last executing test programs: 32m56.662083034s ago: executing program 32 (id=19): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) syz_open_dev$loop(0x0, 0x75f, 0xa382) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1acf9bd7, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0xa, 0x3, 0x3c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e092000000000000109022400010000000009040009010300010009210500000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "875df871"}]}}, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 20m33.664528618s ago: executing program 33 (id=2525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 20m18.042736804s ago: executing program 34 (id=2579): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0x8000, 0xfffffffd}, 0x10) (async) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e0001000000000000ecc80007000000", @ANYRES32=r2, @ANYBLOB="0000000008000900030400000a0002"], 0x30}}, 0x0) 20m4.332678427s ago: executing program 35 (id=2635): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf0, 0x6, 0x7ffc1ffb}]}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x3, &(0x7f0000000240)=[{0x0, 0x3, 0xff}, {0x2, 0xa, 0x2e7}, {0x2, 0x1, 0x4}, {0xffffffffffffff5d, 0x5, 0x2}, {0xaae2, 0x5, 0x5}, {0x81b, 0x5, 0x80000001}, {0x6, 0xffffffffffffffff, 0x2}], 0x7, 0x7, 0x1b, 0x34, 0x54, 0x18}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 17m55.147562736s ago: executing program 36 (id=3067): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9c}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00g'], 0x40}}, 0x48010) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) write$uinput_user_dev(r3, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac23}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0x4cc59373, 0x0, 0x8001, 0x1, 0x6, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x10000, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x1, 0xe, 0x8000, 0x1, 0x9d, 0x80, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xd, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xffffffff, 0x3, 0x100, 0x5, 0x9], [0x7, 0x9d2, 0x80000001, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x9, 0x8, 0x80000001, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x0, 0x2, 0x2, 0x3, 0xb, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc00, 0x1, 0x4, 0x3ff, 0x3, 0x7f, 0x6, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0x0, 0x1, 0xe8, 0xffff8000, 0x10002, 0xb, 0xd7a8, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0x9, 0x7, 0x590, 0x10000000, 0xb0, 0x8, 0x5, 0x2, 0xdd31, 0x6, 0x7, 0x3, 0x3, 0x44, 0xe, 0x8001, 0x1, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x7, 0x2, 0x8000, 0x10, 0x5, 0x3, 0x1, 0x553b31c8, 0xb8, 0x6, 0xec5f, 0x8001, 0x7fffffff, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x6, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x3ff, 0xffff, 0x4, 0x9, 0x80000000, 0x10002, 0xb7, 0x39e, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0x9, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0xffffffff, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x6, 0x6, 0x6, 0x5, 0x1, 0x0, 0x4, 0x9, 0x6, 0x1, 0x6, 0x2, 0x3, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0x6]}, 0x45c) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES64=r3, @ANYBLOB="0305000000000000240004800b000100627269646765000014000280080002008000fbff070003000a000000625b8e632e49eb470368d8bedd2de762c7054e9e7b"], 0x44}, 0x1, 0x0, 0x0, 0x8008011}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9c}, 0xe) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00g'], 0x40}}, 0x48010) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) (async) write$uinput_user_dev(r3, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac23}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0x4cc59373, 0x0, 0x8001, 0x1, 0x6, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x10000, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x1, 0xe, 0x8000, 0x1, 0x9d, 0x80, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xd, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xffffffff, 0x3, 0x100, 0x5, 0x9], [0x7, 0x9d2, 0x80000001, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x9, 0x8, 0x80000001, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x0, 0x2, 0x2, 0x3, 0xb, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc00, 0x1, 0x4, 0x3ff, 0x3, 0x7f, 0x6, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0x0, 0x1, 0xe8, 0xffff8000, 0x10002, 0xb, 0xd7a8, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0x9, 0x7, 0x590, 0x10000000, 0xb0, 0x8, 0x5, 0x2, 0xdd31, 0x6, 0x7, 0x3, 0x3, 0x44, 0xe, 0x8001, 0x1, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x7, 0x2, 0x8000, 0x10, 0x5, 0x3, 0x1, 0x553b31c8, 0xb8, 0x6, 0xec5f, 0x8001, 0x7fffffff, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x6, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x3ff, 0xffff, 0x4, 0x9, 0x80000000, 0x10002, 0xb7, 0x39e, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0x9, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0xffffffff, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x6, 0x6, 0x6, 0x5, 0x1, 0x0, 0x4, 0x9, 0x6, 0x1, 0x6, 0x2, 0x3, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0x6]}, 0x45c) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES64=r3, @ANYBLOB="0305000000000000240004800b000100627269646765000014000280080002008000fbff070003000a000000625b8e632e49eb470368d8bedd2de762c7054e9e7b"], 0x44}, 0x1, 0x0, 0x0, 0x8008011}, 0x0) (async) 17m44.525106743s ago: executing program 37 (id=3089): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000e40)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="18002380040066800400098004002d8008006d00", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r2], 0x62c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc0051) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 17m37.194032714s ago: executing program 3 (id=3100): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) 17m36.050166747s ago: executing program 3 (id=3101): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x1, 0x0, {0x7}}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0xc0044dff, &(0x7f0000004000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, 0x0, &(0x7f0000001540)) r5 = socket(0x2, 0x3, 0x6) bind$inet(r5, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_open_dev$radio(0x0, 0x1, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 17m32.878221656s ago: executing program 3 (id=3107): socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x200480c4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='cgroup\x00', 0x0, &(0x7f0000000380)='source') sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) rt_sigqueueinfo(r1, 0x2a, &(0x7f0000000180)={0x12, 0x7, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000100)=[{}, {}], &(0x7f0000000240)=0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socketpair$unix(0x1, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x80044dff, 0x1000000000000) 17m30.981634127s ago: executing program 3 (id=3111): socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x200480c4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='cgroup\x00', 0x0, &(0x7f0000000380)='source') sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) rt_sigqueueinfo(r1, 0x2a, &(0x7f0000000180)={0x12, 0x7, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000100)=[{}, {}], &(0x7f0000000240)=0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x80044dff, 0x1000000000000) 17m29.58115806s ago: executing program 3 (id=3114): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = creat(&(0x7f00000016c0)='./file0\x00', 0x63) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000001100)=""/4112, &(0x7f0000001040)=0x1010) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0x13c}}, 0x4040000) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$xdp(r9, 0x0, 0x5880) 17m25.903975631s ago: executing program 3 (id=3121): socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000000606010300007dc64b471ef9d8467d059ec3bd000000100000050000050900020073797a300000000005000100070000000900020073797a30000000000900030073797a3100000000e6e0ca9d97f15682875c3eec25a8a5d509a528d1bed0ea054e29855fa0954cb98fccc2364afb7d0ee1ae73955bd62e263289e2377998e7515ae112ad2c904e9a8ec59126c67b1320abef1608225ae46879ea1ec87a3a29f4f876c45cec42dc241469f1c0d8ce4838e57d52d818fd0941f8afbc507a385bf8b04de1194e8656dee60252e9ece655d97a440cf2f9822160b42f7dcffa1f924ef3d7d5bfc958958bfbf52c2e008514567cd4b07865a98f1314f4bdcbf253a462e5a3353ada73affa6b4579a01388e8cf206fea9fa42d959d13579ded887834"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x200480c4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='cgroup\x00', 0x0, &(0x7f0000000380)='source') sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) rt_sigqueueinfo(r1, 0x2a, &(0x7f0000000180)={0x12, 0x7, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000100)=[{}, {}], &(0x7f0000000240)=0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x80044dff, 0x1000000000000) 17m25.217104808s ago: executing program 38 (id=3121): socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x200480c4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='cgroup\x00', 0x0, &(0x7f0000000380)='source') sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) rt_sigqueueinfo(r1, 0x2a, &(0x7f0000000180)={0x12, 0x7, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000100)=[{}, {}], &(0x7f0000000240)=0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x80044dff, 0x1000000000000) 11m14.767746855s ago: executing program 9 (id=4299): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="b70200001a140000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000002b000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e6185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f659cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c61a137462c7f2539479f49d4eb2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc16e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c0977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6040099d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663dd472021d202eedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe3594d4a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed180d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35f267632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12a851810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f314001a62863f6e04b4506ac2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab79e609c57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2b4bb9905a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296e99d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55000048e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cf7800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc699d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7dc1a869fa5551b873e2c838e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0000000000000000000000a0616252abda1102c3eee13eddef0275f21752ee474e32d790ae1f3df77e303ae1968c2a4419d1ca13b97b2c3123ab5b8473b880644e6acfe1d346d1528262c6e91f38029ec24eeb4fe5c1b3726bcfd386ba153fed11692170e5a09432bd02fa9dba861ecad4dbf61a93733a21aeff5f541b8f78bccbf1ac0000000000000000000000145aaaa62ff74b216b2977e7b9261824f663cea60ec6e0fa03bd596cec6d12316c8ed147d4cdd140857444c27c1946b1afcd4ec260694cb71e421744cf1f860840b0decf9be35aeb02d1bf6137b3189edb2d21557e6804ed52305e7deace8b97cd2b423cb79c541762097e29c386634a4bcc3ee91266d808706aadbc4650183d71bf5341edfe4c815d3a87c05d75da20b260d39cdd8559292000cb06faf9972683d379565dcd932fbc6bfb13f938a693252fc3af8088fcf8e06a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440404feb180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0103461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0x14, 0x60000000, 0x0, 0xfffffffe}, 0x2c) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x132ba000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) fallocate(r5, 0x0, 0x0, 0x1001f0) copy_file_range(r5, 0x0, r5, &(0x7f00000000c0)=0xc615, 0x101, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 11m13.058915933s ago: executing program 9 (id=4303): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80000000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x100, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 11m9.092457821s ago: executing program 9 (id=4314): socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x1, 0x0, {0x7}}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0xc0044dff, &(0x7f0000004000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, 0x0, &(0x7f0000001540)) r5 = socket(0x2, 0x3, 0x6) bind$inet(r5, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r5, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_open_dev$radio(0x0, 0x1, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 11m3.794971603s ago: executing program 9 (id=4328): socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x200480c4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='cgroup\x00', 0x0, &(0x7f0000000380)='source') sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) rt_sigqueueinfo(r1, 0x2a, &(0x7f0000000180)={0x12, 0x7, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000100)=[{}, {}], &(0x7f0000000240)=0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socketpair$unix(0x1, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x80044dff, 0x1000000000000) 11m1.972667524s ago: executing program 9 (id=4330): syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="5c194c76e3fd358c3f2ec0cf6046", 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m1.143652035s ago: executing program 9 (id=4335): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8080, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@mark={{0x14, 0x1, 0x24, 0x8000}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x61751478}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0xa}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0xd8}, 0x20000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="050000000500"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) 11m0.104298244s ago: executing program 39 (id=4335): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8080, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@mark={{0x14, 0x1, 0x24, 0x8000}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x61751478}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0xa}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0xd8}, 0x20000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="050000000500"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) 10m56.779129417s ago: executing program 1 (id=4349): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000cc0)={0x1, 0x10, 0xfa00, {&(0x7f0000000c00)}}, 0x18) 10m56.590978697s ago: executing program 1 (id=4351): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) msgget$private(0x0, 0x500) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) brk(0x689d80000000) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r4, 0x3}, 0x18) sendmmsg$inet(r2, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r6}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 10m56.186832465s ago: executing program 1 (id=4353): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000040)={0x3, "c34852"}, 0x4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000780)={{0x77359400}, {0x0, 0x3ffffffe}}, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x28a0, 0x0) setuid(0x0) linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x1400) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newtaction={0xf0, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x8c, 0x211, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xc, 0x80, 0x6, 0x100, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xfaf, 0x4}}]}, {0x39, 0x6, "895214884e6af1d5f8ffb444135b0744686903d33361f9566b26a5f1e43ed3bc287e1ea67fa1863ca275f99005989121c90969c992"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xf0}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffb}}, 0x255d38ae, 0x4, 0x0, 0x5, 0x9}, &(0x7f0000000000)=0x98) sendmmsg$sock(r5, &(0x7f0000000840)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x2, @mcast2, 0x5, 0x2}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000140)="a676e278403684c97c4f0c20c402967c3cc2119446d3f1f7d221eaa1dbf093313d23a98aa3481d0f5db9bde3c7bc9a9e0800f7", 0x33}, {&(0x7f0000000280)="f2e6754cf224117c6284e8f8029f161add9dd87a134cab63764f36e338a93d63d578611d104120622001cffef8717906ad7628e956dab6690157faf1dd4a28f094c28d7f6d11a6c4360b9c3a376a0208065fb6a59a8bc946c0b51e5d620dab61b477c801616f37", 0x67}, {&(0x7f0000000300)="e2bef6530aef7c", 0x7}, {&(0x7f0000000340)="8ae37958ba26b140a7c43c56841e77a7c772a348194b27379ac4ffcfd43590b492ceeabe52c57241915f3b4cd204a522b8511c02cbbfd1942afe34450b7601cbeea53a466a46f3a203174b706842c47f98cf9ffaef91363021c3066d33616c362cf0e36e65359d71742e1e367a794073938846d0d3bcaecc26107fdd439cfd07a1417c30958a451c85df0d20c3c0ffba3fecf0e3b9b4e04824f99da928", 0x9d}, {0x0, 0xfffffffffffffd16}, {&(0x7f0000000600)}, {&(0x7f0000000640)="1559ed664e956d7567f63af188d91251fcd8ace255493417493d410d77bba76eaad6c3c64686559e383fab70d6c2faf41efbd5f9d88f2e2411fd603485ce10fa188b897644f16c9277118d3e2ed0e0ddc6e62e9ef28a6231b4964f407fb69de3a20ec21c5a731ccab6", 0x69}], 0x7, &(0x7f0000000780)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x5bc2}}, @txtime={{0x0, 0x1, 0x3d, 0x8}}], 0xa8}}], 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1e, 0x4, 0x0) socketpair(0x80000000000025, 0x5, 0x0, &(0x7f0000000140)) 10m55.259758746s ago: executing program 1 (id=4357): socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x200480c4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='cgroup\x00', 0x0, &(0x7f0000000380)='source') sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) rt_sigqueueinfo(r1, 0x2a, &(0x7f0000000180)={0x12, 0x7, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000100)=[{}, {}], &(0x7f0000000240)=0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socketpair$unix(0x1, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r3, 0x80044dff, 0x1000000000000) 10m54.407707526s ago: executing program 1 (id=4358): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) clock_gettime(0x4, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4048041}, 0x8000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r2, r3, r2}, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={'ghash-generic\x00'}, 0x0, 0x11}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) close(0x3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x0, @val=@iter={&(0x7f0000000280), 0x10}}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0003}]}) socket$l2tp(0x2, 0x2, 0x73) close_range(r4, 0xffffffffffffffff, 0x0) 10m53.546401282s ago: executing program 1 (id=4361): syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="5c194c76e3fd358c3f2ec0cf6046", 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m53.108611793s ago: executing program 40 (id=4361): syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="5c194c76e3fd358c3f2ec0cf6046", 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m12.638067868s ago: executing program 4 (id=4449): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x3000c15, &(0x7f0000000240)=ANY=[]) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{0x1000, 0x4, 0xfffc, 0x9}, 'syz1\x00', 0x9}) ioctl$UI_DEV_CREATE(r1, 0x5501) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="ddbf693a06001aaa21acc2869149ed80cb000e57fa3f2c00", 0x18}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x24044080) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r5, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, 0x0, 0x0) connect$bt_rfcomm(r5, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x10, 0x75, 0x9, 0x3c, @dev={0xfe, 0x80, '\x00', 0xf}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x80000000, 0x3}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="44020000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="7c000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff01000008000100", @ANYRES32=0x0, @ANYBLOB="a401028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000101000008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400feffffff3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040002000000"], 0x244}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000085) 10m10.907803019s ago: executing program 4 (id=4456): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) connect$llc(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(0x0, 0xe7e, 0x0) read$msr(r2, &(0x7f0000009b80)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x9d}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f0000000300)={0xf, 0x37, 0xb, 0x6, 0x3, 0xc, 0x1, 0xcf, 0x1}) 10m10.256464427s ago: executing program 4 (id=4457): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x31c}, 0x1, 0x0, 0x0, 0x1}, 0x40800) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x88, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x14}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x88}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x18}) fstat(r0, &(0x7f0000002a00)) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fcntl$setstatus(r4, 0x4, 0x2400) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22ffef) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000680)=[@in6={0xa, 0x4e23, 0x8, @private0, 0x8}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x57, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x7ff, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc949a080}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0xc840}, 0x10) 10m9.122938013s ago: executing program 0 (id=4461): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@dont_appraise}], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000400000003", @ANYRES32, @ANYBLOB="0300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r2 = semget(0x0, 0x4, 0x39c) semop(r2, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}], 0x1) semop(r2, &(0x7f0000000000), 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000080)={0x1, 0x0, [{0x98d74a6564c51145, 