r4}, 0x18) r5 = io_uring_setup(0x2104, &(0x7f0000000300)={0x0, 0x80000001, 0x2, 0x3, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x22, 0x20000000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000380)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x2000}, 0xe) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) 6.304551203s ago: executing program 6 (id=6218): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client0\x00', 0xffffffff80000004, "00000000ffffffe3", "e4a18560d99f00", 0x800000, 0xfffffffc}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x6, &(0x7f0000000380)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xbf}]}, &(0x7f0000000040)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='mountinfo\x00') r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r4, r3, 0x0, 0x8000000010001) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom0\x00', 0x1000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x8, 0x7ffc0003}]}) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='::::\x00', 0x0) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) 4.777799161s ago: executing program 1 (id=6220): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b1901000000f30904150001da0900000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002a00)={0x24, &(0x7f00000027c0)={0x0, 0xe, 0x7f, {0x7f, 0x4, "5c5ee7d37a304cbbcfc1b40575d2a6ee8f50b0e44fa416dbf81b0f15087f60d475ab07a29a13d277f64f8b5a3baa1cb4642f2c84d77071dc713a7cef099345e165cdc92652d4d9655bb23850ddaa3a39c304a3ba014654dffcb36a760d57416c1fb92cb7350fbda92da55a69af597776fefe75b522570d31c8a409f51d"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}, &(0x7f0000002880)={0x0, 0x22, 0x25, {[@main=@item_4={0x3, 0x0, 0x8, "57f4654f"}, @main=@item_4={0x3, 0x0, 0xc, "cddcb986"}, @global=@item_4={0x3, 0x1, 0x3, "56c14080"}, @global=@item_4={0x3, 0x1, 0x2, "aec0c9bb"}, @main=@item_012={0x2, 0x0, 0x9, "11a9"}, @global=@item_4={0x3, 0x1, 0x4, "2690f6de"}, @global=@item_012={0x2, 0x1, 0x8, "71ef"}, @global=@item_4={0x3, 0x1, 0x0, "ce645af4"}, @main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f00000029c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xa, 0x1, {0x22, 0xd04}}}}, &(0x7f0000002c40)={0x2c, &(0x7f0000002a40)={0x0, 0x15, 0x78, "dd13306607216cb91a26280f815f75b1d75ef1a376d3ac245666e10c646dd74ab57e9d73f65d5b6a1ce727caaa5959a5b7c12bf681ffbe38f2c26ca86dad5eb9291806b4f492bfb653762599a43ae18999990392c51e451897e029978c674f99689c7bd610db94cbc800b55f8a4c87e216cfd37abf69f794"}, &(0x7f0000002ac0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000002b00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002b40)={0x20, 0x1, 0x86, "f2b9bfa8c4ee4a01797590c3d3b2e19ea3fb3dc0e9a150170acbf6bd560bda29fd0154d8bb586525320ea5ac472a4bfa056f398e784644cf95944726d2a7955512bf0fcc3c9530d33c7881113ffdb536a7300ee18f6ee051774d4802e09bfddbaae28f05bd3042eb3846bc5a8ca338e783f5f7255b339a74b810638af2e3f1aa026651c555ce"}, &(0x7f0000002c00)={0x20, 0x3, 0x1, 0xb8}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r1, &(0x7f0000001b00)=[{&(0x7f0000000180)=""/244, 0xf4}], 0x1, 0x10, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000ac0)=0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) chdir(&(0x7f0000000080)='./file1\x00') fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() read$FUSE(0xffffffffffffffff, &(0x7f0000000780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x182800, &(0x7f00000028c0)={[{@memory_recursiveprot}, {@memory_recursiveprot}, {}, {@favordynmods}], [{@dont_measure}, {@smackfshat={'smackfshat', 0x3d, '&*'}}, {@appraise_type}, {@uid_gt={'uid>', r4}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', r5}}, {@euid_lt={'euid<', r6}}, {@smackfsroot={'smackfsroot', 0x3d, '%'}}]}) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x8000003c) symlinkat(&(0x7f0000000140)='./file0\x00', r7, &(0x7f0000000180)='./file0\x00') syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2002"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5170000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000008b1183700000000000001090201000100"], 0x0) 4.695310348s ago: executing program 2 (id=6221): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000006c0)=ANY=[@ANYBLOB="001304"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40) epoll_create(0x7) (async) r4 = epoll_create(0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x40) (async) sendmsg$inet(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x40) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) unlinkat$binderfs_device(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00') syz_init_net_socket$ax25(0x3, 0x5, 0x6) (async) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25ADDFWD(r6, 0x89ea, &(0x7f00000001c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) syz_usb_control_io(r0, 0x0, 0x0) 4.191079502s ago: executing program 6 (id=6223): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'erspan0\x00'}}, 0x1e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, 0x0, 0x40000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x181341, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000140)="d7513a0e9a7136d601296b3859d62024b004dc4cf4687ce2ed9ef1", 0x1b}, {&(0x7f0000000180)="6aff57538767ef85e65862ba6d1e32d54a62", 0x12}, {&(0x7f0000000240)="29e3f818bb05d1067cc754c60c2d05c18fc6fcf415e713f5a54f1d4066b62b71449f5326b6df9c673cf5f9ac163579bb2605cf292eb030616f67cae6e95635761ba8fb3fc19d36849cf4a612a0da6b62e8ed10be550cfe938a8593d6d0d2af", 0x5f}, {&(0x7f00000002c0)="b25ea16093a82887c6483566722c53948f578a619c75857688ae4e31eb7ba89abcd6d66ffcee866694e456432b2f9af227a6ca7ccb43d4fe1d5cab82189d2a2dbeca452b74c185d3d60529f72c57e80ea122ede42d81c959d22ddf1d0cd70cfefd1370b80ee7b5387b56e461a52e2d8c80d1b7fca99c63510360c068e22cdad6de3e7256f814e916219ecc82ecf6264b1adcc8647125e134d21d50c225e8d84cee507b49a1da8ffe3ce8bbea1c74d44b7c20fd43e9499863568474ab60ebd828ffb5aedea03d4cead35505369e8a766fe3b41cbd4c26", 0xd6}, {&(0x7f0000000440)="393153928f10da9b1f0217681e50662ba8f32dd13472204ab9d84683fd334dc92716d90fccb649224c0ad5ec1dd019274cf6dde7ed30dc46dceac25464706dcba91b41c6eac084b3303c0cb3266169c16ea5bcbb5287fedb598758bff77f5df5bbdb292defdb06f12b4521f5d21cbef665fae9bb8cee5cd6ad986e2d7d8d9e5cee879bd6db297e1b2e7cff0b27fca80d27779be4d03bc1b52fbc3d14f2428d99ad8b4432ead1511b1a7c5476a8a016393b29be37acaf49f57093b1", 0xbb}, {&(0x7f0000000500)="9084377cac847f4f1775dce0fd05338643a4c865e7d15fe5d83fd90b71b60f39309e783712b408cdbcbad798fd4541baead4715bc5e56e854a5fd6b6d849d996230af7060a12eb7fdfecc5a2baae513ee9a3ba9084daf97f95c1f482bd84875026b08dbc958cfb176b3806beaa4c00c58814d6541b9a9e93b23d38331dcb926cee598d02224e2b8d8302fcbb8629905a6a19e2df94fdedef8faee2e06d6e238e2b4faac5da33d6fa833d9df7bedd5beb26709696468c15ddebc4473743b47f57b095c637aa8bdb62a1", 0xc9}, {&(0x7f0000000900)="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", 0x1000}, {0x0}, {&(0x7f00000001c0)}], 0x9, &(0x7f0000001f40)=[{0xf0, 0x3a, 0x9c5e, "e50e09c5c0c9b9dea1f54f32ef45dc7442dfaeae9b36683aa5d7808e001d094e312ce39546b0cf8698ebad3a20b5002a9c695235dc6510bce9edf10ef92c1763a6cf675847bea6b77d9c6c00e02e8a1093a3888e47259cf2e60b5f9e0912650a8f98c3a10d282e34e908173ed3430d724a9cb399923bb59457848eecc04c646c7c6da4c974a388ecb2a86a568ac4e1b0c69d0eb7100eb6a7ce5088ca53b1be8af9c566778b4755384ace87216ba50d9ea30344ec221faec721f8f171d7ca980a2d0bb3d5d84b7c7f764aefd4bbf89828b3f348976366dcf71ac67495d34b5c"}, {0x68, 0x3a, 0x1ff, "93b0b0adc646c915746c276ea2f0279dd0708a62d70595ac8270aee4f15c2de4a863c3210a2d89684dbdedbeea4e903d85a698d85059d286f7431832b39562f768f7b9171e2727a7c04cf91183819bd2b9b2779850"}, {0xd0, 0x3a, 0x9, "7749ae67645b64e2ebc61d506568b2d3c6dda1b999b7233a08eefec40b57aa59633693e8846d586e44afff868beec6c72730638a69df20351e114c633ccaccf2fa46fedefa442a34f9a386f3c1536affbddd586bd6e524138b3534a65fe7667dc2d9242fb19d93e44fe14dd67a7284a7c28a416844f963dc0132b6a1d04cd6f03284e3a274632e344c65b357216985210914d76b828d02f04c7782270b674768869a039bf37012cbfc65620942ea8f2944c8213f4d98f7c7ebdd"}, {0x90, 0x114, 0x7, "d99a52d55af7b61fdfd039d2ecf24d11d7ebb8d2a7717ea7b1f7588d0ca0557ff7fb2962415c4760e435e4e93a17e0f24d0fcb83c0b6673309186dd452ec73bcf8168c56356dfa02489b24a48c285d8647496a6ea7ab8fd62e065e0105b6237d2ddb97d2e8a42467ffb02e2ae763549d36b69a3b048a60ce0c24da740148"}, {0x70, 0x119, 0x0, "1f25b7be00f3721542a014918c41622cab3eefd6009d0be37b6a89ada1d25ad09945f2c51ccbeb8939403657855d097b0b647b9be696ce4fda8e951776946e6c3628d164dcf3d0470ef1d1d2fdc1083b44d312f07893d9b91c492b11a7"}, {0x60, 0x10f, 0x4, "c226ec35794287adb8428db8164baf6e2fddf09c3cb40dfd493804ed6b29996bd58907a605aa3243329f561a28a6a7eae63a8adf01690bd75a9eccbdcd23e0ebb242b5e2ef4215c1d3d281"}, {0xe8, 0x1, 0x7a5b, "d6fa3f0aa4c377d693feac39d9a61bdff4a4c9084defeb7f9074d3d2bc65994ec07d969b87ab4efcce87ad1ec92cbc571a95122593de1d6bbb5dde41fc518371528ebfac2eb3c07eb4926051474d9d5f04ede02f07ae5bd771a782ff57a991c7955e11b6b4a157a59b9fa4929b9f976528439f55fbb0b370f791af7a0685e3946ad22ba3cc4920382ffbc4b429c2f7aa36021bccabdbd1ca8c3925ca7684b5c98eaed3cfced0feaf9f415cb646dc03e52034587aa95708fd60b9d0855a905d272ac6347ba18d18b32841cd9d6f6bafce960ef51ff00c"}, {0x88, 0x10d, 0x5a4, "243d7e136d733d7b2b78ec32e3c2e6344367267cde225580de54a41f04be61ab42029e2a1525b15bc3be939ec0cb50b201ace2425070e6d407318fc6fbaf2d76b5fb9b00c26a48477a433a0d4b45190aa33cdc2b45f7f8e9ef7b118da18cff7e4d3d73d16a7a86e19ef764848d8ac0621299a16fb99540"}, {0xb8, 0x108, 0xb7d9, "21dc152aaae77fc0cef360166cd81f848132718d36bf079716566e86b84f4dea2691ccb4056654f0b944462cecb2add43e786f2fafa02017d0eec11bc01df1146ba0cab20bd9b160077e85d36ddab47a1929eefd89a1ad9c2b12f9744694e1413e961056e2640b698ca6621b116fdcf241be584332ddd7e5f66873d112c0544ad10a8a39b47399ce38ae15efb716382fb69f4e2388fe2500be7bb7671db3e9a2ca58"}, {0x108, 0x1, 0x8, "f271cd0705c2ed0fd1bcddd6c5b8bbdb9a18b8cb5716ec7e3a74c26551ca561d5de5813b4d494ab0851b95ac1703e62d84288f6dfadae72b043ce55f228a39fb3705008afe5267daccd43a5a87c9cb07d6107703b7417ac23cda214589c432df5c43e4c517f4aed2904435403d658fe7c2bbd5ee0c2f503abaf317212c297c0165d5ba084804d2c90589d8a67e79f174e0ac3161679ec9b67d4dff2504b11ec8ca1bf563bbee9f225b9da046bf19343a75c47f4f19bebb899d2107d5e0ca67f424fa04d8d2ee1117dbc6f9753bb7492e6531a70bed0672810629870ee812351eade48be184f7d501be693d287d0b7de3c0b6c6d77013"}], 0x6b8}}, {{&(0x7f00000007c0)=@ax25={{0x3, @bcast}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}, 0x80, &(0x7f0000001c80)}}], 0x2, 0x50) 4.074258354s ago: executing program 6 (id=6224): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa}}, './file0\x00'}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6}, 0x10) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @private0, 0x100}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close_range(r0, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)={0x2, [0x5, 0xff12]}, &(0x7f0000000180)=0x8) ioctl$KVM_GET_XSAVE2(r0, 0x9000aecf, &(0x7f0000ffb000/0x4000)=nil) getsockopt$inet_opts(r0, 0x0, 0x12, &(0x7f00000001c0)=""/35, &(0x7f0000000200)=0x23) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x6, 0x4, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000004c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000700)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[{}, {}, {}, {}], &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x4, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000007c0)={&(0x7f0000000780)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000880)={&(0x7f0000000840)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000940)={&(0x7f0000000900)=[r3, r4, r5, r6, r7, r8, r9], 0x7, 0x81000, 0x0, 0xffffffffffffffff}) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000980)=""/4096, &(0x7f0000001980)=0x1000) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000019c0)={@private2}, &(0x7f0000001a00)=0x14) sendmsg$kcm(r0, &(0x7f0000001e40)={&(0x7f0000001a40)=@isdn={0x22, 0x1, 0xc9, 0x6, 0x2}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001ac0)="3d65af9605a34ec640e5da50f0616ee3e388831b6f1a95f676583342fb6bda61b2c2494ef71e428aedbfac6f018328d4bac37fcbedca95b8bc0dc8491ab0065ca45a71472ecfe2d747d9629b40c2ff3d2cc3d72a25ab249f2416904753d3", 0x5e}, {&(0x7f0000001b40)="d2017ef4569b61c19e4f32749f03072ef1dd7e4415f35a3a6c3470e2cc76bb1d2f7411a86de7e4fab97002c72c3d6dafe717af479eb85fdb923b3da830a9f2a3566f254dd6eca8e20237fe8a175053c2279b9acba0ca5c1e273ee9bde938288cfebceacc2e1e03a04f0d8f53f8badd768240cad0ffb14b230b30e2683e8e5fac490512378e3bdbc26322c98b35dd7fa72fab416f19a12d4c97d8fb1ee7e47123ce1d2edbf92629145043e0d20d92da2f35c7b4d77a6f55dfe8122914a706074f2ffe220fc715c04525b5d9", 0xcb}], 0x2, &(0x7f0000001c80)=[{0x100, 0x111, 0x3, "a7211b79049fc701605e65cce7aab5c4815a91d1276fa4698d76117e52c1ed2fced98846710b5e566ca66416709ba6e8d4952458074b8099125f68ea5094cac32e63d3c9ab4196495da23014aeec0b14e4d9d8eb7264783461fb43451700e5ab409243ee3e0ca2894336d2ccde22d19a385b714435887d26ae82a1eff24f16f52c5eb18d68085e72c577b133b73f3d24a10ae2c7823ed5e63ae62c3131336071e93c494c26f725317785ba07fbe56f3a0e6d79ffe2c0d9bda1cb44989c515836f73a8c54ffdb9b9583762ae4d39f64d2027cc643434f2208820a166aecf470730a6111eb0f16fa5910"}, {0x98, 0x10b, 0x4, "ed04d62cce61057f941cea03623e5ae9adba98dc0739767583904dab5c50b1c2208424512abee076a805f2ed3afa29d07be186ad0a18247bb5cd1802d3091ecae9b454eee6d987167fab6612fe1c16908f3368fe42e36056862cda8189709d6457f180fc59c82990fbaa66a819dd2ef489f2cf08d2a5a82a1327ee48bf0edcd306ee7b"}], 0x198}, 0x10) syz_open_dev$sndmidi(&(0x7f0000001e80), 0x9, 0x2200c0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000001ec0)=0x1000, 0x7, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$UI_SET_ABSBIT(r10, 0x40045567, 0x7) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000001fc0)={r2, 0x3, &(0x7f0000001f00)=[0xfffe, 0x7c1e, 0x6], &(0x7f0000001f40)=[0x9, 0x5, 0x4e, 0x9, 0x80, 0x5], &(0x7f0000001f80)=[0x9, 0xfffb, 0x2, 0xc53, 0x5, 0x8001, 0xb000, 0x0, 0x6, 0x8]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000002000), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x30, 0x1, 0x1, 0x601, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x961a}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x804) open(&(0x7f0000002140)='./file0\x00', 0x102, 0x31) connect$inet(r0, &(0x7f0000002180)={0x2, 0x4e21, @local}, 0x10) 4.016946915s ago: executing program 6 (id=6226): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) io_setup(0x0, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f00000005c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in={{0x2, 0x4e23, @empty}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0xf8}, 0x1, 0x4001000000000000}, 0x44000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES32=r4, @ANYBLOB="31032dbd7000fda600000b", @ANYRES32], 0x1c}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000700)={@mcast1}, &(0x7f0000000f40)=0x14) r6 = socket$inet(0x2, 0x3, 0x2) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x4004814) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r7, 0x7b0, 0x0) r8 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000008c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x4f2, 0x1236, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x30, 0x8, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x0, 0x45, 0x1, {0x22, 0x5e1}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x8, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x0, 0xe, 0x9}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x310, 0x4, 0x60, 0x1, 0x20}, 0x10, &(0x7f0000000940)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0x3, 0x6, 0xc45, 0x4}]}, 0x1, [{0xe8, &(0x7f0000000980)=@string={0xe8, 0x3, "961380129dd34185807d985049ffb39564ee3ff74dba7fba17c1a34e4c1eef641a0b4a211390d2228308d23b605776f292c1c7c8fe8048800943ac5014a9366f28b0bf83b9fa7b9ecc554f523091dbdab3e07a06e2524fbe963a52b98b4d7e31c0f5aebe74ffbecff872db2d346a64c2cc9e33d1fb169a9d5add1314cbd52c59c4dff1b6c2fed4fc85247364c8eca4d1c7e284811002c78e54370cb5f156310052727c7a1b0e57cb18cefc5c63fc68cf08133a4239087f6a924738215f6e966635be268686612aab2ea165c701099dda91a1418c479483835e60d9052991c1c380c1b5c19846"}}]}) syz_usb_control_io$hid(r8, &(0x7f0000000c40)={0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200c2d0000002d02a77f45d31bc74c9d238f95b1eb422f34f37243731a33c4a30ef9f0626300"/51], &(0x7f0000000b00)={0x0, 0x3, 0xb8, @string={0xb8, 0x3, "20e75acfee10c63f446be4dd69d9c3e40790ecb117a39dc6f42b8184ba260adcba61da3fe79ebe50d37027161b8984c4be8f5908478a3c315da0099542d3e76f0d0acfa68acb90a1011a4304eb1a095c2d36072e6967e3bdaff82fd5178810ed9e57c8280bb50fb53e52278ba7f6dc5d89426706b0f73e8425bfed74a96d3453db966440a25203e3497b4879766e148f290518a0d388ecc2fd79e44cb0d55a142efe072e7925eccc1a3acb4d299bab6b16811804eef0"}}, &(0x7f0000000bc0)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x9, "6b68923f"}, @local=@item_012={0x1, 0x2, 0x8, '*'}]}}, &(0x7f0000000c00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xa, 0x1, {0x22, 0xf9}}}}, &(0x7f0000000ec0)={0x2c, &(0x7f0000000c80)={0x20, 0x14, 0x52, "da9cb665944fc61055c739b01a6b4e41e0a136b094d287ff5a4545e50711790032cd810da4e05f4e78a3e64183f3de68907297731a72cd14715455645483c4ea5c0e044257e0a208fb20a1209d97564fc18d"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x48}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0xdc}, &(0x7f0000000d80)={0x20, 0x1, 0xf4, "e059757e76c02d555f0819304aa8dcd242243765fed5e0862295a8b3d99597988cd1f165a0c6cfc7f82ccb8e2e4fef8d2084c4d9f83abc78353e0c0205324c0a374ab961304be0634a73b4f14213d203a67fb1ab0cf18e4bfe97318f89e5e1f193c17e6ae06e88ebff6a2ca1b42159e970b1186e88cec66022d2421b9b8dd99a961fa043ca5c6f29fd433545be750ecaf10bef4f3ca10bea6ad3cd53a3ac8ba91c2a8523576437e53d5efb173e997857d21947fa65db0494a6cd3b6226953da3c3a7ef361e3d4fe1f61074015278fc269a15c775d734c03c53ea91fc3bcf580ae45d43d45097b3f9ddcf51775d8ba54616f41004"}, &(0x7f0000000e80)={0x20, 0x3, 0x1}}) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000004480)={0x44, &(0x7f0000004200)=ANY=[@ANYBLOB="400542"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x20, 0x24, 0xad, {0xad, 0xc, "b42ec574233f8b3eb34683cb4b580087938800396e5b5e4e7c87866b3a93c124c07bfee98e59d7eb5994897cf1ff238367ef24601c626040eeadb22f59d29ee2f1a355c7123efc7a998f7fc86f3dcde31d2eddd5dc7dac63635f827a9b85fdcc95d520ca62caf109007dc461be1fa4e574b8e09531fbaf18210d928d60dc6d384cf150a1594923f9232064d8a115917a8dca84e46771b638ad7e64598d15039c3a90411941948636067f89"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x0, 0x15, 0x1a, "2f1dedb86e0d66dda5526fa28608fd6821e714c8861f45db46bc"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x800, 0x4, 0x2, 0x6, 0x4e, 0x8001, 0x7044, 0x7, 0x2, 0x1426, 0x3ff, 0x3}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x7f}, &(0x7f00000003c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$hid(r5, &(0x7f00000005c0)={0x24, &(0x7f0000000480)={0x0, 0x22, 0x19, {0x19, 0x31, "c9552193ea00b86359b20a1a1f44e52b1a9da8315cf513"}}, &(0x7f00000004c0)={0x0, 0x3, 0x69, @string={0x69, 0x3, "26d6c292771584dba319649e1d25107a151081e59209bc14d74d176ad3863a4f551678539d71df8783e665975a9f648e7b9093f8a88c14f0690ae7d961fcd356d504663591f86cf750bd9e953ad5b0d86a553ec05ff34ba574936cb7c9b1878db48ed1a3c293e8"}}, &(0x7f0000000f00)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "a53158a3"}]}}, &(0x7f0000000580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xd1, 0x1, {0x22, 0x9de}}}}, &(0x7f0000000880)={0x2c, &(0x7f0000000600)={0x40, 0x8, 0xc8, "7da9b5f634788d4546be3bb898bc0a239f43c983a055dab7ca1e23d7e779c7c53aa77c796a74fdcb043abe1868da9c6edd02f30ff0ab5229943f85ee27daf5715f8b6aeecdc195edfd8fab6101250dd762266164ae06775e1891d0124364949d02c37cf2397d40eac5ed9ddc4304602a042b0108484fa80ae0d49347a93db1b6d731e73ce40811504d7ee319f802253a591cfa1052e7a7e99cf6781c3833a631724d5d34e64ac41ad53bea8ba6f7d1f32037ce583f917531590fdd427aae8d906e9c50eed98101dd"}, &(0x7f0000000540)={0x0, 0xa, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000780)={0x20, 0x1, 0x95, "e5e4325b96fe988e5b65cb31b1cd8c80ee92e17472917297d3d215b3c11d36cb54af3d22451a2205010683d2d93154d549fa6138e8d7c21c961f30bdf39d9a745a0e455bfe7402c7ec018866cf992ba0c4a84fe050d99347c63311e50de4dfdc42454f0299c0bdf2288a933a589793978a151a6448765697cf8a4820c303b9f55aab5583ec291a3bf094204e739554d1404323d05a"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0x3}}) 3.967441597s ago: executing program 0 (id=6227): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r2 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) lseek(r1, 0x289e0cb5, 0x0) gettid() r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1, 0xb3, &(0x7f000000cf3d)=""/179, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x46, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000fffffffa000000000000000000000000470194060a16d5918a5da01500000000000000d0359a39d6a70be05b3444f0cb6f60980058f76c0be0f5959735c6c6b51345272eb9c5e382b73e562c7e8e7ec57877ba82c406e104eca72b81115cc6dac59ffc92ac770debb2c4903c9d41d7c5293d4f4d6d69e4385c9c10e3ead0ef03d9e7a719f98d0000"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x0) listen(r3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 3.570845407s ago: executing program 0 (id=6228): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000007c000000090a010400000000010000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001f380011800e000100636f6e6e6c696d69740003002400028008000240000000010800014000000020080001400000000608000140000080010800034000000004"], 0xc4}}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000000c0)=0x201, 0x4) sendmmsg$inet6(r2, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x40, @mcast2, 0x41}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000040)="b1d28a6141b16af4d088906809c1bc34d5e560a21c72a6c501ac9c3fc12bc77bbe51bc1e9110d66a1e0e72df9d6c5ed48e1a6c83d4d74a4fb1a9b2e4314c953ba3a49005848979e4e836c8cd65ff1c854ff064dff9f741e2927de8c1e9e51f0ce877885cd8f6f934766cebe917c19bff3f5d134fea41d7d3377901", 