last executing test programs: 22m47.600093711s ago: executing program 3 (id=819): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="030100"], 0xc8) 22m47.41456092s ago: executing program 3 (id=820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r4, 0x5}, 0x80, &(0x7f0000000ac0)=[{0x0}], 0x1}, 0x20008110) 22m44.449588894s ago: executing program 3 (id=833): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$ITER_CREATE(0x1d, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet(0x2, 0x4000000000000001, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000001404000000ffffffdc04000040000000b704000010000020620700fe00000000850000002f000000b70000000a00000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 22m43.480227164s ago: executing program 3 (id=842): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x98d887, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 22m43.423798061s ago: executing program 3 (id=844): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000"], 0xc8) 22m42.891759933s ago: executing program 3 (id=847): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x2200c0c4) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 22m42.744243999s ago: executing program 32 (id=847): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x2200c0c4) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 18m14.744819345s ago: executing program 2 (id=2137): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dmmidi(&(0x7f0000019300), 0x7, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000019200)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x1008, 0xc, 0x6, 0x7, 0x80, 0x27, 0x20, {0x0, 0x1ff}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB="010000ffffffffffffff9900000008000300", @ANYRES32=r6, @ANYBLOB="7c005a80"], 0x98}, 0x1, 0x0, 0x0, 0x40090}, 0x20008840) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000001a00), 0x1, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, &(0x7f0000001a40)={0x1, 0x6, 0x0, 0x8004, '\x00', '\x00', '\x00', 0x0, 0x5d05, 0x10000004, 0x1, "38d49788ead5f71fd65acf7132de72ec"}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000192c0)='coredump_filter\x00') syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0005020106010000240012800b00010067656e0000050038a80c000000"], 0x44}}, 0x4004810) 18m12.609934759s ago: executing program 2 (id=2139): open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xffdffe0000000001, 0x401, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e00090001"], 0x118}}, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x404040, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x80000}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='schedstat\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000406030000000000000000000300000105000100e9ff"], 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) 18m11.516042987s ago: executing program 2 (id=2146): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x5d, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, 0x6, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) timerfd_create(0x5, 0x81800) syz_emit_ethernet(0x15b, &(0x7f0000000880)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv4={0x800, @generic={{0x14, 0x4, 0x2, 0x8, 0x14d, 0x67, 0x0, 0x7, 0x2, 0x0, @multicast2, @broadcast, {[@lsrr={0x83, 0xf, 0x61, [@dev={0xac, 0x14, 0x14, 0x34}, @empty, @broadcast]}, @cipso={0x86, 0x6, 0x1}, @timestamp={0x44, 0x24, 0x2c, 0x0, 0x0, [0x1e, 0x27, 0x10001, 0x90a, 0x6, 0x35e4, 0x7fffffff, 0x4]}]}}, "b5b6225f5672c14afe0a64bbd617e8e1beb2d08258192c28bb334268814ea2708298965e642da062829af92a3fdf35d198730709a51134a1905ab89c081055ccad857db02f188cc307245a2af170c206bc49b3b3a87a8aa6f83f437aaf3b3c59a8b0234fcee026ebd9476aec0f9ca28b3c1041e199c54debdf7c5eafbd40cff62e4464a4bab63c54a6c5992c9ab1b1144625f424b76dac5fe12a890ac25c93b70f363fa6ac147de76d2b6e8f39c8db023a60078054abdb86b35fea8b29fe99b244b0d79d56f2bd29fa45e28decc79fc3ec7421b8e5bfefd6c3790d71f2b722d30b50fef07de2312f328db7269535f281acfe2438b63c7814a69d50185d"}}}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000"], 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x78}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r9, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSCLOCKID(r9, 0x400445a0, &(0x7f0000000340)=0x7) 18m11.328246916s ago: executing program 2 (id=2147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) 18m11.286825806s ago: executing program 2 (id=2148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'ip6tnl0\x00', 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) unshare(0x694f840696960e3d) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x5dc, 0x4) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040)=[{}], 0x144, 0x1, 0x0, 0x2, 0x0, 0x2}) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$9p(r4, &(0x7f0000000100)="d5c0", 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f0000000340), 0x4003) 18m10.858561839s ago: executing program 2 (id=2149): ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x2f94, 0x80000001, 0x0, 0x2, 0x8, 0xfffffffffffffff9, 0xa04, 0xfffff7e3, 0x100, 0x4, 0x8, 0x6, 0x3, 0x85a}, 0x18, [0x0, 0x0, 0x0]}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xb) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000180)={{r0, 0x9, 0x7, 0x6, 0xffffffff, 0x3, 0x80000000001a, 0x3, 0x2, 0xa, 0x401, 0x81, 0x5, 0x9, 0x3c}}) socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x5, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x8, 0x64}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x20, 0x0, 0x6}}]}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x8932, &(0x7f00000006c0)={'gre0\x00', 0x0}) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000280)={r7, 0x0, 0x8001, 0x0, 0x0, [0x0], [0x0, 0x0, 0x1, 0x2], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) r11 = syz_usb_connect$uac2(0x2, 0xd7, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0xb, 0x10, 0xe, {0x8, 0xb, 0x2, 0x0, 0x1, 0x0, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0xa, 0x49, 0x80}, [@processing_unit={0x9, 0x24, 0x8, 0x2, 0x3, [0x3, 0x3]}, @sample_rate={0x9, 0x24, 0xd, 0x5, 0x1, 0x4, [0x0]}, @selector_unit={0xa, 0x24, 0xb, 0x6, 0x5, "ab7f6a9521"}, @extension_unit={0xa, 0x24, 0x9, 0x6, 0x2, 0x52, "e252e8"}, @sample_rate={0x9, 0x24, 0xd, 0x4, 0x3, 0x1, [0x1]}, @effect_unit={0x11, 0x24, 0x7, 0x6, 0x0, 0x5, [0x2, 0x2, 0x2, 0x2, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x2, 0x9, 0x7, "", '}'}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x4, 0x3, {0x8, 0x25, 0x1, 0x80, 0x14, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x80, 0x2, 0x7, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x8, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0x5, 0x6, {0x8, 0x25, 0x1, 0x1, 0x0, 0xf9, 0x9}}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x200, 0xa, 0x7, 0x4, 0xff, 0x42}, 0x80, &(0x7f0000000600)={0x5, 0xf, 0x80, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "83facabedcc2ac787439f5d8edb23d2b"}, @generic={0x5d, 0x10, 0x2, "a264e3f207a6bad5896dacc46f51bb66dedfba7892996ff28328b6ddcdf89a05016a3075f780046bc37370f904aeeb4fae4b25d528c8eeb1a9192a47afa743998fa81c378a0e3edb35d12ae2ae6ece06ea581f0054595b965d30"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x4, 0xb, 0x81}]}, 0x8, [{0x89, &(0x7f0000000680)=@string={0x89, 0x3, "a64c10fd8d1e955ab4f9b1f1168492dca68ae8fa315d76b494033e6ec724c72c0e1c3c54039ef324135f40c9130cb52d330bc067e7675cd1e9606f836d800c7789f5eea8f2dbb6ae8beaa83d602c811fbefba201c1043e930fdac85df83e2b4d1b7d8a752b3abf03d7bbda087a73704c060f8e1acc95ba4fb334750aaaccef035f13f0cafd91d6"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xc01}}, {0x17, &(0x7f00000007c0)=@string={0x17, 0x3, "2100c131a253230228bf7bffe547f3e42b43896ffb"}}, {0xb1, &(0x7f0000000800)=@string={0xb1, 0x3, "f453e2f14b18969c6032454e5237735835e7f9972ce691d206a69d1d3359fc30f97b551ff640e6348298735d4852033d9590d32428d86b90e64381833fd80160d00f7cefd08557107dfb3473bc63ad8e52aee6053231959558e002d68bcb29a0a217be63045e4308b294e181c57174f34543e41a1b86a2d741a4d0dc774e42192483a84b22281480bf84beb714a795771e9a413a78a0222624547a71df0684a484add1814c45b1ce69fc5c38075fce"}}, {0x2, &(0x7f00000009c0)=@string={0x2}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x41a}}, {0x3f, &(0x7f0000000b00)=@string={0x3f, 