0xd8, &(0x7f0000000400)=""/216}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000380)=0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0xc011}, 0x800) socket$nl_route(0x10, 0x3, 0x0) 10m7.054359052s ago: executing program 4 (id=4468): socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x200480c4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='cgroup\x00', 0x0, &(0x7f0000000380)='source') sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000100)=[{}, {}], &(0x7f0000000240)=0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socketpair$unix(0x1, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x80044dff, 0x1000000000000) 10m5.903721266s ago: executing program 0 (id=4470): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r2 = epoll_create1(0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[], 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x2}) recvmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x40000002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x7, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) 10m5.804140284s ago: executing program 4 (id=4471): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x207) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x800000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000010c0)={0x0, {{0xa, 0x0, 0x40, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0xb}}}}, 0x108) timer_create(0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) listen(r4, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) 10m4.030630754s ago: executing program 4 (id=4474): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x50, 0x30, 0x9, 0x0, 0x25dfdbfe, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x3fff, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x9, {0xe4}}}}]}]}, 0x50}}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3ff, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000001c0)={0x2, {0x7, 0x9a, 0x1, 0xfee}}) pipe(&(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = getpgrp(r3) rt_tgsigqueueinfo(r3, r7, 0x1d, &(0x7f0000000240)={0x19, 0x7, 0xc}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000040)={0x0, 0x44, 0x2, '\x00', &(0x7f0000000000)=0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, 0x0) 10m2.735685698s ago: executing program 41 (id=4474): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x50, 0x30, 0x9, 0x0, 0x25dfdbfe, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x3fff, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x9, {0xe4}}}}]}]}, 0x50}}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3ff, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000001c0)={0x2, {0x7, 0x9a, 0x1, 0xfee}}) pipe(&(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = getpgrp(r3) rt_tgsigqueueinfo(r3, r7, 0x1d, &(0x7f0000000240)={0x19, 0x7, 0xc}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000040)={0x0, 0x44, 0x2, '\x00', &(0x7f0000000000)=0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, 0x0) 10m2.694488621s ago: executing program 0 (id=4478): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) readv(r0, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0xc0403d11, 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, r5, 0x7, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r4, 0x4, r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000740)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\a\x00\x00\x00\x00\x00\x00\x00\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x04\x00\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\xf3\x00\xfc\xd1\xb5\xfd\xec@\xe5\x91\x8e\xd4\x89\xef\x95\x17\x16\xfc\x91\xa0\xbbE\x80)mh\xc7\xf1?\xbb\x13;\xbd\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfKn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\a0{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92$\x14a\xf4\x15_\x19Kt\r\xe3\xd9\xb4\x15mWl\xeb\xb7mLY#)\xc2\xa4\x8a\xc5\xca\xf5;W:-\xb4(\xce\x02y\x04\'\xbcY\xb0%\xea|\xbf\xc9\xda\xaet\xac\xee\xd5\xcb\xe8\xfc\xa8\xe9\xff\x06\x8d\x1f\xdf\xf7\x80+\xcc\x1e\nmt\x1d\xdf\xe0\x17\r\b\xc1)\x8b\x99O\xbc\x18\xf5\xcd\x81\x82\xe98\xdb\xe4\x9d\r\x9e\xd2\x93O\xc0\xbf\xda/\x05\xa8\xa8\xf7\xdf\x101<\x03\xd8\xccu8w\x93\xf5U\xde\x1f8\xe2\xafX+\'\xad\xbd\aH\xc0\xf4\xc6\xfd\x86+X\xbai\x02\nw\x97\x92R\x8d\xcb8\x16O(sz\xf5', 0x7) 10m1.437967172s ago: executing program 0 (id=4480): socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x200480c4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='cgroup\x00', 0x0, &(0x7f0000000380)='source') sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000100)=[{}, {}], &(0x7f0000000240)=0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socketpair$unix(0x1, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x80044dff, 0x1000000000000) 9m59.259593948s ago: executing program 0 (id=4482): ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000000)={0xf64, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) fstatfs(r0, &(0x7f0000017180)=""/237) r1 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000172c0), &(0x7f0000017300)=0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000017340)={0x0, 0x6}, 0x8) syz_clone(0x208000, &(0x7f0000017380)="271716a77e011f6125dd51e0f82c6b7828db4d01efadd4ad144f18ba39b3660d82b22de05fb626d865ae616571896f6524a799b231aa05dbf3d953980dad939ea50048a4af4bd5960a41a8b1a33cbcebac7c3636ed022b4b6757d68ceb0223842d6fa92d36d43acb58510022297bcda9d865912ad62c222475afade481d99ad1e44868dd30fc258541a641a42273af9b3836c9fa86aa4823bc847120cb9cbea4ef7092bda94af850fdad638be48fc2d0e4b0ebe9bee72c83591c38e405bfead3e6a6bf79a7c545144d51a2f752336aa29e64534f7e94ac9b1bfc13ba2d5e85b9df052484196ea1", 0xe7, &(0x7f0000017480), &(0x7f00000174c0), &(0x7f0000017500)="bd44b1b1adc3f009a6f762b5873d75600b58762733005dfd78a3f764679545b0ade9a6d1035940d0ae959046dda47444f335fdb7fea5dc5694a85bd12f7627ac8612c0ab53ae0e52368af23bb65d256be21529169ba1f0fbf38fb45ad8f7ddb65ce069e5b4270677811ba806e9adfa48330e60600e764fa0adcd4c69a3edf6ea9e850c589463a3728e5c3a83e9bf550e3c03f8c15dd91a389d0533eb58027ca70b97647402b635ec7677cec8868e7f7e7a43f050f1447285f8b6e197c58e1fcd6528ba6d4c2e67f10047ffe407278cc5e30fc886a6") ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000017600)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000018600)={0x0, r2, "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", "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"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) pwritev2(0xffffffffffffffff, &(0x7f0000019780)=[{&(0x7f0000019600)="7e0066fb435da2b743cf96172ae2e56dedc791b7e6e7e53eaa957870d5e7e26774a22d69117996fd09ea4a9a68ae1e7e50b70f166eded0200c10c3e93cac7d90a309a74e8615dfa7a7d1a4cd132aa10cebf11f87d8f891288327c5d7d57339512a5d86e2a4594781ea347dfb1dd9a26193776da28a3506c8d79b092f2e026e8bce758b2b53dc34f493d381868717d5978e4486eba00aab0e395523591bdbcb809343a2924d30a4d25f250f76f02022772b6117c564fab3b5095320041c9d34aa243b9895a6eb77f28442cb67b759a8848835b16550", 0xd5}, {&(0x7f0000019700)="ffefa767d89074b95b8898cc584c6a5ebd87bfe4553fbfd3da33c1b963967acc296324798a88ae55773f12b46bb66b225bf101f8c9fea3f9a6870fa3dbba007d65f7c9a55b1a84952c2b893124060224af35c448379655037ffbfa61867e1bdc82a4a14cb2", 0x65}], 0x2, 0x3, 0x58, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000197c0)=""/103, &(0x7f0000019840)=0x67) read$FUSE(r0, &(0x7f0000019880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) pipe(&(0x7f000001b8c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f000001b900)={0x100, 0x2, 0x142, "8090463777c2074a93a460ead67a593a188a3dca5990800616fa19f74bf07f1a", 0x3447504d}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f000001b940)='westwood', 0x8) ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f000001ba80)={0x0, 0x1, &(0x7f000001b980)=[0x0], &(0x7f000001b9c0)=[0x0, 0x0, 0x0], &(0x7f000001ba00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f000001ba40)=[0x0]}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f000001bac0)={0x1, 0x9, 0x9, 0x2}, 0x10) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f000001e180)=0x0, &(0x7f000001e1c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f000001e2c0)={'syztnl2\x00', &(0x7f000001e200)={'ip_vti0\x00', 0x0, 0x10, 0x8, 0x8, 0xb, {{0x19, 0x4, 0x1, 0x38, 0x64, 0x65, 0x0, 0x7, 0x4, 0x0, @broadcast, @empty, {[@timestamp_prespec={0x44, 0x44, 0xef, 0x3, 0xd, [{@rand_addr=0x64010100, 0x2}, {@local, 0x1}, {@loopback, 0x3}, {@empty, 0x5}, {@rand_addr=0x64010102, 0xa}, {@multicast1, 0x100}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@local, 0x1}]}, @timestamp={0x44, 0xc, 0x47, 0x0, 0x2, [0x1, 0x3]}]}}}}}) sendmmsg$inet6(r5, &(0x7f000001fc00)=[{{&(0x7f000001bb00)={0xa, 0x4e20, 0x0, @private0, 0x1}, 0x1c, &(0x7f000001cb40)=[{&(0x7f000001bb40)="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", 0x1000}], 0x1, &(0x7f000001cb80)=[@hoplimit={{0x14, 0x29, 0x34, 0x1}}, @hopopts={{0xc0, 0x29, 0x36, {0x87, 0x14, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x9}, @generic={0x1, 0x7b, "87957a1c908aefea882696220a3d71e283ea13aa6b77ab13d618c74ac3d9faf84eb0ca6070a26f7c238b56403b6f8b38a15e53fd4c0db30eaf983e98c674d4ec0eec6de59bfa226da989ccbe3e4464daba77b6d9d945413776ed0e1e097b9899d762c964e09d4cdcaf10869acd79637a7089013b25aff18fe9925b"}, @enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @ra, @pad1, @ra={0x5, 0x2, 0x601c}]}}}], 0xd8}}, {{&(0x7f000001cc80)={0xa, 0x4e22, 0x1ff, @private1, 0xfffffff9}, 0x1c, &(0x7f000001e100)=[{&(0x7f000001ccc0)="ec97fe6bb65af35e4c8d03edbe652243b5fb59128ad440e94bae5fa2e2e01df44fed78b3518452768f07bcd621eb4786f5e6d99707b6106d536c828b1c12d0098808ebc3c7c4f0c34ee244173e8711a7817aacf3d539d3dbdda1475fab157c7df316557d7f4402b654e748c0e240bfbb64d80087c8c7af688379b7b8ad7e2a4db28d07759aff9ce01500939303", 0x8d}, {&(0x7f000001cd80)="aa7d9c69d4a349fb9b3d9676a78e482469a42cdb26ac0d34c1a618dbc96401af2275e59552e78c31819b1ce5889e5e02750fb04c55a034108ddc9e1a630a5f0780fd72", 0x43}, {&(0x7f000001ce00)="f964ae9563768b68290fa70c615462283f5cd642052f54978d569c50fd0d2f814e578f6d821076ed50fb98d9d2999f2b762b643f4e676ee20368d8b99162f467021b0c31afbe3fd3f8bf", 0x4a}, {&(0x7f000001ce80)="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", 0x1000}, {&(0x7f000001de80)="89db69c1ecb0cca0e2a63e98ac2e9c15f9d88c5d92c0c76fc2ebe1ea3946b84aa26afce87f5e7ed7df6f21ae908b503c608ae37415179f6320d5d4297628c9d0c1c88816202f22b06379d8542e03af3f7be6776d99489b7bdac6744074d2d8031bf3f69af1ec19855705322a88d87c42312256a6cd7b103fc61c2ff48a5a16d9d2046476197f521d03f6c90e531ea3c29046fd7a379825f81c7f6260f640f0b4c4fc9ae134df3646faf449be448fb11031b1637ad67d16e97f1476649d19a09dfd40ae4c69f6a1a7de", 0xc9}, {&(0x7f000001df80)="2a873e3e7659fe9fe74b639f025e1b4d7a13930a5a9fd8dadf3b661783e5598049bc798434b12757aa9087834b52b02a4b87e21c8b284535cef0feb9775bd890806b48ffb04e1deef818f31a1d4dac8e883e43283d67090d8cadf55a784a97049a1d7ca0ffe3ad656a3dedd543e453e91147598943629f74383e951bb4893048e07be44a703a4a0ebca01b2b53723cbc5fcd0177ffb26190b0558a79389072068a62a096b9426236369aefc9b8feb94e90107fb8c0e934fbcf534924ac3e4c21c14c4350931c6a00800d805379315a7798943c58c1eb4dab89a067dffd19f9a71a8e", 0xe2}, {&(0x7f000001e080)="945a9b2b671c88cf0ad89c11a35c4a27f5931db1e7a108d533b11c176bb9bdaafe00f27e507e97ecc7a88661ab437ae8db055e86ede81d606ba3666947b9ca27df713ee6ec73c8114184e686908e8b4c8cc0ebaddd21e2c541e34c2032d6cf68d5582f00932eea3a190a73b64c51bab46c19db744bb1d2ddf3d451e7ff2edd", 0x7f}], 0x7, &(0x7f000001e300)=[@tclass={{0x14, 0x29, 0x43, 0x8}}, @rthdrdstopts={{0x1040, 0x29, 0x37, {0x32, 0x204, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x6, 0x1000, "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"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xfa, 0x8, "d4429e3b4c486fc1"}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r7}}}, @tclass={{0x14, 0x29, 0x43, 0xcb}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1}, r8}}}], 0x10c0}}, {{&(0x7f000001f3c0)={0xa, 0x4e20, 0x3, @mcast2, 0x2}, 0x1c, &(0x7f000001f940)=[{&(0x7f000001f400)="38efe588d43d34ad5da3ecd6c0bb6e4b6ea5a728235eb94516259c52ad7706b0a5b19747515e6faa12f16c877e1b3ac6a09d16131fe0ab366f089db695116c99d8529a68c5482a8b5bd92d6d1d6c7a9f3c52", 0x52}, {&(0x7f000001f480)="087b98ffa68540421aa05433ebc850a7650429f49af7f199569de7da8ed1fd476704d7372da6b6708620fc5add9833d05a4832dbd9d5811b23be99f633082f0418c62347f746d9d2be3d665d3f122c4ce80d1560ce7d7197ed70623e943fa72fcc9635721c5d15bb67f833e2153f3abc", 0x70}, {&(0x7f000001f500)="eedf6780c8dbcd03df33f143f0ce2978de5120f5e41ef99417aa60e55f9ab7df6327a8d841913accc0b6a631cd4569695941c920873029eb7d8817b55d4cd7ddcc33f8090a2d43c334e730f03462868ecdedce4d55805e8bc6f924d0283cad00c5a8088c7c5b93f06587b0c264449dd042bfd3a793b900e2d1cdeb080048e980790d44eafe05d26eb092959ae56687ab6aefce5ec1e782b568a62f5c1fc317b2c199d8a115a5d8b650", 0xa9}, {&(0x7f000001f5c0)="934c57922980bf158505356c3001619bf694ccf3663a77aaa94c98ad44f2fd5ca66d484f69b7bc34405bab48516750f0e2a3db8b9b5cf8be626c3c1f80490bd11c61df9e85a126fa8b688b947f521a1fe4a37ceb84c7c10bb143c7cf3b7c7f45439993474c13350afd2ea7", 0x6b}, {&(0x7f000001f640)="281bbeb96357499b8ff4b5b37d54fb142d5b9a3f1ddf8e05c28e9a827a03d8455f17798672f1078e3ce5f4c920e0686191a9032dc3bf55110b08a94f5509e70641bfd41839e2cb6916314a75c4ae2760d633efef0a297c2509b5cb559c4434782516621f3d3d8c9fa5d7cbfc00506b9f3023c70a7ae7eb4c23c42536580a5e951a69d71a", 0x84}, {&(0x7f000001f700)="56c68f1a3033f05a10cf52bbd8092dd75dec85181c557d68e77a20ca03f66a8495083e31bfcbd6094614817ba1cb3bfb04f00dbb16e57100de5ac3a5d1f8a3289624d9a1bbfbe79a8878c0f85d3b", 0x4e}, {&(0x7f000001f780)="9c3bd802c0700b489ab337208bd4387c92c051284f6522504f6186e97ab4182a7d", 0x21}, {&(0x7f000001f7c0)="3f21add3b0509f8bcc6f212194502ebbc79edba8b32c3384dcaa4e8f7461b2f319db940d407a43a7547dae0c76597b0be4b99818ec8fe40fbce40d65a4f84decfd03f6a89c4de87bd6b19ebc91d4e47752343cd94a328efe911833eb5ffb4f430adc59884536cda6cf6d5024fe4a4705215cfadba9f25bcb88977f55c02c07f4e87ed983548e709fe8471be4562df269fa8cf28e864ecc5da9e2d21ca41b0f78bbfaea7fe1f88e69d9ced6e0ea69e1ac0dba0419aadf6567d33929573d9cf831a29da3f54f14c9642144493fefef128e8495", 0xd2}, {&(0x7f000001f8c0)="3f292c7c6393f6f5e5c12471648ec9e597840f0ffd7409c2b1e0b1b911a3dab42dff8eb3b455f89218c58795806684eb45f553dce1ee90d5277e2a808313aa3056bde7da3526dd56d5acd90419062b9996d00e0f7806474dd7ceef1399259fdf5cdc2345da1ed40602c1069f640bb237d03260fb40accf7056", 0x79}], 0x9, &(0x7f000001fa00)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x0, 0x8, 0x1, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @hopopts={{0xd0, 0x29, 0x36, {0xff, 0x16, '\x00', [@ra={0x5, 0x2, 0xa}, @ra={0x5, 0x2, 0x7fff}, @generic={0x0, 0x93, "344e5b67053f744ce94eee91d327e35ac1b2d0e7989255f4df95b5be7ef141332a2f0cffa3a45fd9ce2e0898f8820d3cd419161f444b0d906c0414256a98e32b1dff50593e11cab959861015f515cb745d1ca0708d3de75b608fdbce362e21f91dfb7e30f5f8374a5e36c3d8915d9fc67a0567e7c08fd7e6df9d913e649c80626d6ed527b68a03cc4ab7f791a7c19ea27eeb91"}, @jumbo={0xc2, 0x4, 0x7fff}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x87, 0xe, 0x2, 0x4, 0x0, [@loopback, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x1c8}}], 0x3, 0x22000000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f000001fcc0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x3, &(0x7f000001fd00)) fsetxattr$trusted_overlay_upper(r6, &(0x7f000001fd40), &(0x7f000001fd80)={0x0, 0xfb, 0x38, 0x0, 0x7, "06e27af229dcbae0daec1ddd1c8ad888", "b599fb36fd80765b91916289b5078c66f1e79af77e20f78a72b26ccbad0220e4e75e75"}, 0x38, 0x4) openat$comedi(0xffffffffffffff9c, &(0x7f000001fdc0)='/dev/comedi2\x00', 0x8a42, 0x0) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f000001fe00), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r9, 0x7a9, &(0x7f000001fe40)={{@local, 0x3}, 0x6, 0x767917dd, 0xc70, 0x0, 0x7, 0x2, 0xd, 0x9}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001fe80)={0x0, 0x2, 0x0, 0x0, 0x12}) 9m58.527284128s ago: executing program 0 (id=4485): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc00"/22], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000080ffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001e0000008500000082000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vim2m(&(0x7f0000000180), 0xffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) msgget$private(0x0, 0x1) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)=""/178, 0x27, 0xb2, 0x0, 0x4}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x50) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b70200000f001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r6, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) 9m57.909426715s ago: executing program 42 (id=4485): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc00"/22], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000080ffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001e0000008500000082000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vim2m(&(0x7f0000000180), 0xffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) msgget$private(0x0, 0x1) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)=""/178, 0x27, 0xb2, 0x0, 0x4}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x50) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r6, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) 17.407443289s ago: executing program 7 (id=6134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904", @ANYRES8=r1], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x10001, 0xffffffff, 0xffff, 0xe49}, 0x10) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000080009000d000000", 0x24) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000200)={r2}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x60}}, 0x4000) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb, 0x14, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x4}}}}}]}}]}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)) readv(0xffffffffffffffff, 0x0, 0x0) socket(0x21, 0x804, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004700)={0x2020}, 0xffffff11) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = shmget$private(0x0, 0x1000, 0x400, &(0x7f00000cf000/0x1000)=nil) shmat(r8, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 17.001811646s ago: executing program 2 (id=6136): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) readv(r0, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0xc0403d11, 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="000040000000007d5e1f000000005a00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, r5, 0x7, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r4, 0x4, r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x7) 15.266294803s ago: executing program 8 (id=6139): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x2}}, 0x14) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000280)='./bus\x00') r7 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0x101, 0x20ff, 0x8, 0x12, 0xd615, 0x9, 0x3, 0xfffffff9, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) 13.843765559s ago: executing program 8 (id=6141): r0 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071105000000000001d300200000000004704000001ed030407030000020000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa0"], 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x79805003, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r2, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r5, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cd042, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 13.593559641s ago: executing program 2 (id=6143): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r5, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@bridge_newvlan={0xa8, 0x70, 0x20, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xc}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x6}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x1}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12.184178251s ago: executing program 6 (id=6144): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) clock_gettime(0x4, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4048041}, 0x8000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={'ghash-generic\x00'}}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000c000) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) close(0x3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r2, 0xffffffffffffffff, 0xa, 0x0, @val=@iter={&(0x7f0000000280), 0x10}}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0003}]}) socket$l2tp(0x2, 0x2, 0x73) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000040)={0x8, 0x40000001, 0x2000004, 0x7, 0x1a, "3e180000650000000000000000cb00002000"}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 12.105788718s ago: executing program 2 (id=6145): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x80000}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r2, r2, r2}, &(0x7f00000001c0)=""/44, 0x2c, &(0x7f0000000000)={&(0x7f0000000280)={'rmd160-generic\x00'}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8000, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x1, 0x80, 0x2, 0x8, 0xac58, 0x2000000a, 0x20000000, 0x31, 0x5f, 0x9, 0x4, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x7, 0x4, 0x5, 0x7, 0x3c1b, 0x3, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0x8e660, 0x7, 0x7, 0x0, 0x5, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x5, 0x940, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x1, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x5, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0x800000c8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x4, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xffc, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x0, 0x2000ff, 0x5, 0x7cb, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x49, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x4, 0x3, 0x0, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0xa, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x7, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0xfffffffc, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x10800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0xfffffffe, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0xffffffff, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x520000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0xfffffffb, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x800002, 