0x7b}, {&(0x7f0000000300)="896ded433bb25f34fc9394f841581a2d220977e9359c30420dd0227714e8305d0fd2a17db43d1f65728c12015e825efbe3ffc9426e3e6288020000000000000039efc1527483b090052f04fd193411aa8a4fb2556092e7b0bd9c9ed0db6bdd32bd8e88bbd195ff212e4e40666323b9756c2ebc028526932b1f286316eaee68e1f6839297b6ea8116", 0x88}, {&(0x7f0000000140)="1ecbc24f14aaaf3612aa314b3e25026922f5b1f714a271518bc77ccec4f53907b73394d90787581faffb49f4266f32ae153f78b5836f4ee9dbb2992623eb52298f66aaf4f290fc1559128048bffd", 0x4e}, {&(0x7f00000003c0)="6ca5e714e7ddff0999ba63da2909a88a8efcf5b14526815c2a38ea77d22a2584069f8b01a7eb25610ad8d13fcea5dc8c22c14568e495147ac1af602a4f4b77700c6232caf1575b098b129a1c8530790937e399cfd8535c658584c9877bdbb74f0bf26bc383a1d3b4882acb2822ac0ea8d58ad5369af5a008148830cebb283c92d4b4b6f3da97503692bba537029048167fe17959a74db7d2a40bedf2235a6856a207ff1231327b633aca0bd702b2a04950", 0xb1}], 0x4}}], 0x1, 0x800) pipe2$9p(&(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 3.415691009s ago: executing program 0 (id=6229): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000140)='xfs\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100), 0x0, 0x101000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 3.057396872s ago: executing program 5 (id=6230): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000300)="bb618dec", 0x4}], 0x1, 0xffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r1, &(0x7f0000019540)=""/102400, 0x19000) r2 = socket(0x40000000015, 0x5, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000040)={0xf0, 0xfffffffffffffffe}) close_range(r3, r3, 0x0) connect$inet(r2, 0x0, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f0000000000)=0x3de, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) 2.569747315s ago: executing program 0 (id=6231): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) io_uring_setup(0x680f, &(0x7f0000000780)={0x0, 0x2712, 0x100, 0x0, 0x26e}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8000, 0x1) getpid() ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x1d) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x101800, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r2, &(0x7f0000000100)='./file0\x00') recvmsg$can_raw(r2, 0x0, 0x40000020) writev(r1, &(0x7f0000000240)=[{&(0x7f00000002c0)="89679c036b87b4f741d2ee76c79e1698e9bf7e0974ee22c8c23ecb8295c3c3c7f1a9ea2191c977ea8db3bac2c43e2c52b7ff748bc0904fa11be33954e8d315bebcf8e955d70ebde52a804d8b7476c59019cea7ea3a7586fc21382ff445117670a85aeb853edc07d6130641fd81a57c47cabec02c7afdc2772eae9564751bac910452346c2fe27f6ab6", 0x89}], 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001) socket(0x10, 0x3, 0x0) getpid() 2.510537339s ago: executing program 5 (id=6232): r0 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x688c4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r5, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) listen(r5, 0x2215) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x80000000, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x3, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) 1.899491502s ago: executing program 2 (id=6233): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/91, &(0x7f0000000080)=0x5b) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.691757107s ago: executing program 0 (id=6234): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'erspan0\x00'}}, 0x1e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, 0x0, 0x40000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x181341, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000140)="d7513a0e9a7136d601296b3859d62024b004dc4cf4687ce2ed9ef1", 0x1b}, {&(0x7f0000000180)="6aff57538767ef85e65862ba6d1e32d54a62", 0x12}, {&(0x7f0000000240)="29e3f818bb05d1067cc754c60c2d05c18fc6fcf415e713f5a54f1d4066b62b71449f5326b6df9c673cf5f9ac163579bb2605cf292eb030616f67cae6e95635761ba8fb3fc19d36849cf4a612a0da6b62e8ed10be550cfe938a8593d6d0d2af", 0x5f}, {&(0x7f00000002c0)="b25ea16093a82887c6483566722c53948f578a619c75857688ae4e31eb7ba89abcd6d66ffcee866694e456432b2f9af227a6ca7ccb43d4fe1d5cab82189d2a2dbeca452b74c185d3d60529f72c57e80ea122ede42d81c959d22ddf1d0cd70cfefd1370b80ee7b5387b56e461a52e2d8c80d1b7fca99c63510360c068e22cdad6de3e7256f814e916219ecc82ecf6264b1adcc8647125e134d21d50c225e8d84cee507b49a1da8ffe3ce8bbea1c74d44b7c20fd43e9499863568474ab60ebd828ffb5aedea03d4cead35505369e8a766fe3b41cbd4c26", 0xd6}, {&(0x7f0000000440)="393153928f10da9b1f0217681e50662ba8f32dd13472204ab9d84683fd334dc92716d90fccb649224c0ad5ec1dd019274cf6dde7ed30dc46dceac25464706dcba91b41c6eac084b3303c0cb3266169c16ea5bcbb5287fedb598758bff77f5df5bbdb292defdb06f12b4521f5d21cbef665fae9bb8cee5cd6ad986e2d7d8d9e5cee879bd6db297e1b2e7cff0b27fca80d27779be4d03bc1b52fbc3d14f2428d99ad8b4432ead1511b1a7c5476a8a016393b29be37acaf49f57093b1", 0xbb}, {&(0x7f0000000500)="9084377cac847f4f1775dce0fd05338643a4c865e7d15fe5d83fd90b71b60f39309e783712b408cdbcbad798fd4541baead4715bc5e56e854a5fd6b6d849d996230af7060a12eb7fdfecc5a2baae513ee9a3ba9084daf97f95c1f482bd84875026b08dbc958cfb176b3806beaa4c00c58814d6541b9a9e93b23d38331dcb926cee598d02224e2b8d8302fcbb8629905a6a19e2df94fdedef8faee2e06d6e238e2b4faac5da33d6fa833d9df7bedd5beb26709696468c15ddebc4473743b47f57b095c637aa8bdb62a1", 0xc9}, {&(0x7f0000000900)="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", 0x1000}, {0x0}, {&(0x7f00000001c0)}], 0x9, &(0x7f0000001f40)=[{0xf0, 0x3a, 0x9c5e, "e50e09c5c0c9b9dea1f54f32ef45dc7442dfaeae9b36683aa5d7808e001d094e312ce39546b0cf8698ebad3a20b5002a9c695235dc6510bce9edf10ef92c1763a6cf675847bea6b77d9c6c00e02e8a1093a3888e47259cf2e60b5f9e0912650a8f98c3a10d282e34e908173ed3430d724a9cb399923bb59457848eecc04c646c7c6da4c974a388ecb2a86a568ac4e1b0c69d0eb7100eb6a7ce5088ca53b1be8af9c566778b4755384ace87216ba50d9ea30344ec221faec721f8f171d7ca980a2d0bb3d5d84b7c7f764aefd4bbf89828b3f348976366dcf71ac67495d34b5c"}, {0x68, 0x3a, 0x1ff, "93b0b0adc646c915746c276ea2f0279dd0708a62d70595ac8270aee4f15c2de4a863c3210a2d89684dbdedbeea4e903d85a698d85059d286f7431832b39562f768f7b9171e2727a7c04cf91183819bd2b9b2779850"}, {0xd0, 0x3a, 0x9, "7749ae67645b64e2ebc61d506568b2d3c6dda1b999b7233a08eefec40b57aa59633693e8846d586e44afff868beec6c72730638a69df20351e114c633ccaccf2fa46fedefa442a34f9a386f3c1536affbddd586bd6e524138b3534a65fe7667dc2d9242fb19d93e44fe14dd67a7284a7c28a416844f963dc0132b6a1d04cd6f03284e3a274632e344c65b357216985210914d76b828d02f04c7782270b674768869a039bf37012cbfc65620942ea8f2944c8213f4d98f7c7ebdd"}, {0x90, 0x114, 0x7, "d99a52d55af7b61fdfd039d2ecf24d11d7ebb8d2a7717ea7b1f7588d0ca0557ff7fb2962415c4760e435e4e93a17e0f24d0fcb83c0b6673309186dd452ec73bcf8168c56356dfa02489b24a48c285d8647496a6ea7ab8fd62e065e0105b6237d2ddb97d2e8a42467ffb02e2ae763549d36b69a3b048a60ce0c24da740148"}, {0x70, 0x119, 0x0, "1f25b7be00f3721542a014918c41622cab3eefd6009d0be37b6a89ada1d25ad09945f2c51ccbeb8939403657855d097b0b647b9be696ce4fda8e951776946e6c3628d164dcf3d0470ef1d1d2fdc1083b44d312f07893d9b91c492b11a7"}, {0x60, 0x10f, 0x4, "c226ec35794287adb8428db8164baf6e2fddf09c3cb40dfd493804ed6b29996bd58907a605aa3243329f561a28a6a7eae63a8adf01690bd75a9eccbdcd23e0ebb242b5e2ef4215c1d3d281"}, {0xe8, 0x1, 0x7a5b, "d6fa3f0aa4c377d693feac39d9a61bdff4a4c9084defeb7f9074d3d2bc65994ec07d969b87ab4efcce87ad1ec92cbc571a95122593de1d6bbb5dde41fc518371528ebfac2eb3c07eb4926051474d9d5f04ede02f07ae5bd771a782ff57a991c7955e11b6b4a157a59b9fa4929b9f976528439f55fbb0b370f791af7a0685e3946ad22ba3cc4920382ffbc4b429c2f7aa36021bccabdbd1ca8c3925ca7684b5c98eaed3cfced0feaf9f415cb646dc03e52034587aa95708fd60b9d0855a905d272ac6347ba18d18b32841cd9d6f6bafce960ef51ff00c"}, {0x88, 0x10d, 0x5a4, "243d7e136d733d7b2b78ec32e3c2e6344367267cde225580de54a41f04be61ab42029e2a1525b15bc3be939ec0cb50b201ace2425070e6d407318fc6fbaf2d76b5fb9b00c26a48477a433a0d4b45190aa33cdc2b45f7f8e9ef7b118da18cff7e4d3d73d16a7a86e19ef764848d8ac0621299a16fb99540"}, {0xb8, 0x108, 0xb7d9, "21dc152aaae77fc0cef360166cd81f848132718d36bf079716566e86b84f4dea2691ccb4056654f0b944462cecb2add43e786f2fafa02017d0eec11bc01df1146ba0cab20bd9b160077e85d36ddab47a1929eefd89a1ad9c2b12f9744694e1413e961056e2640b698ca6621b116fdcf241be584332ddd7e5f66873d112c0544ad10a8a39b47399ce38ae15efb716382fb69f4e2388fe2500be7bb7671db3e9a2ca58"}, {0x108, 0x1, 0x8, "f271cd0705c2ed0fd1bcddd6c5b8bbdb9a18b8cb5716ec7e3a74c26551ca561d5de5813b4d494ab0851b95ac1703e62d84288f6dfadae72b043ce55f228a39fb3705008afe5267daccd43a5a87c9cb07d6107703b7417ac23cda214589c432df5c43e4c517f4aed2904435403d658fe7c2bbd5ee0c2f503abaf317212c297c0165d5ba084804d2c90589d8a67e79f174e0ac3161679ec9b67d4dff2504b11ec8ca1bf563bbee9f225b9da046bf19343a75c47f4f19bebb899d2107d5e0ca67f424fa04d8d2ee1117dbc6f9753bb7492e6531a70bed0672810629870ee812351eade48be184f7d501be693d287d0b7de3c0b6c6d77013"}], 0x6b8}}, {{&(0x7f00000007c0)=@ax25={{0x3, @bcast}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}, 0x80, &(0x7f0000001c80)}}], 0x2, 0x50) 1.658673465s ago: executing program 0 (id=6235): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009058202"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x154, r4, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x12f, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}, [{0xdd, 0x77, "3e115be9fc8530ca8c5bb257b3f95716bf75291a49c2eb939a96df180828988e87fc73ea49fc5cab256a312a269fa729a37808c9699b33810117da37c36517e22fafb79d4cc3a402764792e64b509592a716c9c64e436c2734f30d1c6a9edb194a215ef9ea890b01e8009e96a7519919b9af2b39a029a2"}, {0xdd, 0x64, "d43f7e14451f21a2ed68b07b41f445e9d2126a3b90b56ab03b71c487d5b60537ad8905905c1ea93995b86fbc5e58b190f756a5eab038f7798ba061e46621b32d5bd221cfd56d8846522707cdff7722bc660521fcaa41afc8014cb0657032c700671169c3"}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 1.537677699s ago: executing program 5 (id=6236): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (fail_nth: 8) 1.360456766s ago: executing program 1 (id=6237): r0 = syz_open_dev$sg(0x0, 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(r0, 0x2205, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x8901) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f00000001c0)) r2 = socket$rxrpc(0x21, 0x2, 0x2) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRES16=r2, @ANYRESDEC=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="72064ed192c26d8d50f067df337ec344bf84d20b72981ff8d13a50efc03004bc0b2c19ceb771f276d03d968eefce1e8ca965bb84d6a97fb838984795ef47a5038dde29afc151062be039c9f8d1591225b96e9e5573cce05de58686512581c8e7c89a70882e98b071c7474015ce64c57179c88f984fe6b47751504bbd484dbfa081de1ec9124a7f79e831c6b0055d7e8d3d57c3053fad0aa7f6f9b29b539b6a814fd4b9cb4cf8b3d0fda1b23d141ebb73cbcd2db6c3ca82"]) read$FUSE(r3, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2000000020, 0xfffffffffffffffd, 0x80000000000, 0x0, 0x10, 0x4, 0x0, 0x8000, 0x2, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x40a8800, 0x66d, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x90, 0xffffffffffffffda, 0xfffffffffffffff8, {0x0, 0x0, 0x0, 0x100000000, 0xf, 0x0, {0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9a20}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') syz_fuse_handle_req(r3, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x3ff, {0x2, 0x100000000000, 0x100000003, 0x0, 0x0, 0x3881fffd, {0x5, 0xc, 0x480000, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x8000, 0x80000000, 0x0, r6, 0x2, 0x8019}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000021c0)="01d9bd747db6ed5fe9f9059f787566419f91d8fd78724849848a7e4a1a459fec0b4a3069cd75e15842507ac4ae6e8bf0fa837d91f84cf0466f3acc71dd5d7967234f1181d4688760639ae355157ccbbc1a5bc59697b87b1c09077b4b9c480ce87c1cb58bb6ac722f0f61210f72b8ae1bbb3f606bb58fb4f735bbc00def5fc46c9649e336ccb3a83948ec44bea55d74fa4b56c31a58c3bf68334b3092add8d5073ab8736f3da6d91389d1c71146bdfd9775b05463ca1c87219b3dc9051b87795ad2da4f6d16f6ebedea5a3474e5bcb5aaf4f82bef66127f0e86886cc566e248b876338160e4a417ee5054365328fbc5c70ec1f89685fb00befb9c808b9187af4801be13365f3a85e54c4d5cd55a3333a26940f405c0d8233f2ad923ce66032e90f14774ebd91cfaa07a57840fcc9a875da1af500d54a74c0b85383d8570444cf4f4a22e54922c43c6a1f88d30bd00e7f16395d1a096977e1b8dd453b096100cff6bf7fb15aebbf0fd5bcf90080ca8829978d616aaae6842d3bd8a9c62f2841a4cbb8185b1b77f0c67ad6a308129ccb7d2e630ad22f55f3a27728d5047c08a6ce533f15d8ad0b26e96287c9ce8ca5c55361c6c4700537baaffccdf8c9c61c26ed438969fe62010c4dffdac0ad554205aac3c87f277f9cf900b24c51df10f0b9b748a722dd3fee80d34909cc88011a7c9ea9da85bb5133ffeb0914d8f5718830f45b5470206e456b2bf4682c8317000b8c1b72f50d75b4b5193340b9ebba71599439cdcb4677c52cd8e3fa7065e6da5c4017967e7a671f538a9d05320b0bbee2300d095f71d29b071fec6d348a4d4d6a9dd81bf6cefc5738a8cff25ec4a92e0e9ca20094e5784f668159373cc26fc51ac9143f57387f6057587da1aaa4dac958ee3a840e31f8fc08424384f4ad17e7514d039127dfea7c57ca179dc0edea233db22f7b2828a7cbf9ec255e366c48b468641f987f4424cce789da4c73931d645d152d2f8fd05c6abba60eeeeff540fdd2a1498025576d408f99bbdb9f935198df1f620bebe2aa109d9f76884c24e8406e6cb4e8c8596be504080c12e7558e7af03a31118985bed538881585ed514151a85f609aacd236b774efd0f88e3b9e95a8a9c069d66cd46383ced698083775cbf8d3bc8cc1a94e68bd956fa050de8a7261cf882da4c8cbe60458cdf237c1c7682fde5f8661af31de8ac0d7e5165cf541dd867f0b81fa674abc0d8e8d47f1f7d35492abf26c9277ac420413862dacf558d43f3052fce8f81977fcc0ce9e645d50a373e34b6948b6c9b46bd61bebf8f1e726ab6fe8ea5aa426d66752fa9990ec6949671f498491909974d7216067976d08bb17d3d0e35b0334929472dadd4e2b46fbda7697ca66548996844fc50e1846e5c99ab9949b9d4833bb564cb3fe2c6edeb7322a442b31e65c97b6748b0444dba6a3ad829d85d37055579bc1daaf8d2ae1dcc70ea6a6c1406ec20670df5c09782e9521c95f0cbdde74b75fa08e5dc04149696128e7d96365e525c010b5b908f13d14aff699bcb03a11b1b751e7a17b4b191c3c55338ed8c8a6ef1921c363cff2cbb3844e8ff4a70a5dd2e2ed5b0c1658716d407b8c7136af807dfcb76a47c94b9c1d226de418d467a485260e93fc047751a8ebc5becd54085ba40501f2c9aa233f90a07d32cd3bd3bdd990d91a9639366c84feb766b7d6b1dcdf9659a1bf32beeb05eb77b43efcd1071ace1e5e22d75c77d1df472b0952cb5a9d10461d8fa8077425366e74d9c3626cdbda19447225ff9832cd3be17486099ffdd2e40d91e85f9c80e6bd526cd2fdd038bd14aae74d09441ac335f1e1ba9067df31d8456dbcf187f709e69e86f32bfc14c0e560d49cf75adfdeb1eeb669fe6e1e633b4011af592068cb6d04da83740374ac486ceaa1595fa9d988cef328a54e29bdda394d3fe63b534d5deec94dae012ef4af1f14a5119b1b242efb522b6e8f4db3db6b969abbf11b3dba51f955aa235f5494cf91bd85446fd9af3f9d574d2539e4c66f628676d92121197a87894a0cb4720739b49102531df036eed1ff1a5e8ea185ef678b8b03e2f40a39512f216dda5e23a193b716138da1ede456a6a9131b3e543c0b282030a702223414017c33575ddee481dd08aaf80881c7cd809d16d8a1f6053d740d2633a2b6163c18ace00740cd8d9e8e519903902041e40d6c72b75a1d8c424455c46bfe94194ce4ff32fc521ca58388f3fd527da1b104eb8cc2806495f3791b82c0e589734d7bfe9db9b45b27297c707e1062830f9846b0e00bc9e9275ca1c657fcfd2c671ea2637dfcd9fb9879c67811c30251f404a009ac7007afd3fb189cd3b6ccd4833ba9309015eeee32293bd7e42562442593b55f3acff3701a4dc882faa9e466636bffc778fedc8bdc77dabd9f93157654985340302925e6356b09a75cc5d76c702b95ec5ced416c0c8205b00ce8546e708b6000bfaf6a81b86b6aef432335fb85f6b8ce4b2e4929c250408289c92c7cc0ff981c5d20485940a88ea51c995b654b4ef3914e76b7a1cc8c3e73e08224fb097decede57c8660f28cc05d7957848b445f4ec5147740d5b840539ecc2793a329ad7c184f8c53426f9c5d9b0d1923c0f27b8467485893b59e117ae7d3859e9b8ca858b911cc1d0ef72fe57c6b449118c8de941e99bb0a62c0331e48d932cb4d2eb2310626b7f018dce8e07b07dc05c130fd00b8981fe7a3957eb339a5a79eae891a3e53d885084ce0df58f0273962af7c4bdcf4ef11e294737d355684950592bcb6b519a7c0f8f2e073652de5f1516f2dc4f55a101b4267ea0657d256f46b9aa12cd7932cc1b128161eb079d10a340f03ff514a28f033b2fce53b135df5e375030f8924d6c75baaea35f74888d21901924f93054990f82a8982541d3e1dffcd283d812417b987c3862f246a9d1e5bbfcaba129633d66106f9626faaf5e7e82fa5a511c36873df7329b5e73daef85b96ea2226f1795635f521b588b00c218e110a829ee69c26aef7684437b7007075a5ec5a35e747636510af1761c979c7b75872e66ad652ef7f6661544c6b2dd875c79f3b57b49f1aa552867ea9f556849e8625d6e089c41ae0dd3d08cc2f28435142f9a043aac446a56adfe0679fb107452c9893987ebb471eefb0ea9bd7ca0281ef8e45207b81c983fb44d47805378271590f01c01de6f3d21f4c6d320102e71a5a88d346037b00e7136c4ba275c91bda277f1e4d19dd13aa182960412aeac6f4cff0df7763e2765a71214ede4a98c90b3ee7c7ba9cbc9656df96f9bde9f99b0b413924cf96e41491ec2206ba946b4cbdb64173257d85870996f28f6928693106214967f55245e24cfbefeab58f59fc1893e03adab5a685ff916a6cf48c514a9845b2c71edd5a7cb8c3e261b224a4f5fcfc06ded6f634b0cae99bf366b09e8e4f082e2b26be752f0703198af1c8737d64c91a0ec7b54f9c33d91378ea2e5caedd3b2fdeef0a0277d07efeb7f09fb4c6deedfb42696576e1559c8ab55cc2d452101e0b3cb22229b5a9df12df23651a955fb091cf4b573371d260e4354f8fd13d53a2560fba582ddea7679dff96d7a89195a364c7271e98734dd7e2b53bd9af3bcb46634c033c3bcfa82d956eb6d5bff069a176b5f92f24db693af4866cb44bea283903ed11dab80f0e30d5eedc04ee6535ac6e00c7ec68953cb7fae2708bae9f5bb1a592cd4e7db93a067c3da2b72e4cb61930d29ccc29919d3731e7334e61630daae383301446aeb07923ce8a329a4107b07343eb2686e2304ef316cc5f32f0b5b7b619750adca5b7b45c0b9e6ca876bde4ad3fee9f32449230c900c890b0cf044efb4100410b8591658e9c38f64feabfd7cdceb57b30a16f38c3266f01102a6cbb382139a0c8ebf1f4b3fc8ed69a9baa82f466030511a92c0b236f3a513d906ceeebf973da71d8c458df8e2a96046fb3798946997e731eabd4605a2ebf1b09e49f43b871fb653dee1db85a44fcd0f45853e9fbcace734aaf6908213670e841dff7e6a7317ae8b8d6be1f6c8b9446bd43373ac3fb08de8a1e4a9e17efdefc08bfce8fa41432fd5fa8a8f3ad5849a778c6dadff2bc9a6227c16366cd588d7e130ca6f8b8367f427412be861021cc077ca1f572ae1ffcbaad7e4772d1a873cd959230e542eacf3b28ce6245adab37abf0a6f73adb96fa91d63cba33b523f7adaea8075ca29224818f40822b7e90129cd962f479d606a6c6fb270bd273288a30e820729edc9c1fe7e96541aa854b03f70d26639a0f177e5193d59de82abd1d64d993d8be1b24783428ac35962527bdcea26976fdb3aec376a5b1e7d1c9bc8744e19ae35868409bf6538d9a8c60f9d375f9e7dfe1bd1df8dcbada68d3151d294ef10263909c2df4842d19b2383b86411637f261b731fe64fcbb19bae35eec6cd19a6f9936e52c28d775e1ac4a34ef986091ac2485b6c2bcb64b279b6e3f77077562cf2a16d32ef86a0a4566c21da3187dd7b4736cf1d76b5aabbf0734e2c46db63fa5b5d28478c7fbc8de54364ee696e90341f041ad3f435477e0b944c63949c707a25c99f82a14a3cbdcb8e7d67c423453c7d8d9f97ebbc61eb672696eccf185aa844677a9fa4d5587744aca6cb5b2db4898a3c689f312f22828585866e47e04acc4dc8d0f19e414194821997687558412ce4118acba56ccc65965465ec5e88cd2e164c80df4aa59181b30740abffc71f4b968a20de3713d559c50b0fb6219fdd2b510011b5de6d4debf8e6551ebb7b4f983f6d993a13f9da0284d21728cc3e17326ee5b2b1c604dc113f9391df4f0dc9513e8dfd063af37735a420668f40a925520fd07b237fa9468dfe5b33c57fbddc6a925e1a1923309734d8808942b6a4dcfab2a9e6cb0242159ce73c0871b2b0966d079dd9d57521a137c7c262de2afa8c1c19465e02c930d10e4569d0fd0c29dd2724f56928c3c753f33764063fa5530fac0810078b13fe8cd3c828b2ac47e379ff6e497a6a4fad3def72c72e073586d798de6a1593e4bb08a7e06039e806eaba3ffb813f9abca40d38be6bd6e25043c1a2ae3aac13bd61d4884e3d67152b1efc75b3acea4cba57013fdb39c84e0e4a27758353e1dcb6aa2a736d60c0f591714464f1f1889bf7aaa7c97b9126f509158c23211fe1bd55839e5ce6249305b664afa1491f9fe9315ffa8e5b2f5a539d267786c41206c59f2c51de6b3004c79f48a3512bcfaf08ef2c50d3bf4f2dc7b48fe41574543d625cf5ccbab790e49a4b36cbf86ed1903697b3dec4d2d602d68b58a92adc5a60664cd33c65db16bbe9e745bcd578867129667ba987f13dd94853381b7f9557e4efc9671dc01512968d1d219b467b2587bc35cfee0022f56f8e0f413ed728b6d6f927dc92805360309c986aa5dcb2b25f4bdb62c69cf343f5d658811083df7d228ad779709bb62530fa288cc04f4246266974a9c8fb1e3a0c7f6fd36364f05251bfa4329bade5a695f50297d463de238510ff392fb0fadca7a03f5dbf0c35e290c9dd8c2dc161e4067f3635f905adecc54e8abb1af2c2d2821bd2e57afb21296a447ab31302ce062f2273e9bd11a7a34af15ced2151a3a4cb99a362e0ad1c56da253728de0ba8174ccf51aeae68373d5e7a9ed1e05d23b27da4b0ab1f989412a8f37156b2250f9fdc963727e39453dd82785ccc6a56650e3a55baa5f3aaf0d3ac09a7e22402580630a2aeddaf710820609bf5409ffb4d32fa1b4def62f189ff4b6cd63c2b66213ea6af4675018b4b1bc8145a42b53e5b962487bf2211b5287bad700c06c44101ff36a9357949a6e6512a6ca800bc64d54d3839c86049d13a68007c9124d1e65363e9d3d2ae6abda06ce2210d7513aecb7cda30b3cef3b769cc07e0101034c4ae8bf99dbb8e757c4c6eeac4eb2c38c756c2f8d8a8d85aff83af5e44682f29e8ae3acf5a2da70c75259b7cf2ee3c96553d6c9b5f4055888001c3c56d5fbdad17e215e92f8b94eb7ca5c7fea4a1c84fd314bda36ff071906cbebadbbb61c264e51487611feed04a09caf40c364ea0b105c33617635b4a2da8337f2f60e38cd031f6adb18b808a54fc991d2480c8f710ecb7e8eb4517031b12cdfeec1a5386253a4683fdf28a1f8098893ddd0f3eac3f01f27ae8d08ca0d567d81e572def70fe9e26a053faff45933a1ba42535624adf0d95391bb53f8c5d386f4d6fea82ba974a81f6e97eb4eee706070956009f87935ff695a1c1fb888464e47dff62756ea6af463621b7e2652d3e92cc93a4d453060b1d309b7d7d38b1ff54c5de867a105c32efe383481aeeffc4732c785a62a23ca958819d344a80f9cc1a57372ad795d18c58d541ff3d64da997f3af375673b644e5640d5f6656e25b55931f4bf0585cfcf0a49b7411ddc37def67ad4cd7d344580b8f9015d41173b8e837d070e0554cfd379acf3190bfe9447432d708b4e04dd74d6c14654ee6037715274425ba9a703b90303b73cf4c66b524f2c788aec33e448ecc428ae9daab714ab31304f66f1d14ea1cf111ff76f3428455a97b4f959c763ad60f50e9ff2ef840ec8aecd18874d3814c5dcca93effd6658cfe9642a21b5e47c7b12376e16e0700553762d3dcaeeb59d9c45e736fc13d07fac9159a52bad01466bbde0d9f41a56ba403da0aa9995070b54dad0f6c6df97517e32868737753280271c4ba863c0392c74a90a7e3489900c41546fe2b53d9939fc78449feb439d083305f4cd311b4465861b03869c0013d950de9084dbeb712443f5dfeb3d4c269203225f1977dcba8e55be3dfda61cf4ba88542f054e8c602a006ff54a9caa0d3f140b346e937e950b099ad049fc1bc08abff1d2e9dadcdd385118e324f87a1777a773a7ae84322a0d2ae7d94d5119f8cf4de4167fe7b303000000000000009485b8326c6a251768a874ba7a41ca8abe105feb7599f4ee89a1324976c528740420ff0bf4cdae01cb6445ea3ceb4f5bfc687a6d9d56eeaf69ade363b5d97ccce02f866cd1870b64ebeed7da81caa3cad3a19a65bc266d2e36fadf75a0ea8aa62a412709195d54ff4ee5c069b5411e81f72969a5d13a8f69c8438275499112937f25ad0350f866192216395eeeb3459a8ad32aeae85afb6fae11f82af0578ca71e4474ce5bc936db3f3703c970f0486f3b09154b3c4d183b50e706af21df394f757558bc9eaffe1aa6b8612a478a1c2802e280144998492dfed0fe7f020bad4a72015fb657400f8f360e2c101d69f3c784612ee89184e56329a4e2f8650e93d2d2f2d0ab252dba7637ff10c76dd3c0ea704179d13d6bfe6c5b951900097f1f3e618057b4dad6d06541fde48ef21ec8e17808d83cffba390151f7ddcfd770cf9747c190280b470e025a9ade33c9a6abcb6daf40a56440bb34aa46868bd4db9107773496a905af16f23dffa8ac8d2838c2bbf01ef19d095aba581ece2594d6f703fd723ca013e81a006f1bb9b0b31380c7311c6a94394d0c3799cfa89204196046e1f5910ac4