0x3, "726823f52fd1057de3fdacf387c85fc3800d346afbfdfe21380450c658ce68ef74aa61b00bca156bae51c46f86744ad3a78545df6428fae005036431b4"}}]}) syz_usb_control_io$uac2(r11, &(0x7f0000000d40)={0x14, &(0x7f0000000c00)={0x40, 0x22, 0x53, {0x53, 0x9, "583637a1f22394af024b3ea215237b3e48d0cadb934be7e2fba0dac7ecf0adb707e7c6d32fdd88df5e9d63f71cc509733b4453e51a9b69e87f7ed19e428533a9b1dc97074a7a633db6ac519f652782805f"}}, &(0x7f0000000d00)={0x0, 0x3, 0x32, @string={0x32, 0x3, "0968654955a23e4d501ad88d3e8cd46931951e0a0797214c7520dc3cf62a74e64a2a3d2e8d42d4f4b4f62ba1ffcd3845"}}}, &(0x7f0000001000)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)={0x20, 0x82, 0x1, '7'}, &(0x7f0000000f40)={0x20, 0x83, 0x1, 'S'}, 0x0, &(0x7f0000000fc0)={0x20, 0x85, 0x3, "cdda80"}}) truncate(0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000100)={r10}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) 17m55.551165102s ago: executing program 33 (id=2149): ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x2f94, 0x80000001, 0x0, 0x2, 0x8, 0xfffffffffffffff9, 0xa04, 0xfffff7e3, 0x100, 0x4, 0x8, 0x6, 0x3, 0x85a}, 0x18, [0x0, 0x0, 0x0]}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xb) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000180)={{r0, 0x9, 0x7, 0x6, 0xffffffff, 0x3, 0x80000000001a, 0x3, 0x2, 0xa, 0x401, 0x81, 0x5, 0x9, 0x3c}}) socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x5, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x8, 0x64}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x20, 0x0, 0x6}}]}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x8932, &(0x7f00000006c0)={'gre0\x00', 0x0}) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000280)={r7, 0x0, 0x8001, 0x0, 0x0, [0x0], [0x0, 0x0, 0x1, 0x2], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) r11 = syz_usb_connect$uac2(0x2, 0xd7, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0xb, 0x10, 0xe, {0x8, 0xb, 0x2, 0x0, 0x1, 0x0, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0xa, 0x49, 0x80}, [@processing_unit={0x9, 0x24, 0x8, 0x2, 0x3, [0x3, 0x3]}, @sample_rate={0x9, 0x24, 0xd, 0x5, 0x1, 0x4, [0x0]}, @selector_unit={0xa, 0x24, 0xb, 0x6, 0x5, "ab7f6a9521"}, @extension_unit={0xa, 0x24, 0x9, 0x6, 0x2, 0x52, "e252e8"}, @sample_rate={0x9, 0x24, 0xd, 0x4, 0x3, 0x1, [0x1]}, @effect_unit={0x11, 0x24, 0x7, 0x6, 0x0, 0x5, [0x2, 0x2, 0x2, 0x2, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x2, 0x9, 0x7, "", '}'}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x4, 0x3, {0x8, 0x25, 0x1, 0x80, 0x14, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x80, 0x2, 0x7, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x8, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0x5, 0x6, {0x8, 0x25, 0x1, 0x1, 0x0, 0xf9, 0x9}}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x200, 0xa, 0x7, 0x4, 0xff, 0x42}, 0x80, &(0x7f0000000600)={0x5, 0xf, 0x80, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "83facabedcc2ac787439f5d8edb23d2b"}, @generic={0x5d, 0x10, 0x2, "a264e3f207a6bad5896dacc46f51bb66dedfba7892996ff28328b6ddcdf89a05016a3075f780046bc37370f904aeeb4fae4b25d528c8eeb1a9192a47afa743998fa81c378a0e3edb35d12ae2ae6ece06ea581f0054595b965d30"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x4, 0xb, 0x81}]}, 0x8, [{0x89, &(0x7f0000000680)=@string={0x89, 0x3, "a64c10fd8d1e955ab4f9b1f1168492dca68ae8fa315d76b494033e6ec724c72c0e1c3c54039ef324135f40c9130cb52d330bc067e7675cd1e9606f836d800c7789f5eea8f2dbb6ae8beaa83d602c811fbefba201c1043e930fdac85df83e2b4d1b7d8a752b3abf03d7bbda087a73704c060f8e1acc95ba4fb334750aaaccef035f13f0cafd91d6"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xc01}}, {0x17, &(0x7f00000007c0)=@string={0x17, 0x3, "2100c131a253230228bf7bffe547f3e42b43896ffb"}}, {0xb1, &(0x7f0000000800)=@string={0xb1, 0x3, "f453e2f14b18969c6032454e5237735835e7f9972ce691d206a69d1d3359fc30f97b551ff640e6348298735d4852033d9590d32428d86b90e64381833fd80160d00f7cefd08557107dfb3473bc63ad8e52aee6053231959558e002d68bcb29a0a217be63045e4308b294e181c57174f34543e41a1b86a2d741a4d0dc774e42192483a84b22281480bf84beb714a795771e9a413a78a0222624547a71df0684a484add1814c45b1ce69fc5c38075fce"}}, {0x2, &(0x7f00000009c0)=@string={0x2}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x41a}}, {0x3f, &(0x7f0000000b00)=@string={0x3f, 0x3, "726823f52fd1057de3fdacf387c85fc3800d346afbfdfe21380450c658ce68ef74aa61b00bca156bae51c46f86744ad3a78545df6428fae005036431b4"}}]}) syz_usb_control_io$uac2(r11, &(0x7f0000000d40)={0x14, &(0x7f0000000c00)={0x40, 0x22, 0x53, {0x53, 0x9, "583637a1f22394af024b3ea215237b3e48d0cadb934be7e2fba0dac7ecf0adb707e7c6d32fdd88df5e9d63f71cc509733b4453e51a9b69e87f7ed19e428533a9b1dc97074a7a633db6ac519f652782805f"}}, &(0x7f0000000d00)={0x0, 0x3, 0x32, @string={0x32, 0x3, "0968654955a23e4d501ad88d3e8cd46931951e0a0797214c7520dc3cf62a74e64a2a3d2e8d42d4f4b4f62ba1ffcd3845"}}}, &(0x7f0000001000)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)={0x20, 0x82, 0x1, '7'}, &(0x7f0000000f40)={0x20, 0x83, 0x1, 'S'}, 0x0, &(0x7f0000000fc0)={0x20, 0x85, 0x3, "cdda80"}}) truncate(0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000100)={r10}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) 12m44.131304168s ago: executing program 5 (id=3338): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) gettid() timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x43) acct(&(0x7f0000000140)='./file0\x00') 12m42.563918946s ago: executing program 5 (id=3339): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424020244"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120001a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c24"], 0x0) 12m38.952158798s ago: executing program 5 (id=3351): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000540)='%pI4 \x00'}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000023c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002380)={&(0x7f0000001300)={0x1064, 0x29, 0x200, 0x70bd2b, 0x25dfdbfc, {0x14}, [@generic="8d8f015e5cd5996327a0e34f50dee320f9d53a370da56dfad2b9f86d9aa3c3ce5ef3807ca22ac80d54354c7ab9a8f1877ed5910a08a3c5fd472851f43310d607614a074bb2ff66a45edf53bd95cf7f0e3e4f16837c57876cf2c68fab6a31008c8aeac06f10ab028ea966250b63d91704346eed6d913bc9d51826cf28ed2d0eeadd484fb30083ac2ebd1ba954bde5c5ba68165289df99e1f6d446786cf9b244098ebc0c556ad39dbf0ee7b7539bc9605240f727ff645b04b787a9a4c5e376966419f71431fee6d4cf1510fea1b6f266bb4f128e1c14c9f744f0a9e2a8c85a496c152a15d64a4cd61bb9a49ca4e83b0d7eac3940f21a0046b497b89d3e93bf662c613ec58414f1a703370ce6320876aa9338e1d0a75b8781b3c2b90344d876211068b9f169a11b6b57e24c37e390bdb5e346923904e546f51cdc7a3200d715e08450187e7835a8aa45e6ec59e116722a79db4ad055f3dd0139188b10681f05fe0064277d3c9221925284cafa24643167fd0d8180ea292986b46ee3c2a60dbbf36ab37759dd931ba2dd4b7255ced286c877ea9260390a87c0bd1f3e7a7d219ab2e61c8fbbb628af228ac29986d32b64d6a52bfb6bee2c58b214bf0cb8b02b357a821318a54c463369e730970b91f66003e261ba4da4e00f89aea109a415ab10b958e5bf020af0976fc042f0c6e312bb2dda5f089ae49b27b8f82994c70da6b58f5d08483efdf51e4ce19ac1d03a4cc77704fc096309608daeba8e2eaeb15b6dd14362e00019c4d52feb8d484d3016f3aafbafc0c493e2716a65b4eeeda4669a059d03777115aa8ee3cda616b26232ce8bd9ea530bd6e4d804d11f80ce5171836cb809dda92c2b8c4029d9fbdb60460225f8d59f5f8ae2ff1b640c7c3795c72700c5f08dfd2214f137daeaba5d7b4ffe43723f448162805919ea069c6688dea88d2ac1f1dd1239712b1f9d72fb104da1a8f1363213370db01c14505244f1042bf16190ec6b7c992ee65b7be4171c894239aff1008536871008810effbff9bf054be02ab16e4e288c3e46ca4b5d62fb70cb216e3849e2a3d28e4306bb5dc09557c4bb976c5e04b738e7c6e0e0e862d70607d0552f47a259fad5d38a3f86b3b0e32b91fb103b61f0345cc4cb8dd064a3c1282155f1fc14e3bc1a1f946ff1158b6060c025c5960ee0b98c24095093d6e07418b2d7436a8c16f1427a864454462198fbec18afd81fc78cdb3bde06b2d7c71c16a599d98404b3ad4003e3dd40b4d767138db1c70800a64d56fdb1435fc8527c0b46572991e3690a0e13551dba34912f83938abebdb70a2a9effd6607d7dfb082268749147d0f03aaa44aaadda1a154ba10d18b46ea558a002a0df4b76a9236b28fee310d695a520e3553e3d8b25d87daced264add19512aed54f463cd927f877c35728aeb78d5e84a5d8444c87ffdae57e7b029ee7291c65c51dc8d8e88246cfcf0b7035a8a5d694da6d