0xfffffffb, 0x3, 0x3, 0x101, 0x10000, 0x9, 0x7ffd, 0x400, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x9, 0x7e, 0x100, 0x4166d9b5, 0x7, 0xaf, 0x8, 0x6, 0x400226, 0x5, 0x8000005, 0x8, 0x101, 0xa1f, 0xf40, 0x7, 0x2, 0x400b3, 0x100, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0x156]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x6b02, 0xfffffffffffffffe, 0x80, 0x9, 0x20000004, 0x3, 0x4233, 0x100000, 0xa1, 0x1, 0xe7, 0x1005, 0x8, 0x8, 0xbf11, 0xfffffdfffffffffd], 0x8080000, 0x80300}) 12.099483459s ago: executing program 7 (id=6146): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x2}}, 0x14) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000280)='./bus\x00') r7 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0x101, 0x20ff, 0x8, 0x12, 0xd615, 0x9, 0x3, 0xfffffff9, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) 10.601680884s ago: executing program 7 (id=6148): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000040)={0x3, "c34852"}, 0x4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000780)={{0x77359400}, {0x0, 0x3ffffffe}}, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x28a0, 0x0) setuid(0x0) linkat(r4, 0x0, r4, &(0x7f0000000240)='./file0\x00', 0x1400) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newtaction={0xf0, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x8c, 0x211, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xc, 0x80, 0x6, 0x100, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xfaf, 0x4}}]}, {0x3c, 0x6, "895214884e6af1d5f8ffb444135b0744686903d33361f9566b26a5f1e43ed3bc287e1ea67fa1863ca275f99005989121c90969c9921bef19"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xf0}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffb}}, 0x255d38ae, 0x4, 0x0, 0x5, 0x9}, &(0x7f0000000000)=0x98) sendmmsg$sock(r5, &(0x7f0000000840)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x2, @mcast2, 0x5, 0x2}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000140)="a676e278403684c97c4f0c20c402967c3cc2119446d3f1f7d221eaa1dbf093313d23a98aa3481d0f5db9bde3c7bc9a9e0800f7", 0x33}, {&(0x7f0000000280)="f2e6754cf224117c6284e8f8029f161add9dd87a134cab63764f36e338a93d63d578611d104120622001cffef8717906ad7628e956dab6690157faf1dd4a28f094c28d7f6d11a6c4360b9c3a376a0208065fb6a59a8bc946c0b51e5d620dab61b477c801616f37", 0x67}, {&(0x7f0000000300)="e2bef6530aef7c", 0x7}, {&(0x7f0000000340)="8ae37958ba26b140a7c43c56841e77a7c772a348194b27379ac4ffcfd43590b492ceeabe52c57241915f3b4cd204a522b8511c02cbbfd1942afe34450b7601cbeea53a466a46f3a203174b706842c47f98cf9ffaef91363021c3066d33616c362cf0e36e65359d71742e1e367a794073938846d0d3bcaecc26107fdd439cfd07a1417c30958a451c85df0d20c3c0ffba3fecf0e3b9b4e04824f99da928", 0x9d}, {&(0x7f0000000600)}, {&(0x7f0000000640)="1559ed664e956d7567f63af188d91251fcd8ace255493417493d410d77bba76eaad6c3c64686559e383fab70d6c2faf41efbd5f9d88f2e2411fd603485ce10fa188b897644f16c9277118d3e2ed0e0ddc6e62e9ef28a6231b4964f407fb69de3a20ec21c5a731ccab6", 0x69}], 0x6, &(0x7f0000000780)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x5bc2}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xa8}}], 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1e, 0x4, 0x0) socketpair(0x80000000000025, 0x5, 0x0, &(0x7f0000000140)) 10.292554053s ago: executing program 5 (id=6149): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40100, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x34, 0x18, 0x1, 0x70bd27, 0x25dfdbfb, {0x1d, 0x1, 0x4}, [@CGW_CS_XOR={0x8, 0x5, {0x5, 0xfffffffffffffffe, 0xf5, 0x4}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x4, 0x3, 0x0, 0x0, "13f90700"}, 0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x805936d41ec618b7}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r6, 0x2000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x8c200, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f200011800e000100636f6e6e6c696d69740000000c0002800800014000000000400000000c0a010200"], 0xe4}}, 0x0) 9.360622545s ago: executing program 6 (id=6150): keyctl$set_timeout(0xf, 0x0, 0x4b2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) listen(0xffffffffffffffff, 0x5) listen(0xffffffffffffffff, 0x204) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) socket$netlink(0x10, 0x3, 0x4) setns(r1, 0x24020000) 9.247389796s ago: executing program 5 (id=6151): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x189080, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0xdb, 0x8, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x1, 0x5, 0x40003}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) close_range(r0, 0xffffffffffffffff, 0x0) 8.801882062s ago: executing program 6 (id=6152): syz_open_dev$vim2m(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x7fffffff}, @TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd28, 0x25dfdbfe, {0x80, 0x14, 0x20, 0x7, 0xfd, 0x3, 0xc8, 0x8, 0x400}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x810) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) 8.754946948s ago: executing program 5 (id=6153): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x600) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000002340)={0x1, [{0x2, 0x0, 0x80000001, 0x0}, {0x3, 0x0, 0x800, 0x0}, {0x3, 0x0, 0xffffff7a, 0x0}, {0x0, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0xc834, 0x0}, {0x2, 0x0, 0x13, &(0x7f0000000280)}, {0x2, 0x0, 0xf, 0x0}, {0x0, 0x0, 0x89, 0x0}, {0x3, 0x0, 0x4096, 0x0}, {0x5, 0x0, 0xfffffffd, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x1, 0x0, 0xa, 0x0}, {0x0, 0x0, 0x8, 0x0}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f9000905030000000000000905042d75"], 0x0) 7.854658633s ago: executing program 6 (id=6154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2a020480) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.154992348s ago: executing program 8 (id=6155): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r5, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) ioctl$FS_IOC_GETFSUUID(r8, 0x80111500, &(0x7f00000001c0)) 5.839242918s ago: executing program 6 (id=6156): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004cb815d14"], 0x200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6", 0x37}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d50", 0x6}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x4, 0xe, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0x80, 0xe, "09e12e5f0b6bdcf72f2ec7008a15"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0x130, 0x29, 0x36, {0x5e, 0x22, '\x00', [@generic={0xff, 0x23, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0x81, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x238}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.465493687s ago: executing program 8 (id=6157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x44800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x40000000788, 0x80000000002, 0x183, 0x400000004, 0x0, 0xee, 0x80000001, 0x100000000, 0x1000045, 0x10000, 0x9, 0xf, 0xfffffffffffffffd, 0x0, 0xab], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.271795545s ago: executing program 2 (id=6158): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x2}}, 0x14) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000280)='./bus\x00') r7 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0x101, 0x20ff, 0x8, 0x12, 0xd615, 0x9, 0x3, 0xfffffff9, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) 5.26403166s ago: executing program 7 (id=6159): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000040)={0x3, "c34852"}, 0x4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000780)={{0x77359400}, {0x0, 0x3ffffffe}}, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x28a0, 0x0) setuid(0x0) linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x1400) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newtaction={0xf0, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x8c, 0x211, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xc, 0x80, 0x6, 0x100, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xfaf, 0x4}}]}, {0x3c, 0x6, "895214884e6af1d5f8ffb444135b0744686903d33361f9566b26a5f1e43ed3bc287e1ea67fa1863ca275f99005989121c90969c9921bef19"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xf0}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffb}}, 0x255d38ae, 0x4, 0x0, 0x5, 0x9}, &(0x7f0000000000)=0x98) sendmmsg$sock(r5, &(0x7f0000000840)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x2, @mcast2, 0x5, 0x2}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000140)="a676e278403684c97c4f0c20c402967c3cc2119446d3f1f7d221", 0x1a}, {&(0x7f0000000280)="f2e6754cf224117c6284e8f8029f161add9dd87a134cab63764f36e338a93d63d578611d104120622001cffef8717906ad7628e956dab6690157faf1dd4a28f094c28d7f6d11a6c4360b9c3a376a0208065fb6a59a8bc946c0b51e5d620dab61b477c801616f37", 0x67}, {&(0x7f0000000300)="e2bef6530aef7c", 0x7}, {&(0x7f0000000340)="8ae37958ba26b140a7c43c56841e77a7c772a348194b27379ac4ffcfd43590b492ceeabe52c57241915f3b4cd204a522b8511c02cbbfd1942afe34450b7601cbeea53a466a46f3a203174b706842c47f98cf9ffaef91363021c3066d33616c362cf0e36e65359d71742e1e367a794073938846d0d3bcaecc26107fdd439cfd07a1417c30958a451c85df0d20c3c0ffba3fecf0e3b9b4e04824f99da928", 0x9d}, {0x0}, {&(0x7f0000000600)}, {&(0x7f0000000640)="1559ed664e956d7567f63af188d91251fcd8ace255493417493d410d77bba76eaad6c3c64686559e383fab70d6c2faf41efbd5f9d88f2e2411fd603485ce10fa188b897644f16c9277118d3e2ed0e0ddc6e62e9ef28a6231b4964f407fb69de3a20ec21c5a731ccab6", 0x69}], 0x7, &(0x7f0000000780)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x5bc2}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xa8}}], 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1e, 0x4, 0x0) socketpair(0x80000000000025, 0x5, 0x0, &(0x7f0000000140)) 4.241664798s ago: executing program 2 (id=6160): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x2}}, 0x14) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000280)='./bus\x00') r7 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0x101, 0x20ff, 0x8, 0x12, 0xd615, 0x9, 0x3, 0xfffffff9, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) 4.091997247s ago: executing program 5 (id=6161): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4}, 0x94) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x1c, r8, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20040800) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r10 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000000)=0x1201a, 0x4) io_uring_enter(r10, 0x2219, 0x7721, 0x14, 0x0, 0x0) 3.979569039s ago: executing program 7 (id=6162): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc804}, 0x2) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x2, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1ff, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x1, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108f, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) readv(r5, 0x0, 0x0) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x488, 0x4) sendto$inet(r3, 0x0, 0x0, 0x44800, &(0x7f00000002c0)={0x2, 0x4e21, @broadcast}, 0x10) socket(0x10, 0x3, 0x0) 3.915987235s ago: executing program 6 (id=6163): mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c00)={@map=0x1, 0x1f, 0x0, 0x14da, &(0x7f0000000b00)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000b40)=[0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f00000000c0)={'ip6gretap0\x00', {0x2, 0x0, @private}}) 3.019901606s ago: executing program 5 (id=6164): syz_open_dev$vim2m(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x7fffffff}, @TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd28, 0x25dfdbfe, {0x80, 0x14, 0x20, 0x7, 0xfd, 0x3, 0xc8, 0x8, 0x400}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x810) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) 2.791614644s ago: executing program 7 (id=6165): r0 = fsopen(0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000"], 0x17) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400001015000103000000000000000001000000"], 0x14}}, 0x0) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 2.52375406s ago: executing program 5 (id=6166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2a020480) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.011371612s ago: executing program 8 (id=6167): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x2}}, 0x14) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r7 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0x101, 0x20ff, 0x8, 0x12, 0xd615, 0x9, 0x3, 0xfffffff9, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) 1.072059203s ago: executing program 8 (id=6168): writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058", 0x1f}], 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x401, 0x10000, 0xfffffffb, 0x0, 0xfeffffff, 0x88}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/ipc\x00') syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/ipc\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000880)={{{@in6=@private1, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xff26) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x100, 0x43, 0xa0, 0x100, 0x98, 0x1d0, 0x178, 0x178, 0x1d0, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xe0, 0x100, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x20, 0x30, 0x6, 0x7}}, @common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8924, &(0x7f0000001300)={'nr0\x00'}) r6 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="9749a29918d451f52298a40db18a45b9f9068aacbd"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r6, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 0s ago: executing program 2 (id=6169): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x80000}) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r2, r2, r2}, &(0x7f00000001c0)=""/44, 0x2c, &(0x7f0000000000)={&(0x7f0000000280)={'rmd160-generic\x00'}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8000, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x1, 0x80, 0x2, 0x8, 0xac58, 0x2000000a, 0x20000000, 0x31, 0x5f, 0x9, 0x4, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x7, 0x4, 0x5, 0x7, 0x3c1b, 0x3, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0x8e660, 0x7, 0x7, 0x0, 0x5, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x5, 0x940, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x1, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x5, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0x800000c8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x4, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xffc, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x0, 0x2000ff, 0x5, 0x7cb, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x49, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x4, 0x3, 0x0, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0xa, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x7, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0xfffffffc, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x10800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0xfffffffe, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0xffffffff, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x520000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0xfffffffb, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x800002, 0xfffffffb, 0x3, 0x3, 0x101, 0x10000, 0x9, 0x7ffd, 0x400, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x9, 0x7e, 0x100, 0x4166d9b5, 0x7, 0xaf, 0x8, 0x6, 0x400226, 0x5, 0x8000005, 0x8, 0x101, 0xa1f, 0xf40, 0x7, 0x2, 0x400b3, 0x100, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0x156]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x6b02, 0xfffffffffffffffe, 0x80, 0x9, 0x20000004, 0x3, 0x4233, 0x100000, 0xa1, 0x1, 0xe7, 0x1005, 0x8, 0x8, 0xbf11, 0xfffffdfffffffffd], 0x8080000, 0x80300}) kernel console output (not intermixed with test programs): Product: syz [ 1888.588135][ T5808] usb 7-1: Manufacturer: syz [ 1888.592967][ T5808] usb 7-1: SerialNumber: syz [ 1888.593546][T24527] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1888.604695][T30964] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1888.613238][T24527] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1888.625021][T30976] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5764'. [ 1888.637442][T30964] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1888.692142][T24527] usb 3-1: SerialNumber: syz [ 1888.709140][T24527] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1888.723183][T24527] usb-storage 3-1:1.0: USB Mass Storage device detected [ 1888.748419][T24527] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1888.757358][T30978] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1888.768178][T24527] scsi host2: usb-storage 3-1:1.0 [ 1888.838636][T30984] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1889.066641][T30964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1889.275878][T30964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1889.616981][T30996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5766'. [ 1890.400130][T31002] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5777'. [ 1890.761450][T24527] usb 8-1: USB disconnect, device number 97 [ 1890.822733][T18819] usb 3-1: USB disconnect, device number 82 [ 1891.324767][T31011] xt_ecn: cannot match TCP bits for non-tcp packets [ 1891.352129][T31013] FAULT_INJECTION: forcing a failure. [ 1891.352129][T31013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1891.365986][T31013] CPU: 0 UID: 0 PID: 31013 Comm: syz.6.5779 Tainted: G L syzkaller #0 PREEMPT(full) [ 1891.366017][T31013] Tainted: [L]=SOFTLOCKUP [ 1891.366024][T31013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1891.366035][T31013] Call Trace: [ 1891.366042][T31013] [ 1891.366049][T31013] dump_stack_lvl+0x100/0x190 [ 1891.366085][T31013] should_fail_ex.cold+0x5/0xa [ 1891.366111][T31013] _copy_from_user+0x2e/0xd0 [ 1891.366133][T31013] __x64_sys_epoll_ctl+0x131/0x1e0 [ 1891.366158][T31013] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1891.366189][T31013] do_syscall_64+0x106/0xf80 [ 1891.366216][T31013] ? clear_bhb_loop+0x40/0x90 [ 1891.366239][T31013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1891.366258][T31013] RIP: 0033:0x7f297b99c819 [ 1891.366275][T31013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1891.366293][T31013] RSP: 002b:00007f297c879028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1891.366311][T31013] RAX: ffffffffffffffda RBX: 00007f297bc16090 RCX: 00007f297b99c819 [ 1891.366323][T31013] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 1891.366334][T31013] RBP: 00007f297c879090 R08: 0000000000000000 R09: 0000000000000000 [ 1891.366344][T31013] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 1891.366355][T31013] R13: 00007f297bc16128 R14: 00007f297bc16090 R15: 00007ffc44d5bf58 [ 1891.366379][T31013] [ 1891.471502][ T5808] rtl8150 7-1:1.0: couldn't reset the device [ 1891.521556][ T5808] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 1891.609123][ T5808] usb 7-1: USB disconnect, device number 35 [ 1891.689315][T18815] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 1892.575044][T18815] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.590889][T18815] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1892.605018][ T29] audit: type=1400 audit(1774975423.400:754): avc: denied { write } for pid=31023 comm="syz.6.5784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1892.605374][T31024] ieee802154 phy0 wpan0: encryption failed: -22 [ 1892.631676][T18819] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1892.641459][T18815] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1892.661624][T18815] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 148, setting to 64 [ 1892.766947][T18815] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1892.846806][T18819] usb 3-1: Using ep0 maxpacket: 32 [ 1892.852286][T18815] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1892.871467][T18819] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1892.886558][T18815] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1892.899776][T18815] usb 9-1: Product: syz [ 1892.905929][T18819] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1893.008362][T18815] usb 9-1: Manufacturer: syz [ 1893.013334][T18819] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1893.021662][T18815] usb 9-1: SerialNumber: syz [ 1893.027710][T18819] usb 3-1: Product: syz [ 1893.032123][T18819] usb 3-1: Manufacturer: syz [ 1893.037254][T18815] usb 9-1: config 0 descriptor?? [ 1893.042255][T18819] usb 3-1: SerialNumber: syz [ 1893.047545][T31011] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1893.065432][T18819] usb 3-1: config 0 descriptor?? [ 1893.074093][T31009] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1893.082196][T18819] hub 3-1:0.0: bad descriptor, ignoring hub [ 1893.090194][T18819] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1893.278471][T18815] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1893.310623][T18815] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 1893.354520][T31036] random: crng reseeded on system resumption [ 1893.490777][T18815] usb 9-1: USB disconnect, device number 41 [ 1894.175127][T31049] FAULT_INJECTION: forcing a failure. [ 1894.175127][T31049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1894.190076][T31049] CPU: 1 UID: 0 PID: 31049 Comm: syz.7.5791 Tainted: G L syzkaller #0 PREEMPT(full) [ 1894.190105][T31049] Tainted: [L]=SOFTLOCKUP [ 1894.190111][T31049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1894.190121][T31049] Call Trace: [ 1894.190127][T31049] [ 1894.190133][T31049] dump_stack_lvl+0x100/0x190 [ 1894.190165][T31049] should_fail_ex.cold+0x5/0xa [ 1894.190188][T31049] _copy_from_iter+0x1f4/0x1690 [ 1894.190206][T31049] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 1894.190224][T31049] ? __skb_ext_alloc+0x1a/0x80 [ 1894.190240][T31049] ? __pfx__copy_from_iter+0x10/0x10 [ 1894.190257][T31049] ? __asan_memset+0x23/0x50 [ 1894.190280][T31049] ? __skb_ext_alloc+0x6c/0x80 [ 1894.190295][T31049] ? skb_ext_add+0x624/0x810 [ 