dc755129ee4f99d589ed94b3721e45c521a8ce2cbd6a8950a8667bf0632661f3a00e5267c591112d5568c95cb7cac89e54ed9854a330a6c932ceba3135e775037ab38e9384eb02069e0cc123c3dff03b322b81b479040bfc5bb51a5988838d020861a0f27e621ff60b2a878c5a46ffb074ba1ba1376f0512097dcd2a854dad40d1ea94776530e949059bdfc92071299eb4b2ae9d9216c8b2ea98df581f7c80ea84ec630f7cdfb71d2989c86795a5a7a8f2fa900b12035c23e09d405126e2ad0f8a5824dc1e0100cc9e664f18d6200c42f99e9f946f481f71b59c3ce3bafb12bf4b0b261f9d090b10e332f36c77e0d9f7029783ae537e6e8930e060f7b7893b1c45b1f72570a92a5da8e334e87c5b4e30310bac4c0963ef835f3017d6da7b38a21920f7b3ed271fcb6f295da45909f89b8309d695ea3bdaa23fe9e8ee09ba1bc0056d0faf8d021e590fcd588e5b1fcfcfdde962a08cafdc5a93462a0598923ab9710d6ab8b74375fc45cbf1246fd3c0db1a44b188f82d84ff2f5b9ffde516e5afae8e61d30361b7902e3280afaa9a964689ffe86476e432f5f7500ee029d7c969ad44e9bcc9a33431a6b21d070000000000000007f17444c5b0fb5bba3841cbd4626932901bda7030e4cb0e81caf720190ef6b3baf61f0a80ecddc7cf6f8bfae2135ee09d78fd3b3e39971445bcf6faccf84d5c1dfc6de07be07b7ab4fca0eb200604f21e8c86471435fb4d10385dee7cd87a5c3dacfc7d05eeaf5a687e2560fd462348acf5b5f018bb22eb07f4cc1841fcd478158212bbf6c27226d0e0fa1de0b68379f14e9beeee23071b05599ef468cc3c07de57200638ba55af4e1f66e4ab452e1350ef2584654727f99c24dd575c623f3a282341941d62c0bb544ad0c760ea6dac7719095bd968f8b756c7adb5399c46e20404a92ae95fe963b597207c10fa18926d5079ead101b873d1c01912fb952ef862c0d49f8fe7c00ca5c41409166670da936a116a50ef3888b50137f13f8f7d0b690021ec79aeb2f594ce7838f204a36e19eadf69101bcba7e8419929ae95c1fb72b341b025d619ef34c13ce17fb95b5cd8fdb38a0905a8e31059a348de1b96100521e9aa28b2754d74f3e66d78d4fc577b3facc91c6b3ec731888a68599ce6b7b8f51527a6b4f805a502078b644c23f3151e8d239f28b5df9eb0baf21f783931cd6fbd241ece83ffd28e95ba391ac4627788817dae1bee3d2ba96d9715b7f27b1cb4dfa9e4965efed4175c7f707d59f2274f420c0346bf64145d436b4a6ac00297b2f3ac9ac251e7c111e36dbaa7acf56f0623033ab7b777bfd567f059fa5cb81f1d2cd37d182bbe0b63fbd38308ffe7afa635d1e45ad9e47b7984f0245a18f8d3c1ee119aac8f356dcce6e79fcef0510ecab7b21aac2e62a02e65bec2f1ed07e5fd1cd5606029acd0bf0a03d6f27e7ec516e77356d8f45a773bce41b167ce634e4c41783b0460631b512578ab484e272cdf92198ff4c1f7186c13ff7b6e88b64d9a492cb5fa320e37bc836d7bb87c8330b63053613dc93ec29cfdd383b2a941ef83ff08031aa26adb3f9cdaf8246b58bd54b7d2591a1c9437307c1193b476020e7305876c5d7556bc510a6bde39ff9e70d2a4f765068166f2a0309e7c44f56f743a0a38ce766d8f450f7a2421cde3b25132a0e1cfa2dd56415f054b3af7ae8b4d900d5bbe8f66059725b91235880dada844a2921aa512c7e2e8bb5836c242270af03a5233a4162d2f4b40e5da91078f12dc1cc7799363e6fd1a812084e6b1f555b8f5a111040fe4f9c1aa75b9da845a585ee8eed619d4fb6de9d1059805eae13e9ab5775a16e49a1f8b45e4a7224162cd60b79268748c1664534264072953b7274ecb0cc741ea55c691a405041edda1a12d03594881a11a4fd0e531023cb4ef377266562a7a2dfdfffe7d7c8cdf0e813ea30e090dabfeb2c47f877af68f34717aa6ffe085cf6790871e9df4e6900bf141bb3d22f2aa25a7df47b96307c4f1b89386f94aac5e0c2769f92b95eb9f380b8e025da96184550c40ff019a9c5bfeb1210f57bfb053a1b0e4d61a3f65fe592613cf0dbb76accd92af04bccfca27032a6188ed862879a3e6df3f672bd58fb56a774cfc05000000000000008b4f9b949f410589b78aca7b25f7e0883cc730dc21fb78bc2f58c97bcfba60b1036f1593a3778532660602d8e05e68bd540e98ec9a87746b9ad233fa6013a47c6a3fbf1b1424bb71523ef8a9fae34b3ae232f87a6182de01e6b8f6a38b832b4f66f7f126c39fbd0264ba712e71d95ad4bc2480bb79051fe5bc2e1ed5a439ce3f2ee45b425dce801b490d6e0f1903e9f833c344b661500cc08ed546c680fc9b1e19636e46598c8ae7f21c24b95c6462b4341c8348226ec4d95b88769ccec366cdaf4794e0278f8d0a61c404ee314bdcdaf9be08b4bc05d9e1b1d9cce8d9e06119567919ec038ae3b9709a09c9c674fc0580528daae0968710dde370cbff2aa48185cbb406814d3a0696d858324de5d2e2e7595a6821bc84fd2bc33376bc29b109d37abfbfcf13f57473e78c7dc23be71a174c0b19c9bac81ac1f31751c0f68ac2c79e3ee86129ac548957fc474e2df14182ebe5a2dfa615646bbec8e4edcf19787f13ebc7db9d4c2da108407c4b7f2187acd97d8f6c9b5bab606dc10f61f913ba9640d313b8f4307fb3e65125be10be861284bd9a84736c464d005c16fcdeb01c1888d0bf9b8d11a0a122384110e7868fe43073bd3f082d4994b771d0728094d51a03d5b5749bcc41e35a8f56151eca9d96180dc2b6b3b1d357d089f2792e6304ba6680415d6ff77e55ce3dffce4223d73b48243e93e3d29c1c775ffb825afaf6502cb199d14990b2a5c883a8d78d2c022be7500912c14d3ca0333457e36ff429a198acfb1805939f3c91c28d9ccff9bec44a268d517e17b1443d0f90a723c3d5a040c6afffa8fa30459683cdbb374387ff61904713ed9b63dfd8f290e690337bf80db660c7d6879da132eea405e948d6a8d8dc669795fdfe31101ed41fc30453edb3db556fcb0418ff6f05ada9e96e7e546874cd74cc99adeaf2a66c3ae3cb2fd8507c679568bea62880f9d7777fbcb103d07e734b1eb8610798135f04afa589f49fa1a12e19630106b9372c49789f7a924821ab5aae6a0c6fc7b6d2b4e39fe6e7a4871cdcba9ca9061a153f54ca3b23928fac47c2590a1597b93d84585acd0bc9576ddd9bf84587d139fba81df01ed451d9a34d6895b05e625b12b5e7661b3763efeb3f3a5e9e27365e3ce814e849d6da7b6494d5f9677c4d306ec3f536e94f37de362a173537884c4d07d504a42943282eeaa64686b8d714b66183f760b9c952b36712954df4323b370b4075b8731bd45375d71d4cd4b361d5a9abceb6f31c506898ab7a8c0971e5be8ee11007de1ca0f9cca41038e5c50c17c0c5a433ab361c9350d6f720202204e63af59a2c244e1bbdf25b0eaacd2965f064e6a791f73cc4ee985911974c5a6a48145fde26365262722e0e3c8ac4c36fc7c899265c3235ba655cdaa08a2e1df3c0ed75e2726ab16aa53f0c8f4800eaaa6330121d04e754ab624f48d4d3faac38d0fb4d6cdfeab23b3d15ade6c841da3e43096e28b2c638d7278f18e835d694b8f24372829a03b25070b2a1f2eb31f5f8bf51b51777ed033d5bbdc204cc77bd4b8b2f3c05190d24985c1dca0dead25400ac48892fff9b7a70d9c7bcf0d7395ea0985f38112363e4b0a3bd7ad4e28a9566708feeaf6ae214b3804e8eddb1eb10452363457ac774b76677f5ea29923e4daef44e3504d4dc7f5c67a9cb4d0a692b5b8fe47cfde7baab97adda63c39383fffbf7762185cda71d5bd11eb93295486e5c54956ad0ef679f15a15530ef0f957e6b881c3423e37924053ec79dd941a2c4327475718295db879e2e33d0a639371810992d2858ada14201e70cd4744eef286ba33aa891dab6ea2529d69a678d3401454b2ffffd1269de51ddde43c649ca4893757053e6c72c5881f9d2e9c65241465b6fc4f7562181eb57d78c8e5c8e00", 0x2000, &(0x7f0000000ac0)={&(0x7f0000000500)={0x50, 0x0, 0x6, {0x7, 0x29, 0x10, 0xffffffffe04180d0, 0xa, 0x1, 0x80000414, 0x8000, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000080)={0x6, 0x5, 0xf003, 0x2, 0x66, 0xac, 0xb19b}, 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x3}}, './cgroup.cpu/cgroup.procs\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 1.282279969s ago: executing program 5 (id=6238): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2d, 'net_cls'}, {0x2d, 'memory'}]}, 0x11) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000001080)=""/4096) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000280)={0x0, 0x56595559, 0x0, @stepwise}) pwrite64(r0, &(0x7f0000000000)='a', 0x1, 0x9004) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@private0, @in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0xe8) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x4, 0x1c, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x28, 0x75, 0x70, 0x40, 0x403, 0xf06a, 0x12d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x94, 0xa, 0x0, 0x2d, 0x61, 0x11, 0x1}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r5, 0x83c0550b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) llistxattr(&(0x7f0000000b80)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) lseek(r0, 0x5, 0x4) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2d, 'net_cls'}, {0x2d, 'memory'}]}, 0x11) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) (async) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000001080)=""/4096) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000280)={0x0, 0x56595559, 0x0, @stepwise}) (async) pwrite64(r0, &(0x7f0000000000)='a', 0x1, 0x9004) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@private0, @in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0xe8) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) syz_usb_disconnect(r5) (async) syz_usb_connect(0x4, 0x1c, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x28, 0x75, 0x70, 0x40, 0x403, 0xf06a, 0x12d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x94, 0xa, 0x0, 0x2d, 0x61, 0x11, 0x1}}]}}]}}, 0x0) (async) ioctl$EVIOCRMFF(r5, 0x83c0550b, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) (async) llistxattr(&(0x7f0000000b80)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async) lseek(r0, 0x5, 0x4) (async) 782.499035ms ago: executing program 6 (id=6239): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000007c000000090a010400000000010000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001f380011800e000100636f6e6e6c696d69740003002400028008000240000000010800014000000020080001400000000608000140000080010800034000000004"], 0xc4}}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000000c0)=0x201, 0x4) sendmmsg$inet6(r2, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x40, @mcast2, 0x41}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000040)="b1d28a6141b16af4d088906809c1bc34d5e560a21c72a6c501ac9c3fc12bc77bbe51bc1e9110d66a1e0e72df9d6c5ed48e1a6c83d4d74a4fb1a9b2e4314c953ba3a49005848979e4e836c8cd65ff1c854ff064dff9f741e2927de8c1e9e51f0ce877885cd8f6f934766cebe917c19bff3f5d134fea41d7d3377901", 0x7b}, {&(0x7f0000000300)="896ded433bb25f34fc9394f841581a2d220977e9359c30420dd0227714e8305d0fd2a17db43d1f65728c12015e825efbe3ffc9426e3e6288020000000000000039efc1527483b090052f04fd193411aa8a4fb2556092e7b0bd9c9ed0db6bdd32bd8e88bbd195ff212e4e40666323b9756c2ebc028526932b1f286316eaee68e1f6839297b6ea8116", 0x88}, {&(0x7f0000000140)="1ecbc24f14aaaf3612aa314b3e25026922f5b1f714a271518bc77ccec4f53907b73394d90787581faffb49f4266f32ae153f78b5836f4ee9dbb2992623eb52298f66aaf4f290fc1559128048bffd", 0x4e}, {&(0x7f00000003c0)="6ca5e714e7ddff0999ba63da2909a88a8efcf5b14526815c2a38ea77d22a2584069f8b01a7eb25610ad8d13fcea5dc8c22c14568e495147ac1af602a4f4b77700c6232caf1575b098b129a1c8530790937e399cfd8535c658584c9877bdbb74f0bf26bc383a1d3b4882acb2822ac0ea8d58ad5369af5a008148830cebb283c92d4b4b6f3da97503692bba537029048167fe17959a74db7d2a40bedf2235a6856a207ff1231327b633aca0bd702b2a04950", 0xb1}], 0x4}}], 0x1, 0x800) pipe2$9p(&(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 681.302109ms ago: executing program 5 (id=6240): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) prlimit64(r0, 0xb, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x97) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000440)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}, {&(0x7f00000003c0)="35a63bd80f9b0b64ca6bde00742e418aac515384ca37", 0x16}], 0x3) 321.404347ms ago: executing program 1 (id=6241): socket(0x1, 0x80802, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$phonet(0x23, 0x2, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) (fail_nth: 2) 320.575866ms ago: executing program 5 (id=6242): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000140)='xfs\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100), 0x0, 0x101000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 2.323245ms ago: executing program 1 (id=6243): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x11, r1, 0x10000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r4}, 0x18) r5 = io_uring_setup(0x2104, &(0x7f0000000300)={0x0, 0x80000001, 0x2, 0x3, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x22, 0x20000000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000380)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x2000}, 0xe) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, 0x0, 0x0) ppoll(&(0x7f0000001640)=[{r7, 0x400}], 0x1, &(0x7f00000016c0)={0x0, 0x989680}, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) 0s ago: executing program 6 (id=6244): socket(0x1, 0x80802, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kernel console output (not intermixed with test programs): 0x2b/0x80 [ 1772.893648][T27497] drm_mode_obj_set_property_ioctl+0x410/0x5c0 [ 1772.893675][T27497] drm_ioctl_kernel+0x1f4/0x3e0 [ 1772.893699][T27497] ? __pfx_drm_mode_obj_set_property_ioctl+0x10/0x10 [ 1772.893722][T27497] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1772.893754][T27497] drm_ioctl+0x5c9/0xc30 [ 1772.893783][T27497] ? __pfx_drm_mode_obj_set_property_ioctl+0x10/0x10 [ 1772.893807][T27497] ? __pfx_drm_ioctl+0x10/0x10 [ 1772.893842][T27497] ? selinux_file_ioctl+0x180/0x270 [ 1772.893872][T27497] ? selinux_file_ioctl+0xb4/0x270 [ 1772.893897][T27497] ? __pfx_drm_ioctl+0x10/0x10 [ 1772.893922][T27497] __x64_sys_ioctl+0x18b/0x210 [ 1772.893945][T27497] do_syscall_64+0xcd/0x4c0 [ 1772.893973][T27497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1772.893991][T27497] RIP: 0033:0x7fcb3a58e929 [ 1772.894006][T27497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1772.894022][T27497] RSP: 002b:00007fcb3b46f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1772.894039][T27497] RAX: ffffffffffffffda RBX: 00007fcb3a7b5fa0 RCX: 00007fcb3a58e929 [ 1772.894051][T27497] RDX: 0000200000000300 RSI: 00000000c01864ba RDI: 0000000000000003 [ 1772.894061][T27497] RBP: 00007fcb3b46f090 R08: 0000000000000000 R09: 0000000000000000 [ 1772.894071][T27497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1772.894081][T27497] R13: 0000000000000000 R14: 00007fcb3a7b5fa0 R15: 00007ffed533e208 [ 1772.894108][T27497] [ 1773.171403][ C0] vkms_vblank_simulate: vblank timer overrun [ 1773.597969][ T30] audit: type=1400 audit(2000021065.041:15905): avc: denied { write } for pid=27511 comm="syz.6.5798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1773.629399][T27512] netlink: 'syz.6.5798': attribute type 1 has an invalid length. [ 1774.185894][ T30] audit: type=1326 audit(2000021065.631:15906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27525 comm="syz.2.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb798e929 code=0x7ffc0000 [ 1774.294992][T27514] bond2: entered promiscuous mode [ 1774.300883][T27514] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1774.448379][T27514] bond1: (slave bond2): making interface the new active one [ 1774.467539][ T30] audit: type=1326 audit(2000021065.631:15907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27525 comm="syz.2.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb798e929 code=0x7ffc0000 [ 1774.501465][T27514] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1774.891908][T27521] macsec1: entered promiscuous mode [ 1774.911903][ T30] audit: type=1326 audit(2000021065.631:15908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27525 comm="syz.2.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0eb798e929 code=0x7ffc0000 [ 1774.911915][T27521] bond1: entered promiscuous mode [ 1774.912128][T27521] macsec1: entered allmulticast mode [ 1774.973440][ T30] audit: type=1326 audit(2000021065.631:15909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27525 comm="syz.2.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb798e929 code=0x7ffc0000 [ 1775.012587][T27521] bond1: entered allmulticast mode [ 1775.021744][ T30] audit: type=1326 audit(2000021065.631:15910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27525 comm="syz.2.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb798e929 code=0x7ffc0000 [ 1775.045288][ C0] vkms_vblank_simulate: vblank timer overrun [ 1775.060952][ T30] audit: type=1326 audit(2000021065.651:15911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27525 comm="syz.2.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f0eb798e929 code=0x7ffc0000 [ 1775.091269][ T30] audit: type=1326 audit(2000021065.651:15912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27525 comm="syz.2.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb798e929 code=0x7ffc0000 [ 1775.091285][T27521] bond2: entered allmulticast mode [ 1775.114962][ C0] vkms_vblank_simulate: vblank timer overrun [ 1775.132414][ T30] audit: type=1326 audit(2000021065.651:15913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27525 comm="syz.2.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb798e929 code=0x7ffc0000 [ 1775.452189][T27523] IPVS: Error joining to the multicast group [ 1775.622403][T27547] netlink: 'syz.6.5807': attribute type 58 has an invalid length. [ 1775.743407][T27547] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5807'. [ 1776.267234][T27569] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1777.477267][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888036114000: rx timeout, send abort [ 1777.535858][T27586] netlink: 'syz.5.5820': attribute type 58 has an invalid length. [ 1777.548933][T27586] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5820'. [ 1777.860060][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1777.860076][ T30] audit: type=1400 audit(2000021069.301:15920): avc: denied { append } for pid=27594 comm="syz.5.5823" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1777.924136][ T30] audit: type=1400 audit(2000021069.341:15921): avc: denied { ioctl } for pid=27594 comm="syz.5.5823" path="/dev/usbmon0" dev="devtmpfs" ino=717 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1777.977320][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888036117800: rx timeout, send abort [ 1777.985807][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888036114000: abort rx timeout. Force session deactivation [ 1778.170773][T27600] XFS (nullb0): Invalid superblock magic number [ 1778.421483][T27615] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1778.485650][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888036117800: abort rx timeout. Force session deactivation [ 1778.981342][T27618] XFS (nullb0): Invalid superblock magic number [ 1780.698828][T27640] pim6reg: entered allmulticast mode [ 1780.753800][ T42] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 1780.945344][ T42] usb 1-1: not running at top speed; connect to a high speed hub [ 1780.969676][ T42] usb 1-1: config 1 interface 0 altsetting 239 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1780.996121][T27643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1780.996651][ T42] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1781.013876][ T42] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1781.016704][T27643] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5835'. [ 1781.027649][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.062462][T27643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5835'. [ 1781.078495][ T42] usb 1-1: Product: Ѝ [ 1781.091450][ T42] usb 1-1: Manufacturer: ⻃读涳メ柢緅ড়僳늚쬹㳙㑶옠肅邓妎瓮໙ቤ퓥ꕨ䅲祸㷻셿觢폞괴컡Ⓟᖆ [ 1781.107455][ T42] usb 1-1: SerialNumber: syz [ 1781.129728][T27634] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1781.191992][T27649] trusted_key: encrypted_key: key trusted:8sX not found [ 1781.299285][T27653] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1781.346581][ T42] usb 1-1: USB disconnect, device number 106 [ 1781.883405][ T5833] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1782.113396][ T5833] usb 6-1: Using ep0 maxpacket: 16 [ 1782.136890][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1782.204630][T27664] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1782.615447][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1782.625228][ T5833] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1782.638050][ T5833] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1782.647151][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.680439][ T5833] usb 6-1: config 0 descriptor?? [ 1783.483335][T27673] input: syz0 as /devices/virtual/input/input77 [ 1783.724412][ T5833] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0032/input/input78 [ 1783.756496][T27674] XFS (nullb0): Invalid superblock magic number [ 1783.836040][ T5833] microsoft 0003:045E:07DA.0032: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1784.107476][T27653] netlink: 21 bytes leftover after parsing attributes in process `syz.5.5840'. [ 1784.157757][ T5833] usb 6-1: USB disconnect, device number 42 [ 1785.008039][T27693] netlink: 'syz.6.5851': attribute type 1 has an invalid length. [ 1785.427470][T27693] bond3: entered promiscuous mode [ 1785.450153][ T30] audit: type=1400 audit(2000021076.891:15922): avc: denied { listen } for pid=27702 comm="syz.2.5853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1785.470562][ C1] vkms_vblank_simulate: vblank timer overrun [ 1785.487247][T27693] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1785.637537][T27711] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27711 comm=syz.2.5856 [ 1785.768470][T27711] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=27711 comm=syz.2.5856 [ 1785.879296][T27704] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1785.883644][T27714] serio: Serial port ptm0 [ 1785.897486][T27704] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1785.907895][T27704] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1785.943052][T27704] bond3: (slave ip6gre1): making interface the new active one [ 1785.951222][T27704] ip6gre1: entered promiscuous mode [ 1785.965478][T27704] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 1787.653193][T27747] geneve3: entered promiscuous mode [ 1788.331191][T27751] netlink: 'syz.0.5869': attribute type 20 has an invalid length. [ 1788.339400][ T5819] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1788.603586][ T5819] usb 7-1: device descriptor read/64, error -71 [ 1788.704141][ T5833] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1788.853560][ T5819] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1788.883160][ T5833] usb 1-1: Using ep0 maxpacket: 8 [ 1788.925915][ T5833] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1788.946330][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1788.973353][ T5833] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1788.983333][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.991395][ T5833] usb 1-1: Product: syz [ 1788.995963][ T5833] usb 1-1: Manufacturer: syz [ 1789.001555][ T5833] usb 1-1: SerialNumber: syz [ 1789.033662][ T5819] usb 7-1: device descriptor read/64, error -71 [ 1789.035284][ T5833] usb 1-1: config 0 descriptor?? [ 1789.144318][ T5833] rc_core: IR keymap rc-streamzap not found [ 1789.155626][ T5833] Registered IR keymap rc-empty [ 1789.168866][ T5833] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1789.177515][ T5819] usb usb7-port1: attempt power cycle [ 1789.200493][ T5833] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input79 [ 1789.337089][T27773] serio: Serial port ptm0 [ 1789.393367][T16390] Bluetooth: hci3: command 0x0c1a tx timeout [ 1789.523527][ T5819] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1789.544477][ T5819] usb 7-1: device descriptor read/8, error -71 [ 1789.737620][T16191] usb 1-1: USB disconnect, device number 107 [ 1789.783464][ T5819] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1789.805229][ T5819] usb 7-1: device descriptor read/8, error -71 [ 1789.915149][ T5819] usb usb7-port1: unable to enumerate USB device [ 1790.584487][ T30] audit: type=1800 audit(2000021082.031:15923): pid=27780 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.5877" name="SYSV00000000" dev="hugetlbfs" ino=13 res=0 errno=0 [ 1791.012497][T27791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5881'. [ 1791.226353][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.978159][T27791] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5881'. [ 1792.422140][T27808] netlink: 'syz.2.5885': attribute type 11 has an invalid length. [ 1792.480807][ T5819] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1792.885587][ T30] audit: type=1800 audit(2000021083.951:15924): pid=27810 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.5886" name="bus" dev="overlay" ino=3095 res=0 errno=0 [ 1793.758942][ T5819] usb 1-1: config 3 has an invalid interface number: 71 but max is 0 [ 1793.846851][ T5819] usb 1-1: config 3 has an invalid descriptor of length 131, skipping remainder of the config [ 1793.935131][ T5819] usb 1-1: config 3 has no interface number 0 [ 1793.953273][ T5819] usb 1-1: config 3 interface 71 altsetting 0 endpoint 0x7 has an invalid bInterval 164, changing to 11 [ 1794.061288][ T5819] usb 1-1: config 3 interface 71 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1794.976567][ T5819] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=a7.ac [ 1795.009721][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.029559][ T5819] ati_remote 1-1:3.71: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1795.389206][T19368] usb 1-1: USB disconnect, device number 108 [ 1796.110075][ T30] audit: type=1800 audit(2000021087.551:15925): pid=27833 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.5893" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1796.183569][ T30] audit: type=1800 audit(2000021087.621:15926): pid=27836 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.5894" name="SYSV00000000" dev="hugetlbfs" ino=24 res=0 errno=0 [ 1796.298170][T27839] netlink: 'syz.5.5896': attribute type 11 has an invalid length. [ 1796.677081][T27853] FAULT_INJECTION: forcing a failure. [ 1796.677081][T27853] name failslab, interval 1, probability 0, space 0, times 0 [ 1796.747823][T27853] CPU: 1 UID: 0 PID: 27853 Comm: syz.5.5901 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1796.747841][T27853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1796.747847][T27853] Call Trace: [ 1796.747851][T27853] [ 1796.747856][T27853] dump_stack_lvl+0x16c/0x1f0 [ 1796.747875][T27853] should_fail_ex+0x512/0x640 [ 1796.747889][T27853] ? __kmalloc_noprof+0xbf/0x510 [ 1796.747904][T27853] ? iovec_from_user+0x108/0x140 [ 1796.747918][T27853] should_failslab+0xc2/0x120 [ 1796.747933][T27853] __kmalloc_noprof+0xd2/0x510 [ 1796.747948][T27853] iovec_from_user+0x108/0x140 [ 1796.747964][T27853] __import_iovec+0x88/0x650 [ 1796.747980][T27853] ? __fget_files+0x20e/0x3c0 [ 1796.747995][T27853] import_iovec+0x109/0x140 [ 1796.748012][T27853] __do_sys_vmsplice+0x200/0x1180 [ 1796.748029][T27853] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 1796.748044][T27853] ? get_pid_task+0x106/0x250 [ 1796.748061][T27853] ? find_held_lock+0x2b/0x80 [ 1796.748076][T27853] ? find_held_lock+0x2b/0x80 [ 1796.748088][T27853] ? ksys_write+0x190/0x250 [ 1796.748107][T27853] ? __fget_files+0x20e/0x3c0 [ 1796.748123][T27853] ? fput+0x70/0xf0 [ 1796.748138][T27853] ? ksys_write+0x1ac/0x250 [ 1796.748150][T27853] ? __pfx_ksys_write+0x10/0x10 [ 1796.748165][T27853] ? do_syscall_64+0xcd/0x4c0 [ 1796.748180][T27853] do_syscall_64+0xcd/0x4c0 [ 1796.748196][T27853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.748206][T27853] RIP: 0033:0x7ff62af8e929 [ 1796.748215][T27853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1796.748225][T27853] RSP: 002b:00007ff62be69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1796.748235][T27853] RAX: ffffffffffffffda RBX: 00007ff62b1b5fa0 RCX: 00007ff62af8e929 [ 1796.748242][T27853] RDX: 000000000000000f RSI: 00002000000014c0 RDI: 0000000000000003 [ 1796.748248][T27853] RBP: 00007ff62be69090 R08: 0000000000000000 R09: 0000000000000000 [ 1796.748254][T27853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1796.748260][T27853] R13: 0000000000000000 R14: 00007ff62b1b5fa0 R15: 00007ffe383a03a8 [ 1796.748273][T27853] [ 1797.248212][T27849] XFS (nullb0): Invalid superblock magic number [ 1797.441613][T27862] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1797.734260][T27871] XFS (nullb0): Invalid superblock magic number [ 1798.213446][T16191] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1798.464835][T16191] usb 7-1: config 3 has an invalid interface number: 71 but max is 0 [ 1799.128287][T16191] usb 7-1: config 3 has an invalid descriptor of length 131, skipping remainder of the config [ 1799.536778][ T30] audit: type=1800 audit(2000021090.981:15927): pid=27893 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.5909" name="SYSV00000000" dev="hugetlbfs" ino=25 res=0 errno=0 [ 1799.589324][T16191] usb 7-1: config 3 has no interface number 0 [ 1799.620376][T16191] usb 7-1: config 3 interface 71 altsetting 0 endpoint 0x7 has an invalid bInterval 164, changing to 11 [ 1799.678829][T16191] usb 7-1: config 3 interface 71 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1799.704211][ T30] audit: type=1400 audit(2000021091.151:15928): avc: denied { read } for pid=27895 comm="syz.5.5910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1799.741483][T16191] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=a7.ac [ 1799.795849][T16191] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.971208][ T30] audit: type=1400 audit(2000021091.401:15929): avc: denied { read } for pid=27902 comm="syz.5.5913" path="socket:[114977]" dev="sockfs" ino=114977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1800.062504][T27907] syz!: rxe_newlink: already configured on team_slave_0 [ 1800.472659][T16191] ati_remote 7-1:3.71: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1800.577406][T19368] IPVS: starting estimator thread 0... [ 1800.712020][T27908] IPVS: using max 51 ests per chain, 122400 per kthread [ 1800.743071][T27909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1800.751639][T27909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1800.785813][ T42] usb 7-1: USB disconnect, device number 23 [ 1801.195327][T27914] syz!: rxe_newlink: already configured on team_slave_0 [ 1801.954463][T27918] sctp: [Deprecated]: syz.6.5916 (pid 27918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1801.954463][T27918] Use struct sctp_sack_info instead [ 1802.056147][ T30] audit: type=1400 audit(2000021093.491:15930): avc: denied { connect } for pid=27916 comm="syz.6.5916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1802.326982][T27924] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1804.118915][T27932] syz.5.5921 (27932): drop_caches: 2 [ 1804.203199][T27932] syz.5.5921 (27932): drop_caches: 2 [ 1804.874153][T27937] XFS (nullb0): Invalid superblock magic number [ 1805.693558][ T5819] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1805.709928][T27965] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1805.719028][T27965] overlayfs: missing 'lowerdir' [ 1806.319415][ T5819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1806.335348][ T5819] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1806.352848][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.373198][ T5819] usb 6-1: config 0 descriptor?? [ 1806.825003][ T5819] keytouch 0003:0926:3333.0033: fixing up Keytouch IEC report descriptor [ 1806.883224][ T5819] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0033/input/input80 [ 1807.028428][T27955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1807.432221][T27955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1807.565363][T27955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1807.589217][T27955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1807.672458][ T5819] keytouch 0003:0926:3333.0033: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1808.078783][T16191] usb 6-1: USB disconnect, device number 43 [ 1808.085055][ T5819] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1808.143430][T28011] FAULT_INJECTION: forcing a failure. [ 1808.143430][T28011] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.161148][T28011] CPU: 1 UID: 0 PID: 28011 Comm: syz.1.5945 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1808.161172][T28011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1808.161182][T28011] Call Trace: [ 1808.161187][T28011] [ 1808.161194][T28011] dump_stack_lvl+0x16c/0x1f0 [ 1808.161224][T28011] should_fail_ex+0x512/0x640 [ 1808.161245][T28011] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1808.161270][T28011] should_failslab+0xc2/0x120 [ 1808.161293][T28011] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1808.161313][T28011] ? __pfx___might_resched+0x10/0x10 [ 1808.161333][T28011] ? alloc_vmap_area+0x645/0x29c0 [ 1808.161363][T28011] alloc_vmap_area+0x645/0x29c0 [ 1808.161402][T28011] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1808.161433][T28011] __get_vm_area_node+0x1ca/0x330 [ 1808.161453][T28011] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1808.161471][T28011] ? vhost_task_create+0x1d2/0x2e0 [ 1808.161486][T28011] ? local_lock_release+0x99/0x140 [ 1808.161522][T28011] ? vhost_task_create+0x1d2/0x2e0 [ 1808.161537][T28011] ? rcu_read_unlock+0x17/0x60 [ 1808.161565][T28011] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1808.161581][T28011] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 1808.161615][T28011] ? vhost_task_create+0x1d2/0x2e0 [ 1808.161630][T28011] __vmalloc_node_noprof+0xad/0xf0 [ 1808.161647][T28011] ? vhost_task_create+0x1d2/0x2e0 [ 1808.161667][T28011] copy_process+0x2c70/0x76a0 [ 1808.161701][T28011] ? __pfx_copy_process+0x10/0x10 [ 1808.161725][T28011] ? lockdep_init_map_type+0x5c/0x280 [ 1808.161752][T28011] ? lockdep_init_map_type+0x5c/0x280 [ 1808.161777][T28011] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1808.161802][T28011] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1808.161831][T28011] vhost_task_create+0x1d2/0x2e0 [ 1808.161848][T28011] ? __pfx_vhost_task_create+0x10/0x10 [ 1808.161872][T28011] ? __pfx_vhost_task_fn+0x10/0x10 [ 1808.161901][T28011] kvm_mmu_post_init_vm+0x1b7/0x370 [ 1808.161925][T28011] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 1808.161946][T28011] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 1808.161972][T28011] kvm_vcpu_ioctl+0x5eb/0x1690 [ 1808.161995][T28011] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1808.162023][T28011] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 1808.162049][T28011] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1808.162082][T28011] ? hook_file_ioctl_common+0x145/0x410 [ 1808.162116][T28011] ? selinux_file_ioctl+0x180/0x270 [ 1808.162137][T28011] ? selinux_file_ioctl+0xb4/0x270 [ 1808.162161][T28011] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1808.162182][T28011] __x64_sys_ioctl+0x18b/0x210 [ 1808.162204][T28011] do_syscall_64+0xcd/0x4c0 [ 1808.162232][T28011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.162249][T28011] RIP: 0033:0x7f87efd8e929 [ 1808.162263][T28011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1808.162283][T28011] RSP: 002b:00007f87f0ca0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1808.162300][T28011] RAX: ffffffffffffffda RBX: 00007f87effb5fa0 RCX: 00007f87efd8e929 [ 1808.162311][T28011] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1808.162322][T28011] RBP: 00007f87f0ca0090 R08: 0000000000000000 R09: 0000000000000000 [ 1808.162332][T28011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1808.162342][T28011] R13: 0000000000000000 R14: 00007f87effb5fa0 R15: 00007ffc96cb7118 [ 1808.162366][T28011] [ 1808.495516][T28011] syz.1.5945: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1808.511528][T28011] CPU: 0 UID: 0 PID: 28011 Comm: syz.1.5945 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1808.511552][T28011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1808.511563][T28011] Call Trace: [ 1808.511569][T28011] [ 1808.511576][T28011] dump_stack_lvl+0x16c/0x1f0 [ 1808.511607][T28011] warn_alloc+0x248/0x3a0 [ 1808.511631][T28011] ? __pfx_warn_alloc+0x10/0x10 [ 1808.511655][T28011] ? kfree+0x2b4/0x4d0 [ 1808.511680][T28011] ? __get_vm_area_node+0x208/0x330 [ 1808.511703][T28011] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 1808.511723][T28011] ? local_lock_release+0x99/0x140 [ 1808.511755][T28011] ? vhost_task_create+0x1d2/0x2e0 [ 1808.511773][T28011] ? rcu_read_unlock+0x17/0x60 [ 1808.511802][T28011] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1808.511820][T28011] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 1808.511856][T28011] ? vhost_task_create+0x1d2/0x2e0 [ 1808.511872][T28011] __vmalloc_node_noprof+0xad/0xf0 [ 1808.511891][T28011] ? vhost_task_create+0x1d2/0x2e0 [ 1808.511909][T28011] copy_process+0x2c70/0x76a0 [ 1808.511943][T28011] ? __pfx_copy_process+0x10/0x10 [ 1808.511969][T28011] ? lockdep_init_map_type+0x5c/0x280 [ 1808.511997][T28011] ? lockdep_init_map_type+0x5c/0x280 [ 1808.512023][T28011] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1808.512049][T28011] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1808.512087][T28011] vhost_task_create+0x1d2/0x2e0 [ 1808.512103][T28011] ? __pfx_vhost_task_create+0x10/0x10 [ 1808.512129][T28011] ? __pfx_vhost_task_fn+0x10/0x10 [ 1808.512162][T28011] kvm_mmu_post_init_vm+0x1b7/0x370 [ 1808.512186][T28011] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 1808.512207][T28011] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 1808.512235][T28011] kvm_vcpu_ioctl+0x5eb/0x1690 [ 1808.512258][T28011] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1808.512288][T28011] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 1808.512316][T28011] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1808.512351][T28011] ? hook_file_ioctl_common+0x145/0x410 [ 1808.512386][T28011] ? selinux_file_ioctl+0x180/0x270 [ 1808.512407][T28011] ? selinux_file_ioctl+0xb4/0x270 [ 1808.512431][T28011] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1808.512451][T28011] __x64_sys_ioctl+0x18b/0x210 [ 1808.512471][T28011] do_syscall_64+0xcd/0x4c0 [ 1808.512497][T28011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.512520][T28011] RIP: 0033:0x7f87efd8e929 [ 1808.512535][T28011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1808.512550][T28011] RSP: 002b:00007f87f0ca0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1808.512566][T28011] RAX: ffffffffffffffda RBX: 00007f87effb5fa0 RCX: 00007f87efd8e929 [ 1808.512576][T28011] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1808.512586][T28011] RBP: 00007f87f0ca0090 R08: 0000000000000000 R09: 0000000000000000 [ 1808.512595][T28011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1808.512605][T28011] R13: 0000000000000000 R14: 00007f87effb5fa0 R15: 00007ffc96cb7118 [ 1808.512630][T28011] [ 1808.512636][T28011] Mem-Info: [ 1808.635225][ T5819] usb 1-1: config 0 has no interfaces? [ 1808.659628][T28011] active_anon:22967 inactive_anon:0 isolated_anon:0 [ 1808.659628][T28011] active_file:22083 inactive_file:5284 isolated_file:0 [ 1808.659628][T28011] unevictable:768 dirty:525 writeback:0 [ 1808.659628][T28011] slab_reclaimable:8560 slab_unreclaimable:106669 [ 1808.659628][T28011] mapped:30277 shmem:20598 pagetables:1126 [ 1808.659628][T28011] sec_pagetables:0 bounce:0 [ 1808.659628][T28011] kernel_misc_reclaimable:0 [ 1808.659628][T28011] free:1298460 free_pcp:15910 free_cma:0 [ 1808.781802][T28017] lo speed is unknown, defaulting to 1000 [ 1809.022679][T28011] Node 0 active_anon:103456kB inactive_anon:0kB active_file:88332kB inactive_file:20984kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136728kB dirty:2100kB writeback:0kB shmem:92256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11784kB pagetables:4256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1809.058589][ T5819] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1809.071817][T28011] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1809.158502][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.166887][T28011] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1809.189545][ T5819] usb 1-1: Product: syz [ 1809.196396][T28011] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 1809.205784][T28011] Node 0 DMA32 free:1265836kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:92044kB inactive_anon:0kB active_file:88048kB inactive_file:19960kB unevictable:1536kB writepending:1992kB present:3129332kB managed:2540624kB mlocked:0kB bounce:0kB free_pcp:57740kB local_pcp:34644kB free_cma:0kB [ 1809.215771][ T5819] usb 1-1: Manufacturer: syz [ 1809.270787][ T5819] usb 1-1: SerialNumber: syz [ 1809.277637][T28023] 9pnet_fd: Insufficient options for proto=fd [ 1809.301316][T28011] lowmem_reserve[]: 0 0 1 1 1 [ 1809.302167][ T5819] usb 1-1: config 0 descriptor?? [ 1809.315325][T28011] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:284kB inactive_file:1024kB unevictable:0kB writepending:108kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:52kB local_pcp:24kB free_cma:0kB [ 1809.371162][T28011] lowmem_reserve[]: 0 0 0 0 0 [ 1809.376301][T28011] Node 1 Normal free:3911492kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:152kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:5448kB local_pcp:0kB free_cma:0kB [ 1809.430506][T28011] lowmem_reserve[]: 0 0 0 0 0 [ 1809.436081][T28011] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1809.451113][T28011] Node 0 DMA32: 1197*4kB (UME) 1072*8kB (UME) 660*16kB (UME) 630*32kB (UME) 423*64kB (UME) 241*128kB (UME) 219*256kB (UME) 94*512kB (UME) 39*1024kB (UME) 12*2048kB (UM) 244*4096kB (UM) = 1270132kB [ 1809.472781][T28011] Node 0 Normal: 4*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1809.485405][T28011] Node 1 Normal: 193*4kB (UE) 50*8kB (UE) 35*16kB (UME) 186*32kB (UME) 95*64kB (UME) 31*128kB (UME) 6*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (UM) = 3911492kB [ 1809.535177][T28011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1809.545530][T28030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5950'. [ 1809.584169][T28011] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 1809.604480][T28011] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1809.614705][T28011] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1809.635590][T28011] 47962 total pagecache pages [ 1809.640479][T28011] 0 pages in swap cache [ 1809.644994][T28011] Free swap = 124996kB [ 1809.651371][T28011] Total swap = 124996kB [ 1809.655707][T28011] 2097051 pages RAM [ 1809.662955][T28032] batman_adv: batadv0: Adding interface: dummy0 [ 1809.670367][T28032] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1809.671546][T28011] 0 pages HighMem/MovableOnly [ 1809.701483][T28032] batman_adv: batadv0: Interface activated: dummy0 [ 1809.711433][T28011] 429917 pages reserved [ 1809.716388][T28011] 0 pages cma reserved [ 1809.756309][T28035] Set syz1 is full, maxelem 9 reached [ 1810.666102][T16390] Bluetooth: hci3: unexpected event for opcode 0x2019 [ 1810.739298][ T5819] usb 1-1: USB disconnect, device number 109 [ 1811.740593][T28069] XFS (nullb0): Invalid superblock magic number [ 1811.942672][T28080] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1812.022134][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1812.445054][T28086] netlink: 'syz.5.5966': attribute type 2 has an invalid length. [ 1813.600903][T28092] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1813.621443][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.892894][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.912973][T16390] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1813.920784][T28095] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1813.977635][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1814.081030][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1814.091017][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1814.100577][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1814.108070][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1814.184465][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1814.221723][T28098] lo speed is unknown, defaulting to 1000 [ 1814.667370][ T36] bridge_slave_1: left allmulticast mode [ 1814.700642][ T36] bridge_slave_1: left promiscuous mode [ 1814.964143][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.223482][ T30] audit: type=1800 audit(2000021106.481:15931): pid=28119 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.5973" name="SYSV00000000" dev="hugetlbfs" ino=14 res=0 errno=0 [ 1815.358286][T28112] XFS (nullb0): Invalid superblock magic number [ 1815.401598][ T36] bridge_slave_0: left allmulticast mode [ 1815.435795][ T36] bridge_slave_0: left promiscuous mode [ 1815.451681][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.592308][T28133] FAULT_INJECTION: forcing a failure. [ 1815.592308][T28133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1815.605447][ T30] audit: type=1400 audit(2000021107.031:15932): avc: denied { append } for pid=28131 comm="syz.1.5976" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1815.630624][T28133] CPU: 0 UID: 0 PID: 28133 Comm: syz.1.5976 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1815.630647][T28133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1815.630657][T28133] Call Trace: [ 1815.630663][T28133] [ 1815.630669][T28133] dump_stack_lvl+0x16c/0x1f0 [ 1815.630690][T28133] should_fail_ex+0x512/0x640 [ 1815.630707][T28133] _copy_to_user+0x32/0xd0 [ 1815.630723][T28133] simple_read_from_buffer+0xcb/0x170 [ 1815.630738][T28133] proc_fail_nth_read+0x197/0x270 [ 1815.630752][T28133] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1815.630765][T28133] ? rw_verify_area+0xcf/0x680 [ 1815.630777][T28133] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1815.630789][T28133] vfs_read+0x1e4/0xc60 [ 1815.630804][T28133] ? __pfx___mutex_lock+0x10/0x10 [ 1815.630819][T28133] ? __pfx_vfs_read+0x10/0x10 [ 1815.630835][T28133] ? __fget_files+0x20e/0x3c0 [ 1815.630853][T28133] ksys_read+0x12a/0x250 [ 1815.630865][T28133] ? __pfx_ksys_read+0x10/0x10 [ 1815.630878][T28133] ? fdget+0x187/0x210 [ 1815.630893][T28133] do_syscall_64+0xcd/0x4c0 [ 1815.630910][T28133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.630921][T28133] RIP: 0033:0x7f87efd8d33c [ 1815.630931][T28133] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1815.630941][T28133] RSP: 002b:00007f87f0c7f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1815.630951][T28133] RAX: ffffffffffffffda RBX: 00007f87effb6080 RCX: 00007f87efd8d33c [ 1815.630958][T28133] RDX: 000000000000000f RSI: 00007f87f0c7f0a0 RDI: 000000000000000a [ 1815.630964][T28133] RBP: 00007f87f0c7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1815.630970][T28133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1815.630976][T28133] R13: 0000000000000000 R14: 00007f87effb6080 R15: 00007ffc96cb7118 [ 1815.630990][T28133] [ 1816.134850][T28130] XFS (nullb0): Invalid superblock magic number [ 1816.186461][T16390] Bluetooth: hci4: command tx timeout [ 1816.593449][T16191] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1816.676479][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1816.703816][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1816.741887][ T36] bond0 (unregistering): Released all slaves [ 1816.763352][T16191] usb 1-1: Using ep0 maxpacket: 16 [ 1816.765777][T28150] syz_tun: entered allmulticast mode [ 1816.832643][T28148] syz_tun: left allmulticast mode [ 1816.860236][T16191] usb 1-1: config 0 has an invalid interface number: 4 but max is 1 [ 1816.950472][T16191] usb 1-1: config 0 has an invalid interface number: 4 but max is 1 [ 1816.968622][T16191] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1816.983501][ T36] _Z`Ԁ@: left promiscuous mode [ 1816.996269][T16191] usb 1-1: config 0 has no interface number 0 [ 1817.002524][T16191] usb 1-1: config 0 interface 4 has no altsetting 0 [ 1817.009320][T16191] usb 1-1: config 0 interface 4 has no altsetting 1 [ 1817.016610][T16191] usb 1-1: New USB device found, idVendor=eb1a, idProduct=2750, bcdDevice=e2.82 [ 1817.033266][T16191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.107880][T28098] chnl_net:caif_netlink_parms(): no params data found [ 1818.097438][T16191] usb 1-1: config 0 descriptor?? [ 1818.123927][ T36] IPVS: stopping backup sync thread 27062 ... [ 1818.263738][T16390] Bluetooth: hci4: command tx timeout [ 1818.503532][ T30] audit: type=1800 audit(2000021109.861:15933): pid=28172 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.5985" name="SYSV00000000" dev="hugetlbfs" ino=22 res=0 errno=0 [ 1818.678545][T28098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.751913][T28175] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5986'. [ 1818.791109][T28098] bridge0: port 1(bridge_slave_0) entered disabled state [ 1818.828973][T28098] bridge_slave_0: entered allmulticast mode [ 1818.889807][T28098] bridge_slave_0: entered promiscuous mode [ 1818.992841][T28098] bridge0: port 2(bridge_slave_1) entered blocking state [ 1819.094417][T16191] usb 1-1: string descriptor 0 read error: -71 [ 1819.871616][T28098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1819.879616][T28098] bridge_slave_1: entered allmulticast mode [ 1819.890178][T28098] bridge_slave_1: entered promiscuous mode [ 1819.896445][T16191] usb 1-1: USB disconnect, device number 110 [ 1820.021974][T28098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1820.035749][T28098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1820.069747][ T30] audit: type=1400 audit(2000021111.511:15934): avc: denied { read } for pid=28186 comm="syz.0.5990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1820.094976][T28189] XFS (nullb0): Invalid superblock magic number [ 1820.133252][T28098] team0: Port device team_slave_0 added [ 1820.175649][T28098] team0: Port device team_slave_1 added [ 1820.244195][T28177] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.5987'. [ 1820.325926][T28098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1820.341544][T28098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1820.378027][T16390] Bluetooth: hci4: command tx timeout [ 1820.421026][T28098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1820.443217][ T36] hsr_slave_0: left promiscuous mode [ 1820.449077][ T36] hsr_slave_1: left promiscuous mode [ 1820.474312][ T36] veth1_macvtap: left promiscuous mode [ 1820.480164][ T36] veth0_macvtap: left promiscuous mode [ 1820.486342][ T36] veth1_vlan: left promiscuous mode [ 1820.492101][ T36] veth0_vlan: left promiscuous mode [ 1820.569227][T28199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5991'. [ 1821.252243][T28204] netlink: 'syz.0.5994': attribute type 58 has an invalid length. [ 1821.260250][T28204] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5994'. [ 1822.057196][ T30] audit: type=1800 audit(2000021113.501:15935): pid=28215 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.5996" name="SYSV00000000" dev="hugetlbfs" ino=23 res=0 errno=0 [ 1822.079007][ C1] vkms_vblank_simulate: vblank timer overrun [ 1822.434994][T16390] Bluetooth: hci4: command tx timeout [ 1822.923073][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1822.957574][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1823.129475][T28223] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5999'. [ 1823.167345][T14860] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1823.181051][T28224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=28224 comm=syz.1.5999 [ 1823.323489][T14860] usb 7-1: Using ep0 maxpacket: 8 [ 1823.330035][T14860] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1823.342219][T14860] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1823.355055][T14860] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1823.369393][T14860] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1823.380721][T14860] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1823.392335][T14860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.401512][T28098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1823.409439][T14860] hub 7-1:1.0: bad descriptor, ignoring hub [ 1823.410122][T28098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1823.415479][T14860] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1823.452997][T14860] cdc_wdm 7-1:1.0: skipping garbage [ 1823.459483][T28098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1823.477079][T14860] cdc_wdm 7-1:1.0: skipping garbage [ 1823.501631][T14860] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1823.508826][T14860] cdc_wdm 7-1:1.0: Unknown control protocol [ 1823.550190][T28228] netlink: 'syz.5.6000': attribute type 1 has an invalid length. [ 1823.563364][T28228] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6000'. [ 1823.587960][T28098] hsr_slave_0: entered promiscuous mode [ 1823.608202][T28098] hsr_slave_1: entered promiscuous mode [ 1823.624211][T28098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1823.633547][T28098] Cannot create hsr debugfs directory [ 1823.830743][T28236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1823.846271][T28236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1823.859326][T28238] XFS (nullb0): Invalid superblock magic number [ 1824.786766][T28253] FAULT_INJECTION: forcing a failure. [ 1824.786766][T28253] name failslab, interval 1, probability 0, space 0, times 0 [ 1824.799725][T28253] CPU: 1 UID: 0 PID: 28253 Comm: syz.5.6006 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1824.799748][T28253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1824.799757][T28253] Call Trace: [ 1824.799764][T28253] [ 1824.799770][T28253] dump_stack_lvl+0x16c/0x1f0 [ 1824.799800][T28253] should_fail_ex+0x512/0x640 [ 1824.799823][T28253] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1824.799848][T28253] should_failslab+0xc2/0x120 [ 1824.799872][T28253] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1824.799893][T28253] ? __asan_memcpy+0x3c/0x60 [ 1824.799910][T28253] ? alloc_pid+0xc7/0xbc0 [ 1824.799940][T28253] alloc_pid+0xc7/0xbc0 [ 1824.799980][T28253] copy_process+0x466f/0x76a0 [ 1824.800017][T28253] ? __pfx_copy_process+0x10/0x10 [ 1824.800044][T28253] ? lockdep_init_map_type+0x5c/0x280 [ 1824.800073][T28253] ? lockdep_init_map_type+0x5c/0x280 [ 1824.800100][T28253] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1824.800124][T28253] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1824.800158][T28253] vhost_task_create+0x1d2/0x2e0 [ 1824.800175][T28253] ? __pfx_vhost_task_create+0x10/0x10 [ 1824.800200][T28253] ? __pfx_vhost_task_fn+0x10/0x10 [ 1824.800231][T28253] kvm_mmu_post_init_vm+0x1b7/0x370 [ 1824.800254][T28253] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 1824.800275][T28253] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 1824.800303][T28253] kvm_vcpu_ioctl+0x5eb/0x1690 [ 1824.800327][T28253] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1824.800355][T28253] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 1824.800382][T28253] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1824.800415][T28253] ? hook_file_ioctl_common+0x145/0x410 [ 1824.800450][T28253] ? selinux_file_ioctl+0x180/0x270 [ 1824.800472][T28253] ? selinux_file_ioctl+0xb4/0x270 [ 1824.800497][T28253] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1824.800519][T28253] __x64_sys_ioctl+0x18b/0x210 [ 1824.800542][T28253] do_syscall_64+0xcd/0x4c0 [ 1824.800570][T28253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.800587][T28253] RIP: 0033:0x7ff62af8e929 [ 1824.800602][T28253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1824.800618][T28253] RSP: 002b:00007ff62be69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1824.800634][T28253] RAX: ffffffffffffffda RBX: 00007ff62b1b5fa0 RCX: 00007ff62af8e929 [ 1824.800645][T28253] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1824.800656][T28253] RBP: 00007ff62be69090 R08: 0000000000000000 R09: 0000000000000000 [ 1824.800665][T28253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1824.800675][T28253] R13: 0000000000000000 R14: 00007ff62b1b5fa0 R15: 00007ffe383a03a8 [ 1824.800700][T28253] [ 1825.068433][ C1] vkms_vblank_simulate: vblank timer overrun [ 1825.277078][T28098] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1825.308891][T28098] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1825.323787][T28098] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1825.338672][T28098] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1825.758880][ T30] audit: type=1400 audit(2000021117.201:15936): avc: denied { read } for pid=28261 comm="syz.0.6008" path="socket:[115898]" dev="sockfs" ino=115898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1825.782431][ C1] vkms_vblank_simulate: vblank timer overrun [ 1825.860718][T28098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1825.885496][T28098] 8021q: adding VLAN 0 to HW filter on device team0 [ 1825.899891][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 1825.907026][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1826.269697][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 1826.276873][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1826.428958][ T5833] usb 7-1: USB disconnect, device number 24 [ 1826.469745][T28098] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1826.540823][T28098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1826.873691][T28280] program syz.5.6010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1826.883084][T28280] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1827.251298][T28284] wg1: entered promiscuous mode [ 1827.256182][T28284] wg1: entered allmulticast mode [ 1827.306309][ T5833] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1827.625872][ T5833] usb 7-1: config 0 has an invalid descriptor of length 61, skipping remainder of the config [ 1827.682458][ T5833] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1827.702137][ T5833] usb 7-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 1827.737679][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.773139][ T5833] usb 7-1: Product: syz [ 1827.786884][ T5833] usb 7-1: Manufacturer: syz [ 1827.791459][ T5833] usb 7-1: SerialNumber: syz [ 1827.811518][ T5833] usb 7-1: config 0 descriptor?? [ 1827.890584][ T42] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1827.914265][T28098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1828.003934][T28301] FAULT_INJECTION: forcing a failure. [ 1828.003934][T28301] name failslab, interval 1, probability 0, space 0, times 0 [ 1828.016714][T28301] CPU: 1 UID: 0 PID: 28301 Comm: syz.1.6016 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1828.016739][T28301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1828.016749][T28301] Call Trace: [ 1828.016756][T28301] [ 1828.016762][T28301] dump_stack_lvl+0x16c/0x1f0 [ 1828.016792][T28301] should_fail_ex+0x512/0x640 [ 1828.016813][T28301] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1828.016839][T28301] should_failslab+0xc2/0x120 [ 1828.016864][T28301] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1828.016884][T28301] ? __pfx_map_id_range_down+0x10/0x10 [ 1828.016904][T28301] ? prepare_creds+0x2c/0x7d0 [ 1828.016925][T28301] prepare_creds+0x2c/0x7d0 [ 1828.016942][T28301] __sys_setregid+0x101/0x910 [ 1828.016961][T28301] ? rcu_is_watching+0x12/0xc0 [ 1828.016984][T28301] do_syscall_64+0xcd/0x4c0 [ 1828.017012][T28301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1828.017030][T28301] RIP: 0033:0x7f87efd8e929 [ 1828.017044][T28301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1828.017064][T28301] RSP: 002b:00007f87f0c5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 1828.017080][T28301] RAX: ffffffffffffffda RBX: 00007f87effb6160 RCX: 00007f87efd8e929 [ 1828.017092][T28301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 1828.017102][T28301] RBP: 00007f87f0c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 1828.017113][T28301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1828.017123][T28301] R13: 0000000000000000 R14: 00007f87effb6160 R15: 00007ffc96cb7118 [ 1828.017146][T28301] [ 1828.360288][T28278] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6011'. [ 1828.367990][T28098] veth0_vlan: entered promiscuous mode [ 1828.407367][ T42] usb 6-1: config 3 has an invalid interface number: 71 but max is 0 [ 1828.415817][ T42] usb 6-1: config 3 has an invalid descriptor of length 131, skipping remainder of the config [ 1828.428107][ T42] usb 6-1: config 3 has no interface number 0 [ 1828.432482][T28098] veth1_vlan: entered promiscuous mode [ 1828.434222][ T42] usb 6-1: config 3 interface 71 altsetting 0 endpoint 0x7 has an invalid bInterval 164, changing to 11 [ 1828.453556][ T42] usb 6-1: config 3 interface 71 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1828.844651][ T42] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=a7.ac [ 1828.853846][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.927689][T28098] veth0_macvtap: entered promiscuous mode [ 1828.946977][T28098] veth1_macvtap: entered promiscuous mode [ 1828.955072][ T42] ati_remote 6-1:3.71: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1828.970673][T28098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1829.025870][T28098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1829.066590][T28098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.105410][T28098] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.172233][T28098] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.185885][T28288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1829.200207][T28288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1829.200264][T28098] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.328839][T14860] usb 6-1: USB disconnect, device number 44 [ 1829.888764][ T5833] usb 7-1: USB disconnect, device number 25 [ 1829.894888][T23876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1829.894904][T23876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1830.203572][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1830.221574][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1830.472659][T28328] netlink: 'syz.0.6022': attribute type 1 has an invalid length. [ 1831.294505][T28328] bond5: entered promiscuous mode [ 1831.305570][T28328] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1832.050150][ T30] audit: type=1400 audit(2000021123.041:15937): avc: denied { accept } for pid=28341 comm="syz.2.6025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1833.227264][T28359] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1833.283688][ T42] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1834.126177][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1834.155576][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1834.238752][ T42] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1834.257779][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.271795][ T42] usb 7-1: config 0 descriptor?? [ 1834.566736][T28371] syz!: rxe_newlink: already configured on team_slave_0 [ 1835.067215][T28373] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1835.074646][T28373] overlayfs: failed to set xattr on upper [ 1835.087344][T28373] overlayfs: ...falling back to redirect_dir=nofollow. [ 1835.094341][T28373] overlayfs: ...falling back to index=off. [ 1835.132694][T28373] overlayfs: ...falling back to uuid=null. [ 1836.191861][ T30] audit: type=1400 audit(2000021126.481:15938): avc: denied { mount } for pid=28364 comm="syz.5.6032" name="/" dev="ramfs" ino=117628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1837.683797][ T30] audit: type=1400 audit(2000021126.491:15939): avc: denied { mounton } for pid=28364 comm="syz.5.6032" path="/bus" dev="ramfs" ino=117631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1837.713428][ T42] usbhid 7-1:0.0: can't add hid device: -71 [ 1837.719450][ T42] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1837.731017][ T42] usb 7-1: USB disconnect, device number 26 [ 1837.808053][ T30] audit: type=1400 audit(2000021129.251:15940): avc: denied { getopt } for pid=28377 comm="syz.0.6034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1838.199370][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1838.220625][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1838.231305][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1838.239895][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1838.249429][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1838.258403][T28387] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1838.646181][ T30] audit: type=1326 audit(2000021129.821:15941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28385 comm="syz.2.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f45ddb858e7 code=0x7ffc0000 [ 1838.738820][ T30] audit: type=1326 audit(2000021129.921:15942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28385 comm="syz.2.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f45ddb2ab19 code=0x7ffc0000 [ 1838.771360][ T30] audit: type=1326 audit(2000021129.921:15943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28385 comm="syz.2.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f45ddb858e7 code=0x7ffc0000 [ 1838.802392][T17031] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1838.847877][ T30] audit: type=1326 audit(2000021129.921:15944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28385 comm="syz.2.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f45ddb2ab19 code=0x7ffc0000 [ 1838.873639][ T30] audit: type=1326 audit(2000021129.921:15945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28385 comm="syz.2.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f45ddb858e7 code=0x7ffc0000 [ 1838.898723][ T30] audit: type=1326 audit(2000021129.921:15946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28385 comm="syz.2.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f45ddb2ab19 code=0x7ffc0000 [ 1838.938866][T17031] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1838.952093][ T30] audit: type=1326 audit(2000021129.921:15947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28385 comm="syz.2.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f45ddb858e7 code=0x7ffc0000 [ 1838.953352][ T5819] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1839.147069][T17031] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1839.177892][ T30] audit: type=1326 audit(2000021129.921:15948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28385 comm="syz.2.