29890139852891ae8fa7b8dd6c2e2056a96d07d13b4c58d4b49b51b7179e3fdcd70a37c755c1a0ee058fbedac527d5c105b5204d0b83abfc9bfa9313698b1b6b8d05d398c6fd120fa16415faa62d2dd3c567ea00e999df7f67bb939ad76476a6a8cb70e45995f79869af349dae298ce4b300d56a78162c34d765aeb7110b20aec9fe8c663581a0ebec83f3c714dd7b529087fed031c096de79694a28f0efcbe80a5b1ef0168c12b461dbd725d3064833f860d211d3a4477ac773f50a474050e1d17e03ed12330198be133ea87dcfbcd0f9cb9da241befec32a8ad5d726b15f3f05becac3a0db13e27509d24ea0107e7d080541520a69f8e1ac461fc22addbada3217f93b415cd8cdc237ff4b844c4c88beab41a56d2017b1b6d30039edf44f0052a908f825f94ef3fb998dda8afbfad492bd29eec417e88462a3b9fbf3a9683176d1be85b9474d22c27c4606a1e5e9197a0333540933f265041b99a597f365d1cc30a2e843a2a980832dda96d093a13f73bf05bd06ebab56a82aed605f4022d3d3d4599b707428788e4853ba4fe34bb5b7f76c83a7b0af2522854552db3c85ef97d4fa186fe09211cc0b65c2f6b4adac5327d790b170e5a05ca22711f9d334760803ae48830c8f53eb578e69dfb72b6527ddf33badc6a87421dc49cf595f050eacad14b0aa7ae7aaaef5fb788106aeb536ed9e7b55c7526cf6e208d5e9445b294ab9b6961c2b3b8438869ba9c254ebaf91acaa2ffdd13b19cb2b825149b99030616108c9702bf28c6f887822e8b333954d3bc1017ff94077a2a326dc6f30d44f211aad04c44282fb2349ccc661c8b7311a6f63f5458852bd586b121c9b7c5312a27b3cb88c9ae2720cbcf8f5d3b85a0f4ed401ee249c776e2be4e4f22510708839ab766b8ea7c9b0e66705a29835112888f411551f2c70b473116bbd356b5ed8cb8b802370c9c05089387ffb7009104b5771e5d3b23f6009dd6f963d376d6b5667d41c2126b9094f5f814fd54b86c7f776ed6e266ebf3166c99a1eaf650065e553a43428cd5eb2850825a35eacc4a1a596ab8d568131596113f92efc585cfeb91055eda507688bb448de17dbec3188538a2ccb8a4a639602f82d90e2ea1346bd1da589cc52ff69f92cf9d3f020f69a99fbff034a887eff2d07356f9ed437f2494407ff71dc93dbb57184e1d6fcddaddc54627cb76ecd243f31431be7a42c92f949039ab5422e4614f557b69668d80501cdf420a9e8945c99551ce6d6ea12c8bcb847dc37d773807307a9bf6fee2ff50335639a4a73673c2c549062f95bf066880a3779daac6c4f3320c9180da32e84c8dbfeef8957732ec46c12ee17eee5dadc7bfa6a29865bcff337b7f676c0d89cdf057d81130cc21fb17a3cf1af257e5a9bdbd088ee9a8737bfbf1d446e92b0b61ddcc037ebe97c73d50a5d788e9b22b4398a90c3ed372353256c79bc15b105f941d0e7e6af15ed18d8666ff011bf20b7905738755e96d9c7816a868770aa05886e9b10e137830b739bc566c92d4f2605474710bfbdc56029ae2302adf0a582ed3936e28345493ef0d2a78a5adb2b4806f8860b0898e29a415cc5ccecde4c9fcc34a5f32388868d38114077b8f05ff9086672c6cda0c5db20bc11cd4fcf9a2da805e889494c3127fb33163e862e90b26f162dd2686e8d06626f761166c4b2132170e76e2ccf530f29a7ae32e5a38a0631274418b76c2439f53b816518b1d048e519a08de89ec60dc9ebd81caa1b874150d68a8bd90fcac682f6287fef99d43696d39ffd25a80b1b3bbac11ada89c9e19971a96ce3b8a5b9ccfd1d8a48f887ab6e0bbb6074761ca73d2084f2a6e3731c5c5115fd190d682f2c6869a6453b9877283e8dc55ed40dd840812b7925fc710ffaec12df49ae8645808bb168b575f1f0cb9be2c46730ef1ed13d9741ff064da43c0d9f14878aadc4f349a0cf56471ca39b8115518552fc78ad498a56bfd6f1835ce9da3fbf8687f076551b1467d9f6fa8304658611461fc50827e1816c24078c66fc1dd7fb25e00cdd7cb8080572fc4e9eb3889a99c72bb13593a282090ae1550c7a8482137eeda9141f0f64d94e8b9f07ff1b64b2900080d34a48783c02c498f5ad618cb5b0125670c195977c983b8c54963a24d65c76f6e2d7968b694b8a3acea10b19c7d2044a5e6c73e9288da85eaa757098f63b2bd47e391ffb9237de6287ea061599fad1ec9a64e87b6977cc1ffb61dea71015df77e096a56b456ab9e313040f06a3f95b3587ffae7fe7c8bd372dc7ac4abb331afa1a9ad939f75098a63a463cb6b1ae5432343da75357b00c36e61cf575c3ad67c6ad59b990d11577c443e2b99aa02c2cb40a07c001d759ec79e1e80abb674281fb9c3bbbe441b6fffc31da151533d6b649632b3a9f7211a6f4c59dee911d3454e0df84f712e320caf33724be91237c617d1dfb609f6045aabd89b27da80aa9fc15ba6486b855393793f57ac5d905887b313ce5178837c6207caede26aac8e6d80d8997002bb61d4aaa927278a2935352d96668f8fd502b5ebbbbb60f37d92ad12df20caf598ca283d975ee8e27f52a75110fff9e28ad7280c37c3867eeb46ff89bd872718296f0c92ce675fda7a6daec527e190694f529a140c6a2f134aeaf0496e0590a78f9b1aa46b8d734800360ece7f7381522227efc06b1e5b6a12cde458162b9305e36dacc68980c0a0e832bdc942f070ffedc798caff2c1b8186eadf46d352580f60e5869d75604b75459fd8812875da4715a33b7cb98249e7c5612f587870a6d3995cfb5e2f254b2662bcaf9482a80544d69ffd456845c7643e41ff50eb6a852107651d8f7a753e22d3e829a626ad588fe825c33ca986af0d72f255d73691e7683ac3f528778bcb621c0a8f3b57a319f059eb25be96e2b1d0279cf14886d08eb020841705b26303822b6b6c3f53cf161789818318bd8915340c805ab486b4867ca3b720b8660ddb52daec6b6696d6e09fe1ac27d1db320aac4042dd1df3a04947fd08f646ff1d1bcc906a2f952f3644222f6920054bc29602acb2f356b111723b759f0d173e0b80b509bfebaefe64b3499c602eab7da66a31a2462a3bd3ad4625569866c9fa3f1d85c01c9e38c5cd3a568bebb8f87af025f628774e7a2bd60879bd1e2e9e211c4db401aaa5529c53e5dc4e9a206ac0fe7da86139391a691d4213562d1c418494de7166000c3ff1676ba297a52dbcadfa21f497fc08e36ae26b9cab582586594bd7034add57ec09e93bdf89553342825574dd3562589d34a6154823659a5930e2cbc307edb3c3283dda84b57a2fefa1d93e842dca2dc7e69c3a9b6b1dfac37069e7a58d93336d83d82d0af905beeaa6497887e1476c43ff06d99b00b657d1f802bc33e2756f738383301f49b2f3b1016010995e3e7d0eb5f92bdced57a7b76334a5165454040355abf4fd129eac45dac58a6bfb0849a835257ddcb9a9f2fc13dc81e59f510c511c63169677f0ad72342952676fb0650d3e5675caf1a5902485ed38252c3646ceedac282ba1acde99bc7c875f82e602bc7e2f58c949fb61aaea819e66da1e027b0ada1c30daeff71b6e9f15655b4647e0924977cb881d43a21cf86f6793707d3158452a803fe6d4df08a3329c647935cf5cb0bcd43b85b46267ce7cd69ae5f6db4539ebebe720ab039ff7460a05073e9e2dad5ee2ead209a965dffc116d577153743e2b23c12e59a44920775998e36b69ff6b4068ceee2e367671ab95927083c4e719f733862674edb3a9d3e3cfd4bef544123350a360b8a61505e23b04ca7ed0ddcb11b55d717065417969b196ae098bb8dc2797b433561252b6176457666edf7f16c55e88e07ace2e1d89c1277c6e00f266ab149e6d36ac8f4ff5e3d29e4695438278a43311aadbe61cefe5d81f8cf8df60e89ecbaec41da53c32901f6d9401213178f52977a6df5155b341ac055ad52951ff72c940b9f15b8b25d581fa7e0daecc9f02b64116bd9341ef98dfe2eaa80760bee79f6e84f5fc565834470accd122428c0b6f5cef7460e576dd10d3ff60f8884c4118036230977e68ad0b12462f069850f688178eb7a486d4940d763adc36e0dad77be6b5b3ef2123c136efcf74533a4acabd0130b18bea4ee0f7eb0db86bfc621a992180a4cf7f6ddbd18297e6331e96e8cbd2505980548a10063292646c18677dd25834e1ce281ef745ca1c8d63e5e7219c731efc5ccb3ef8acc4aa6ee558b2c515dfb173d0eb506b3797eff2832285f4c6921f380ca0e953224fadfc8f6e5f66fcdbc90e108c324439dd23e2a3d3", @generic="77f39fe32fa72d986815ca279e0d329e1c74b9bbd23b5292b95777393fe7776377b3ed1baef29486e707bc63239691a846659cabcb671cce25b1d855", @typed={0x8, 0xbb, 0x0, 0x0, @pid=r2}, @typed={0xa, 0x53, 0x0, 0x0, @str='(0{[-\x00'}]}, 0x1064}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0), &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000300)="40f0538e0448b21fb68068", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12m37.869332439s ago: executing program 5 (id=3358): r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) userfaultfd(0x80000) listen(0xffffffffffffffff, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x1}) 12m36.815594596s ago: executing program 5 (id=3361): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002"], 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x48, r1, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1a7c}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x48}}, 0x20000000) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x0, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x4, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x401, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x8001, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x4, 0x5, 0x27, 0x4, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x8, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x3, 0xfffffffe, 0x6c, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x9, 0x7, 0xfffffffd, 0x2, 0x20000005, 0x6, 0x23, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x2, 0xffffffff, 0x6, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x10401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa8, 0x4, 0xffffffff, 0x5, 0x9, 0x4, 0xe46, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x800, 0x800, 0xa809, 0x65f413f9, 0x4, 0x8, 0x8a9, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x10200, 0x0, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f0000000500)=@svm={0x108, 0x1, 0x1080, {0x200000}, {"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"}}) ioctl$UI_DEV_CREATE(r0, 