1894.190315][T31049] ? __local_bh_enable_ip+0x9e/0x120 [ 1894.190342][T31049] j1939_sk_sendmsg+0x7dd/0x1440 [ 1894.190379][T31049] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 1894.190409][T31049] sock_write_iter+0x524/0x5a0 [ 1894.190422][T31049] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 1894.190438][T31049] ? __pfx_sock_write_iter+0x10/0x10 [ 1894.190465][T31049] ? __pfx_file_has_perm+0x10/0x10 [ 1894.190491][T31049] do_iter_readv_writev+0x6ee/0x920 [ 1894.190520][T31049] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1894.190545][T31049] ? selinux_file_permission+0x8f/0x6d0 [ 1894.190573][T31049] ? bpf_lsm_file_permission+0x9/0x10 [ 1894.190602][T31049] ? security_file_permission+0x76/0x210 [ 1894.190622][T31049] ? rw_verify_area+0xce/0x6d0 [ 1894.190639][T31049] vfs_writev+0x360/0xe10 [ 1894.190659][T31049] ? __pfx_vfs_writev+0x10/0x10 [ 1894.190685][T31049] ? find_held_lock+0x2b/0x80 [ 1894.190723][T31049] ? __fget_files+0x21f/0x3d0 [ 1894.190749][T31049] ? do_writev+0x28a/0x340 [ 1894.190772][T31049] do_writev+0x28a/0x340 [ 1894.190796][T31049] ? __pfx_do_writev+0x10/0x10 [ 1894.190818][T31049] do_syscall_64+0x106/0xf80 [ 1894.190835][T31049] ? clear_bhb_loop+0x40/0x90 [ 1894.190848][T31049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1894.190862][T31049] RIP: 0033:0x7fbe7f99c819 [ 1894.190878][T31049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1894.190895][T31049] RSP: 002b:00007fbe807a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1894.190913][T31049] RAX: ffffffffffffffda RBX: 00007fbe7fc15fa0 RCX: 00007fbe7f99c819 [ 1894.190925][T31049] RDX: 0000000000000001 RSI: 00002000000008c0 RDI: 0000000000000003 [ 1894.190935][T31049] RBP: 00007fbe807a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1894.190946][T31049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1894.190955][T31049] R13: 00007fbe7fc16038 R14: 00007fbe7fc15fa0 R15: 00007ffea08e88c8 [ 1894.190978][T31049] [ 1894.517400][T24527] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 1894.626965][T18815] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1894.766182][T24527] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1894.893999][ T5816] usb 3-1: USB disconnect, device number 83 [ 1894.894511][T18815] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1894.908684][T24527] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1895.020053][T18815] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1895.058208][T24527] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1895.061958][T18815] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1895.079406][T24527] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1895.108289][T24527] usb 7-1: SerialNumber: syz [ 1895.125451][T18815] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1895.138514][T24527] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1895.152790][T18815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.160027][T24527] usb-storage 7-1:1.0: USB Mass Storage device detected [ 1896.093458][ T29] audit: type=1800 audit(1774975426.370:755): pid=31064 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.5795" name="bus" dev="overlay" ino=1544 res=0 errno=0 [ 1896.105621][T24527] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1896.127083][T24527] scsi host1: usb-storage 7-1:1.0 [ 1896.144755][T18815] usb 6-1: Product: syz [ 1896.154152][T18815] usb 6-1: Manufacturer: syz [ 1896.170119][T18815] usb 6-1: SerialNumber: syz [ 1896.188288][T31047] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1896.207177][T31047] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1896.652574][T31080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5788'. [ 1896.676529][T31047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1896.687293][T31047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.483061][ T5922] usb 7-1: USB disconnect, device number 36 [ 1898.185237][T31096] openvswitch: netlink: EtherType 0 is less than min 600 [ 1898.195463][T31096] random: crng reseeded on system resumption [ 1898.499496][T18815] rtl8150 6-1:1.0: couldn't reset the device [ 1898.522331][T18815] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 1898.535911][T31104] FAULT_INJECTION: forcing a failure. [ 1898.535911][T31104] name failslab, interval 1, probability 0, space 0, times 0 [ 1898.586249][T18815] usb 6-1: USB disconnect, device number 110 [ 1898.623797][T31104] CPU: 0 UID: 0 PID: 31104 Comm: syz.5.5802 Tainted: G L syzkaller #0 PREEMPT(full) [ 1898.623830][T31104] Tainted: [L]=SOFTLOCKUP [ 1898.623836][T31104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1898.623847][T31104] Call Trace: [ 1898.623853][T31104] [ 1898.623861][T31104] dump_stack_lvl+0x100/0x190 [ 1898.623894][T31104] should_fail_ex.cold+0x5/0xa [ 1898.623918][T31104] should_failslab+0xc2/0x120 [ 1898.623937][T31104] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1898.623963][T31104] ? __d_alloc+0x34/0xa80 [ 1898.623990][T31104] __d_alloc+0x34/0xa80 [ 1898.624013][T31104] d_alloc_pseudo+0x1c/0xc0 [ 1898.624036][T31104] alloc_file_pseudo+0xcf/0x230 [ 1898.624059][T31104] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1898.624078][T31104] ? inode_init_always_gfp+0xd0e/0x1040 [ 1898.624104][T31104] sock_alloc_file+0x50/0x210 [ 1898.624129][T31104] do_accept+0x242/0x530 [ 1898.624148][T31104] ? do_raw_spin_lock+0x128/0x260 [ 1898.624169][T31104] ? __pfx_do_accept+0x10/0x10 [ 1898.624209][T31104] __sys_accept4+0x108/0x200 [ 1898.624229][T31104] ? __pfx___sys_accept4+0x10/0x10 [ 1898.624247][T31104] ? ksys_write+0x1ac/0x250 [ 1898.624262][T31104] ? __pfx_ksys_write+0x10/0x10 [ 1898.624284][T31104] __x64_sys_accept+0x74/0xb0 [ 1898.624302][T31104] ? lockdep_hardirqs_on+0x78/0x100 [ 1898.624328][T31104] do_syscall_64+0x106/0xf80 [ 1898.624350][T31104] ? clear_bhb_loop+0x40/0x90 [ 1898.624370][T31104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1898.624387][T31104] RIP: 0033:0x7f0bddd9c819 [ 1898.624401][T31104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1898.624416][T31104] RSP: 002b:00007f0bdec7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 1898.624433][T31104] RAX: ffffffffffffffda RBX: 00007f0bde015fa0 RCX: 00007f0bddd9c819 [ 1898.624443][T31104] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1898.624453][T31104] RBP: 00007f0bdec7a090 R08: 0000000000000000 R09: 0000000000000000 [ 1898.624462][T31104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1898.624471][T31104] R13: 00007f0bde016038 R14: 00007f0bde015fa0 R15: 00007ffcf6a461f8 [ 1898.624495][T31104] [ 1899.187022][T16527] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1899.291019][T18815] IPVS: starting estimator thread 0... [ 1899.303956][T31118] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1899.337002][ T5925] usb 6-1: new full-speed USB device number 111 using dummy_hcd [ 1899.357090][T16527] usb 7-1: Using ep0 maxpacket: 16 [ 1899.373692][T16527] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1899.392225][T31120] IPVS: using max 42 ests per chain, 100800 per kthread [ 1899.457362][T16527] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1899.471708][T16527] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1899.489476][T16527] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1899.500959][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1899.501238][T16527] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1899.522990][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 1899.541669][T16527] usb 7-1: config 0 descriptor?? [ 1899.547814][ T5925] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1899.563844][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1899.606100][ T5925] usb 6-1: config 0 descriptor?? [ 1900.027941][ T5925] ath6kl: Failed to submit usb control message: -71 [ 1900.035567][ T5925] ath6kl: unable to send the bmi data to the device: -71 [ 1900.043428][ T5925] ath6kl: Unable to send get target info: -71 [ 1900.061468][ T5925] ath6kl: Failed to init ath6kl core: -71 [ 1900.068886][ T5925] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1900.081874][ T5925] usb 6-1: USB disconnect, device number 111 [ 1900.860441][T16527] HID 045e:07da: Invalid code 65791 type 1 [ 1900.887124][T16527] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0093/input/input82 [ 1900.909883][T16527] microsoft 0003:045E:07DA.0093: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1901.009118][T31142] FAULT_INJECTION: forcing a failure. [ 1901.009118][T31142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1901.033771][T31142] CPU: 0 UID: 0 PID: 31142 Comm: syz.8.5813 Tainted: G L syzkaller #0 PREEMPT(full) [ 1901.033800][T31142] Tainted: [L]=SOFTLOCKUP [ 1901.033807][T31142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1901.033818][T31142] Call Trace: [ 1901.033825][T31142] [ 1901.033833][T31142] dump_stack_lvl+0x100/0x190 [ 1901.033867][T31142] should_fail_ex.cold+0x5/0xa [ 1901.033891][T31142] _copy_from_user+0x2e/0xd0 [ 1901.033912][T31142] do_devconfig_ioctl+0x11e/0x6d0 [ 1901.033931][T31142] ? comedi_unlocked_ioctl+0x180/0x3310 [ 1901.033954][T31142] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1901.033988][T31142] ? find_held_lock+0x2b/0x80 [ 1901.034017][T31142] comedi_unlocked_ioctl+0x860/0x3310 [ 1901.034040][T31142] ? tomoyo_path_number_perm+0x188/0x580 [ 1901.034070][T31142] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1901.034097][T31142] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1901.034126][T31142] ? do_vfs_ioctl+0x226/0x13e0 [ 1901.034153][T31142] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1901.034180][T31142] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1901.034215][T31142] ? __fget_files+0x215/0x3d0 [ 1901.034234][T31142] ? hook_file_ioctl_common+0x146/0x410 [ 1901.034267][T31142] ? selinux_file_ioctl+0x139/0x290 [ 1901.034293][T31142] ? selinux_file_ioctl+0xb4/0x290 [ 1901.034320][T31142] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1901.034344][T31142] __x64_sys_ioctl+0x18e/0x210 [ 1901.034374][T31142] do_syscall_64+0x106/0xf80 [ 1901.034401][T31142] ? clear_bhb_loop+0x40/0x90 [ 1901.034424][T31142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.034443][T31142] RIP: 0033:0x7f2782d9c819 [ 1901.034459][T31142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1901.034476][T31142] RSP: 002b:00007f2783cc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1901.034495][T31142] RAX: ffffffffffffffda RBX: 00007f2783015fa0 RCX: 00007f2782d9c819 [ 1901.034507][T31142] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003 [ 1901.034517][T31142] RBP: 00007f2783cc8090 R08: 0000000000000000 R09: 0000000000000000 [ 1901.034528][T31142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1901.034538][T31142] R13: 00007f2783016038 R14: 00007f2783015fa0 R15: 00007ffe120a6218 [ 1901.034564][T31142] [ 1901.265875][ T5922] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 1901.502633][T16527] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1901.938254][ T5922] usb 8-1: device descriptor read/64, error -71 [ 1901.940069][T31147] FAULT_INJECTION: forcing a failure. [ 1901.940069][T31147] name failslab, interval 1, probability 0, space 0, times 0 [ 1901.965151][T31147] CPU: 1 UID: 0 PID: 31147 Comm: syz.8.5815 Tainted: G L syzkaller #0 PREEMPT(full) [ 1901.965179][T31147] Tainted: [L]=SOFTLOCKUP [ 1901.965185][T31147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1901.965195][T31147] Call Trace: [ 1901.965201][T31147] [ 1901.965207][T31147] dump_stack_lvl+0x100/0x190 [ 1901.965239][T31147] should_fail_ex.cold+0x5/0xa [ 1901.965266][T31147] ? video_usercopy+0x1a3/0x1740 [ 1901.965288][T31147] should_failslab+0xc2/0x120 [ 1901.965307][T31147] __kmalloc_noprof+0xe0/0x850 [ 1901.965336][T31147] video_usercopy+0x1a3/0x1740 [ 1901.965360][T31147] ? __pfx___video_do_ioctl+0x10/0x10 [ 1901.965378][T31147] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1901.965396][T31147] ? __pfx_video_usercopy+0x10/0x10 [ 1901.965421][T31147] v4l2_ioctl+0x1bd/0x250 [ 1901.965437][T31147] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1901.965454][T31147] __x64_sys_ioctl+0x18e/0x210 [ 1901.965472][T31147] do_syscall_64+0x106/0xf80 [ 1901.965490][T31147] ? clear_bhb_loop+0x40/0x90 [ 1901.965505][T31147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.965517][T31147] RIP: 0033:0x7f2782d9c819 [ 1901.965527][T31147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1901.965537][T31147] RSP: 002b:00007f2783cc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1901.965548][T31147] RAX: ffffffffffffffda RBX: 00007f2783015fa0 RCX: 00007f2782d9c819 [ 1901.965555][T31147] RDX: 00002000000000c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 1901.965562][T31147] RBP: 00007f2783cc8090 R08: 0000000000000000 R09: 0000000000000000 [ 1901.965568][T31147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1901.965574][T31147] R13: 00007f2783016038 R14: 00007f2783015fa0 R15: 00007ffe120a6218 [ 1901.965588][T31147] [ 1902.359989][T16527] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1902.373955][T16527] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1902.384665][T16527] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1902.441946][ T5922] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 1902.466221][T16527] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1902.504425][T16527] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.513096][ T5816] usb 7-1: reset high-speed USB device number 37 using dummy_hcd [ 1902.555784][T16527] usb 3-1: Product: syz [ 1902.562453][T16527] usb 3-1: Manufacturer: syz [ 1902.567964][T16527] usb 3-1: SerialNumber: syz [ 1902.586610][T31139] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1902.607846][ T5922] usb 8-1: device descriptor read/64, error -71 [ 1902.615922][T31139] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1902.685555][T31154] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 1902.694789][T31154] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 1902.703438][T31154] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 1902.761801][ T5922] usb usb8-port1: attempt power cycle [ 1903.120227][T31164] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1903.127759][T31162] openvswitch: netlink: EtherType 0 is less than min 600 [ 1903.136672][T31139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1903.137326][T31162] random: crng reseeded on system resumption [ 1903.146089][T31139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1903.177525][ T5922] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 1903.471647][T24527] usb 7-1: USB disconnect, device number 37 [ 1903.509447][ T5922] usb 8-1: device descriptor read/8, error -71 [ 1903.603976][T31171] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5820'. [ 1903.710022][T31172] ubi31: attaching mtd0 [ 1903.732092][T31172] ubi31: scanning is finished [ 1903.746826][ T5922] usb 8-1: new high-speed USB device number 101 using dummy_hcd [ 1903.783815][ T5922] usb 8-1: device descriptor read/8, error -71 [ 1903.806889][T31172] ubi31: empty MTD device detected [ 1903.937856][T31176] xt_ecn: cannot match TCP bits for non-tcp packets [ 1903.968137][ T5922] usb usb8-port1: unable to enumerate USB device [ 1904.207266][T31172] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1904.245113][T31172] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1904.275149][T31172] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1904.322530][T31151] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 1904.334732][T31172] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1904.406207][T31172] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1904.416658][T31172] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1904.443624][T31172] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2822402558 [ 1904.482071][T31172] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1904.496516][T31151] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1904.587944][ T29] audit: type=1400 audit(1774975435.360:756): avc: denied { read write } for pid=18034 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1904.615392][T31151] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1904.653400][T31151] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1904.666507][ T29] audit: type=1400 audit(1774975435.370:757): avc: denied { open } for pid=18034 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1904.690767][T31151] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 148, setting to 64 [ 1904.690804][T31151] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1904.704207][T16527] rtl8150 3-1:1.0: couldn't reset the device [ 1904.722604][T31181] ubi31: background thread "ubi_bgt31d" started, PID 31181 [ 1904.747226][T31151] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1904.770943][ T29] audit: type=1400 audit(1774975435.370:758): avc: denied { ioctl } for pid=18034 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1904.838066][T16527] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 1904.846907][T31151] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1904.958825][T31151] usb 7-1: Product: syz [ 1904.963681][T31186] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5824'. [ 1904.994907][T31151] usb 7-1: Manufacturer: syz [ 1905.033132][T31151] usb 7-1: SerialNumber: syz [ 1905.039945][T16527] usb 3-1: USB disconnect, device number 84 [ 1905.054282][T31151] usb 7-1: config 0 descriptor?? [ 1905.074003][T31176] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1905.138258][ T29] audit: type=1400 audit(1774975435.710:759): avc: denied { prog_load } for pid=31183 comm="syz.2.5824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1905.317229][ T29] audit: type=1400 audit(1774975435.720:760): avc: denied { bpf } for pid=31183 comm="syz.2.5824" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1905.597536][T31151] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1905.616878][T31191] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5825'. [ 1905.634675][T31151] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 1905.667065][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 1905.687750][T31151] usb 7-1: USB disconnect, device number 38 [ 1906.051998][T31204] random: crng reseeded on system resumption [ 1906.956253][ T29] audit: type=1400 audit(1774975437.370:761): avc: denied { map_create } for pid=31201 comm="syz.8.5828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1908.378431][ T29] audit: type=1400 audit(1774975437.380:762): avc: denied { map_read map_write } for pid=31201 comm="syz.8.5828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1908.398770][ T29] audit: type=1400 audit(1774975437.530:763): avc: denied { perfmon } for pid=31201 comm="syz.8.5828" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1908.479877][T31213] openvswitch: netlink: EtherType 0 is less than min 600 [ 1908.560229][T31208] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5829'. [ 1908.904502][ T29] audit: type=1400 audit(1774975439.690:764): avc: denied { create } for pid=31216 comm="syz.8.5833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1909.145074][ T1296] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1909.160887][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1909.168465][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1909.183762][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 1909.428706][T31224] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5832'. [ 1909.810117][T31229] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1909.818816][T31229] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1909.827893][T31229] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1909.948369][T31232] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5836'. [ 1910.444027][T31243] FAULT_INJECTION: forcing a failure. [ 1910.444027][T31243] name failslab, interval 1, probability 0, space 0, times 0 [ 1910.514022][T31243] CPU: 1 UID: 0 PID: 31243 Comm: syz.6.5838 Tainted: G L syzkaller #0 PREEMPT(full) [ 1910.514054][T31243] Tainted: [L]=SOFTLOCKUP [ 1910.514061][T31243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1910.514072][T31243] Call Trace: [ 1910.514078][T31243] [ 1910.514086][T31243] dump_stack_lvl+0x100/0x190 [ 1910.514122][T31243] should_fail_ex.cold+0x5/0xa [ 1910.514148][T31243] should_failslab+0xc2/0x120 [ 1910.514168][T31243] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1910.514192][T31243] ? vhost_task_create+0xee/0x370 [ 1910.514216][T31243] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1910.514243][T31243] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1910.514278][T31243] vhost_task_create+0xee/0x370 [ 1910.514300][T31243] ? __pfx_vhost_task_create+0x10/0x10 [ 1910.514320][T31243] ? trace_contention_end+0x140/0x180 [ 1910.514347][T31243] ? __pfx_vhost_task_fn+0x10/0x10 [ 1910.514371][T31243] ? __pfx___mutex_lock+0x10/0x10 [ 1910.514388][T31243] ? kasan_quarantine_put+0x104/0x240 [ 1910.514414][T31243] ? lockdep_hardirqs_on+0x78/0x100 [ 1910.514447][T31243] kvm_mmu_post_init_vm+0x1b3/0x370 [ 1910.514470][T31243] kvm_arch_vcpu_ioctl_run+0x66/0x1830 [ 1910.514492][T31243] ? kvm_vcpu_ioctl+0x155c/0x1730 [ 1910.514524][T31243] kvm_vcpu_ioctl+0x730/0x1730 [ 1910.514553][T31243] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1910.514580][T31243] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1910.514609][T31243] ? do_vfs_ioctl+0x226/0x13e0 [ 1910.514637][T31243] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1910.514664][T31243] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1910.514701][T31243] ? __fget_files+0x215/0x3d0 [ 1910.514720][T31243] ? hook_file_ioctl_common+0x146/0x410 [ 1910.514747][T31243] ? selinux_file_ioctl+0x139/0x290 [ 1910.514773][T31243] ? selinux_file_ioctl+0xb4/0x290 [ 1910.514801][T31243] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1910.514828][T31243] __x64_sys_ioctl+0x18e/0x210 [ 1910.514858][T31243] do_syscall_64+0x106/0xf80 [ 1910.514885][T31243] ? clear_bhb_loop+0x40/0x90 [ 1910.514908][T31243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.514927][T31243] RIP: 0033:0x7f297b99c819 [ 1910.514943][T31243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1910.514961][T31243] RSP: 