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f45ddb2ab19 code=0x7ffc0000 [ 1839.458514][T28403] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1839.879989][ T5819] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1839.926143][T17031] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.215437][T17031] bridge_slave_1: left allmulticast mode [ 1840.231937][T17031] bridge_slave_1: left promiscuous mode [ 1840.250260][T17031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1840.293359][ T5819] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1840.303210][T17031] bridge_slave_0: left allmulticast mode [ 1840.311645][T17031] bridge_slave_0: left promiscuous mode [ 1840.326649][T17031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1840.341057][ T5819] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1840.350665][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1840.390827][ T5819] usb 6-1: SerialNumber: syz [ 1840.487787][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1840.502446][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1840.513183][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1840.521941][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1840.531774][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1842.466013][ T5819] usb 6-1: unknown interface protocol 0x1, assuming v1 [ 1842.501352][ T5819] usb 6-1: cannot find UAC_HEADER [ 1842.629795][ T5821] Bluetooth: hci2: command tx timeout [ 1842.657709][ T5819] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1843.158448][ T5819] usb 6-1: USB disconnect, device number 45 [ 1843.227387][T17031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1843.242503][T17031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1843.265805][T17031] bond0 (unregistering): Released all slaves [ 1843.281821][T17031] bond1 (unregistering): Released all slaves [ 1843.313189][T28426] @: renamed from vlan0 (while UP) [ 1843.448958][T28418] lo speed is unknown, defaulting to 1000 [ 1843.733209][T28441] syz!: rxe_newlink: already configured on team_slave_0 [ 1843.841327][T17031] tipc: Disabling bearer [ 1843.851001][T17031] tipc: Left network mode [ 1844.623729][ T5833] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1844.673400][ T5821] Bluetooth: hci2: command tx timeout [ 1844.795731][ T5833] usb 3-1: Using ep0 maxpacket: 8 [ 1844.803592][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1844.822365][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1844.846671][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1844.879742][ T5833] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 1844.898103][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.920265][T17031] hsr_slave_0: left promiscuous mode [ 1844.929218][T17031] hsr_slave_1: left promiscuous mode [ 1844.932332][ T5833] usb 3-1: Product: syz [ 1844.935323][T17031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1844.943690][ T5833] usb 3-1: Manufacturer: syz [ 1844.949720][T17031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1844.983311][ T5833] usb 3-1: SerialNumber: syz [ 1844.991564][T17031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1845.003654][T17031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1845.004139][ T5833] usb 3-1: config 0 descriptor?? [ 1845.035361][T14860] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1845.041492][T17031] veth1_macvtap: left promiscuous mode [ 1845.049477][T17031] veth0_macvtap: left promiscuous mode [ 1845.059626][T17031] veth1_vlan: left promiscuous mode [ 1845.066586][T17031] veth0_vlan: left promiscuous mode [ 1845.213520][T14860] usb 1-1: Using ep0 maxpacket: 8 [ 1845.340432][T14860] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1845.462633][T14860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.520491][T14860] usb 1-1: Product: syz [ 1845.526348][T14860] usb 1-1: Manufacturer: syz [ 1845.531314][T14860] usb 1-1: SerialNumber: syz [ 1845.541981][T14860] usb 1-1: config 0 descriptor?? [ 1845.554619][T14860] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1845.568122][T14860] usb 1-1: setting power ON [ 1845.573014][T14860] dvb-usb: bulk message failed: -22 (2/0) [ 1845.594234][T14860] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1845.612319][T14860] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1845.623127][T14860] usb 1-1: media controller created [ 1845.677930][T28449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6052'. [ 1845.695103][T14860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1845.703382][T28449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6052'. [ 1845.712277][T28449] netlink: 'syz.2.6052': attribute type 11 has an invalid length. [ 1845.736831][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 1845.736845][ T30] audit: type=1400 audit(2000021137.181:16021): avc: denied { ioctl } for pid=28447 comm="syz.2.6052" path="socket:[118040]" dev="sockfs" ino=118040 ioctlcmd=0x4b67 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1845.769474][T14860] usb 1-1: selecting invalid altsetting 6 [ 1845.789391][T14860] usb 1-1: digital interface selection failed (-22) [ 1845.801217][T28462] dvb-usb: bulk message failed: -22 (3/0) [ 1845.807928][T14860] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1845.821685][T28462] dvb-usb: bulk message failed: -22 (4/0) [ 1845.833456][T28462] cxusb: i2c read failed [ 1845.869541][T14860] usb 1-1: setting power OFF [ 1845.884028][T14860] dvb-usb: bulk message failed: -22 (2/0) [ 1845.889931][T14860] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1845.900984][T14860] (NULL device *): no alternate interface [ 1846.148976][T28475] XFS (nullb0): Invalid superblock magic number [ 1846.754154][ T5821] Bluetooth: hci2: command tx timeout [ 1846.789714][T28487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6061'. [ 1846.806180][T28487] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6061'. [ 1847.148023][T14860] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1847.160375][T14860] usb 1-1: USB disconnect, device number 111 [ 1847.520584][T17031] team0 (unregistering): Port device team_slave_1 removed [ 1847.569330][T17031] team0 (unregistering): Port device team_slave_0 removed [ 1847.989856][ T5833] usb 3-1: USB disconnect, device number 103 [ 1848.006678][T28418] chnl_net:caif_netlink_parms(): no params data found [ 1848.823499][ T5821] Bluetooth: hci2: command tx timeout [ 1848.889347][T28502] XFS (nullb0): Invalid superblock magic number [ 1848.893880][T28509] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1848.893880][T28509] program syz.0.6066 not setting count and/or reply_len properly [ 1848.917709][T28418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1848.925195][T28418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1848.942461][T28418] bridge_slave_0: entered allmulticast mode [ 1848.978476][T28418] bridge_slave_0: entered promiscuous mode [ 1849.038840][T28418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1849.048062][T28418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1849.055557][T28418] bridge_slave_1: entered allmulticast mode [ 1849.056891][T28418] bridge_slave_1: entered promiscuous mode [ 1849.133119][T28418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1849.162747][T28418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1849.271333][T28418] team0: Port device team_slave_0 added [ 1849.293739][T28418] team0: Port device team_slave_1 added [ 1849.356508][T17031] IPVS: stop unused estimator thread 0... [ 1849.398348][T28418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1849.407509][T28418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1849.445599][T28519] XFS (nullb0): Invalid superblock magic number [ 1849.473133][T28418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1849.528020][T28418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1849.537813][T28418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1849.563348][ T5819] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1849.705047][T28418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1849.749883][T28418] hsr_slave_0: entered promiscuous mode [ 1849.756145][T28418] hsr_slave_1: entered promiscuous mode [ 1849.762292][T28418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1849.769866][T28418] Cannot create hsr debugfs directory [ 1849.885500][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1849.902744][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1849.918090][ T5819] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1849.928667][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1849.968928][ T5819] usb 1-1: config 0 descriptor?? [ 1850.089909][T28532] XFS (nullb0): Invalid superblock magic number [ 1850.209717][T28521] batman_adv: batadv0: Interface deactivated: dummy0 [ 1850.243551][T28521] batman_adv: batadv0: Removing interface: dummy0 [ 1850.254688][T28521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1850.262966][T28521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1850.287645][T28521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1850.320268][T28521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1850.332765][ T30] audit: type=1326 audit(2000021141.771:16022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28543 comm="syz.5.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62af8e929 code=0x7ffc0000 [ 1850.371778][T28546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1850.415842][ T30] audit: type=1326 audit(2000021141.771:16023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28543 comm="syz.5.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62af8e929 code=0x7ffc0000 [ 1850.432494][T28546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1850.588789][ T30] audit: type=1326 audit(2000021141.801:16024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28543 comm="syz.5.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff62af8e929 code=0x7ffc0000 [ 1850.682344][T28546] binder: 28520:28546 ioctl c0306201 200000000480 returned -14 [ 1850.818231][ T30] audit: type=1326 audit(2000021141.801:16025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28543 comm="syz.5.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62af8e929 code=0x7ffc0000 [ 1852.488567][ T30] audit: type=1326 audit(2000021141.801:16026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28543 comm="syz.5.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62af8e929 code=0x7ffc0000 [ 1852.763466][ T30] audit: type=1326 audit(2000021141.801:16027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28543 comm="syz.5.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ff62af8e929 code=0x7ffc0000 [ 1852.787014][ C1] vkms_vblank_simulate: vblank timer overrun [ 1852.793527][ T30] audit: type=1326 audit(2000021141.801:16028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28543 comm="syz.5.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62af8e929 code=0x7ffc0000 [ 1852.817201][ C1] vkms_vblank_simulate: vblank timer overrun [ 1852.824078][ T30] audit: type=1326 audit(2000021141.801:16029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28543 comm="syz.5.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62af8e929 code=0x7ffc0000 [ 1852.848341][ T30] audit: type=1326 audit(2000021141.801:16030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28543 comm="syz.5.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7ff62af8e929 code=0x7ffc0000 [ 1852.871858][ C1] vkms_vblank_simulate: vblank timer overrun [ 1852.878408][ T30] audit: type=1326 audit(2000021141.801:16031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28543 comm="syz.5.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62af8e929 code=0x7ffc0000 [ 1852.901923][ C1] vkms_vblank_simulate: vblank timer overrun [ 1852.919680][ T5819] usbhid 1-1:0.0: can't add hid device: -71 [ 1852.930061][ T5819] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1852.948542][ T5819] usb 1-1: USB disconnect, device number 112 [ 1852.955248][ T30] audit: type=1326 audit(2000021141.801:16032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28543 comm="syz.5.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62af8e929 code=0x7ffc0000 [ 1852.962905][T28418] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1852.992639][ T30] audit: type=1326 audit(2000021141.801:16033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28543 comm="syz.5.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff62af8e929 code=0x7ffc0000 [ 1853.016075][ C1] vkms_vblank_simulate: vblank timer overrun [ 1853.030813][T28565] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6077'. [ 1853.032563][T28418] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1853.058855][T28418] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1853.073016][T28418] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1853.163800][ T30] audit: type=1326 audit(2000021141.801:16034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28543 comm="syz.5.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62af8e929 code=0x7ffc0000 [ 1853.187337][ C1] vkms_vblank_simulate: vblank timer overrun [ 1853.193504][T12494] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1853.347918][T28418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1853.373867][T12494] usb 3-1: Using ep0 maxpacket: 16 [ 1853.379918][T28418] 8021q: adding VLAN 0 to HW filter on device team0 [ 1853.404097][T12494] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1853.421363][T12494] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1853.440956][T12494] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1853.486904][T18318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1853.493989][T18318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1853.545328][T12494] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.574629][ T5819] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1853.766484][T18318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1853.773605][T18318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1853.804107][T12494] usb 3-1: Product: syz [ 1853.813880][T12494] usb 3-1: Manufacturer: syz [ 1853.818500][T12494] usb 3-1: SerialNumber: syz [ 1853.963819][ T5819] usb 7-1: Using ep0 maxpacket: 8 [ 1853.979823][ T5819] usb 7-1: config 24 has an invalid interface number: 186 but max is 0 [ 1854.022382][ T5819] usb 7-1: config 24 has no interface number 0 [ 1854.084506][ T5819] usb 7-1: config 24 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1854.129388][T28593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.138624][ T5819] usb 7-1: config 24 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1854.159115][ T5819] usb 7-1: config 24 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1854.171444][T28593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.200691][ T5819] usb 7-1: config 24 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1854.216866][T12494] usb 3-1: 0:2 : does not exist [ 1854.344461][ T5819] usb 7-1: config 24 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1854.365297][T12494] usb 3-1: USB disconnect, device number 104 [ 1854.383070][ T5819] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1854.395816][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.406262][ T5819] usb 7-1: Product: syz [ 1854.425620][ T5819] usb 7-1: Manufacturer: syz [ 1854.443363][ T5819] usb 7-1: SerialNumber: syz [ 1854.488710][T28418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1854.535661][T28418] veth0_vlan: entered promiscuous mode [ 1854.550654][T28418] veth1_vlan: entered promiscuous mode [ 1854.581135][T28418] veth0_macvtap: entered promiscuous mode [ 1854.591000][T28418] veth1_macvtap: entered promiscuous mode [ 1854.604614][T11157] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1854.611222][T28418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1854.630633][T28418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1854.643054][T28418] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.654989][T28418] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.656684][ T5819] iowarrior 7-1:24.186: IOWarrior product=0x1505, serial=㻹邓ī interface=186 now attached to iowarrior0 [ 1854.667035][T28418] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.688089][T28418] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.757592][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1854.771645][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1854.784692][T11157] usb 6-1: config 3 has an invalid interface number: 71 but max is 0 [ 1854.792773][T11157] usb 6-1: config 3 has an invalid descriptor of length 131, skipping remainder of the config [ 1854.953810][ T5833] usb 7-1: USB disconnect, device number 27 [ 1854.981387][T11157] usb 6-1: config 3 has no interface number 0 [ 1854.999788][T11157] usb 6-1: config 3 interface 71 altsetting 0 endpoint 0x7 has an invalid bInterval 164, changing to 11 [ 1855.002145][T17031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1855.019830][T17031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1855.024066][T11157] usb 6-1: config 3 interface 71 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1855.177119][T28605] IPVS: Error joining to the multicast group [ 1855.672005][T11157] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=a7.ac [ 1856.177845][T11157] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1856.295340][T11157] ati_remote 6-1:3.71: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1856.905718][T28595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1856.975558][T28595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1857.027335][ T5833] usb 6-1: USB disconnect, device number 46 [ 1858.023577][T14860] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1858.223404][T28642] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1858.624181][T14860] usb 3-1: config 3 has an invalid interface number: 71 but max is 0 [ 1858.722843][T14860] usb 3-1: config 3 has an invalid descriptor of length 131, skipping remainder of the config [ 1858.736220][T14860] usb 3-1: config 3 has no interface number 0 [ 1858.748814][T14860] usb 3-1: config 3 interface 71 altsetting 0 endpoint 0x7 has an invalid bInterval 164, changing to 11 [ 1858.771671][T14860] usb 3-1: config 3 interface 71 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1858.799779][T14860] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=a7.ac [ 1858.818358][T14860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.917099][T14860] ati_remote 3-1:3.71: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1859.129887][T28629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1859.883744][T28629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1859.944979][T28321] usb 3-1: USB disconnect, device number 105 [ 1860.074783][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1860.074821][ T30] audit: type=1800 audit(2000021151.521:16040): pid=28653 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.6096" name="SYSV00000000" dev="hugetlbfs" ino=15 res=0 errno=0 [ 1860.324578][T28648] netlink: 'syz.6.6095': attribute type 58 has an invalid length. [ 1860.332448][T28648] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6095'. [ 1860.502548][T16390] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1860.531874][T16390] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1860.541366][T16390] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1860.551588][T16390] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1860.559485][T16390] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1860.752475][T28661] lo speed is unknown, defaulting to 1000 [ 1861.424733][T28321] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 1861.613536][T28321] usb 3-1: device descriptor read/64, error -71 [ 1862.331284][T28321] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 1862.378530][T27490] syz_tun (unregistering): left allmulticast mode [ 1862.503417][T28321] usb 3-1: device descriptor read/64, error -71 [ 1862.604474][T16390] Bluetooth: hci5: command tx timeout [ 1862.643400][T28321] usb usb3-port1: attempt power cycle [ 1862.787422][ T2945] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1862.812381][T28691] netlink: 'syz.5.6107': attribute type 1 has an invalid length. [ 1862.940975][ T30] audit: type=1800 audit(2000021154.381:16041): pid=28697 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.6108" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1862.944576][T28691] bond2: entered promiscuous mode [ 1862.962675][ C0] vkms_vblank_simulate: vblank timer overrun [ 1862.974647][T12494] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1863.068552][T28691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1863.163430][T12494] usb 7-1: Using ep0 maxpacket: 32 [ 1863.200747][T12494] usb 7-1: config 0 has an invalid interface number: 239 but max is 0 [ 1863.218185][ T2945] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.232532][T12494] usb 7-1: config 0 has an invalid descriptor of length 117, skipping remainder of the config [ 1863.248673][T12494] usb 7-1: config 0 has no interface number 0 [ 1863.253448][T28321] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 1863.259290][T12494] usb 7-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1863.281464][T12494] usb 7-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1863.316226][T12494] usb 7-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1863.332663][T28321] usb 3-1: device descriptor read/8, error -71 [ 1863.348276][ T2945] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.355590][T12494] usb 7-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 1863.372673][T12494] usb 7-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1863.383227][T12494] usb 7-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1863.393244][T28661] chnl_net:caif_netlink_parms(): no params data found [ 1863.395934][T12494] usb 7-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 