0x5501) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r7, 0xfffffffc) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 12m33.478808644s ago: executing program 5 (id=3369): ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x2f94, 0x80000001, 0x0, 0x2, 0x8, 0xfffffffffffffff9, 0xa04, 0xfffff7e3, 0x100, 0x4, 0x8, 0x6, 0x3, 0x85a}, 0x18, [0x0, 0x0, 0x0]}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xb) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000180)={{r0, 0x9, 0x7, 0x6, 0xffffffff, 0x3, 0x80000000001a, 0x3, 0x2, 0xa, 0x401, 0x81, 0x5, 0x9, 0x3c}}) socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x5, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x8932, &(0x7f00000006c0)={'gre0\x00', 0x0}) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000280)={r8, 0x0, 0x8001, 0x0, 0x0, [0x0], [0x0, 0x0, 0x1, 0x2], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) r12 = syz_usb_connect$uac2(0x2, 0xd7, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0xb, 0x10, 0xe, {0x8, 0xb, 0x2, 0x0, 0x1, 0x0, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0xa, 0x49, 0x80}, [@processing_unit={0x9, 0x24, 0x8, 0x2, 0x3, [0x3, 0x3]}, @sample_rate={0x9, 0x24, 0xd, 0x5, 0x1, 0x4, [0x0]}, @selector_unit={0xa, 0x24, 0xb, 0x6, 0x5, "ab7f6a9521"}, @extension_unit={0xa, 0x24, 0x9, 0x6, 0x2, 0x52, "e252e8"}, @sample_rate={0x9, 0x24, 0xd, 0x4, 0x3, 0x1, [0x1]}, @effect_unit={0x11, 0x24, 0x7, 0x6, 0x0, 0x5, [0x2, 0x2, 0x2, 0x2, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x2, 0x9, 0x7, "", '}'}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x4, 0x3, {0x8, 0x25, 0x1, 0x80, 0x14, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x80, 0x2, 0x7, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x8, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0x5, 0x6, {0x8, 0x25, 0x1, 0x1, 0x0, 0xf9, 0x9}}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x200, 0xa, 0x7, 0x4, 0xff, 0x42}, 0x80, &(0x7f0000000600)={0x5, 0xf, 0x80, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "83facabedcc2ac787439f5d8edb23d2b"}, @generic={0x5d, 0x10, 0x2, "a264e3f207a6bad5896dacc46f51bb66dedfba7892996ff28328b6ddcdf89a05016a3075f780046bc37370f904aeeb4fae4b25d528c8eeb1a9192a47afa743998fa81c378a0e3edb35d12ae2ae6ece06ea581f0054595b965d30"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x4, 0xb, 0x81}]}, 0x8, [{0x89, &(0x7f0000000680)=@string={0x89, 0x3, "a64c10fd8d1e955ab4f9b1f1168492dca68ae8fa315d76b494033e6ec724c72c0e1c3c54039ef324135f40c9130cb52d330bc067e7675cd1e9606f836d800c7789f5eea8f2dbb6ae8beaa83d602c811fbefba201c1043e930fdac85df83e2b4d1b7d8a752b3abf03d7bbda087a73704c060f8e1acc95ba4fb334750aaaccef035f13f0cafd91d6"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xc01}}, {0x17, &(0x7f00000007c0)=@string={0x17, 0x3, "2100c131a253230228bf7bffe547f3e42b43896ffb"}}, {0xb1, &(0x7f0000000800)=@string={0xb1, 0x3, "f453e2f14b18969c6032454e5237735835e7f9972ce691d206a69d1d3359fc30f97b551ff640e6348298735d4852033d9590d32428d86b90e64381833fd80160d00f7cefd08557107dfb3473bc63ad8e52aee6053231959558e002d68bcb29a0a217be63045e4308b294e181c57174f34543e41a1b86a2d741a4d0dc774e42192483a84b22281480bf84beb714a795771e9a413a78a0222624547a71df0684a484add1814c45b1ce69fc5c38075fce"}}, {0x2, &(0x7f00000009c0)=@string={0x2}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x41a}}, {0x3f, &(0x7f0000000b00)=@string={0x3f, 0x3, "726823f52fd1057de3fdacf387c85fc3800d346afbfdfe21380450c658ce68ef74aa61b00bca156bae51c46f86744ad3a78545df6428fae005036431b4"}}]}) syz_usb_control_io$uac2(r12, &(0x7f0000000d40)={0x14, &(0x7f0000000c00)={0x40, 0x22, 0x53, {0x53, 0x9, "583637a1f22394af024b3ea215237b3e48d0cadb934be7e2fba0dac7ecf0adb707e7c6d32fdd88df5e9d63f71cc509733b4453e51a9b69e87f7ed19e428533a9b1dc97074a7a633db6ac519f652782805f"}}, &(0x7f0000000d00)={0x0, 0x3, 0x32, @string={0x32, 0x3, "0968654955a23e4d501ad88d3e8cd46931951e0a0797214c7520dc3cf62a74e64a2a3d2e8d42d4f4b4f62ba1ffcd3845"}}}, &(0x7f0000001000)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)={0x20, 0x82, 0x1, '7'}, &(0x7f0000000f40)={0x20, 0x83, 0x1, 'S'}, 0x0, &(0x7f0000000fc0)={0x20, 0x85, 0x3, "cdda80"}}) truncate(0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000100)={r11}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) 12m19.681674915s ago: executing program 1 (id=3429): mremap(&(0x7f000087f000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1000016, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x200020, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x4008054) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000061c0)={@nfc={0x27, 0x0, 0x1, 0x5}, {&(0x7f0000003100)=""/4096, 0x1000}, 0x0, 0x5d}, 0xa0) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x1002001, 0xde60fe10fea4447b, 0x3ff, 0x7fff, 0x0, 0x40000006, 0x0, 0x0, 0x10, 0x2}}, 0x50) r5 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000340)='9', 0x1, 0xffffffffffffffff) keyctl$get_security(0x11, r5, 0x0, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r6, 0x80045518, &(0x7f0000000180)=0xad) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xf) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000229bdff030000df25040000004000078008000100a40f00000c00040001000000000000000c00030002080000000000000c000400000c0000800000000800010074000000080000002c0005801400028008000200040000000800010001000000140002800800020010000000080001"], 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4008c50) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r8, &(0x7f0000002100)="c4105b860923ba883c985e15a8c860d831cfdc1d822403a9fe2cc7852887c1ee401d6dc5c4d742fdc64b4f59549ad148ea786ea0a73f0fd3ded0fe495ef8f1bae5c06f0600e57d0eae22ba7acef8aa6c8f2a1d8ea1fcd7925958b8b442712923f53b9ddfe4a5adb58fd406395fa9d037f3c9c3134851a8e27bdb3ca5d9238d24e3537329f3a62ff3b3714cc1d2cb0e72201370fcad4af9745563dfc665da1de587624f1d055c3ecce8172e9ffed29b92e2ea505e39db2785c531238cfe3d6112b930cb8df276162fb41807ef574acd8d307388b34c655aed0c67748d07758224d8e872237625a9e7a48e2b78ea19da18958ca92d45cfeedc39a2e6405fcb5d2067fe5d5cf8717ece232ec858a9e0b45980acd47089b86f75c1f3fd371b89ac53d37160460aeee11935ac922b84947aa2ee32a9a776ed4dd4694d9a26506e1ee9cfb14a1e6b50e5505ecd29bf47d6b49a3b3b9adab0689b7d925514e3314c3892a6189a0d8e963c58b48fba598ac99b89147c006f1f0556ffd63ef565600f5bb056196232b5a34fbdb71b6e368be51dc7ba6c6b1391efcc46b98f8c7be58989082071ee7150cdd74d90033c17daab57f85b6c29e0a84b3b2d3b846c2394b851a2510150d5b288f93fe1517745f44615a8b14014f65c9d83addde26e42563c58bcaccbaef2292486a7b4e720e7bd5f6709fbe4058f92183d7fc6169bfe863f62662aec26c52a06c8e68e35050814627a1c0982ed0cc1dcc42b99634d12412b983fd4e726f371ca0f5bcdae926bdbbfdda257ed15324173d7d34cad0b60374d1395e60f945bc44681874304e5941931de3a67e9fd1fd931c21eb89b91a70e54b678ab97c2a4fd6af0d716f16abcac91256a6182361c31913f3a857c14e3e04bb8dba68141c54662021d4b26974a0031574628c5b90a72c4772e8db665cd2f7c9f02872a736bf90efe7a6974095b7390f619333dff906e275f31a548b77e8803ce4d34f84c0d865600ca0141becccd65f0456c141599265a6b741b1df65169826af8fb2569089c8b91361e2aa4410d65ae79d01cc85b3c2299db0b94ae86c1da45ef6b4a020aebd0e42697f5b699d121d244507b4b5fa1528c8e17b1c104457575334dd410df83d70b7844a053a55c0fb9c9b35c9b7259ccb71bc2423b99e05ee3b68bc9118c58ea5a7b617726f67a1265a922903cda2ab223ba2a2a45456076514539c546f59158ffe64d80f33b87c3ad37257f074b5c6ce0b2ca1328854559e4f8dbc2c9410a13ab74e717a898775aeda60e4f29b7b294376c6be64ce8b91e1b27f873e4245a5715d6fcb776ada4e417da3e220423d3948c90cf7d583ba7ac229d31cd4b8e26aa8014c05fa24247248de3c935686c12dc56d609f7a71edb2815475ece47ca3d761722908a548236864925646639faf768d24bc6aba589cb976dcfebbe8e1829146f29df47ac883119d3a05c942aaa5626fd1faa03194a5223c42346a150fde89a916edf8ff7b64a5b1d277361cb6d7d0684e95ab2e3a9e2b5cb6594614fc497e0746c03e329f8f94867df9a9058a3a4966a2091fd76ac35dc789095485667e1f399b1f02f3259a7da935bc826d207d2568399499a9335671f02811f4b7379166cc8ad605c7e044422fb3ce6f1f40ab4e2e6f722f278dfe58bf0d4b5a2aaedfe341c7b70507b661997598310f593be551c76cd718d5e84015b5cc27201c6018ec46ba2813a3a05cdcd16832067ea7d1f65e50690d542828dff0033640afaafce15f9a2fda041a850336f3d0c17d8b98fb4a4a5d8f55784ffd589d14fd7d23209f5e33cc0d0061919c2b0a10dea4ffd408846147297c5358bff660898a9a2b10056f1ff6169d0e6b0426830375b3a7758530eac8cd6e16038b454194cdd6967f90f3da213fef4f00f912f9b825cbd8be630bc7f01b169ead33e38d3299c9a447388bc0116489648cd0721c90ce0a7f7b96e81b163b13478cf1d0ee030d90655deddcec7399d40ef4420e9b5debabecd46ce878bf09cf65f6228d98705f77d4df50e5d476f48e8f2f24b341265f27dd5a021ef46a5b596dbdd6bdd924956eb25165503c44e65c9e647ae928242794d236e6e7636b6aac0805eb2c5f245eaa8f590cadacc1d386dbadd7aa60e838ec2ad43068264884989fac76c5a67b1f13b3311a48aa05d4ea3fb6817b0c7f353fba5c69686b3ba180caec63b60e16f587875a8c09d067414d90d5918e22f3e0115b58d562dfaf70987ac0fc589c6ff7e2677ed6f769f36e05917e681dab98085d761d0cc5a044eb988c0887d601a5a1075e69f55599bc6ad399a03a7de95685447f16a71a867052f92e96b922b686b5cdd8f924bdc61415a677ed4ec448242fb46845c63c6297a1c4722a510857d162d7f56adba3a8a6e1994f0a8ca0873175e9b21e35f2fef44e6f41ecf6bdbca5abb595ec93ad2df76d80e3eb670c7a5b91b5ebd7b9aee4c5ee19a30064a2fb2ceb6f3638f361cd79334ae05a35aeeac", 