002b:00007f297c89a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1910.514979][T31243] RAX: ffffffffffffffda RBX: 00007f297bc15fa0 RCX: 00007f297b99c819 [ 1910.514991][T31243] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1910.515002][T31243] RBP: 00007f297c89a090 R08: 0000000000000000 R09: 0000000000000000 [ 1910.515013][T31243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1910.515023][T31243] R13: 00007f297bc16038 R14: 00007f297bc15fa0 R15: 00007ffc44d5bf58 [ 1910.515050][T31243] [ 1910.815278][T31246] xt_ecn: cannot match TCP bits for non-tcp packets [ 1911.212965][ T29] audit: type=1400 audit(1774975441.990:765): avc: denied { prog_run } for pid=31244 comm="syz.7.5839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1911.256829][ T5925] usb 6-1: new full-speed USB device number 112 using dummy_hcd [ 1912.028087][ T5925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1912.038303][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1912.060370][ T29] audit: type=1326 audit(1774975442.850:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.7.5843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7f99c819 code=0x7ffc0000 [ 1912.068176][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1912.132573][ T29] audit: type=1326 audit(1774975442.850:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.7.5843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7f99c819 code=0x7ffc0000 [ 1912.141142][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1912.319739][T31267] netlink: 'syz.7.5843': attribute type 1 has an invalid length. [ 1912.672030][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1912.787751][ T5925] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1912.797136][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1912.805276][ T5925] usb 6-1: Product: syz [ 1912.812059][ T5925] usb 6-1: Manufacturer: syz [ 1912.816682][ T5925] usb 6-1: SerialNumber: syz [ 1912.819933][ T29] audit: type=1326 audit(1774975442.880:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.7.5843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fbe7f99c819 code=0x7ffc0000 [ 1912.823685][ T5925] usb 6-1: config 0 descriptor?? [ 1912.946198][ T29] audit: type=1326 audit(1774975442.880:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.7.5843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7f99c819 code=0x7ffc0000 [ 1913.063103][ T5925] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1913.093502][ T5925] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1913.141843][ T5925] usb 6-1: USB disconnect, device number 112 [ 1913.180735][T31273] openvswitch: netlink: EtherType 0 is less than min 600 [ 1913.198903][T31273] random: crng reseeded on system resumption [ 1913.543830][ T29] audit: type=1326 audit(1774975442.880:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.7.5843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7f99c819 code=0x7ffc0000 [ 1913.567841][ T29] audit: type=1326 audit(1774975442.890:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.7.5843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbe7f99c819 code=0x7ffc0000 [ 1913.597073][ T29] audit: type=1326 audit(1774975442.890:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.7.5843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7f99c819 code=0x7ffc0000 [ 1913.680519][ T29] audit: type=1326 audit(1774975442.890:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.7.5843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7f99c819 code=0x7ffc0000 [ 1913.894575][T31276] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5846'. [ 1913.915826][ T29] audit: type=1326 audit(1774975442.890:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.7.5843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fbe7f99c819 code=0x7ffc0000 [ 1914.546893][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5360 ms [ 1914.554981][ C0] lec:lec_tx_timeout: lec0 [ 1915.470791][T31288] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1916.154427][T31305] random: crng reseeded on system resumption [ 1918.505538][ T29] audit: type=1400 audit(1774975449.290:775): avc: denied { read } for pid=31325 comm="syz.5.5858" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1918.640344][T31332] openvswitch: netlink: EtherType 0 is less than min 600 [ 1918.658296][T31332] random: crng reseeded on system resumption [ 1918.914568][ T29] audit: type=1400 audit(1774975449.290:776): avc: denied { open } for pid=31325 comm="syz.5.5858" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1919.028087][ T29] audit: type=1400 audit(1774975449.630:777): avc: denied { ioctl } for pid=31325 comm="syz.5.5858" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1919.170871][T31340] xt_ecn: cannot match TCP bits for non-tcp packets [ 1919.290612][T31349] blktrace: Concurrent blktraces are not allowed on loop5 [ 1919.593057][ T29] audit: type=1326 audit(1774975450.380:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31350 comm="syz.5.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bddd9c819 code=0x7ffc0000 [ 1919.779137][T31356] netlink: 'syz.5.5864': attribute type 1 has an invalid length. [ 1919.936971][T16527] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1919.987181][ T999] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1920.005727][ T29] audit: type=1326 audit(1774975450.380:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31350 comm="syz.5.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bddd9c819 code=0x7ffc0000 [ 1920.246867][ T29] audit: type=1326 audit(1774975450.380:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31350 comm="syz.5.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f0bddd9c819 code=0x7ffc0000 [ 1920.270716][ T5922] usb 8-1: new full-speed USB device number 102 using dummy_hcd [ 1920.331936][ T29] audit: type=1326 audit(1774975450.380:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31350 comm="syz.5.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bddd9c819 code=0x7ffc0000 [ 1920.396889][T16527] usb 3-1: Using ep0 maxpacket: 16 [ 1920.407895][ T29] audit: type=1326 audit(1774975450.380:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31350 comm="syz.5.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bddd9c819 code=0x7ffc0000 [ 1920.446836][T16527] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1920.454891][T16527] usb 3-1: config 0 has no interface number 0 [ 1920.709056][ T5922] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1920.713660][ T29] audit: type=1326 audit(1774975450.380:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31350 comm="syz.5.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0bddd9c819 code=0x7ffc0000 [ 1920.719377][T16527] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1920.744342][ T29] audit: type=1326 audit(1774975450.380:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31350 comm="syz.5.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bddd9c819 code=0x7ffc0000 [ 1920.752347][ T5922] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1920.831906][T16527] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.852183][T16527] usb 3-1: Product: syz [ 1920.856395][T16527] usb 3-1: Manufacturer: syz [ 1920.861161][ T5922] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1920.883162][T16527] usb 3-1: SerialNumber: syz [ 1920.893302][ T5922] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1920.913556][ T5922] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1920.945002][T16527] usb 3-1: config 0 descriptor?? [ 1920.982386][T16527] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1921.017874][ T5922] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1921.257021][ T5925] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1921.502326][ T5922] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1921.531915][T16527] gspca_spca1528: reg_w err -110 [ 1921.536930][ T5922] usb 8-1: Product: syz [ 1921.541155][ T5922] usb 8-1: Manufacturer: syz [ 1921.545749][ T5922] usb 8-1: SerialNumber: syz [ 1921.565421][ T5922] usb 8-1: config 0 descriptor?? [ 1921.571233][T16527] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 1921.602145][T16527] usb 3-1: USB disconnect, device number 85 [ 1921.716828][ T5925] usb 9-1: Using ep0 maxpacket: 16 [ 1921.753715][ T5925] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1921.766228][ T5925] usb 9-1: config 1 has an invalid descriptor of length 113, skipping remainder of the config [ 1921.800263][ T5925] usb 9-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 1921.812414][ T5925] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x87 has invalid maxpacket 22877, setting to 64 [ 1921.825450][ T5922] radio-si470x 8-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1921.836376][ T5925] usb 9-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 1921.839597][ T5922] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -5 [ 1921.845670][ T5925] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.883466][ T5925] usb 9-1: Product: syz [ 1921.888058][ T5925] usb 9-1: Manufacturer: syz [ 1921.893001][ T5925] usb 9-1: SerialNumber: syz [ 1921.920675][ T5922] usb 8-1: USB disconnect, device number 102 [ 1922.159378][ T5925] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1922.213117][ T5925] usb 9-1: USB disconnect, device number 42 [ 1922.553854][ T8914] udevd[8914]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1922.768623][T31381] fuse: Bad value for 'fd' [ 1922.780547][T31381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5871'. [ 1923.434924][T31388] openvswitch: netlink: EtherType 0 is less than min 600 [ 1923.444199][T31388] random: crng reseeded on system resumption [ 1923.927009][T16527] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1924.351941][T16527] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1924.477830][T16527] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1924.582393][T16527] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1924.602033][T16527] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1924.625366][T16527] usb 9-1: Manufacturer: syz [ 1924.644702][T16527] usb 9-1: config 0 descriptor?? [ 1924.887354][ T5913] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1924.963015][T31418] xt_ecn: cannot match TCP bits for non-tcp packets [ 1925.032462][T31419] random: crng reseeded on system resumption [ 1925.152439][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1925.152470][ T29] audit: type=1400 audit(1774975455.940:790): avc: denied { view } for pid=31392 comm="syz.8.5876" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1925.256903][T15843] usb 6-1: new full-speed USB device number 113 using dummy_hcd [ 1925.366606][ T5913] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1925.375871][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.383988][ T5913] usb 3-1: Product: syz [ 1925.388376][ T5913] usb 3-1: Manufacturer: syz [ 1925.393003][ T5913] usb 3-1: SerialNumber: syz [ 1925.405945][ T5913] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1925.418913][T15843] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1925.431984][T24527] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1925.436181][T15843] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1925.456589][T15843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1925.473889][T15843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1925.483861][T15843] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1925.499274][T15843] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1925.509666][T15843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1925.517927][T15843] usb 6-1: Product: syz [ 1925.522253][T15843] usb 6-1: Manufacturer: syz [ 1925.526927][T15843] usb 6-1: SerialNumber: syz [ 1925.536515][T15843] usb 6-1: config 0 descriptor?? [ 1925.604001][T16527] uclogic 0003:256C:006D.0094: failed retrieving Huion firmware version: -71 [ 1925.620017][T16527] uclogic 0003:256C:006D.0094: failed probing parameters: -71 [ 1925.630467][T16527] uclogic 0003:256C:006D.0094: probe with driver uclogic failed with error -71 [ 1925.644755][T16527] usb 9-1: USB disconnect, device number 43 [ 1925.671094][T31408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1925.687476][T31408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1925.696265][T31408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1925.707771][T31408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1925.727820][T31408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1925.736597][T31408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1925.787021][T31408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1925.797901][T31408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1925.811999][T15843] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1925.822856][T31408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1925.833928][T15843] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1925.853240][T31408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1925.868824][T15843] usb 6-1: USB disconnect, device number 113 [ 1926.266253][T16527] usb 3-1: USB disconnect, device number 86 [ 1926.467147][T24527] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1926.475801][T24527] ath9k_htc: Failed to initialize the device [ 1926.487191][T16527] usb 3-1: ath9k_htc: USB layer deinitialized [ 1926.913426][T31432] netlink: 4096 bytes leftover after parsing attributes in process `syz.7.5887'. [ 1927.677282][T16527] usb 8-1: new high-speed USB device number 103 using dummy_hcd [ 1927.695314][T31442] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5891'. [ 1927.836076][T31445] openvswitch: netlink: EtherType 0 is less than min 600 [ 1927.844675][T31445] random: crng reseeded on system resumption [ 1928.168477][T16527] usb 8-1: Using ep0 maxpacket: 16 [ 1928.215206][T16527] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1928.237038][T16527] usb 8-1: config 0 has no interface number 0 [ 1928.363649][T16527] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1928.367854][T31452] FAULT_INJECTION: forcing a failure. [ 1928.367854][T31452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1928.393365][T31452] CPU: 1 UID: 0 PID: 31452 Comm: syz.8.5893 Tainted: G L syzkaller #0 PREEMPT(full) [ 1928.393393][T31452] Tainted: [L]=SOFTLOCKUP [ 1928.393399][T31452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1928.393409][T31452] Call Trace: [ 1928.393415][T31452] [ 1928.393422][T31452] dump_stack_lvl+0x100/0x190 [ 1928.393453][T31452] should_fail_ex.cold+0x5/0xa [ 1928.393471][T31452] _copy_from_user+0x2e/0xd0 [ 1928.393484][T31452] dvb_usercopy+0x27e/0x340 [ 1928.393502][T31452] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1928.393515][T31452] ? __pfx_dvb_usercopy+0x10/0x10 [ 1928.393537][T31452] ? selinux_file_ioctl+0x139/0x290 [ 1928.393554][T31452] ? selinux_file_ioctl+0xb4/0x290 [ 1928.393573][T31452] dvb_demux_ioctl+0x29/0x40 [ 1928.393583][T31452] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1928.393593][T31452] __x64_sys_ioctl+0x18e/0x210 [ 1928.393612][T31452] do_syscall_64+0x106/0xf80 [ 1928.393629][T31452] ? clear_bhb_loop+0x40/0x90 [ 1928.393643][T31452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1928.393654][T31452] RIP: 0033:0x7f2782d9c819 [ 1928.393665][T31452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1928.393675][T31452] RSP: 002b:00007f2783cc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1928.393687][T31452] RAX: ffffffffffffffda RBX: 00007f2783015fa0 RCX: 00007f2782d9c819 [ 1928.393693][T31452] RDX: 00002000000000c0 RSI: 0000000040146f2c RDI: 0000000000000003 [ 1928.393700][T31452] RBP: 00007f2783cc8090 R08: 0000000000000000 R09: 0000000000000000 [ 1928.393706][T31452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1928.393712][T31452] R13: 00007f2783016038 R14: 00007f2783015fa0 R15: 00007ffe120a6218 [ 1928.393726][T31452] [ 1928.583567][T16527] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.591788][T16527] usb 8-1: Product: syz [ 1928.596111][T16527] usb 8-1: Manufacturer: syz [ 1928.600860][T16527] usb 8-1: SerialNumber: syz [ 1928.788789][T31459] xt_TCPMSS: Only works on TCP SYN packets [ 1929.023712][T16527] usb 8-1: config 0 descriptor?? [ 1929.358974][T31463] FAULT_INJECTION: forcing a failure. [ 1929.358974][T31463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1929.376237][T16527] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1929.385521][T31463] CPU: 0 UID: 0 PID: 31463 Comm: syz.5.5896 Tainted: G L syzkaller #0 PREEMPT(full) [ 1929.385550][T31463] Tainted: [L]=SOFTLOCKUP [ 1929.385562][T31463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1929.385569][T31463] Call Trace: [ 1929.385574][T31463] [ 1929.385578][T31463] dump_stack_lvl+0x100/0x190 [ 1929.385600][T31463] should_fail_ex.cold+0x5/0xa [ 1929.385615][T31463] _copy_from_iter+0x1f4/0x1690 [ 1929.385630][T31463] ? __asan_memset+0x23/0x50 [ 1929.385646][T31463] ? __pfx__copy_from_iter+0x10/0x10 [ 1929.385658][T31463] ? __pfx___alloc_skb+0x10/0x10 [ 1929.385677][T31463] netlink_sendmsg+0x808/0xda0 [ 1929.385697][T31463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1929.385713][T31463] ? __might_fault+0x90/0x140 [ 1929.385733][T31463] ____sys_sendmsg+0x9e1/0xb70 [ 1929.385744][T31463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1929.385762][T31463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1929.385779][T31463] ___sys_sendmsg+0x190/0x1e0 [ 1929.385792][T31463] ? __pfx____sys_sendmsg+0x10/0x10 [ 1929.385820][T31463] __sys_sendmsg+0x170/0x220 [ 1929.385835][T31463] ? __pfx___sys_sendmsg+0x10/0x10 [ 1929.385859][T31463] do_syscall_64+0x106/0xf80 [ 1929.385875][T31463] ? clear_bhb_loop+0x40/0x90 [ 1929.385889][T31463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1929.385901][T31463] RIP: 0033:0x7f0bddd9c819 [ 1929.385911][T31463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1929.385922][T31463] RSP: 002b:00007f0bdec7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1929.385933][T31463] RAX: ffffffffffffffda RBX: 00007f0bde015fa0 RCX: 00007f0bddd9c819 [ 1929.385940][T31463] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1929.385946][T31463] RBP: 00007f0bdec7a090 R08: 0000000000000000 R09: 0000000000000000 [ 1929.385953][T31463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1929.385959][T31463] R13: 00007f0bde016038 R14: 00007f0bde015fa0 R15: 00007ffcf6a461f8 [ 1929.385972][T31463] [ 1929.651470][T16527] gspca_spca1528: reg_w err -71 [ 1929.688520][T16527] spca1528 8-1:0.1: probe with driver spca1528 failed with error -71 [ 1929.699105][T16527] usb 8-1: USB disconnect, device number 103 [ 1934.320882][T10481] lec:lec_start_xmit: lec0:No lecd attached [ 1934.370642][T31500] FAULT_INJECTION: forcing a failure. [ 1934.370642][T31500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1934.406833][T31500] CPU: 1 UID: 0 PID: 31500 Comm: syz.7.5909 Tainted: G L syzkaller #0 PREEMPT(full) [ 1934.406866][T31500] Tainted: [L]=SOFTLOCKUP [ 1934.406872][T31500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1934.406883][T31500] Call Trace: [ 1934.406890][T31500] [ 1934.406898][T31500] dump_stack_lvl+0x100/0x190 [ 1934.406932][T31500] should_fail_ex.cold+0x5/0xa [ 1934.406962][T31500] _copy_to_iter+0x5a4/0x1720 [ 1934.406987][T31500] ? __pfx__copy_to_iter+0x10/0x10 [ 1934.407010][T31500] ? __skb_recv_datagram+0x1b2/0x220 [ 1934.407038][T31500] simple_copy_to_iter+0x46/0x90 [ 1934.407059][T31500] __skb_datagram_iter+0x129/0x900 [ 1934.407080][T31500] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1934.407104][T31500] ? skb_recv_datagram+0x88/0xc0 [ 1934.407128][T31500] skb_copy_datagram_iter+0xa1/0x270 [ 1934.407152][T31500] netlink_recvmsg+0x27e/0xa90 [ 1934.407181][T31500] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1934.407215][T31500] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1934.407242][T31500] sock_recvmsg+0x1a4/0x1f0 [ 1934.407262][T31500] ____sys_recvmsg+0x218/0x640 [ 1934.407285][T31500] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1934.407313][T31500] ? __lock_acquire+0x4a5/0x2630 [ 1934.407335][T31500] ___sys_recvmsg+0x16a/0x1a0 [ 1934.407355][T31500] ? __pfx____sys_recvmsg+0x10/0x10 [ 1934.407396][T31500] __sys_recvmsg+0x16d/0x220 [ 1934.407423][T31500] ? __pfx___sys_recvmsg+0x10/0x10 [ 1934.407465][T31500] do_syscall_64+0x106/0xf80 [ 1934.407492][T31500] ? clear_bhb_loop+0x40/0x90 [ 1934.407515][T31500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1934.407534][T31500] RIP: 0033:0x7fbe7f99c819 [ 1934.407551][T31500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1934.407568][T31500] RSP: 002b:00007fbe807a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1934.407594][T31500] RAX: ffffffffffffffda RBX: 00007fbe7fc15fa0 RCX: 00007fbe7f99c819 [ 1934.407606][T31500] RDX: 0000000000000100 RSI: 0000200000000080 RDI: 0000000000000003 [ 1934.407616][T31500] RBP: 00007fbe807a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1934.407627][T31500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1934.407638][T31500] R13: 00007fbe7fc16038 R14: 00007fbe7fc15fa0 R15: 00007ffea08e88c8 [ 1934.407662][T31500] [ 1935.321450][T31514] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1935.675842][T31515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5903'. [ 1936.323824][T31522] random: crng reseeded on system resumption [ 1936.804912][T31523] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5913'. [ 1937.384195][ T29] audit: type=1400 audit(1774975468.170:791): avc: denied { create } for pid=31525 comm="syz.8.5915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1937.404127][ T29] audit: type=1400 audit(1774975468.170:792): avc: denied { write } for pid=31525 comm="syz.8.5915" path="socket:[164873]" dev="sockfs" ino=164873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1937.526805][T31526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1937.683599][T31532] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1939.086622][T18815] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1939.390784][T18815] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1939.506759][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5180 