103, changing to 10 [ 1863.415318][T12494] usb 7-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid maxpacket 25391, setting to 1024 [ 1863.426845][T12494] usb 7-1: config 0 interface 239 has no altsetting 0 [ 1863.435468][T12494] usb 7-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1863.444658][T12494] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.448673][ T2945] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.452681][T12494] usb 7-1: Product: syz [ 1863.469058][T12494] usb 7-1: Manufacturer: syz [ 1863.473718][T12494] usb 7-1: SerialNumber: syz [ 1863.480564][T12494] usb 7-1: config 0 descriptor?? [ 1863.486496][T28688] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1863.494007][T28688] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1863.559903][T28661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1863.567096][T28661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1863.575975][T28661] bridge_slave_0: entered allmulticast mode [ 1863.583250][T28661] bridge_slave_0: entered promiscuous mode [ 1863.591678][T28661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1863.598793][T28321] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1863.606675][T28661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1863.614014][T28661] bridge_slave_1: entered allmulticast mode [ 1863.620927][T28661] bridge_slave_1: entered promiscuous mode [ 1863.642940][T28321] usb 3-1: device descriptor read/8, error -71 [ 1863.668836][T28661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1863.680194][T28661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1863.745688][T28661] team0: Port device team_slave_0 added [ 1863.753822][T28321] usb usb3-port1: unable to enumerate USB device [ 1863.777493][T28661] team0: Port device team_slave_1 added [ 1864.663752][ T5821] Bluetooth: hci5: command tx timeout [ 1865.543411][ T5821] Bluetooth: hci1: command 0x0c03 tx timeout [ 1865.683543][T16390] Bluetooth: hci1: BCM: Reset failed (-110) [ 1866.008569][ T2945] bridge_slave_1: left allmulticast mode [ 1866.020929][ T2945] bridge_slave_1: left promiscuous mode [ 1866.028050][ T2945] bridge0: port 2(bridge_slave_1) entered disabled state [ 1866.507828][T28717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1866.516976][T28717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1866.519963][ T2945] bridge_slave_0: left allmulticast mode [ 1866.531164][ T2945] bridge_slave_0: left promiscuous mode [ 1866.536785][ T30] audit: type=1326 audit(2000021157.981:16042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28710 comm="syz.5.6111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62af8e929 code=0x7ffc0000 [ 1866.537911][ T2945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1866.748439][ T30] audit: type=1326 audit(2000021157.981:16043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28710 comm="syz.5.6111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff62af8e929 code=0x7ffc0000 [ 1866.772413][T16390] Bluetooth: hci5: command tx timeout [ 1866.981738][ T30] audit: type=1326 audit(2000021157.981:16044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28710 comm="syz.5.6111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62af8e929 code=0x7ffc0000 [ 1867.006536][ T30] audit: type=1326 audit(2000021157.981:16045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28710 comm="syz.5.6111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62af8e929 code=0x7ffc0000 [ 1867.032060][T14860] usb 7-1: USB disconnect, device number 28 [ 1867.086228][ T30] audit: type=1326 audit(2000021157.981:16046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28710 comm="syz.5.6111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ff62af8e929 code=0x7ffc0000 [ 1867.119591][ T30] audit: type=1326 audit(2000021157.981:16047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28710 comm="syz.5.6111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62af8e929 code=0x7ffc0000 [ 1867.178543][ T2945] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 1867.183306][ T30] audit: type=1326 audit(2000021157.981:16048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28710 comm="syz.5.6111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7ff62af8e929 code=0x7ffc0000 [ 1867.186859][ T2945] ip6gre1 (unregistering): left promiscuous mode [ 1867.216530][ T30] audit: type=1326 audit(2000021157.981:16049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28710 comm="syz.5.6111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62af8e929 code=0x7ffc0000 [ 1867.247928][ T30] audit: type=1326 audit(2000021157.981:16050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28710 comm="syz.5.6111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff62af8e929 code=0x7ffc0000 [ 1867.341517][ T30] audit: type=1326 audit(2000021157.981:16051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28710 comm="syz.5.6111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62af8e929 code=0x7ffc0000 [ 1868.108206][T28733] /dev/nullb0: Can't open blockdev [ 1868.533227][ T2945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1868.543566][ T2945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1868.553196][ T2945] bond0 (unregistering): Released all slaves [ 1868.564840][ T2945] bond1 (unregistering): Released all slaves [ 1868.577158][ T2945] bond2 (unregistering): Released all slaves [ 1868.671019][ T2945] bond3 (unregistering): Released all slaves [ 1868.759862][ T2945] bond4 (unregistering): Released all slaves [ 1868.823436][T16390] Bluetooth: hci5: command tx timeout [ 1868.858885][ T2945] bond5 (unregistering): Released all slaves [ 1868.869906][T28661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1868.877554][T28661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1868.903410][ C0] vkms_vblank_simulate: vblank timer overrun [ 1868.910445][T28661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1868.930519][T28730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6115'. [ 1868.950362][T28730] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1869.049309][T28661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1869.068446][T28661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1869.097464][T28661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1869.243479][ T2945] tipc: Left network mode [ 1869.332472][T28745] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1869.791994][T28661] hsr_slave_0: entered promiscuous mode [ 1869.798757][T28661] hsr_slave_1: entered promiscuous mode [ 1869.805123][T28661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1869.813936][T28661] Cannot create hsr debugfs directory [ 1869.963678][T28753] tipc: Started in network mode [ 1869.968567][T28753] tipc: Node identity 4695f9e037, cluster identity 4711 [ 1869.980465][T28753] tipc: Enabled bearer , priority 0 [ 1869.988799][T28753] syzkaller0: entered promiscuous mode [ 1869.999662][T28753] syzkaller0: entered allmulticast mode [ 1870.022788][T28753] tipc: Resetting bearer [ 1870.194058][T28752] tipc: Resetting bearer [ 1870.232147][T28752] tipc: Disabling bearer [ 1870.332808][T28759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1870.497760][T28762] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6126'. [ 1870.695440][T28768] XFS (nullb0): Invalid superblock magic number [ 1870.863105][ T2945] hsr_slave_0: left promiscuous mode [ 1870.877378][ T2945] hsr_slave_1: left promiscuous mode [ 1870.921635][ T2945] veth1_macvtap: left promiscuous mode [ 1870.927385][ T2945] veth0_macvtap: left promiscuous mode [ 1870.933338][ T2945] veth1_vlan: left promiscuous mode [ 1870.938848][ T2945] veth0_vlan: left promiscuous mode [ 1873.039152][T28809] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1873.039152][T28809] program syz.6.6138 not setting count and/or reply_len properly [ 1873.141128][T28809] 9pnet_fd: Insufficient options for proto=fd [ 1873.717173][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1873.717212][ T30] audit: type=1800 audit(2000021165.161:16064): pid=28817 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.6141" name="bus" dev="overlay" ino=2167 res=0 errno=0 [ 1874.147768][ T2945] team0 (unregistering): Port device team_slave_1 removed [ 1874.190483][ T2945] team0 (unregistering): Port device team_slave_0 removed [ 1874.198635][T23876] smc: removing ib device syz! [ 1874.206521][T12494] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1874.523507][T12494] usb 7-1: Using ep0 maxpacket: 8 [ 1874.535387][T12494] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1874.548993][T12494] usb 7-1: config 17 has an invalid interface number: 8 but max is 1 [ 1874.557186][T12494] usb 7-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1874.641042][T12494] usb 7-1: config 17 has no interface number 0 [ 1874.693190][T12494] usb 7-1: config 17 interface 8 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1874.709588][T12494] usb 7-1: config 17 interface 8 has no altsetting 0 [ 1874.725897][T12494] usb 7-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1874.740244][T12494] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.868060][T12494] usb 7-1: Product: syz [ 1874.872824][T12494] usb 7-1: Manufacturer: syz [ 1874.984327][T12494] usb 7-1: SerialNumber: syz [ 1875.091603][T28800] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1875.097687][T28823] IPVS: stopping backup sync thread 27481 ... [ 1875.260260][T12494] usb 7-1: selecting invalid altsetting 0 [ 1876.028328][T12494] usb 7-1: USB disconnect, device number 29 [ 1876.619261][T28840] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1876.619261][T28840] program syz.1.6146 not setting count and/or reply_len properly [ 1877.031109][T28661] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1877.037887][T14860] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1877.094421][T28661] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1877.190040][T14860] usb 3-1: device descriptor read/64, error -71 [ 1877.326180][T28661] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1877.421092][T28848] 9pnet_fd: Insufficient options for proto=fd [ 1877.505209][T28661] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1877.553346][T14860] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1877.723706][T14860] usb 3-1: device descriptor read/64, error -71 [ 1877.737774][T28661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1878.525614][T28661] 8021q: adding VLAN 0 to HW filter on device team0 [ 1878.550818][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1878.557945][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1878.605016][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1878.612159][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1878.634842][T28868] netlink: 'syz.1.6151': attribute type 58 has an invalid length. [ 1878.635116][T14860] usb usb3-port1: attempt power cycle [ 1878.680191][T28868] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6151'. [ 1878.983452][ T5903] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1879.113398][T14860] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1879.133810][T14860] usb 3-1: device descriptor read/8, error -71 [ 1879.352165][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1879.577854][T14860] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1879.581602][ T5903] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1879.743319][ T5903] usb 7-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 1879.759857][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.771465][ T5903] usb 7-1: config 0 descriptor?? [ 1879.784474][ T2945] IPVS: stop unused estimator thread 0... [ 1879.873509][T14860] usb 3-1: device not accepting address 113, error -71 [ 1879.898117][T14860] usb usb3-port1: unable to enumerate USB device [ 1880.050478][T28661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1880.236312][ T5903] usbhid 7-1:0.0: can't add hid device: -71 [ 1880.559447][ T5903] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1880.559755][T28661] veth0_vlan: entered promiscuous mode [ 1880.705826][T28891] overlayfs: failed to resolve './file0': -2 [ 1880.713795][ T5903] usb 7-1: USB disconnect, device number 30 [ 1881.005228][T28661] veth1_vlan: entered promiscuous mode [ 1881.091286][T28661] veth0_macvtap: entered promiscuous mode [ 1881.102269][T28661] veth1_macvtap: entered promiscuous mode [ 1881.124381][T28661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1881.139460][T28661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1881.152932][T28661] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1881.169402][T28661] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1881.179247][T28661] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1881.197153][T28661] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1881.238724][T28896] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6159'. [ 1881.253648][T14860] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1881.363358][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1881.371187][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1881.403345][T14860] usb 6-1: Using ep0 maxpacket: 8 [ 1881.415260][T14860] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1881.420966][T17031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1881.439721][T17031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1881.453964][T14860] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1881.481680][T14860] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1881.500152][T14860] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1881.537049][T14860] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1881.697686][T14860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.835517][T28906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6160'. [ 1881.856899][T28906] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1882.474616][T14860] usb 6-1: GET_CAPABILITIES returned 0 [ 1882.480135][T14860] usbtmc 6-1:16.0: can't read capabilities [ 1882.506043][ T30] audit: type=1400 audit(2000021173.921:16065): avc: denied { read } for pid=28893 comm="syz.5.6158" path="socket:[120520]" dev="sockfs" ino=120520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1882.642201][T28894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1882.673239][T28894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1882.697257][T12494] usb 6-1: USB disconnect, device number 47 [ 1883.216594][T28918] netlink: 'syz.6.6162': attribute type 58 has an invalid length. [ 1883.245359][T28918] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6162'. [ 1883.378476][T28941] XFS (nullb0): Invalid superblock magic number [ 1883.851995][T28955] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1883.851995][T28955] program syz.2.6170 not setting count and/or reply_len properly [ 1883.872726][T28958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6171'. [ 1884.213579][T14860] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 1884.221648][T14860] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1884.614468][T28971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6174'. [ 1884.684115][T28971] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1887.744352][T28997] netlink: 'syz.2.6183': attribute type 1 has an invalid length. [ 1887.959249][T28997] bond1: entered promiscuous mode [ 1887.968486][T28997] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1889.156541][T28999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1889.172829][T29011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6185'. [ 1889.185414][T28999] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1889.195791][T28999] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1889.211834][T28999] bond1: (slave ip6gre1): making interface the new active one [ 1889.219533][T28999] ip6gre1: entered promiscuous mode [ 1889.228235][ T30] audit: type=1400 audit(2000021180.671:16066): avc: denied { create } for pid=29010 comm="syz.1.6185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1889.256970][ T30] audit: type=1400 audit(2000021180.671:16067): avc: denied { write } for pid=29010 comm="syz.1.6185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1889.301910][T28999] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 1889.707403][T29027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6188'. [ 1889.719053][T29027] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1889.863781][T14860] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1890.262085][T29030] XFS (nullb0): Invalid superblock magic number [ 1890.278379][T14860] usb 7-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1890.318689][T14860] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1890.353356][T14860] usb 7-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 1890.373315][T14860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1890.394070][T14860] usb 7-1: config 0 descriptor?? [ 1890.573528][T29043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6192'. [ 1890.584338][T29043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6192'. [ 1891.432365][ T30] audit: type=1400 audit(2000021182.871:16068): avc: denied { ioctl } for pid=29050 comm="syz.1.6196" path="socket:[120801]" dev="sockfs" ino=120801 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1892.008295][T29055] FAULT_INJECTION: forcing a failure. [ 1892.008295][T29055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1892.030590][T29055] CPU: 1 UID: 0 PID: 29055 Comm: syz.2.6197 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1892.030617][T29055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1892.030627][T29055] Call Trace: [ 1892.030633][T29055] [ 1892.030640][T29055] dump_stack_lvl+0x16c/0x1f0 [ 1892.030671][T29055] should_fail_ex+0x512/0x640 [ 1892.030703][T29055] _copy_from_user+0x2e/0xd0 [ 1892.030729][T29055] copy_msghdr_from_user+0x98/0x160 [ 1892.030756][T29055] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1892.030785][T29055] ? kfree+0x24f/0x4d0 [ 1892.030802][T29055] ? __pfx__kstrtoull+0x10/0x10 [ 1892.030831][T29055] ___sys_sendmsg+0xfe/0x1d0 [ 1892.030857][T29055] ? __pfx____sys_sendmsg+0x10/0x10 [ 1892.030910][T29055] ? __pfx___might_resched+0x10/0x10 [ 1892.030939][T29055] __sys_sendmmsg+0x200/0x420 [ 1892.030968][T29055] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1892.031003][T29055] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1892.031042][T29055] ? fput+0x70/0xf0 [ 1892.031068][T29055] ? ksys_write+0x1ac/0x250 [ 1892.031088][T29055] ? __pfx_ksys_write+0x10/0x10 [ 1892.031115][T29055] __x64_sys_sendmmsg+0x9c/0x100 [ 1892.031139][T29055] ? lockdep_hardirqs_on+0x7c/0x110 [ 1892.031163][T29055] do_syscall_64+0xcd/0x4c0 [ 1892.031189][T29055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1892.031206][T29055] RIP: 0033:0x7f45ddb8e929 [ 1892.031220][T29055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1892.031237][T29055] RSP: 002b:00007f45dea24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1892.031255][T29055] RAX: ffffffffffffffda RBX: 00007f45dddb5fa0 RCX: 00007f45ddb8e929 [ 1892.031267][T29055] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 1892.031278][T29055] RBP: 00007f45dea24090 R08: 0000000000000000 R09: 0000000000000000 [ 1892.031288][T29055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1892.031298][T29055] R13: 0000000000000000 R14: 00007f45dddb5fa0 R15: 00007ffdc0ae9898 [ 1892.031320][T29055] [ 1892.379010][T14860] usbhid 7-1:0.0: can't add hid device: -71 [ 1892.416727][T14860] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1892.612710][T14860] usb 7-1: USB disconnect, device number 31 [ 1893.832990][T29066] netlink: 'syz.2.6201': attribute type 1 has an invalid length. [ 1893.886404][T29066] bond2: entered promiscuous mode [ 1893.899873][T29066] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1894.017230][T28321] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1894.663810][T29082] infiniband syz!: set active [ 1894.668526][T29082] infiniband syz!: added team_slave_0 [ 1894.693343][T28584] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1894.697706][T29082] RDS/IB: syz!: added [ 1894.705547][T29082] smc: adding ib device syz! with port count 1 [ 1894.711711][T29082] smc: ib device syz! port 1 has pnetid [ 1894.992305][T28321] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1895.014918][T28321] usb 6-1: config 0 has no interfaces? [ 1895.020420][T28321] usb 6-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 1895.093665][T28584] usb 1-1: Using ep0 maxpacket: 32 [ 1895.104742][T28584] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1895.120104][T28584] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1895.131065][T28584] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1895.145342][T28321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.145668][T28584] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.167227][T28584] usb 1-1: config 0 descriptor?? [ 1895.174364][T28584] hub 1-1:0.0: USB hub found [ 1895.283456][ T5903] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1895.379984][T28584] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1895.443387][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 1895.458527][ T5903] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1895.467042][T28321] usb 6-1: config 0 descriptor?? [ 1895.484162][ T5903] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1895.491837][ T5903] usb 3-1: can't read configurations, error -71 [ 1895.776500][T29100] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6208'. [ 1895.798346][T29100] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1896.499315][T12494] usb 6-1: USB disconnect, device number 48 [ 1896.508981][T28584] hid-generic 0003:046D:C31C.0035: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 1896.726739][T28584] usb 1-1: USB disconnect, device number 113 [ 1896.998237][T29107] syzkaller1: entered promiscuous mode [ 1897.066403][ T30] audit: type=1800 audit(2000021188.491:16069): pid=29109 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.6213" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1897.131127][T29107] syzkaller1: entered allmulticast mode [ 1897.673962][ T5903] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1897.853424][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 1897.931927][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1898.075802][ T5903] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 1898.198514][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1898.857083][T29126] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1898.945373][ T5903] usb 6-1: config 0 descriptor?? [ 1899.136245][ T30] audit: type=1326 audit(2000021190.551:16070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29119 comm="syz.6.