0x6f0, 0x2400c000, 0x0, 0x0) 12m18.385501832s ago: executing program 1 (id=3434): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf6", 0x7f}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce800", 0x2a}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236", 0xa2}, {&(0x7f0000000900)}], 0x5}}, {{&(0x7f0000000a40)=@rc={0x1f, @any, 0x4a}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x4}}, 0x80, 0x0}}], 0x3, 0x2000005d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x4004000) r2 = dup(r0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000006c0), 0x100, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r3, 0x40096102, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0xa, 0xbffffffd) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={0x141542, 0x0, 0x4}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) file_setattr(r6, &(0x7f0000000500)='./file0\x00', &(0x7f00000005c0)={0x82, 0x7, 0x7, 0x8, 0x2}, 0x18, 0x1000) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x5, 0x0, 0xf07, 0x1, 0x94, 0xffbffff0, 0x5}, 0x9c) 12m18.303680929s ago: executing program 34 (id=3369): ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x2f94, 0x80000001, 0x0, 0x2, 0x8, 0xfffffffffffffff9, 0xa04, 0xfffff7e3, 0x100, 0x4, 0x8, 0x6, 0x3, 0x85a}, 0x18, [0x0, 0x0, 0x0]}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xb) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000180)={{r0, 0x9, 0x7, 0x6, 0xffffffff, 0x3, 0x80000000001a, 0x3, 0x2, 0xa, 0x401, 0x81, 0x5, 0x9, 0x3c}}) socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x5, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x8932, &(0x7f00000006c0)={'gre0\x00', 0x0}) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000280)={r8, 0x0, 0x8001, 0x0, 0x0, [0x0], [0x0, 0x0, 0x1, 0x2], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) r12 = syz_usb_connect$uac2(0x2, 0xd7, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0xb, 0x10, 0xe, {0x8, 0xb, 0x2, 0x0, 0x1, 0x0, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0xa, 0x49, 0x80}, [@processing_unit={0x9, 0x24, 0x8, 0x2, 0x3, [0x3, 0x3]}, @sample_rate={0x9, 0x24, 0xd, 0x5, 0x1, 0x4, [0x0]}, @selector_unit={0xa, 0x24, 0xb, 0x6, 0x5, "ab7f6a9521"}, @extension_unit={0xa, 0x24, 0x9, 0x6, 0x2, 0x52, "e252e8"}, @sample_rate={0x9, 0x24, 0xd, 0x4, 0x3, 0x1, [0x1]}, @effect_unit={0x11, 0x24, 0x7, 0x6, 0x0, 0x5, [0x2, 0x2, 0x2, 0x2, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x2, 0x9, 0x7, "", '}'}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x4, 0x3, {0x8, 0x25, 0x1, 0x80, 0x14, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x80, 0x2, 0x7, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x8, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0x5, 0x6, {0x8, 0x25, 0x1, 0x1, 0x0, 0xf9, 0x9}}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x200, 0xa, 0x7, 0x4, 0xff, 0x42}, 0x80, &(0x7f0000000600)={0x5, 0xf, 0x80, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "83facabedcc2ac787439f5d8edb23d2b"}, @generic={0x5d, 0x10, 0x2, "a264e3f207a6bad5896dacc46f51bb66dedfba7892996ff28328b6ddcdf89a05016a3075f780046bc37370f904aeeb4fae4b25d528c8eeb1a9192a47afa743998fa81c378a0e3edb35d12ae2ae6ece06ea581f0054595b965d30"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x4, 0xb, 0x81}]}, 0x8, [{0x89, &(0x7f0000000680)=@string={0x89, 0x3, "a64c10fd8d1e955ab4f9b1f1168492dca68ae8fa315d76b494033e6ec724c72c0e1c3c54039ef324135f40c9130cb52d330bc067e7675cd1e9606f836d800c7789f5eea8f2dbb6ae8beaa83d602c811fbefba201c1043e930fdac85df83e2b4d1b7d8a752b3abf03d7bbda087a73704c060f8e1acc95ba4fb334750aaaccef035f13f0cafd91d6"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xc01}}, {0x17, &(0x7f00000007c0)=@string={0x17, 0x3, "2100c131a253230228bf7bffe547f3e42b43896ffb"}}, {0xb1, &(0x7f0000000800)=@string={0xb1, 0x3, "f453e2f14b18969c6032454e5237735835e7f9972ce691d206a69d1d3359fc30f97b551ff640e6348298735d4852033d9590d32428d86b90e64381833fd80160d00f7cefd08557107dfb3473bc63ad8e52aee6053231959558e002d68bcb29a0a217be63045e4308b294e181c57174f34543e41a1b86a2d741a4d0dc774e42192483a84b22281480bf84beb714a795771e9a413a78a0222624547a71df0684a484add1814c45b1ce69fc5c38075fce"}}, {0x2, &(0x7f00000009c0)=@string={0x2}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x41a}}, {0x3f, &(0x7f0000000b00)=@string={0x3f, 0x3, "726823f52fd1057de3fdacf387c85fc3800d346afbfdfe21380450c658ce68ef74aa61b00bca156bae51c46f86744ad3a78545df6428fae005036431b4"}}]}) syz_usb_control_io$uac2(r12, &(0x7f0000000d40)={0x14, &(0x7f0000000c00)={0x40, 0x22, 0x53, {0x53, 0x9, "583637a1f22394af024b3ea215237b3e48d0cadb934be7e2fba0dac7ecf0adb707e7c6d32fdd88df5e9d63f71cc509733b4453e51a9b69e87f7ed19e428533a9b1dc97074a7a633db6ac519f652782805f"}}, &(0x7f0000000d00)={0x0, 0x3, 0x32, @string={0x32, 0x3, "0968654955a23e4d501ad88d3e8cd46931951e0a0797214c7520dc3cf62a74e64a2a3d2e8d42d4f4b4f62ba1ffcd3845"}}}, &(0x7f0000001000)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)={0x20, 0x82, 0x1, '7'}, &(0x7f0000000f40)={0x20, 0x83, 0x1, 'S'}, 0x0, &(0x7f0000000fc0)={0x20, 0x85, 0x3, "cdda80"}}) truncate(0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000100)={r11}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) 12m17.085770915s ago: executing program 1 (id=3437): connect$pppl2tp(0xffffffffffffffff, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @multicast1}, 0x4, 0x1}}, 0x1a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3f, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x40, 0x4, 0x25cd, 0x1, 0xb4, 0x4a, 0x80a2b9, 0x6, 0xb, 0xe4, 0x6, 0xfc000000, 0x2, 0xbbf, 0x4a732f64, 0x1, 0x3, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x1000, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x1, 0x1, 0x10401, 0xfffffff5, 0x404, 0xa7, 0x81, 0x9, 0x8001, 0x0, 0xff, 0x0, 0x4, 0x9, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x6, 0x8, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x8, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab000e0, 0x5, 0x6, 0x2, 0x1, 0x8003ff, 0x1ff, 0x1, 0x7fff, 0x6, 0x1cb, 0x1, 0x80000004, 0x8, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0x8, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10100a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x5, 0x97f7, 0x3, 0xd, 0x7, 0x603, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xe, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x9, 0x10000, 0xfefffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0x3, 0x1005, 0x1, 0x9, 0x1e, 0x9, 0x81, 0x3, 0x0, 0xd, 0xfffffff7, 0x6, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x98ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7ffc, 0x3, 0x6, 0xf, 0xe, 0x1, 0x269, 0x6, 0x1, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 12m16.597236067s ago: executing program 1 (id=3440): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000042c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff0000000000"], 0x4b) 12m16.39068773s ago: executing program 1 (id=3441): socket$key(0xf, 0x3, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa1300) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = socket(0x2b, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000009c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "649fc7ce", {0x3, 0x101, 0x0, 0xa, 0x3, 0xa1, 