ms [ 1939.514881][ C0] lec:lec_tx_timeout: lec0 [ 1939.615980][T18815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.644619][T18815] usb 3-1: config 0 descriptor?? [ 1939.658167][T18815] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1940.933333][T31563] random: crng reseeded on system resumption [ 1941.435106][T31539] 9p: Bad value for 'wfdno' [ 1941.531828][T31539] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1941.538365][T31539] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1941.546292][T31539] vhci_hcd vhci_hcd.0: Device attached [ 1941.559263][T31564] vhci_hcd: connection closed [ 1941.561462][T18815] usb 3-1: USB disconnect, device number 87 [ 1941.618188][ T999] vhci_hcd vhci_hcd.2: stop threads [ 1941.623406][ T999] vhci_hcd vhci_hcd.2: release socket [ 1941.650749][ T999] vhci_hcd vhci_hcd.2: disconnect device [ 1941.923267][T31573] random: crng reseeded on system resumption [ 1942.391095][T31574] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5926'. [ 1947.110527][T19861] Bluetooth: hci1: command 0x0406 tx timeout [ 1947.665341][T31608] overlayfs: failed to resolve './file0': -2 [ 1948.028261][T24527] usb 6-1: new low-speed USB device number 114 using dummy_hcd [ 1948.357369][T24527] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1948.366153][T24527] usb 6-1: config 0 has no interface number 0 [ 1948.385909][T24527] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1948.417871][T24527] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1948.500831][T24527] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1948.531545][T31619] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5931'. [ 1948.692125][T24527] usb 6-1: config 0 descriptor?? [ 1948.788288][T24527] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 1949.222494][T31627] random: crng reseeded on system resumption [ 1950.183038][T31605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1950.267159][T31605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1950.304472][T31605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1950.314983][T31605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1950.335624][T16527] usb 6-1: USB disconnect, device number 114 [ 1950.380453][T31637] FAULT_INJECTION: forcing a failure. [ 1950.380453][T31637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1950.403485][T31637] CPU: 0 UID: 0 PID: 31637 Comm: syz.7.5938 Tainted: G L syzkaller #0 PREEMPT(full) [ 1950.403515][T31637] Tainted: [L]=SOFTLOCKUP [ 1950.403521][T31637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1950.403532][T31637] Call Trace: [ 1950.403538][T31637] [ 1950.403546][T31637] dump_stack_lvl+0x100/0x190 [ 1950.403579][T31637] should_fail_ex.cold+0x5/0xa [ 1950.403603][T31637] _copy_from_user+0x2e/0xd0 [ 1950.403625][T31637] drm_ioctl+0x520/0xc60 [ 1950.403656][T31637] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1950.403679][T31637] ? __pfx_drm_ioctl+0x10/0x10 [ 1950.403705][T31637] ? selinux_file_ioctl+0x139/0x290 [ 1950.403729][T31637] ? selinux_file_ioctl+0xb4/0x290 [ 1950.403755][T31637] ? __pfx_drm_ioctl+0x10/0x10 [ 1950.403774][T31637] __x64_sys_ioctl+0x18e/0x210 [ 1950.403803][T31637] do_syscall_64+0x106/0xf80 [ 1950.403827][T31637] ? clear_bhb_loop+0x40/0x90 [ 1950.403847][T31637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1950.403865][T31637] RIP: 0033:0x7fbe7f99c819 [ 1950.403881][T31637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1950.403897][T31637] RSP: 002b:00007fbe807a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1950.403916][T31637] RAX: ffffffffffffffda RBX: 00007fbe7fc15fa0 RCX: 00007fbe7f99c819 [ 1950.403928][T31637] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000003 [ 1950.403939][T31637] RBP: 00007fbe807a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1950.403950][T31637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1950.403960][T31637] R13: 00007fbe7fc16038 R14: 00007fbe7fc15fa0 R15: 00007ffea08e88c8 [ 1950.403985][T31637] [ 1950.776918][T24527] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1951.267323][T24527] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1951.377852][T24527] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1951.431033][T24527] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1951.440380][T24527] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1951.448831][T24527] usb 3-1: SerialNumber: syz [ 1951.502281][T24527] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1951.528540][T24527] usb-storage 3-1:1.0: USB Mass Storage device detected [ 1951.529471][T30052] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1952.524802][T24527] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1952.534982][T24527] scsi host1: usb-storage 3-1:1.0 [ 1952.649275][T10975] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1952.999860][T31672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5943'. [ 1953.151133][T31673] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1953.928791][ T5913] usb 3-1: USB disconnect, device number 88 [ 1953.978674][T31681] random: crng reseeded on system resumption [ 1954.027033][T16527] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1954.188582][T16527] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1954.202736][T16527] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1954.216247][T16527] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1954.227834][T16527] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1954.236192][T16527] usb 6-1: Manufacturer: syz [ 1954.245345][T16527] usb 6-1: config 0 descriptor?? [ 1954.447057][ T5913] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1954.549845][T19861] Bluetooth: hci1: command 0x0406 tx timeout [ 1954.616770][ T5913] usb 7-1: Using ep0 maxpacket: 16 [ 1954.624020][ T5913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1954.638273][ T5913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1954.729819][ T5913] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1954.747020][T16527] usbhid 6-1:0.0: can't add hid device: -71 [ 1954.749676][ T5925] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1954.753114][T16527] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1954.771206][ T5913] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1954.783713][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.786228][T16527] usb 6-1: USB disconnect, device number 115 [ 1954.804551][ T5913] usb 7-1: config 0 descriptor?? [ 1955.276791][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 1955.291315][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1955.306847][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1955.323936][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1955.337911][T31683] binder: 31682:31683 unknown command 0 [ 1955.343453][T31683] binder: 31682:31683 ioctl c0306201 200000000080 returned -22 [ 1955.365031][ T5925] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1955.379517][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1955.386664][T31683] binder: 31682:31683 ioctl 4018620d 0 returned -22 [ 1955.415916][ T5925] usb 3-1: config 0 descriptor?? [ 1955.510015][ T5913] HID 045e:07da: Invalid code 65791 type 1 [ 1955.521234][ T5913] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0095/input/input83 [ 1956.193799][T31690] binder: 31689:31690 unknown command 0 [ 1956.210412][T31690] binder: 31689:31690 ioctl c0306201 200000000080 returned -22 [ 1956.237630][ T5913] microsoft 0003:045E:07DA.0095: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1956.272249][T31690] binder: 31689:31690 ioctl 4018620d 0 returned -22 [ 1956.622298][ T5925] HID 045e:07da: Invalid code 65791 type 1 [ 1956.816666][ T5925] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0096/input/input84 [ 1956.927076][T15843] usb 7-1: reset high-speed USB device number 39 using dummy_hcd [ 1956.938944][ T5925] microsoft 0003:045E:07DA.0096: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1956.974706][T31712] FAULT_INJECTION: forcing a failure. [ 1956.974706][T31712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1957.060797][T31712] CPU: 0 UID: 0 PID: 31712 Comm: syz.7.5960 Tainted: G L syzkaller #0 PREEMPT(full) [ 1957.060826][T31712] Tainted: [L]=SOFTLOCKUP [ 1957.060832][T31712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1957.060841][T31712] Call Trace: [ 1957.060847][T31712] [ 1957.060854][T31712] dump_stack_lvl+0x100/0x190 [ 1957.060889][T31712] should_fail_ex.cold+0x5/0xa [ 1957.060912][T31712] _copy_to_user+0x32/0xd0 [ 1957.060935][T31712] simple_read_from_buffer+0xcb/0x170 [ 1957.060957][T31712] proc_fail_nth_read+0x1af/0x230 [ 1957.060982][T31712] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1957.061009][T31712] ? rw_verify_area+0xce/0x6d0 [ 1957.061033][T31712] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1957.061058][T31712] vfs_read+0x1e4/0xb30 [ 1957.061088][T31712] ? __pfx_vfs_read+0x10/0x10 [ 1957.061115][T31712] ? __fget_files+0x215/0x3d0 [ 1957.061142][T31712] ? __fget_files+0x21f/0x3d0 [ 1957.061169][T31712] ksys_read+0x12a/0x250 [ 1957.061186][T31712] ? __pfx_ksys_read+0x10/0x10 [ 1957.061210][T31712] do_syscall_64+0x106/0xf80 [ 1957.061236][T31712] ? clear_bhb_loop+0x40/0x90 [ 1957.061254][T31712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1957.061269][T31712] RIP: 0033:0x7fbe7f95d04e [ 1957.061283][T31712] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1957.061297][T31712] RSP: 002b:00007fbe807a0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1957.061313][T31712] RAX: ffffffffffffffda RBX: 00007fbe807a16c0 RCX: 00007fbe7f95d04e [ 1957.061324][T31712] RDX: 000000000000000f RSI: 00007fbe807a10a0 RDI: 0000000000000005 [ 1957.061334][T31712] RBP: 00007fbe807a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1957.061343][T31712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1957.061352][T31712] R13: 00007fbe7fc16038 R14: 00007fbe7fc15fa0 R15: 00007ffea08e88c8 [ 1957.061373][T31712] [ 1957.727906][T31716] ucma_write: process 1077 (syz.5.5962) changed security contexts after opening file descriptor, this is not allowed. [ 1958.146970][ T5925] usb 3-1: reset high-speed USB device number 89 using dummy_hcd [ 1958.485649][T31734] random: crng reseeded on system resumption [ 1958.528564][T14032] usb 7-1: USB disconnect, device number 39 [ 1959.049549][T18815] usb 3-1: USB disconnect, device number 89 [ 1961.416793][T18815] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1961.601369][T18815] usb 6-1: Using ep0 maxpacket: 16 [ 1961.621390][T18815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1961.657119][T18815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1961.689471][T18815] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1961.848248][T18815] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1961.927126][T18815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1962.047800][T18815] usb 6-1: config 0 descriptor?? [ 1962.209376][T31776] openvswitch: netlink: EtherType 0 is less than min 600 [ 1962.217990][T31776] random: crng reseeded on system resumption [ 1962.468271][T31783] random: crng reseeded on system resumption [ 1962.501099][T31764] binder: 31763:31764 unknown command 0 [ 1962.506678][T31764] binder: 31763:31764 ioctl c0306201 200000000080 returned -22 [ 1962.617950][ T5925] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 1962.642345][T31764] binder: 31763:31764 ioctl 4018620d 0 returned -22 [ 1963.064831][ T5925] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1963.103326][ T5925] usb 7-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1963.138630][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.196445][ T5925] usb 7-1: Product: syz [ 1963.200781][ T5925] usb 7-1: Manufacturer: syz [ 1963.217501][ T5925] usb 7-1: SerialNumber: syz [ 1963.245746][ T5925] usb 7-1: config 0 descriptor?? [ 1963.255284][T18815] HID 045e:07da: Invalid code 65791 type 1 [ 1963.267633][T18815] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0097/input/input85 [ 1963.289883][T18815] microsoft 0003:045E:07DA.0097: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1963.376997][ T5922] usb 9-1: new full-speed USB device number 44 using dummy_hcd [ 1963.504674][T31779] binder: 31778:31779 ioctl c0306201 0 returned -14 [ 1963.539498][ T5925] cdc_subset 7-1:0.0: probe with driver cdc_subset failed with error -71 [ 1963.619440][ T5925] usb 7-1: USB disconnect, device number 40 [ 1963.620550][ T5922] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1963.662019][ T5922] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1963.686127][ T5922] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1963.696114][ T5922] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1963.716930][ T5922] usb 9-1: SerialNumber: syz [ 1963.772621][ T5922] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 1963.808488][ T5922] usb-storage 9-1:1.0: USB Mass Storage device detected [ 1963.841474][ T5922] usb-storage 9-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1963.864140][ T5922] scsi host1: usb-storage 9-1:1.0 [ 1963.937442][T31804] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5985'. [ 1964.041615][T19861] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1964.576019][T31822] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5974'. [ 1964.706804][T18815] usb 6-1: reset high-speed USB device number 116 using dummy_hcd [ 1965.140934][T30052] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1965.155325][T30052] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1965.166452][T30052] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1965.174367][T30052] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1965.231219][T30052] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1965.382799][T31824] lo speed is unknown, defaulting to 1000 [ 1965.967942][ T5922] usb 9-1: USB disconnect, device number 44 [ 1966.123460][T31841] random: crng reseeded on system resumption [ 1966.477783][T18819] usb 6-1: USB disconnect, device number 116 [ 1966.649608][T31840] openvswitch: netlink: EtherType 0 is less than min 600 [ 1966.953761][T18158] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1967.903228][T19861] Bluetooth: hci5: command tx timeout [ 1967.948127][T18158] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.520454][T31860] FAULT_INJECTION: forcing a failure. [ 1968.520454][T31860] name failslab, interval 1, probability 0, space 0, times 0 [ 1968.539835][ T29] audit: type=1326 audit(1774975499.330:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31858 comm="syz.8.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782d9c819 code=0x7ffc0000 [ 1968.563681][ T29] audit: type=1326 audit(1774975499.330:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31858 comm="syz.8.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782d9c819 code=0x7ffc0000 [ 1968.587901][ T29] audit: type=1326 audit(1774975499.330:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31858 comm="syz.8.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f2782d9c819 code=0x7ffc0000 [ 1968.611451][ T29] audit: type=1326 audit(1774975499.330:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31858 comm="syz.8.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782d9c819 code=0x7ffc0000 [ 1968.755870][ T29] audit: type=1326 audit(1774975499.330:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31858 comm="syz.8.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782d9c819 code=0x7ffc0000 [ 1969.175738][ T29] audit: type=1326 audit(1774975499.360:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31858 comm="syz.8.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2782d9c819 code=0x7ffc0000 [ 1969.199631][T31860] CPU: 0 UID: 0 PID: 31860 Comm: syz.7.5998 Tainted: G L syzkaller #0 PREEMPT(full) [ 1969.199661][T31860] Tainted: [L]=SOFTLOCKUP [ 1969.199666][T31860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1969.199676][T31860] Call Trace: [ 1969.199681][T31860] [ 1969.199695][T31860] dump_stack_lvl+0x100/0x190 [ 1969.199724][T31860] should_fail_ex.cold+0x5/0xa [ 1969.199743][T31860] should_failslab+0xc2/0x120 [ 1969.199758][T31860] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1969.199776][T31860] ? alloc_pipe_info+0x10e/0x590 [ 1969.199795][T31860] alloc_pipe_info+0x10e/0x590 [ 1969.199812][T31860] splice_direct_to_actor+0x78f/0xa30 [ 1969.199830][T31860] ? __lock_acquire+0x4a5/0x2630 [ 1969.199843][T31860] ? __pfx_direct_splice_actor+0x10/0x10 [ 1969.199862][T31860] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1969.199883][T31860] do_splice_direct+0x174/0x240 [ 1969.199899][T31860] ? __pfx_do_splice_direct+0x10/0x10 [ 1969.199914][T31860] ? avc_policy_seqno+0x9/0x20 [ 1969.199929][T31860] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1969.199946][T31860] ? bpf_lsm_file_permission+0x9/0x10 [ 1969.199967][T31860] ? security_file_permission+0x76/0x210 [ 1969.199988][T31860] ? rw_verify_area+0xce/0x6d0 [ 1969.200010][T31860] do_sendfile+0xadc/0xe20 [ 1969.200034][T31860] ? __pfx_do_sendfile+0x10/0x10 [ 1969.200055][T31860] ? __fget_files+0x21f/0x3d0 [ 1969.200075][T31860] __x64_sys_sendfile64+0x1d8/0x220 [ 1969.200091][T31860] ? ksys_write+0x1ac/0x250 [ 1969.200104][T31860] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1969.200126][T31860] do_syscall_64+0x106/0xf80 [ 1969.200146][T31860] ? clear_bhb_loop+0x40/0x90 [ 1969.200163][T31860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1969.200177][T31860] RIP: 0033:0x7fbe7f99c819 [ 1969.200189][T31860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1969.200203][T31860] RSP: 002b:00007fbe7dbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1969.200218][T31860] RAX: ffffffffffffffda RBX: 00007fbe7fc16180 RCX: 00007fbe7f99c819 [ 1969.200227][T31860] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 1969.200235][T31860] RBP: 00007fbe7dbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1969.200243][T31860] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 1969.200252][T31860] R13: 00007fbe7fc16218 R14: 00007fbe7fc16180 R15: 00007ffea08e88c8 [ 1969.200275][T31860] [ 1969.470939][ T29] audit: type=1326 audit(1774975499.360:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31858 comm="syz.8.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782d9c819 code=0x7ffc0000 [ 1969.494695][ T29] audit: type=1326 audit(1774975499.360:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31858 comm="syz.8.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782d9c819 code=0x7ffc0000 [ 1969.518777][ T29] audit: type=1326 audit(1774975499.380:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31858 comm="syz.8.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2782d9c819 code=0x7ffc0000 [ 1969.542250][ T29] audit: type=1326 audit(1774975500.260:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31858 comm="syz.8.