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea3418e929 code=0x7ffc0000 [ 1899.320223][ T30] audit: type=1326 audit(2000021190.571:16071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29119 comm="syz.6.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fea3418e929 code=0x7ffc0000 [ 1899.324968][T29137] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1899.324968][T29137] program syz.0.6222 not setting count and/or reply_len properly [ 1899.393166][ T30] audit: type=1326 audit(2000021190.571:16072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29119 comm="syz.6.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea3418e929 code=0x7ffc0000 [ 1899.424561][ T30] audit: type=1326 audit(2000021190.571:16073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29119 comm="syz.6.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fea3418e929 code=0x7ffc0000 [ 1899.453458][ T30] audit: type=1326 audit(2000021190.581:16074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29119 comm="syz.6.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea3418e929 code=0x7ffc0000 [ 1899.477539][ T30] audit: type=1326 audit(2000021190.611:16075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29119 comm="syz.6.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea3418e929 code=0x7ffc0000 [ 1899.502217][ T30] audit: type=1326 audit(2000021190.611:16076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29119 comm="syz.6.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fea3418e929 code=0x7ffc0000 [ 1899.504755][T29137] 9pnet_fd: Insufficient options for proto=fd [ 1899.532747][ T30] audit: type=1326 audit(2000021190.611:16077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29119 comm="syz.6.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea3418e929 code=0x7ffc0000 [ 1899.556445][ T5833] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1899.572313][ T30] audit: type=1326 audit(2000021190.621:16078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29119 comm="syz.6.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea3418e929 code=0x7ffc0000 [ 1899.671171][T29113] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6215'. [ 1899.689429][T29113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29113 comm=syz.5.6215 [ 1899.732608][ T5833] usb 3-1: Using ep0 maxpacket: 32 [ 1899.745739][ T5833] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1899.750196][T29148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6215'. [ 1899.753969][ T5833] usb 3-1: config 0 has no interface number 0 [ 1900.043069][T11157] usb 6-1: USB disconnect, device number 49 [ 1900.055217][ T5833] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1900.073927][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.081918][ T5833] usb 3-1: Product: syz [ 1900.103239][ T5833] usb 3-1: Manufacturer: syz [ 1900.110653][ T5833] usb 3-1: SerialNumber: syz [ 1900.117321][ T5833] usb 3-1: config 0 descriptor?? [ 1900.129745][ T5833] smsc95xx v2.0.0 [ 1900.138106][T29156] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1900.138106][T29156] program syz.0.6228 not setting count and/or reply_len properly [ 1900.483328][T28321] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 1900.636392][T28321] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1900.647343][T28321] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.733492][T28321] usb 7-1: config 0 descriptor?? [ 1900.847938][T28321] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1901.085667][T29150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1901.105855][T29150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1901.404437][ T5833] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1901.418250][ T5833] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1901.428379][ T5833] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1901.444649][ T5833] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1901.505091][T29172] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1901.569082][ T5833] usb 3-1: USB disconnect, device number 116 [ 1901.629554][T28321] gp8psk: FW Version = 181.169.125 (0xb5a97d) Build 2120/52/246 [ 1901.842979][T28321] gp8psk: usb in 149 operation failed. [ 1901.856737][T28321] gp8psk: failed to get FPGA version [ 1901.862393][T28321] gp8psk: usb in 138 operation failed. [ 1901.869445][T28321] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1901.881608][T28321] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1901.892796][T28321] usb 7-1: USB disconnect, device number 32 [ 1902.102795][T29180] FAULT_INJECTION: forcing a failure. [ 1902.102795][T29180] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1902.117325][T29180] CPU: 0 UID: 0 PID: 29180 Comm: syz.5.6236 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1902.117350][T29180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1902.117360][T29180] Call Trace: [ 1902.117366][T29180] [ 1902.117372][T29180] dump_stack_lvl+0x16c/0x1f0 [ 1902.117408][T29180] should_fail_ex+0x512/0x640 [ 1902.117435][T29180] should_fail_alloc_page+0xe7/0x130 [ 1902.117461][T29180] prepare_alloc_pages+0x3c2/0x610 [ 1902.117479][T29180] ? look_up_lock_class+0x6b/0x150 [ 1902.117507][T29180] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1902.117534][T29180] ? __lock_acquire+0xb8a/0x1c90 [ 1902.117563][T29180] ? kasan_save_stack+0x42/0x60 [ 1902.117585][T29180] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1902.117608][T29180] ? __mutex_trylock_common+0xe9/0x250 [ 1902.117635][T29180] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1902.117666][T29180] ? rcu_is_watching+0x12/0xc0 [ 1902.117687][T29180] ? find_held_lock+0x2b/0x80 [ 1902.117707][T29180] ? binder_alloc_new_buf+0x1560/0x3270 [ 1902.117726][T29180] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1902.117747][T29180] ? policy_nodemask+0xea/0x4e0 [ 1902.117773][T29180] alloc_pages_mpol+0x1fb/0x550 [ 1902.117799][T29180] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1902.117823][T29180] ? rcu_is_watching+0x12/0xc0 [ 1902.117848][T29180] alloc_pages_noprof+0x131/0x390 [ 1902.117872][T29180] binder_alloc_new_buf+0x17c7/0x3270 [ 1902.117903][T29180] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 1902.117921][T29180] ? find_held_lock+0x2b/0x80 [ 1902.117942][T29180] ? binder_transaction+0x1051/0x9af0 [ 1902.117963][T29180] binder_transaction+0x13f6/0x9af0 [ 1902.118002][T29180] ? __lock_acquire+0x622/0x1c90 [ 1902.118029][T29180] ? __pfx_binder_transaction+0x10/0x10 [ 1902.118055][T29180] ? find_held_lock+0x2b/0x80 [ 1902.118079][T29180] ? __lock_acquire+0xb8a/0x1c90 [ 1902.118116][T29180] ? find_held_lock+0x2b/0x80 [ 1902.118134][T29180] ? __might_fault+0xe3/0x190 [ 1902.118155][T29180] ? __might_fault+0xe3/0x190 [ 1902.118174][T29180] ? __might_fault+0x13b/0x190 [ 1902.118203][T29180] binder_thread_write+0xaae/0x4e70 [ 1902.118232][T29180] ? __pfx_binder_thread_write+0x10/0x10 [ 1902.118251][T29180] ? binder_debug+0xde/0x1a0 [ 1902.118279][T29180] ? binder_debug+0xde/0x1a0 [ 1902.118302][T29180] ? __pfx_binder_debug+0x10/0x10 [ 1902.118327][T29180] ? find_held_lock+0x2b/0x80 [ 1902.118359][T29180] binder_ioctl+0x26a7/0x72c0 [ 1902.118392][T29180] ? tomoyo_path_number_perm+0x18d/0x580 [ 1902.118418][T29180] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1902.118440][T29180] ? __pfx_binder_ioctl+0x10/0x10 [ 1902.118459][T29180] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1902.118485][T29180] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 1902.118509][T29180] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 1902.118535][T29180] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1902.118568][T29180] ? hook_file_ioctl_common+0x145/0x410 [ 1902.118603][T29180] ? selinux_file_ioctl+0x180/0x270 [ 1902.118625][T29180] ? selinux_file_ioctl+0xb4/0x270 [ 1902.118648][T29180] ? __pfx_binder_ioctl+0x10/0x10 [ 1902.118667][T29180] __x64_sys_ioctl+0x18b/0x210 [ 1902.118687][T29180] do_syscall_64+0xcd/0x4c0 [ 1902.118716][T29180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1902.118733][T29180] RIP: 0033:0x7ff62af8e929 [ 1902.118746][T29180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1902.118762][T29180] RSP: 002b:00007ff62be69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1902.118779][T29180] RAX: ffffffffffffffda RBX: 00007ff62b1b5fa0 RCX: 00007ff62af8e929 [ 1902.118790][T29180] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1902.118800][T29180] RBP: 00007ff62be69090 R08: 0000000000000000 R09: 0000000000000000 [ 1902.118810][T29180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1902.118819][T29180] R13: 0000000000000000 R14: 00007ff62b1b5fa0 R15: 00007ffe383a03a8 [ 1902.118845][T29180] [ 1902.263701][ T42] usb 1-1: new low-speed USB device number 114 using dummy_hcd [ 1902.267144][ T5833] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1902.380925][T29182] fuse: Bad value for 'fd' [ 1902.562484][ T42] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 1902.563453][ T5833] usb 3-1: Using ep0 maxpacket: 8 [ 1902.578497][ T42] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 1902.610555][ T42] usb 1-1: config 0 has no interface number 0 [ 1902.630354][ T42] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1902.686052][ T42] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1902.818865][ T42] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1902.911020][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.026739][ T42] usb 1-1: config 0 descriptor?? [ 1903.225109][ T5833] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1903.239925][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.248173][ T5833] usb 3-1: Product: syz [ 1903.252416][ T5833] usb 3-1: Manufacturer: syz [ 1903.252880][T29192] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1903.252880][T29192] program syz.6.6239 not setting count and/or reply_len properly [ 1903.257256][ T5833] usb 3-1: SerialNumber: syz [ 1903.281198][ T5833] usb 3-1: config 0 descriptor?? [ 1903.288054][ T5833] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1903.322836][ T42] usb 1-1: USB disconnect, device number 114 [ 1903.360504][T29195] FAULT_INJECTION: forcing a failure. [ 1903.360504][T29195] name failslab, interval 1, probability 0, space 0, times 0 [ 1903.374183][T29195] CPU: 0 UID: 0 PID: 29195 Comm: syz.1.6241 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1903.374207][T29195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1903.374217][T29195] Call Trace: [ 1903.374223][T29195] [ 1903.374230][T29195] dump_stack_lvl+0x16c/0x1f0 [ 1903.374259][T29195] should_fail_ex+0x512/0x640 [ 1903.374282][T29195] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1903.374309][T29195] should_failslab+0xc2/0x120 [ 1903.374334][T29195] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1903.374356][T29195] ? __alloc_skb+0x2b2/0x380 [ 1903.374381][T29195] __alloc_skb+0x2b2/0x380 [ 1903.374405][T29195] ? __pfx___alloc_skb+0x10/0x10 [ 1903.374427][T29195] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 1903.374449][T29195] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1903.374478][T29195] netlink_alloc_large_skb+0x69/0x130 [ 1903.374500][T29195] netlink_sendmsg+0x6a1/0xdd0 [ 1903.374522][T29195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1903.374551][T29195] ____sys_sendmsg+0xa95/0xc70 [ 1903.374571][T29195] ? copy_msghdr_from_user+0x10a/0x160 [ 1903.374595][T29195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1903.374636][T29195] ___sys_sendmsg+0x134/0x1d0 [ 1903.374663][T29195] ? __pfx____sys_sendmsg+0x10/0x10 [ 1903.374685][T29195] ? __lock_acquire+0x622/0x1c90 [ 1903.374750][T29195] __sys_sendmsg+0x16d/0x220 [ 1903.374776][T29195] ? __pfx___sys_sendmsg+0x10/0x10 [ 1903.374821][T29195] do_syscall_64+0xcd/0x4c0 [ 1903.374854][T29195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.374871][T29195] RIP: 0033:0x7f13ed18e929 [ 1903.374885][T29195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1903.374901][T29195] RSP: 002b:00007f13ee082038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1903.374918][T29195] RAX: ffffffffffffffda RBX: 00007f13ed3b5fa0 RCX: 00007f13ed18e929 [ 1903.374929][T29195] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 000000000000000d [ 1903.374939][T29195] RBP: 00007f13ee082090 R08: 0000000000000000 R09: 0000000000000000 [ 1903.374949][T29195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1903.374959][T29195] R13: 0000000000000000 R14: 00007f13ed3b5fa0 R15: 00007fff81059218 [ 1903.374982][T29195] [ 1903.622099][ C0] Unknown status report in ack skb [ 1903.756226][T29201] [ 1903.758591][T29201] ====================================================== [ 1903.765608][T29201] WARNING: possible circular locking dependency detected [ 1903.772620][T29201] 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 Not tainted [ 1903.779719][T29201] ------------------------------------------------------ [ 1903.786720][T29201] syz.6.6244/29201 is trying to acquire lock: [ 1903.792758][T29201] ffffffff908b35a8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xb36/0x1870 [ 1903.802479][T29201] [ 1903.802479][T29201] but task is already holding lock: [ 1903.809819][T29201] ffff8881427d6c40 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1903.821038][T29201] [ 1903.821038][T29201] which lock already depends on the new lock. [ 1903.821038][T29201] [ 1903.831418][T29201] [ 1903.831418][T29201] the existing dependency chain (in reverse order) is: [ 1903.840408][T29201] [ 1903.840408][T29201] -> #2 (&q->q_usage_counter(io)#25){++++}-{0:0}: [ 1903.848993][T29201] blk_alloc_queue+0x619/0x760 [ 1903.854259][T29201] blk_mq_alloc_queue+0x175/0x290 [ 1903.859789][T29201] __blk_mq_alloc_disk+0x29/0x120 [ 1903.865307][T29201] loop_add+0x49e/0xb70 [ 1903.869967][T29201] loop_init+0x164/0x270 [ 1903.874718][T29201] do_one_initcall+0x120/0x6e0 [ 1903.879988][T29201] kernel_init_freeable+0x5c2/0x900 [ 1903.885685][T29201] kernel_init+0x1c/0x2b0 [ 1903.890517][T29201] ret_from_fork+0x5d7/0x6f0 [ 1903.895607][T29201] ret_from_fork_asm+0x1a/0x30 [ 1903.900884][T29201] [ 1903.900884][T29201] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1903.908063][T29201] fs_reclaim_acquire+0x102/0x150 [ 1903.913598][T29201] kmem_cache_alloc_node_noprof+0x57/0x3b0 [ 1903.919913][T29201] __alloc_skb+0x2b2/0x380 [ 1903.924843][T29201] alloc_uevent_skb+0x7d/0x210 [ 1903.930106][T29201] kobject_uevent_env+0xca4/0x1870 [ 1903.935720][T29201] kobject_synth_uevent+0x7d4/0x8a0 [ 1903.941425][T29201] bus_uevent_store+0x3d/0x90 [ 1903.946595][T29201] bus_attr_store+0x71/0xb0 [ 1903.951595][T29201] sysfs_kf_write+0xf2/0x150 [ 1903.956690][T29201] kernfs_fop_write_iter+0x351/0x510 [ 1903.962483][T29201] vfs_write+0x6c7/0x1150 [ 1903.967324][T29201] ksys_write+0x12a/0x250 [ 1903.972148][T29201] do_syscall_64+0xcd/0x4c0 [ 1903.977161][T29201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.983552][T29201] [ 1903.983552][T29201] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 1903.991348][T29201] __lock_acquire+0x126f/0x1c90 [ 1903.996709][T29201] lock_acquire+0x179/0x350 [ 1904.001716][T29201] __mutex_lock+0x199/0xb90 [ 1904.006726][T29201] kobject_uevent_env+0xb36/0x1870 [ 1904.012348][T29201] loop_set_status+0x9c9/0xb90 [ 1904.017613][T29201] loop_set_status_old+0x162/0x1d0 [ 1904.023232][T29201] lo_ioctl+0xb3f/0x2760 [ 1904.027987][T29201] blkdev_ioctl+0x277/0x6d0 [ 1904.032998][T29201] __x64_sys_ioctl+0x18b/0x210 [ 1904.038273][T29201] do_syscall_64+0xcd/0x4c0 [ 1904.043282][T29201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1904.044217][T29174] IPVS: length: 91 != 3277873464 [ 1904.049677][T29201] [ 1904.049677][T29201] other info that might help us debug this: [ 1904.049677][T29201] [ 1904.049685][T29201] Chain exists of: [ 1904.049685][T29201] uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#25 [ 1904.049685][T29201] [ 1904.078527][T29201] Possible unsafe locking scenario: [ 1904.078527][T29201] [ 1904.085953][T29201] CPU0 CPU1 [ 1904.091298][T29201] ---- ---- [ 1904.096637][T29201] lock(&q->q_usage_counter(io)#25); [ 1904.101989][T29201] lock(fs_reclaim); [ 1904.108481][T29201] lock(&q->q_usage_counter(io)#25); [ 1904.116349][T29201] lock(uevent_sock_mutex); [ 1904.120912][T29201] [ 1904.120912][T29201] *** DEADLOCK *** [ 1904.120912][T29201] [ 1904.129037][T29201] 3 locks held by syz.6.6244/29201: [ 1904.134212][T29201] #0: ffff8880264d2400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2c/0xb90 [ 1904.143578][T29201] #1: ffff8881427d6c40 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1904.155230][T29201] #2: ffff8881427d6c78 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1904.167126][T29201] [ 1904.167126][T29201] stack backtrace: [ 1904.172993][T29201] CPU: 1 UID: 0 PID: 29201 Comm: syz.6.6244 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1904.173010][T29201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1904.173017][T29201] Call Trace: [ 1904.173021][T29201] [ 1904.173025][T29201] dump_stack_lvl+0x116/0x1f0 [ 1904.173042][T29201] print_circular_bug+0x275/0x350 [ 1904.173058][T29201] check_noncircular+0x14c/0x170 [ 1904.173082][T29201] __lock_acquire+0x126f/0x1c90 [ 1904.173109][T29201] lock_acquire+0x179/0x350 [ 1904.173132][T29201] ? kobject_uevent_env+0xb36/0x1870 [ 1904.173147][T29201] ? __pfx___might_resched+0x10/0x10 [ 1904.173161][T29201] __mutex_lock+0x199/0xb90 [ 1904.173176][T29201] ? kobject_uevent_env+0xb36/0x1870 [ 1904.173187][T29201] ? kobject_uevent_env+0xb36/0x1870 [ 1904.173198][T29201] ? __pfx___mutex_lock+0x10/0x10 [ 1904.173221][T29201] ? __asan_memcpy+0x3c/0x60 [ 1904.173239][T29201] ? kobject_get_path+0x8e/0x2a0 [ 1904.173254][T29201] ? kobject_uevent_env+0xb36/0x1870 [ 1904.173272][T29201] kobject_uevent_env+0xb36/0x1870 [ 1904.173291][T29201] ? __asan_memcpy+0x3c/0x60 [ 1904.173309][T29201] loop_set_status+0x9c9/0xb90 [ 1904.173327][T29201] loop_set_status_old+0x162/0x1d0 [ 1904.173338][T29201] ? __pfx_loop_set_status_old+0x10/0x10 [ 1904.173358][T29201] ? __lock_acquire+0x622/0x1c90 [ 1904.173386][T29201] ? find_held_lock+0x2b/0x80 [ 1904.173404][T29201] ? is_bpf_text_address+0x8a/0x1a0 [ 1904.173428][T29201] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1904.173441][T29201] lo_ioctl+0xb3f/0x2760 [ 1904.173451][T29201] ? __lock_acquire+0xb8a/0x1c90 [ 1904.173466][T29201] ? __lock_acquire+0x622/0x1c90 [ 1904.173483][T29201] ? __pfx_lo_ioctl+0x10/0x10 [ 1904.173498][T29201] ? find_held_lock+0x2b/0x80 [ 1904.173516][T29201] ? avc_has_extended_perms+0x33a/0x1090 [ 1904.173534][T29201] ? avc_has_extended_perms+0x47c/0x1090 [ 1904.173551][T29201] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 1904.173566][T29201] ? kasan_quarantine_put+0x10a/0x240 [ 1904.173578][T29201] ? lockdep_hardirqs_on+0x7c/0x110 [ 1904.173593][T29201] ? find_held_lock+0x2b/0x80 [ 1904.173607][T29201] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1904.173618][T29201] ? blkdev_common_ioctl+0x1dd/0x2480 [ 1904.173630][T29201] ? futex_wake+0x1ad/0x530 [ 1904.173645][T29201] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1904.173663][T29201] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1904.173681][T29201] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1904.173700][T29201] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 1904.173716][T29201] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 1904.173731][T29201] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1904.173748][T29201] ? __pfx_lo_ioctl+0x10/0x10 [ 1904.173758][T29201] blkdev_ioctl+0x277/0x6d0 [ 1904.173768][T29201] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1904.173784][T29201] ? selinux_file_ioctl+0x180/0x270 [ 1904.173805][T29201] ? selinux_file_ioctl+0xb4/0x270 [ 1904.173826][T29201] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1904.173842][T29201] __x64_sys_ioctl+0x18b/0x210 [ 1904.173855][T29201] do_syscall_64+0xcd/0x4c0 [ 1904.173871][T29201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1904.173882][T29201] RIP: 0033:0x7fea3418e929 [ 1904.173891][T29201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1904.173902][T29201] RSP: 002b:00007fea3508b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1904.173913][T29201] RAX: ffffffffffffffda RBX: 00007fea343b5fa0 RCX: 00007fea3418e929 [ 1904.173924][T29201] RDX: 00002000000001c0 RSI: 0000000000004c02 RDI: 0000000000000008 [ 1904.173934][T29201] RBP: 00007fea34210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1904.173944][T29201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1904.173954][T29201] R13: 0000000000000000 R14: 00007fea343b5fa0 R15: 00007ffd26339168 [ 1904.173969][T29201] [ 1906.239260][ T5833] gspca_sonixj: reg_w1 err -71 [ 1906.283420][ T5833] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1906.293053][ T5833] usb 3-1: USB disconnect, device number 117