0x40}}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[]) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x8000000, 0x2, 0x0, 0x1, 0x2009, 0xb}, 0x20) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x0, 0x1000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x42ac, 0x10, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x7c45, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r5, 0x5501) close_range(r4, 0xffffffffffffffff, 0x0) 12m15.01632533s ago: executing program 1 (id=3447): ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x2f94, 0x80000001, 0x0, 0x2, 0x8, 0xfffffffffffffff9, 0xa04, 0xfffff7e3, 0x100, 0x4, 0x8, 0x6, 0x3, 0x85a}, 0x18, [0x0, 0x0, 0x0]}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xb) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000180)={{r0, 0x9, 0x7, 0x6, 0xffffffff, 0x3, 0x80000000001a, 0x3, 0x2, 0xa, 0x401, 0x81, 0x5, 0x9, 0x3c}}) socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x5, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x8, 0x64}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x20, 0x0, 0x6}}]}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x8932, &(0x7f00000006c0)={'gre0\x00', 0x0}) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000280)={r8, 0x0, 0x8001, 0x0, 0x0, [0x0], [0x0, 0x0, 0x1, 0x2], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) r12 = syz_usb_connect$uac2(0x2, 0xd7, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0xb, 0x10, 0xe, {0x8, 0xb, 0x2, 0x0, 0x1, 0x0, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0xa, 0x49, 0x80}, [@processing_unit={0x9, 0x24, 0x8, 0x2, 0x3, [0x3, 0x3]}, @sample_rate={0x9, 0x24, 0xd, 0x5, 0x1, 0x4, [0x0]}, @selector_unit={0xa, 0x24, 0xb, 0x6, 0x5, "ab7f6a9521"}, @extension_unit={0xa, 0x24, 0x9, 0x6, 0x2, 0x52, "e252e8"}, @sample_rate={0x9, 0x24, 0xd, 0x4, 0x3, 0x1, [0x1]}, @effect_unit={0x11, 0x24, 0x7, 0x6, 0x0, 0x5, [0x2, 0x2, 0x2, 0x2, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x2, 0x9, 0x7, "", '}'}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x4, 0x3, {0x8, 0x25, 0x1, 0x80, 0x14, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x80, 0x2, 0x7, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x8, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0x5, 0x6, {0x8, 0x25, 0x1, 0x1, 0x0, 0xf9, 0x9}}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x200, 0xa, 0x7, 0x4, 0xff, 0x42}, 0x80, &(0x7f0000000600)={0x5, 0xf, 0x80, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "83facabedcc2ac787439f5d8edb23d2b"}, @generic={0x5d, 0x10, 0x2, "a264e3f207a6bad5896dacc46f51bb66dedfba7892996ff28328b6ddcdf89a05016a3075f780046bc37370f904aeeb4fae4b25d528c8eeb1a9192a47afa743998fa81c378a0e3edb35d12ae2ae6ece06ea581f0054595b965d30"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x4, 0xb, 0x81}]}, 0x8, [{0x89, &(0x7f0000000680)=@string={0x89, 0x3, "a64c10fd8d1e955ab4f9b1f1168492dca68ae8fa315d76b494033e6ec724c72c0e1c3c54039ef324135f40c9130cb52d330bc067e7675cd1e9606f836d800c7789f5eea8f2dbb6ae8beaa83d602c811fbefba201c1043e930fdac85df83e2b4d1b7d8a752b3abf03d7bbda087a73704c060f8e1acc95ba4fb334750aaaccef035f13f0cafd91d6"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xc01}}, {0x17, &(0x7f00000007c0)=@string={0x17, 0x3, "2100c131a253230228bf7bffe547f3e42b43896ffb"}}, {0xb1, &(0x7f0000000800)=@string={0xb1, 0x3, "f453e2f14b18969c6032454e5237735835e7f9972ce691d206a69d1d3359fc30f97b551ff640e6348298735d4852033d9590d32428d86b90e64381833fd80160d00f7cefd08557107dfb3473bc63ad8e52aee6053231959558e002d68bcb29a0a217be63045e4308b294e181c57174f34543e41a1b86a2d741a4d0dc774e42192483a84b22281480bf84beb714a795771e9a413a78a0222624547a71df0684a484add1814c45b1ce69fc5c38075fce"}}, {0x2, &(0x7f00000009c0)=@string={0x2}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x41a}}, {0x3f, &(0x7f0000000b00)=@string={0x3f, 0x3, "726823f52fd1057de3fdacf387c85fc3800d346afbfdfe21380450c658ce68ef74aa61b00bca156bae51c46f86744ad3a78545df6428fae005036431b4"}}]}) syz_usb_control_io$uac2(r12, &(0x7f0000000d40)={0x14, &(0x7f0000000c00)={0x40, 0x22, 0x53, {0x53, 0x9, "583637a1f22394af024b3ea215237b3e48d0cadb934be7e2fba0dac7ecf0adb707e7c6d32fdd88df5e9d63f71cc509733b4453e51a9b69e87f7ed19e428533a9b1dc97074a7a633db6ac519f652782805f"}}, &(0x7f0000000d00)={0x0, 0x3, 0x32, @string={0x32, 0x3, "0968654955a23e4d501ad88d3e8cd46931951e0a0797214c7520dc3cf62a74e64a2a3d2e8d42d4f4b4f62ba1ffcd3845"}}}, &(0x7f0000001000)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)={0x20, 0x82, 0x1, '7'}, &(0x7f0000000f40)={0x20, 0x83, 0x1, 'S'}, 0x0, &(0x7f0000000fc0)={0x20, 0x85, 0x3, "cdda80"}}) truncate(0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000100)={r11}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) 12m14.849812178s ago: executing program 0 (id=3448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0xffffffffffffffff, 0xa, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) getdents64(r2, &(0x7f0000000680)=""/4067, 0xfe3) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) sendmsg$inet(r2, &(0x7f0000001680)={&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000200)="0f1cdb39454b7782165a2d29acbb6ff14201d769be88e74b041469b792c91ff9ca0d216f79462e55219537e680320df3770429e966b17a192f01bc2e0744", 0x3e}, {&(0x7f00000002c0)="30658e33f6fea85c709fc160f18ef7b0d1098fc3ab11dd9cc31dc0bbbe4eaf1c3b2e68c4954d1f931b87b8e48890040f890bce9e8bb1477f6fee1ba5c60fb4b080a038fe6fde7a864dd0284bdb9c3fa5203c18403c1c952e02422c94dee9278fc3d744b6bcf46b48ba8d77a6fd8205dc852775e2027f6d903203107fdd0ca8654e445461b7e6dcc2654166c714b53311398163ffc7924007c60497c2feb8c817872f0e4661cf8f97", 0xa8}, {&(0x7f0000000380)="f107a47cf3c1", 0x6}], 0x3, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_retopts={{0xac, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0x9d, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x6}, {@broadcast, 0x2}, {@multicast2, 0x8}, {@loopback, 0xffff5536}, {@broadcast, 0xa}, {@local, 0x9af}]}, @timestamp_addr={0x44, 0x3c, 0xc9, 0x1, 0x1, [{@empty, 0x8000}, {@private=0xa010100, 0x1}, {@loopback, 0x5}, {@rand_addr=0x64010100, 0x1}, {@empty, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x3}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x2}]}, @rr={0x7, 0x23, 0xb5, [@dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010102, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xdf}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x128}, 0x4000014) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$hidraw(&(0x7f0000000000), 0x4, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r4, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'ah\x00'}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fc00100}]}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000480)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a3000005c002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d6148f0c08000240000000010c0001004e465155455545"], 0xd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x15, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 12m13.045978677s ago: executing program 0 (id=3450): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000042c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff0000000000"], 0x4b) 12m12.713732874s ago: executing program 0 (id=3451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'ip6tnl0\x00', 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r1, 0x0, 0x8000002) unshare(0x694f840696960e3d) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x5dc, 0x4) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040)=[{}], 0x144, 0x1, 0x0, 0x2, 0x0, 0x2}) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$9p(r4, &(0x7f0000000100)="d5c0", 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f0000000340), 0x4003) 12m12.031873173s ago: executing program 0 (id=3452): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000340)="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", 0xf7e, 0x40044, &(0x7f0000001340)={0x2, 0x4e21, @local}, 0x10) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f0000000800), 0x4) ftruncate(r1, 0x8008976) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000002900)={0x80}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(r3, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f00000000c0)=""/83, 