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782d9c819 code=0x7ffc0000 [ 1969.618772][T18158] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1969.669996][T18158] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1969.738354][T31865] netlink: 'syz.8.6000': attribute type 1 has an invalid length. [ 1969.994788][T30052] Bluetooth: hci5: command tx timeout [ 1970.143581][T31824] chnl_net:caif_netlink_parms(): no params data found [ 1970.659050][ T1296] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1970.669366][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1970.688159][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1970.713787][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 1970.967917][T18158] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1971.069021][T18158] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1971.337921][T18158] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1971.616907][T18815] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1971.765034][T31888] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6006'. [ 1971.796873][T18158] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1971.813761][T30052] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1971.860721][T31824] bridge0: port 1(bridge_slave_0) entered blocking state [ 1971.878220][T31824] bridge0: port 1(bridge_slave_0) entered disabled state [ 1971.885777][T31824] bridge_slave_0: entered allmulticast mode [ 1971.893525][T31824] bridge_slave_0: entered promiscuous mode [ 1971.903059][T31824] bridge0: port 2(bridge_slave_1) entered blocking state [ 1971.910680][T31824] bridge0: port 2(bridge_slave_1) entered disabled state [ 1971.918042][T31824] bridge_slave_1: entered allmulticast mode [ 1971.925315][T31824] bridge_slave_1: entered promiscuous mode [ 1971.937496][T18815] usb 9-1: Using ep0 maxpacket: 8 [ 1971.955282][T18815] usb 9-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1971.965067][T31824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1971.979689][T31824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1972.011567][T18815] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1972.015543][T31824] team0: Port device team_slave_0 added [ 1972.031991][T31824] team0: Port device team_slave_1 added [ 1973.551897][T30052] Bluetooth: hci5: command tx timeout [ 1973.587606][T18815] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1973.625037][T18815] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1973.750499][T31824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1973.756999][T18815] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 55, changing to 9 [ 1973.766898][T31824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1973.770801][T18815] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 8496, setting to 1024 [ 1973.813997][T18815] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1973.829272][T18815] usb 9-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1973.831042][T31824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1973.838708][T18815] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.857181][T18815] usb 9-1: Product: syz [ 1973.861423][T18815] usb 9-1: Manufacturer: syz [ 1973.866061][T18815] usb 9-1: SerialNumber: syz [ 1973.869406][T31824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1973.886951][T31824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1973.897301][T18815] usb 9-1: config 0 descriptor?? [ 1973.941826][T31824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1974.087325][T31893] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1974.189336][T31824] hsr_slave_0: entered promiscuous mode [ 1974.230332][T30052] Bluetooth: hci1: Unknown advertising packet type: 0x11 [ 1974.230436][T30052] Bluetooth: hci1: Unknown advertising packet type: 0x17 [ 1974.240910][T30052] Bluetooth: hci1: Unknown advertising packet type: 0x1d [ 1974.248743][T30052] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1974.273267][T31824] hsr_slave_1: entered promiscuous mode [ 1974.305425][T31824] debugfs: 'hsr0' already exists in 'hsr' [ 1974.334872][T31824] Cannot create hsr debugfs directory [ 1974.409976][T18158] bridge_slave_1: left allmulticast mode [ 1974.455434][T18158] bridge_slave_1: left promiscuous mode [ 1974.500592][T18158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1974.614096][T18158] bridge_slave_0: left allmulticast mode [ 1974.636795][T18158] bridge_slave_0: left promiscuous mode [ 1974.646186][T18158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1974.956433][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1974.956449][ T29] audit: type=1326 audit(1774975505.740:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31919 comm="syz.7.6014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7f99c819 code=0x7ffc0000 [ 1975.526097][T31926] fuse: Bad value for 'fd' [ 1975.551811][ T29] audit: type=1326 audit(1774975505.740:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31919 comm="syz.7.6014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7f99c819 code=0x7ffc0000 [ 1975.552880][T31926] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6010'. [ 1975.584797][ T29] audit: type=1326 audit(1774975505.770:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31919 comm="syz.7.6014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fbe7f99c819 code=0x7ffc0000 [ 1975.592707][T30052] Bluetooth: hci5: command tx timeout [ 1975.623454][ T29] audit: type=1326 audit(1774975505.770:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31919 comm="syz.7.6014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7f99c819 code=0x7ffc0000 [ 1975.651547][ T29] audit: type=1326 audit(1774975505.770:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31919 comm="syz.7.6014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7f99c819 code=0x7ffc0000 [ 1975.678259][ T29] audit: type=1326 audit(1774975505.780:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31919 comm="syz.7.6014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbe7f99c819 code=0x7ffc0000 [ 1975.702259][ T29] audit: type=1326 audit(1774975505.780:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31919 comm="syz.7.6014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7f99c819 code=0x7ffc0000 [ 1975.733434][ T29] audit: type=1326 audit(1774975505.780:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31919 comm="syz.7.6014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7f99c819 code=0x7ffc0000 [ 1975.797959][ T29] audit: type=1326 audit(1774975505.780:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31919 comm="syz.7.6014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fbe7f99c819 code=0x7ffc0000 [ 1975.825784][ T29] audit: type=1326 audit(1774975506.580:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31919 comm="syz.7.6014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7f99c819 code=0x7ffc0000 [ 1975.860418][T18158] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1975.873118][T18158] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1975.883701][T18158] .` (unregistering): Released all slaves [ 1976.003685][T31927] netlink: 'syz.7.6014': attribute type 1 has an invalid length. [ 1976.155150][T18158] : left promiscuous mode [ 1976.258437][T14032] usb 6-1: new full-speed USB device number 117 using dummy_hcd [ 1976.430139][T14032] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1976.546760][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 1976.546821][T14032] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1976.554780][ C0] lec:lec_tx_timeout: lec0 [ 1976.575748][T14032] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1976.585203][T14032] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1976.593492][T14032] usb 6-1: SerialNumber: syz [ 1976.606817][T18815] rc_core: IR keymap rc-snapstream-firefly not found [ 1976.613979][T18815] Registered IR keymap rc-empty [ 1976.649020][T14032] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1976.667347][T18815] rc rc0: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1976.934165][T14032] usb-storage 6-1:1.0: USB Mass Storage device detected [ 1977.133818][T14032] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1977.142418][T18815] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input86 [ 1977.175012][T14032] scsi host1: usb-storage 6-1:1.0 [ 1978.951501][T31966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6015'. [ 1979.010670][T18815] input: syz syz mouse as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input87 [ 1979.085158][T18815] usb 9-1: USB disconnect, device number 45 [ 1979.085212][ C1] ati_remote 9-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 1980.266864][T18815] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1981.390178][T18158] hsr_slave_0: left promiscuous mode [ 1981.406568][T18815] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1981.441242][T18815] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1981.452153][T18815] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1981.453629][T18158] hsr_slave_1: left promiscuous mode [ 1981.461500][T18815] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1981.475586][T18815] usb 9-1: Manufacturer: syz [ 1981.483272][T18815] usb 9-1: config 0 descriptor?? [ 1981.508068][T18158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1981.515545][T18158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1981.614633][T18158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1981.649749][T18158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1981.739336][T18158] veth1_macvtap: left promiscuous mode [ 1981.744873][T18158] veth0_macvtap: left promiscuous mode [ 1981.756963][T18158] veth1_vlan: left promiscuous mode [ 1981.762255][T18158] veth0_vlan: left promiscuous mode [ 1981.907032][T18815] usbhid 9-1:0.0: can't add hid device: -71 [ 1981.914555][T18815] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1981.960030][T18815] usb 9-1: USB disconnect, device number 46 [ 1982.089094][T16527] usb 6-1: USB disconnect, device number 117 [ 1982.479124][T18158] team0 (unregistering): Port device team_slave_1 removed [ 1982.516345][T18158] team0 (unregistering): Port device team_slave_0 removed [ 1982.553504][T32003] fuse: Bad value for 'fd' [ 1982.932758][T32003] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6027'. [ 1983.437042][T16527] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1983.790994][T31824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1983.810621][T31824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1985.291952][ T104] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1985.316829][T16527] usb 7-1: Using ep0 maxpacket: 16 [ 1985.336529][T31824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1985.393239][T16527] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1985.407676][T31824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1985.426054][T16527] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1985.477668][T16527] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1985.545370][T16527] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1985.608553][T16527] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1985.647408][T16527] usb 7-1: config 0 descriptor?? [ 1985.942888][T31824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1986.423420][T18158] IPVS: stop unused estimator thread 0... [ 1986.441723][T31824] 8021q: adding VLAN 0 to HW filter on device team0 [ 1986.454499][T32013] binder: 32012:32013 unknown command 0 [ 1986.476841][T32013] binder: 32012:32013 ioctl c0306201 200000000080 returned -22 [ 1986.504074][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1986.511286][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1986.570373][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1986.577570][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1986.690676][T16527] HID 045e:07da: Invalid code 65791 type 1 [ 1986.726053][T16527] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0098/input/input88 [ 1986.813865][T16527] microsoft 0003:045E:07DA.0098: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1987.084917][T32055] FAULT_INJECTION: forcing a failure. [ 1987.084917][T32055] name failslab, interval 1, probability 0, space 0, times 0 [ 1987.186000][T32055] CPU: 0 UID: 0 PID: 32055 Comm: syz.7.6034 Tainted: G L syzkaller #0 PREEMPT(full) [ 1987.186030][T32055] Tainted: [L]=SOFTLOCKUP [ 1987.186036][T32055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1987.186046][T32055] Call Trace: [ 1987.186053][T32055] [ 1987.186060][T32055] dump_stack_lvl+0x100/0x190 [ 1987.186094][T32055] should_fail_ex.cold+0x5/0xa [ 1987.186119][T32055] should_failslab+0xc2/0x120 [ 1987.186136][T32055] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1987.186161][T32055] ? alloc_empty_file+0x55/0x1c0 [ 1987.186181][T32055] ? __pfx_stack_trace_save+0x10/0x10 [ 1987.186209][T32055] alloc_empty_file+0x55/0x1c0 [ 1987.186231][T32055] path_openat+0xe8/0x31a0 [ 1987.186251][T32055] ? kasan_save_stack+0x3f/0x50 [ 1987.186277][T32055] ? kasan_save_stack+0x30/0x50 [ 1987.186303][T32055] ? kasan_save_track+0x14/0x30 [ 1987.186328][T32055] ? __kasan_slab_alloc+0x89/0x90 [ 1987.186345][T32055] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1987.186370][T32055] ? do_getname+0x35/0x390 [ 1987.186392][T32055] ? do_sys_openat2+0xc5/0x1e0 [ 1987.186415][T32055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1987.186438][T32055] ? __pfx_path_openat+0x10/0x10 [ 1987.186468][T32055] do_file_open+0x20e/0x430 [ 1987.186498][T32055] ? __pfx_do_file_open+0x10/0x10 [ 1987.186538][T32055] ? alloc_fd+0x476/0x790 [ 1987.186562][T32055] ? do_getname+0x191/0x390 [ 1987.186588][T32055] do_sys_openat2+0x10d/0x1e0 [ 1987.186612][T32055] ? __pfx_do_sys_openat2+0x10/0x10 [ 1987.186634][T32055] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1987.186667][T32055] ? __fget_files+0x21f/0x3d0 [ 1987.186693][T32055] __x64_sys_openat+0x12d/0x210 [ 1987.186714][T32055] ? __pfx___x64_sys_openat+0x10/0x10 [ 1987.186733][T32055] ? ksys_write+0x1ac/0x250 [ 1987.186756][T32055] do_syscall_64+0x106/0xf80 [ 1987.186781][T32055] ? clear_bhb_loop+0x40/0x90 [ 1987.186802][T32055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1987.186820][T32055] RIP: 0033:0x7fbe7f99c819 [ 1987.186836][T32055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1987.186852][T32055] RSP: 002b:00007fbe80780028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1987.186868][T32055] RAX: ffffffffffffffda RBX: 00007fbe7fc16090 RCX: 00007fbe7f99c819 [ 1987.186879][T32055] RDX: 0000000000000000 RSI: 0000200000004280 RDI: ffffffffffffff9c [ 1987.186890][T32055] RBP: 00007fbe80780090 R08: 0000000000000000 R09: 0000000000000000 [ 1987.186900][T32055] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1987.186910][T32055] R13: 00007fbe7fc16128 R14: 00007fbe7fc16090 R15: 00007ffea08e88c8 [ 1987.186935][T32055] [ 1988.157285][T16527] usb 7-1: reset high-speed USB device number 41 using dummy_hcd [ 1989.540767][T31824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1989.633782][ T5922] usb 7-1: USB disconnect, device number 41 [ 1989.788987][T31824] veth0_vlan: entered promiscuous mode [ 1989.857756][T32079] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1989.866933][T32079] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1989.875702][T32079] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1989.961711][T31824] veth1_vlan: entered promiscuous mode [ 1991.035742][T31824] veth0_macvtap: entered promiscuous mode [ 1991.059641][T31824] veth1_macvtap: entered promiscuous mode [ 1991.099517][T31824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1991.199263][T31824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1991.578989][ T2997] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1991.618493][ T2997] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1991.647222][ T2997] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1991.690342][ T2997] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1991.776739][T30052] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1991.950043][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1991.978377][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1992.057712][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1992.082268][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1992.327020][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1992.327038][ T29] audit: type=1400 audit(1774975523.110:815): avc: denied { mounton } for pid=31824 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1992.716933][ T5925] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1993.207370][ T5925] usb 7-1: Using ep0 maxpacket: 16 [ 1993.605700][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1993.637968][T32122] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6037'. [ 1993.655194][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1993.700517][ T5925] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1993.757192][ T5925] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1993.793967][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1993.921759][ T5925] usb 7-1: config 0 descriptor?? [ 1994.650452][T32111] binder: 32110:32111 unknown command 0 [ 1994.728544][T32111] binder: 32110:32111 ioctl c0306201 200000000080 returned -22 [ 1995.138434][ T5925] HID 045e:07da: Invalid code 65791 type 1 [ 1995.149107][ T5925] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0099/input/input89 [ 1995.198020][ T5925] microsoft 0003:045E:07DA.0099: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1995.309486][T32148] xt_ecn: cannot match TCP bits for non-tcp packets [ 1995.570040][ T5925] usb 6-1: new full-speed USB device number 118 using dummy_hcd [ 1995.754608][ T5925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1995.770148][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1995.789035][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1995.820806][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1995.855380][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1995.897501][ T5925] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1995.910266][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1995.926530][ T5925] usb 6-1: Product: syz [ 1995.941500][ T5925] usb 6-1: Manufacturer: syz [ 1995.962225][ T5925] usb 6-1: SerialNumber: syz [ 1995.985724][ T5925] usb 6-1: config 0 descriptor?? [ 1996.211967][ T5925] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1996.227879][ T5925] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1996.271108][ T5925] usb 6-1: USB disconnect, device number 118 [ 1996.396897][T14032] usb 7-1: reset high-speed USB device number 42 using dummy_hcd [ 1996.687824][T32164] random: crng reseeded on system resumption [ 1998.544751][ T29] audit: type=1800 audit(1774975528.990:816): pid=32176 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.6055" name="bus" dev="overlay" ino=1869 res=0 errno=0 [ 1998.720825][T10481] lec:lec_start_xmit: lec0:No lecd attached [ 1998.813996][T18815] usb 7-1: USB disconnect, device number 42 [ 1999.274137][T32187] input: syz1 as /devices/virtual/input/input90 [ 2000.624643][T32202] nfs: Unknown parameter 'losk' [ 2002.256894][T31151] usb 8-1: new high-speed USB device number 104 using dummy_hcd [ 2002.310263][T32221] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6058'. [ 2002.347422][ T5913] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 2002.396837][T31151] usb 8-1: device descriptor read/64, error -71 [ 2002.518637][ T5913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2002.539535][ T5913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2002.563068][ T5913] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2002.590924][ T5913] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2002.614828][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2002.640446][ T5913] usb 7-1: config 0 descriptor?? [ 2002.646899][T31151] usb 8-1: new high-speed USB device number 105 using dummy_hcd [ 2002.787702][T31151] usb 8-1: device descriptor read/64, error -71 [ 2002.897376][T31151] usb usb8-port1: attempt power cycle [ 2003.068736][ T5913] plantronics 0003:047F:FFFF.009A: reserved main item tag 0xd [ 2003.139427][ T29] audit: type=1400 audit(1774975533.900:817): avc: denied { accept } for pid=32223 comm="syz.5.6069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2003.177155][ T5913] plantronics 0003:047F:FFFF.009A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 2003.285035][T31151] usb 8-1: new high-speed USB device number 106 using dummy_hcd [ 2003.308946][T31151] usb 8-1: device descriptor read/8, error -71 [ 2003.633028][ T5913] usb 7-1: USB disconnect, device number 43 [ 2003.886882][T31151] usb 8-1: new high-speed USB device number 107 using dummy_hcd [ 2003.907264][T31151] usb 8-1: device descriptor read/8, error -71 [ 2004.047613][T31151] usb usb8-port1: unable to enumerate USB device [ 2004.546730][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 2004.554806][ C0] lec:lec_tx_timeout: lec0 [ 2006.488876][ T29] audit: type=1800 audit(1774975536.920:818): pid=32249 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.6074" name="bus" dev="overlay" ino=1894 res=0 errno=0 [ 2008.673567][ T29] audit: type=1800 audit(1774975539.020:819): pid=32260 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.6078" name="bus" dev="overlay" ino=1823 res=0 errno=0 [ 2009.085574][T32270] xt_ecn: cannot match TCP bits for non-tcp packets [ 2009.340122][T32274] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 2009.356795][T18815] usb 8-1: new full-speed USB device number 108 using dummy_hcd [ 2009.370488][ T29] audit: type=1326 audit(1774975540.160:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32273 comm="syz.8.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782d9c819 code=0x7ffc0000 [ 2009.727387][ T29] audit: type=1326 audit(1774975540.160:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32273 comm="syz.8.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782d9c819 code=0x7ffc0000 [ 2009.803603][ T29] audit: type=1326 audit(1774975540.160:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32273 comm="syz.8.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2782d9c819 code=0x7ffc0000 [ 2009.848144][T18815] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2010.042804][T18815] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2010.156074][ T29] audit: type=1326 audit(1774975540.160:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32273 comm="syz.8.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782d9c819 code=0x7ffc0000 [ 2010.185804][T18815] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 2010.221059][T18815] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2010.246078][T18815] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2010.269741][ T29] audit: type=1326 audit(1774975540.160:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32273 comm="syz.8.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782d9c819 code=0x7ffc0000 [ 2010.330132][T18815] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2010.356830][ T29] audit: type=1326 audit(1774975540.160:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32273 comm="syz.8.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2782d9c819 code=0x7ffc0000 [ 2010.380944][T18815] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2010.411629][T18815] usb 8-1: Product: syz [ 2010.415888][T18815] usb 8-1: Manufacturer: syz [ 2010.431259][T18815] usb 8-1: SerialNumber: syz [ 2010.468313][ T29] audit: type=1326 audit(1774975540.160:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32273 comm="syz.8.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782d9c819 code=0x7ffc0000 [ 2010.497508][T18815] usb 8-1: config 0 descriptor?? [ 2011.607242][T18815] radio-si470x 8-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 2011.615840][T18815] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -5 [ 2011.647017][ T29] audit: type=1326 audit(1774975540.160:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32273 comm="syz.8.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2782d9c819 code=0x7ffc0000 [ 2011.736343][ T29] audit: type=1326 audit(1774975540.160:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32273 comm="syz.8.