0x53}, {&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000000240)=""/167, 0xa7}, {&(0x7f0000001380)=""/235, 0xeb}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/192, 0xc0}], 0x7, &(0x7f00000026c0)=""/45, 0x2d}, 0x800}], 0x1, 0x42, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$XFS_IOC_READLINK_BY_HANDLE(r2, 0xc038586c, &(0x7f00000028c0)={r0, 0x0, 0x60782, &(0x7f0000002800)={@align=0x1, {0x6, 0x4, 0x2, 0xffff}}, 0x40, &(0x7f0000002840), 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x3a, 0x23b) 12m10.713698426s ago: executing program 0 (id=3456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x5d, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, 0x6, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) timerfd_create(0x5, 0x81800) syz_emit_ethernet(0x15b, &(0x7f0000000880)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv4={0x800, @generic={{0x14, 0x4, 0x2, 0x8, 0x14d, 0x67, 0x0, 0x7, 0x2, 0x0, @multicast2, @broadcast, {[@lsrr={0x83, 0xf, 0x61, [@dev={0xac, 0x14, 0x14, 0x34}, @empty, @broadcast]}, @cipso={0x86, 0x6, 0x1}, @timestamp={0x44, 0x24, 0x2c, 0x0, 0x0, [0x1e, 0x27, 0x10001, 0x90a, 0x6, 0x35e4, 0x7fffffff, 0x4]}]}}, "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"}}}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x20, &(0x7f0000000680)=[@cr4={0x1, 0x100280}], 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000"], 0xa0}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r9, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSCLOCKID(r9, 0x400445a0, &(0x7f0000000340)=0x7) 12m9.860581681s ago: executing program 0 (id=3457): ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x2f94, 0x80000001, 0x0, 0x2, 0x8, 0xfffffffffffffff9, 0xa04, 0xfffff7e3, 0x100, 0x4, 0x8, 0x6, 0x3, 0x85a}, 0x18, [0x0, 0x0, 0x0]}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xb) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000180)={{r0, 0x9, 0x7, 0x6, 0xffffffff, 0x3, 0x80000000001a, 0x3, 0x2, 0xa, 0x401, 0x81, 0x5, 0x9, 0x3c}}) socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x5, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x8, 0x64}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x20, 0x0, 0x6}}]}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x8932, &(0x7f00000006c0)={'gre0\x00', 0x0}) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000280)={r8, 0x0, 0x8001, 0x0, 0x0, [0x0], [0x0, 0x0, 0x1, 0x2], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) r12 = syz_usb_connect$uac2(0x2, 0xd7, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0xb, 0x10, 0xe, {0x8, 0xb, 0x2, 0x0, 0x1, 0x0, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0xa, 0x49, 0x80}, [@processing_unit={0x9, 0x24, 0x8, 0x2, 0x3, [0x3, 0x3]}, @sample_rate={0x9, 0x24, 0xd, 0x5, 0x1, 0x4, [0x0]}, @selector_unit={0xa, 0x24, 0xb, 0x6, 0x5, "ab7f6a9521"}, @extension_unit={0xa, 0x24, 0x9, 0x6, 0x2, 0x52, "e252e8"}, @sample_rate={0x9, 0x24, 0xd, 0x4, 0x3, 0x1, [0x1]}, @effect_unit={0x11, 0x24, 0x7, 0x6, 0x0, 0x5, [0x2, 0x2, 0x2, 0x2, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x2, 0x9, 0x7, "", '}'}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x4, 0x3, {0x8, 0x25, 0x1, 0x80, 0x14, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x80, 0x2, 0x7, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x8, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0x5, 0x6, {0x8, 0x25, 0x1, 0x1, 0x0, 0xf9, 0x9}}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x200, 0xa, 0x7, 0x4, 0xff, 0x42}, 0x80, &(0x7f0000000600)={0x5, 0xf, 0x80, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "83facabedcc2ac787439f5d8edb23d2b"}, @generic={0x5d, 0x10, 0x2, "a264e3f207a6bad5896dacc46f51bb66dedfba7892996ff28328b6ddcdf89a05016a3075f780046bc37370f904aeeb4fae4b25d528c8eeb1a9192a47afa743998fa81c378a0e3edb35d12ae2ae6ece06ea581f0054595b965d30"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x4, 0xb, 0x81}]}, 0x8, [{0x89, &(0x7f0000000680)=@string={0x89, 0x3, "a64c10fd8d1e955ab4f9b1f1168492dca68ae8fa315d76b494033e6ec724c72c0e1c3c54039ef324135f40c9130cb52d330bc067e7675cd1e9606f836d800c7789f5eea8f2dbb6ae8beaa83d602c811fbefba201c1043e930fdac85df83e2b4d1b7d8a752b3abf03d7bbda087a73704c060f8e1acc95ba4fb334750aaaccef035f13f0cafd91d6"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xc01}}, {0x17, &(0x7f00000007c0)=@string={0x17, 0x3, "2100c131a253230228bf7bffe547f3e42b43896ffb"}}, {0xb1, &(0x7f0000000800)=@string={0xb1, 0x3, "f453e2f14b18969c6032454e5237735835e7f9972ce691d206a69d1d3359fc30f97b551ff640e6348298735d4852033d9590d32428d86b90e64381833fd80160d00f7cefd08557107dfb3473bc63ad8e52aee6053231959558e002d68bcb29a0a217be63045e4308b294e181c57174f34543e41a1b86a2d741a4d0dc774e42192483a84b22281480bf84beb714a795771e9a413a78a0222624547a71df0684a484add1814c45b1ce69fc5c38075fce"}}, {0x2, &(0x7f00000009c0)=@string={0x2}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x41a}}, {0x3f, &(0x7f0000000b00)=@string={0x3f, 0x3, "726823f52fd1057de3fdacf387c85fc3800d346afbfdfe21380450c658ce68ef74aa61b00bca156bae51c46f86744ad3a78545df6428fae005036431b4"}}]}) syz_usb_control_io$uac2(r12, &(0x7f0000000d40)={0x14, &(0x7f0000000c00)={0x40, 0x22, 0x53, {0x53, 0x9, "583637a1f22394af024b3ea215237b3e48d0cadb934be7e2fba0dac7ecf0adb707e7c6d32fdd88df5e9d63f71cc509733b4453e51a9b69e87f7ed19e428533a9b1dc97074a7a633db6ac519f652782805f"}}, &(0x7f0000000d00)={0x0, 0x3, 0x32, @string={0x32, 0x3, "0968654955a23e4d501ad88d3e8cd46931951e0a0797214c7520dc3cf62a74e64a2a3d2e8d42d4f4b4f62ba1ffcd3845"}}}, &(0x7f0000001000)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)={0x20, 0x82, 0x1, '7'}, &(0x7f0000000f40)={0x20, 0x83, 0x1, 'S'}, 0x0, &(0x7f0000000fc0)={0x20, 0x85, 0x3, "cdda80"}}) truncate(0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000100)={r11}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) 11m59.96148467s ago: executing program 35 (id=3447): ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x2f94, 0x80000001, 0x0, 0x2, 0x8, 0xfffffffffffffff9, 0xa04, 0xfffff7e3, 0x100, 0x4, 0x8, 0x6, 0x3, 0x85a}, 0x18, [0x0, 0x0, 0x0]}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xb) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000180)={{r0, 0x9, 0x7, 0x6, 0xffffffff, 0x3, 0x80000000001a, 0x3, 0x2, 0xa, 0x401, 0x81, 0x5, 0x9, 0x3c}}) socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x5, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x8, 0x64}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x20, 0x0, 0x6}}]}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x8932, &(0x7f00000006c0)={'gre0\x00', 0x0}) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000280)={r8, 0x0, 0x8001, 0x0, 0x0, [0x0], [0x0, 0x0, 0x1, 0x2], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) r12 = syz_usb_connect$uac2(0x2, 0xd7, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0xb, 0x10, 0xe, {0x8, 0xb, 0x2, 0x0, 0x1, 0x0, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0xa, 0x49, 0x80}, [@processing_unit={0x9, 0x24, 0x8, 0x2, 0x3, [0x3, 0x3]}, @sample_rate={0x9, 0x24, 0xd, 0x5, 0x1, 0x4, [0x0]}, @selector_unit={0xa, 0x24, 0xb, 0x6, 0x5, "ab7f6a9521"}, @extension_unit={0xa, 0x24, 0x9, 0x6, 0x2, 0x52, "e252e8"}, @sample_rate={0x9, 0x24, 0xd, 0x4, 0x3, 0x1, [0x1]}, @effect_unit={0x11, 0x24, 0x7, 0x6, 0x0, 0x5, [0x2, 0x2, 0x2, 0x2, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x2, 0x9, 0x7, "", '}'}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x4, 0x3, {0x8, 0x25, 0x1, 0x80, 0x14, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x80, 0x2, 0x7, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x8, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0x5, 0x6, {0x8, 0x25, 0x1, 0x1, 0x0, 0xf9, 0x9}}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x200, 0xa, 0x7, 0x4, 0xff, 0x42}, 0x80, &(0x7f0000000600)={0x5, 0xf, 0x80, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "83facabedcc2ac787439f5d8edb23d2b"}, @generic={0x5d, 0x10, 0x2, "a264e3f207a6bad5896dacc46f51bb66dedfba7892996ff28328b6ddcdf89a05016a3075f780046bc37370f904aeeb4fae4b25d528c8eeb1a9192a47afa743998fa81c378a0e3edb35d12ae2ae6ece06ea581f0054595b965d30"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x4, 