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2782d9c819 code=0x7ffc0000 [ 2011.739439][T18815] usb 8-1: USB disconnect, device number 108 [ 2011.831398][ T29] audit: type=1800 audit(1774975541.820:829): pid=32289 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.6086" name="bus" dev="overlay" ino=1924 res=0 errno=0 [ 2011.998433][T32296] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 2012.006970][T32296] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 2012.015432][T32296] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 2012.365453][ T29] audit: type=1400 audit(1774975543.070:830): avc: denied { append } for pid=32298 comm="syz.6.6089" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2012.389297][ T29] audit: type=1400 audit(1774975543.120:831): avc: denied { read } for pid=32298 comm="syz.6.6089" path="socket:[168468]" dev="sockfs" ino=168468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2014.896869][T31151] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 2015.082694][T31151] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2015.107232][T31151] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2015.150133][T31151] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2015.195220][T31151] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2015.214662][T31151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2015.247124][T31151] usb 3-1: SerialNumber: syz [ 2015.295248][T31151] cdc_acm 3-1:1.0: skipping garbage [ 2015.640615][T32337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2015.660403][T32337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2015.853721][T32342] nfs: Unknown parameter 'losk' [ 2016.191054][T32343] tipc: Started in network mode [ 2016.226293][T32343] tipc: Node identity 86d0e8d5f566, cluster identity 4711 [ 2016.239139][T32343] tipc: Enabled bearer , priority 0 [ 2016.247173][T32344] syzkaller0: entered promiscuous mode [ 2016.275456][T32344] syzkaller0: entered allmulticast mode [ 2016.350946][T32343] tipc: Resetting bearer [ 2016.367430][T32341] tipc: Resetting bearer [ 2016.479398][T32341] tipc: Disabling bearer [ 2016.872984][T18815] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 2017.089621][T18815] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2017.118071][T18815] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2017.146406][T18815] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 2017.165569][T18815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2017.229482][T32358] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 2017.237994][T32358] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 2017.246526][T32358] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 2017.263180][T18815] usb 7-1: SerialNumber: syz [ 2017.337133][T18815] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 2017.359409][T18815] usb-storage 7-1:1.0: USB Mass Storage device detected [ 2017.467939][T18815] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 2017.488853][T18815] scsi host1: usb-storage 7-1:1.0 [ 2017.796847][ T5808] usb 3-1: USB disconnect, device number 90 [ 2018.154592][ T104] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2019.222048][T32380] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6100'. [ 2020.387372][ T29] audit: type=1326 audit(1774975551.180:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32387 comm="syz.5.6110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bddd9c819 code=0x7ffc0000 [ 2020.446825][ T29] audit: type=1326 audit(1774975551.180:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32387 comm="syz.5.6110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bddd9c819 code=0x7ffc0000 [ 2020.492490][T32389] netlink: 'syz.5.6110': attribute type 1 has an invalid length. [ 2020.556809][ T29] audit: type=1326 audit(1774975551.200:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32387 comm="syz.5.6110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f0bddd9c819 code=0x7ffc0000 [ 2020.610322][ T29] audit: type=1326 audit(1774975551.200:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32387 comm="syz.5.6110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bddd9c819 code=0x7ffc0000 [ 2020.684144][ T29] audit: type=1326 audit(1774975551.200:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32387 comm="syz.5.6110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bddd9c819 code=0x7ffc0000 [ 2020.758316][ T29] audit: type=1326 audit(1774975551.200:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32387 comm="syz.5.6110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0bddd9c819 code=0x7ffc0000 [ 2020.822583][ T29] audit: type=1326 audit(1774975551.200:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32387 comm="syz.5.6110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bddd9c819 code=0x7ffc0000 [ 2020.859163][ T29] audit: type=1326 audit(1774975551.200:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32387 comm="syz.5.6110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bddd9c819 code=0x7ffc0000 [ 2020.882999][ T29] audit: type=1326 audit(1774975551.200:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32387 comm="syz.5.6110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f0bddd9c819 code=0x7ffc0000 [ 2021.116923][T32365] usb 7-1: reset full-speed USB device number 44 using dummy_hcd [ 2021.132197][T32365] usb 7-1: device reset changed ep0 maxpacket size! [ 2021.154901][ T5922] usb 7-1: USB disconnect, device number 44 [ 2021.175445][T32399] fuse: Bad value for 'fd' [ 2021.264851][T32399] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6109'. [ 2022.512579][T32412] xt_recent: Unsupported userspace flags (000000de) [ 2022.928034][ T5922] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 2023.181112][ T5922] usb 7-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 2023.217639][T32417] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 2023.226073][T32417] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 2023.234685][T32417] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 2023.263468][ T5922] usb 7-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2023.445175][ T5922] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 2023.511958][ T5922] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 2023.559439][ T5922] usb 7-1: Manufacturer: syz [ 2023.581577][ T5922] usb 7-1: SerialNumber: syz [ 2023.684570][ T29] audit: type=1804 audit(1774975554.470:841): pid=32424 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.6117" name="/newroot/10/file1" dev="fuse" ino=1 res=1 errno=0 [ 2023.738846][ T5922] usbhid 7-1:36.0: couldn't find an input interrupt endpoint [ 2024.314988][ T5922] usb 7-1: USB disconnect, device number 45 [ 2025.547851][T32453] fuse: Bad value for 'fd' [ 2025.558559][T32453] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6123'. [ 2026.727566][T14032] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2026.954245][T14032] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2026.972844][T14032] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2027.394776][T14032] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 2027.404103][T14032] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2027.425100][T14032] usb 3-1: config 0 descriptor?? [ 2027.566748][T14032] usbhid 3-1:0.0: can't add hid device: -71 [ 2027.591711][T14032] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2027.635636][T14032] usb 3-1: USB disconnect, device number 91 [ 2027.881677][T32475] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6129'. [ 2028.157499][T32479] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 2028.166375][T32479] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 2028.176625][T32479] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 2028.565389][T32486] fuse: Unknown parameter '0x0000000000000000' [ 2028.590303][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 2028.590316][ T29] audit: type=1804 audit(1774975559.370:843): pid=32484 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.6131" name="/newroot/13/file1" dev="fuse" ino=1 res=1 errno=0 [ 2028.721597][ T29] audit: type=1800 audit(1774975559.370:844): pid=32484 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.6131" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2028.762159][T32491] FAULT_INJECTION: forcing a failure. [ 2028.762159][T32491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2028.805102][T32491] CPU: 0 UID: 0 PID: 32491 Comm: syz.7.6133 Tainted: G L syzkaller #0 PREEMPT(full) [ 2028.805135][T32491] Tainted: [L]=SOFTLOCKUP [ 2028.805141][T32491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2028.805153][T32491] Call Trace: [ 2028.805159][T32491] [ 2028.805166][T32491] dump_stack_lvl+0x100/0x190 [ 2028.805201][T32491] should_fail_ex.cold+0x5/0xa [ 2028.805226][T32491] _copy_to_user+0x32/0xd0 [ 2028.805249][T32491] video_usercopy+0xece/0x1740 [ 2028.805278][T32491] ? __pfx___video_do_ioctl+0x10/0x10 [ 2028.805305][T32491] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2028.805335][T32491] ? __pfx_video_usercopy+0x10/0x10 [ 2028.805375][T32491] v4l2_ioctl+0x1bd/0x250 [ 2028.805401][T32491] ? __pfx_v4l2_ioctl+0x10/0x10 [ 2028.805429][T32491] __x64_sys_ioctl+0x18e/0x210 [ 2028.805458][T32491] do_syscall_64+0x106/0xf80 [ 2028.805485][T32491] ? clear_bhb_loop+0x40/0x90 [ 2028.805508][T32491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2028.805527][T32491] RIP: 0033:0x7fbe7f99c819 [ 2028.805542][T32491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2028.805559][T32491] RSP: 002b:00007fbe807a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2028.805577][T32491] RAX: ffffffffffffffda RBX: 00007fbe7fc15fa0 RCX: 00007fbe7f99c819 [ 2028.805589][T32491] RDX: 0000200000000400 RSI: 0000000080685600 RDI: 0000000000000003 [ 2028.805600][T32491] RBP: 00007fbe807a1090 R08: 0000000000000000 R09: 0000000000000000 [ 2028.805611][T32491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2028.805624][T32491] R13: 00007fbe7fc16038 R14: 00007fbe7fc15fa0 R15: 00007ffea08e88c8 [ 2028.805653][T32491] [ 2029.376941][ T5922] usb 8-1: new high-speed USB device number 109 using dummy_hcd [ 2030.065462][T32500] FAULT_INJECTION: forcing a failure. [ 2030.065462][T32500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2030.082963][ T5922] usb 8-1: config 0 has an invalid interface number: 4 but max is 0 [ 2030.091506][T32500] CPU: 0 UID: 0 PID: 32500 Comm: syz.8.6135 Tainted: G L syzkaller #0 PREEMPT(full) [ 2030.091536][T32500] Tainted: [L]=SOFTLOCKUP [ 2030.091542][T32500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2030.091553][T32500] Call Trace: [ 2030.091559][T32500] [ 2030.091566][T32500] dump_stack_lvl+0x100/0x190 [ 2030.091599][T32500] should_fail_ex.cold+0x5/0xa [ 2030.091621][T32500] _copy_to_user+0x32/0xd0 [ 2030.091641][T32500] simple_read_from_buffer+0xcb/0x170 [ 2030.091661][T32500] proc_fail_nth_read+0x1af/0x230 [ 2030.091688][T32500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2030.091714][T32500] ? rw_verify_area+0xce/0x6d0 [ 2030.091738][T32500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2030.091761][T32500] vfs_read+0x1e4/0xb30 [ 2030.091790][T32500] ? __pfx_vfs_read+0x10/0x10 [ 2030.091815][T32500] ? __fget_files+0x215/0x3d0 [ 2030.091839][T32500] ? __fget_files+0x21f/0x3d0 [ 2030.091865][T32500] ksys_read+0x12a/0x250 [ 2030.091885][T32500] ? __pfx_ksys_read+0x10/0x10 [ 2030.091908][T32500] do_syscall_64+0x106/0xf80 [ 2030.091936][T32500] ? clear_bhb_loop+0x40/0x90 [ 2030.091957][T32500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2030.091979][T32500] RIP: 0033:0x7f2782d5d04e [ 2030.091995][T32500] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2030.092011][T32500] RSP: 002b:00007f2783cc7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2030.092029][T32500] RAX: ffffffffffffffda RBX: 00007f2783cc86c0 RCX: 00007f2782d5d04e [ 2030.092040][T32500] RDX: 000000000000000f RSI: 00007f2783cc80a0 RDI: 0000000000000005 [ 2030.092050][T32500] RBP: 00007f2783cc8090 R08: 0000000000000000 R09: 0000000000000000 [ 2030.092060][T32500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2030.092070][T32500] R13: 00007f2783016038 R14: 00007f2783015fa0 R15: 00007ffe120a6218 [ 2030.092094][T32500] [ 2030.305414][ T5922] usb 8-1: config 0 has no interface number 0 [ 2030.313849][ T5922] usb 8-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 2030.323630][ T5922] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.331676][ T5922] usb 8-1: Product: syz [ 2030.336241][ T5922] usb 8-1: Manufacturer: syz [ 2030.341177][ T5922] usb 8-1: SerialNumber: syz [ 2030.390084][ T5922] usb 8-1: config 0 descriptor?? [ 2030.947850][ T5922] hub 8-1:0.4: bad descriptor, ignoring hub [ 2030.954365][ T5922] hub 8-1:0.4: probe with driver hub failed with error -5 [ 2031.174661][ T5922] f81232 8-1:0.4: f81534a converter detected [ 2031.360899][ T5922] usb 8-1: f81534a converter now attached to ttyUSB0 [ 2031.502830][T32493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2031.517013][T32493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2032.528596][ T29] audit: type=1800 audit(1774975562.960:845): pid=32515 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.6139" name="bus" dev="overlay" ino=2011 res=0 errno=0 [ 2032.537668][ T1296] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2032.567136][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2032.573794][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2032.582664][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 2032.734195][ T29] audit: type=1800 audit(1774975563.520:846): pid=32493 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.6134" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2033.429941][ T5808] usb 8-1: USB disconnect, device number 109 [ 2034.216025][ T5808] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 2034.270014][ T5808] f81232 8-1:0.4: device disconnected [ 2036.227080][T26047] Bluetooth: hci5: command 0x0405 tx timeout [ 2037.027959][T32544] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6149'. [ 2037.596717][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 2037.604797][ C0] lec:lec_tx_timeout: lec0 [ 2038.146850][T18819] usb 6-1: new full-speed USB device number 119 using dummy_hcd [ 2038.678692][ T29] audit: type=1804 audit(1774975568.730:847): pid=32562 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.6141" name="/newroot/345/file1" dev="fuse" ino=1 res=1 errno=0 [ 2038.702092][ T29] audit: type=1800 audit(1774975568.730:848): pid=32562 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.6141" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2038.912063][T18819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2038.923216][T18819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 2039.314279][T18819] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 2039.343454][T18819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2039.374275][T18819] usb 6-1: config 0 descriptor?? [ 2040.547939][T18819] ath6kl: Failed to submit usb control message: -110 [ 2040.617272][T18819] ath6kl: unable to send the bmi data to the device: -110 [ 2040.972727][T18819] ath6kl: Unable to send get target info: -110 [ 2041.006795][T18819] ath6kl: Failed to init ath6kl core: -110 [ 2041.053895][T18819] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 2041.064174][T26047] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 2041.090340][T18819] usb 6-1: USB disconnect, device number 119 [ 2042.593960][T32594] loop7: detected capacity change from 0 to 16384 [ 2042.885323][T32599] input: syz1 as /devices/virtual/input/input92 [ 2043.068645][T32602] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6161'. [ 2043.138224][T32600] loop7: detected capacity change from 16384 to 0 [ 2043.171528][ C0] I/O error, dev loop7, sector 5632 op 0x0:(READ) flags 0x80700 phys_seg 29 prio class 2 [ 2043.721060][T32608] openvswitch: netlink: EtherType 0 is less than min 600 [ 2043.729782][T32608] random: crng reseeded on system resumption [ 2046.282853][ T29] audit: type=1800 audit(1774975576.680:849): pid=32623 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.6160" name="bus" dev="overlay" ino=133 res=0 errno=0 [ 2046.809688][T18158] ------------[ cut here ]------------ [ 2046.815211][T18158] conntrack cleanup blocked for 60s [ 2046.815223][T18158] WARNING: net/netfilter/nf_conntrack_core.c:2511 at nf_conntrack_cleanup_net_list+0x4f7/0x690, CPU#0: kworker/u8:11/18158 [ 2046.833338][T18158] Modules linked in: [ 2046.837638][T18158] CPU: 0 UID: 0 PID: 18158 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 2046.849065][T18158] Tainted: [L]=SOFTLOCKUP [ 2046.853462][T18158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2046.863624][T18158] Workqueue: netns cleanup_net [ 2046.868542][T18158] RIP: 0010:nf_conntrack_cleanup_net_list+0x4f7/0x690 [ 2046.875367][T18158] Code: 29 c3 48 89 de e8 49 e3 59 f8 48 85 db 78 0f e8 5f e8 59 f8 e8 5a 11 e3 01 e9 0e fc ff ff e8 50 e8 59 f8 48 8d 3d 09 49 39 07 <67> 48 0f b9 3a eb de 4c 8b 6c 24 40 e8 38 e8 59 f8 48 b8 00 00 00 [ 2046.895060][T18158] RSP: 0018:ffffc9000fec7970 EFLAGS: 00010293 [ 2046.901997][T18158] RAX: 0000000000000000 RBX: ffffffffffffffda RCX: ffffffff89af0f77 [ 2046.910229][T18158] RDX: ffff8880268e0000 RSI: ffffffff89af0f90 RDI: ffffffff90e858a0 [ 2046.918315][T18158] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 2046.926870][T18158] R10: ffffffffffffffda R11: 0000000000000000 R12: 0000000000000001 [ 2046.934886][T18158] R13: 0000000000000001 R14: ffffc9000fec7b28 R15: dffffc0000000000 [ 2046.942917][T18158] FS: 0000000000000000(0000) GS:ffff88812433c000(0000) knlGS:0000000000000000 [ 2046.952108][T18158] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2046.958859][T18158] CR2: 00007efecdd52721 CR3: 000000003f9f0000 CR4: 00000000003526f0 [ 2046.966889][T18158] Call Trace: [ 2046.970168][T18158] [ 2046.973195][T18158] ? nf_conntrack_cleanup_net_list+0x158/0x690 [ 2046.979391][T18158] ? __pfx_nf_conntrack_cleanup_net_list+0x10/0x10 [ 2046.985948][T18158] ? nf_conntrack_pernet_exit+0xaa/0x150 [ 2046.991662][T18158] ? kfree+0x1f6/0x6b0 [ 2046.995728][T18158] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 2047.001817][T18158] ops_undo_list+0x363/0xab0 [ 2047.006422][T18158] ? __pfx_ops_undo_list+0x10/0x10 [ 2047.011677][T18158] ? cleanup_net+0x332/0x920 [ 2047.016260][T18158] ? idr_destroy+0x62/0x2e0 [ 2047.021219][T18158] cleanup_net+0x499/0x920 [ 2047.025637][T18158] ? __pfx_cleanup_net+0x10/0x10 [ 2047.030590][T18158] ? rcu_is_watching+0x12/0xc0 [ 2047.035344][T18158] process_one_work+0xa23/0x19a0 [ 2047.040334][T18158] ? __pfx_process_one_work+0x10/0x10 [ 2047.045691][T18158] ? __pfx_cleanup_net+0x10/0x10 [ 2047.050628][T18158] worker_thread+0x5ef/0xe50 [ 2047.055228][T18158] ? __pfx_worker_thread+0x10/0x10 [ 2047.060334][T18158] ? kthread+0x13a/0x450 [ 2047.064557][T18158] ? __pfx_worker_thread+0x10/0x10 [ 2047.069693][T18158] kthread+0x370/0x450 [ 2047.073856][T18158] ? __pfx_kthread+0x10/0x10 [ 2047.078463][T18158] ret_from_fork+0x754/0xd80 [ 2047.083049][T18158] ? __pfx_ret_from_fork+0x10/0x10 [ 2047.088213][T18158] ? __switch_to+0x7b4/0x1120 [ 2047.092959][T18158] ? __pfx_kthread+0x10/0x10 [ 2047.097567][T18158] ret_from_fork_asm+0x1a/0x30 [ 2047.102325][T18158] [ 2047.105376][T18158] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2047.112637][T18158] CPU: 0 UID: 0 PID: 18158 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 2047.123822][T18158] Tainted: [L]=SOFTLOCKUP [ 2047.128123][T18158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2047.138177][T18158] Workqueue: netns cleanup_net [ 2047.142946][T18158] Call Trace: [ 2047.146221][T18158] [ 2047.149155][T18158] dump_stack_lvl+0x100/0x190 [ 2047.153828][T18158] vpanic+0x552/0x970 [ 2047.157792][T18158] ? __pfx_vpanic+0x10/0x10 [ 2047.162292][T18158] panic+0xd1/0xe0 [ 2047.165994][T18158] ? __pfx_panic+0x10/0x10 [ 2047.170388][T18158] ? check_panic_on_warn+0x1f/0x90 [ 2047.175491][T18158] check_panic_on_warn.cold+0x19/0x34 [ 2047.180855][T18158] ? nf_conntrack_cleanup_net_list+0x4f7/0x690 [ 2047.187002][T18158] __warn.cold+0x191/0x348 [ 2047.191414][T18158] __report_bug+0x296/0x3d0 [ 2047.195901][T18158] ? nf_conntrack_cleanup_net_list+0x4f7/0x690 [ 2047.202045][T18158] ? __pfx___report_bug+0x10/0x10 [ 2047.207073][T18158] ? __lock_acquire+0x4a5/0x2630 [ 2047.212019][T18158] ? nf_conntrack_cleanup_net_list+0x4f0/0x690 [ 2047.218192][T18158] ? nf_conntrack_cleanup_net_list+0x4d7/0x690 [ 2047.224345][T18158] ? nf_ct_iterate_cleanup_net+0xd9/0x110 [ 2047.230143][T18158] ? nf_ct_iterate_cleanup_net+0xd9/0x110 [ 2047.235863][T18158] report_bug_entry+0xe1/0x290 [ 2047.240623][T18158] ? nf_conntrack_cleanup_net_list+0x4f7/0x690 [ 2047.246785][T18158] handle_bug+0x1cd/0x2a0 [ 2047.251125][T18158] exc_invalid_op+0x17/0x50 [ 2047.255788][T18158] asm_exc_invalid_op+0x1a/0x20 [ 2047.260639][T18158] RIP: 0010:nf_conntrack_cleanup_net_list+0x4f7/0x690 [ 2047.267395][T18158] Code: 29 c3 48 89 de e8 49 e3 59 f8 48 85 db 78 0f e8 5f e8 59 f8 e8 5a 11 e3 01 e9 0e fc ff ff e8 50 e8 59 f8 48 8d 3d 09 49 39 07 <67> 48 0f b9 3a eb de 4c 8b 6c 24 40 e8 38 e8 59 f8 48 b8 00 00 00 [ 2047.287005][T18158] RSP: 0018:ffffc9000fec7970 EFLAGS: 00010293 [ 2047.293103][T18158] RAX: 0000000000000000 RBX: ffffffffffffffda RCX: ffffffff89af0f77 [ 2047.301505][T18158] RDX: ffff8880268e0000 RSI: ffffffff89af0f90 RDI: ffffffff90e858a0 [ 2047.309456][T18158] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 2047.317406][T18158] R10: ffffffffffffffda R11: 0000000000000000 R12: 0000000000000001 [ 2047.325374][T18158] R13: 0000000000000001 R14: ffffc9000fec7b28 R15: dffffc0000000000 [ 2047.333336][T18158] ? nf_conntrack_cleanup_net_list+0x4d7/0x690 [ 2047.339471][T18158] ? nf_conntrack_cleanup_net_list+0x4f0/0x690 [ 2047.345619][T18158] ? nf_conntrack_cleanup_net_list+0x158/0x690 [ 2047.351779][T18158] ? __pfx_nf_conntrack_cleanup_net_list+0x10/0x10 [ 2047.358264][T18158] ? nf_conntrack_pernet_exit+0xaa/0x150 [ 2047.363874][T18158] ? kfree+0x1f6/0x6b0 [ 2047.367935][T18158] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 2047.374076][T18158] ops_undo_list+0x363/0xab0 [ 2047.378681][T18158] ? __pfx_ops_undo_list+0x10/0x10 [ 2047.383808][T18158] ? cleanup_net+0x332/0x920 [ 2047.388414][T18158] ? idr_destroy+0x62/0x2e0 [ 2047.392911][T18158] cleanup_net+0x499/0x920 [ 2047.397330][T18158] ? __pfx_cleanup_net+0x10/0x10 [ 2047.402432][T18158] ? rcu_is_watching+0x12/0xc0 [ 2047.407197][T18158] process_one_work+0xa23/0x19a0 [ 2047.412134][T18158] ? __pfx_process_one_work+0x10/0x10 [ 2047.417514][T18158] ? __pfx_cleanup_net+0x10/0x10 [ 2047.422438][T18158] worker_thread+0x5ef/0xe50 [ 2047.427047][T18158] ? __pfx_worker_thread+0x10/0x10 [ 2047.432164][T18158] ? kthread+0x13a/0x450 [ 2047.436455][T18158] ? __pfx_worker_thread+0x10/0x10 [ 2047.441595][T18158] kthread+0x370/0x450 [ 2047.445665][T18158] ? __pfx_kthread+0x10/0x10 [ 2047.450253][T18158] ret_from_fork+0x754/0xd80 [ 2047.454834][T18158] ? __pfx_ret_from_fork+0x10/0x10 [ 2047.459945][T18158] ? __switch_to+0x7b4/0x1120 [ 2047.464642][T18158] ? __pfx_kthread+0x10/0x10 [ 2047.469238][T18158] ret_from_fork_asm+0x1a/0x30 [ 2047.474009][T18158] [ 2047.477292][T18158] Kernel Offset: disabled [ 2047.481618][T18158] Rebooting in 86400 seconds..