0xb, 0x81}]}, 0x8, [{0x89, &(0x7f0000000680)=@string={0x89, 0x3, "a64c10fd8d1e955ab4f9b1f1168492dca68ae8fa315d76b494033e6ec724c72c0e1c3c54039ef324135f40c9130cb52d330bc067e7675cd1e9606f836d800c7789f5eea8f2dbb6ae8beaa83d602c811fbefba201c1043e930fdac85df83e2b4d1b7d8a752b3abf03d7bbda087a73704c060f8e1acc95ba4fb334750aaaccef035f13f0cafd91d6"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xc01}}, {0x17, &(0x7f00000007c0)=@string={0x17, 0x3, "2100c131a253230228bf7bffe547f3e42b43896ffb"}}, {0xb1, &(0x7f0000000800)=@string={0xb1, 0x3, "f453e2f14b18969c6032454e5237735835e7f9972ce691d206a69d1d3359fc30f97b551ff640e6348298735d4852033d9590d32428d86b90e64381833fd80160d00f7cefd08557107dfb3473bc63ad8e52aee6053231959558e002d68bcb29a0a217be63045e4308b294e181c57174f34543e41a1b86a2d741a4d0dc774e42192483a84b22281480bf84beb714a795771e9a413a78a0222624547a71df0684a484add1814c45b1ce69fc5c38075fce"}}, {0x2, &(0x7f00000009c0)=@string={0x2}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x41a}}, {0x3f, &(0x7f0000000b00)=@string={0x3f, 0x3, "726823f52fd1057de3fdacf387c85fc3800d346afbfdfe21380450c658ce68ef74aa61b00bca156bae51c46f86744ad3a78545df6428fae005036431b4"}}]}) syz_usb_control_io$uac2(r12, &(0x7f0000000d40)={0x14, &(0x7f0000000c00)={0x40, 0x22, 0x53, {0x53, 0x9, "583637a1f22394af024b3ea215237b3e48d0cadb934be7e2fba0dac7ecf0adb707e7c6d32fdd88df5e9d63f71cc509733b4453e51a9b69e87f7ed19e428533a9b1dc97074a7a633db6ac519f652782805f"}}, &(0x7f0000000d00)={0x0, 0x3, 0x32, @string={0x32, 0x3, "0968654955a23e4d501ad88d3e8cd46931951e0a0797214c7520dc3cf62a74e64a2a3d2e8d42d4f4b4f62ba1ffcd3845"}}}, &(0x7f0000001000)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)={0x20, 0x82, 0x1, '7'}, &(0x7f0000000f40)={0x20, 0x83, 0x1, 'S'}, 0x0, &(0x7f0000000fc0)={0x20, 0x85, 0x3, "cdda80"}}) truncate(0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000100)={r11}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) 11m54.447626472s ago: executing program 36 (id=3457): ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x2f94, 0x80000001, 0x0, 0x2, 0x8, 0xfffffffffffffff9, 0xa04, 0xfffff7e3, 0x100, 0x4, 0x8, 0x6, 0x3, 0x85a}, 0x18, [0x0, 0x0, 0x0]}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xb) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000180)={{r0, 0x9, 0x7, 0x6, 0xffffffff, 0x3, 0x80000000001a, 0x3, 0x2, 0xa, 0x401, 0x81, 0x5, 0x9, 0x3c}}) socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x5, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x8, 0x64}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x20, 0x0, 0x6}}]}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x8932, &(0x7f00000006c0)={'gre0\x00', 0x0}) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000280)={r8, 0x0, 0x8001, 0x0, 0x0, [0x0], [0x0, 0x0, 0x1, 0x2], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) r12 = syz_usb_connect$uac2(0x2, 0xd7, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0xb, 0x10, 0xe, {0x8, 0xb, 0x2, 0x0, 0x1, 0x0, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0xa, 0x49, 0x80}, [@processing_unit={0x9, 0x24, 0x8, 0x2, 0x3, [0x3, 0x3]}, @sample_rate={0x9, 0x24, 0xd, 0x5, 0x1, 0x4, [0x0]}, @selector_unit={0xa, 0x24, 0xb, 0x6, 0x5, "ab7f6a9521"}, @extension_unit={0xa, 0x24, 0x9, 0x6, 0x2, 0x52, "e252e8"}, @sample_rate={0x9, 0x24, 0xd, 0x4, 0x3, 0x1, [0x1]}, @effect_unit={0x11, 0x24, 0x7, 0x6, 0x0, 0x5, [0x2, 0x2, 0x2, 0x2, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x2, 0x9, 0x7, "", '}'}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x4, 0x3, {0x8, 0x25, 0x1, 0x80, 0x14, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x80, 0x2, 0x7, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x8, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0x5, 0x6, {0x8, 0x25, 0x1, 0x1, 0x0, 0xf9, 0x9}}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x200, 0xa, 0x7, 0x4, 0xff, 0x42}, 0x80, &(0x7f0000000600)={0x5, 0xf, 0x80, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "83facabedcc2ac787439f5d8edb23d2b"}, @generic={0x5d, 0x10, 0x2, "a264e3f207a6bad5896dacc46f51bb66dedfba7892996ff28328b6ddcdf89a05016a3075f780046bc37370f904aeeb4fae4b25d528c8eeb1a9192a47afa743998fa81c378a0e3edb35d12ae2ae6ece06ea581f0054595b965d30"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x4, 0xb, 0x81}]}, 0x8, [{0x89, &(0x7f0000000680)=@string={0x89, 0x3, "a64c10fd8d1e955ab4f9b1f1168492dca68ae8fa315d76b494033e6ec724c72c0e1c3c54039ef324135f40c9130cb52d330bc067e7675cd1e9606f836d800c7789f5eea8f2dbb6ae8beaa83d602c811fbefba201c1043e930fdac85df83e2b4d1b7d8a752b3abf03d7bbda087a73704c060f8e1acc95ba4fb334750aaaccef035f13f0cafd91d6"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xc01}}, {0x17, &(0x7f00000007c0)=@string={0x17, 0x3, "2100c131a253230228bf7bffe547f3e42b43896ffb"}}, {0xb1, &(0x7f0000000800)=@string={0xb1, 0x3, "f453e2f14b18969c6032454e5237735835e7f9972ce691d206a69d1d3359fc30f97b551ff640e6348298735d4852033d9590d32428d86b90e64381833fd80160d00f7cefd08557107dfb3473bc63ad8e52aee6053231959558e002d68bcb29a0a217be63045e4308b294e181c57174f34543e41a1b86a2d741a4d0dc774e42192483a84b22281480bf84beb714a795771e9a413a78a0222624547a71df0684a484add1814c45b1ce69fc5c38075fce"}}, {0x2, &(0x7f00000009c0)=@string={0x2}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x41a}}, {0x3f, &(0x7f0000000b00)=@string={0x3f, 0x3, "726823f52fd1057de3fdacf387c85fc3800d346afbfdfe21380450c658ce68ef74aa61b00bca156bae51c46f86744ad3a78545df6428fae005036431b4"}}]}) syz_usb_control_io$uac2(r12, &(0x7f0000000d40)={0x14, &(0x7f0000000c00)={0x40, 0x22, 0x53, {0x53, 0x9, "583637a1f22394af024b3ea215237b3e48d0cadb934be7e2fba0dac7ecf0adb707e7c6d32fdd88df5e9d63f71cc509733b4453e51a9b69e87f7ed19e428533a9b1dc97074a7a633db6ac519f652782805f"}}, &(0x7f0000000d00)={0x0, 0x3, 0x32, @string={0x32, 0x3, "0968654955a23e4d501ad88d3e8cd46931951e0a0797214c7520dc3cf62a74e64a2a3d2e8d42d4f4b4f62ba1ffcd3845"}}}, &(0x7f0000001000)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)={0x20, 0x82, 0x1, '7'}, &(0x7f0000000f40)={0x20, 0x83, 0x1, 'S'}, 0x0, &(0x7f0000000fc0)={0x20, 0x85, 0x3, "cdda80"}}) truncate(0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000100)={r11}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) 17.827663505s ago: executing program 4 (id=4861): r0 = socket(0x29, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xfffffef1}, {&(0x7f0000000700)="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", 0x116}], 0x3, &(0x7f0000000380)=[@assoc={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x4101}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r8) socket$phonet_pipe(0x23, 0x5, 0x2) write$qrtrtun(r8, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r8, 0xc0245720, &(0x7f00000001c0)={0x1}) 16.807642745s ago: executing program 7 (id=4862): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aae000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000200"/176], 0xf8}}, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@sndinfo={0x20, 0x84, 0x2, {0x800, 0x8000, 0x10000, 0x2}}], 0x20, 0x14}, 0x80) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) copy_file_range(r5, &(0x7f0000000000)=0x8, r5, 0x0, 0x4, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="656e633d6f61657020686173683d7374726565626f673531322d67656e6572696300000000000000000000000000000000000000000000000000000006"], 0x0, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 16.767469445s ago: executing program 9 (id=4863): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="10100000200800001c0012800e00010069703665727370616e000000080002800400120008000300", @ANYRES32, @ANYBLOB='\b\x00:'], 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000d0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x78, 0x0, 0x0, {0x0, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x200000, 0x8000, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x8000, 0x1, 0x8000, 0x80000001, {{0x7, 0x4, 0x0, 0x7, 0x1c, 0x64, 0x0, 0xfe, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r9, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r11 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r11, &(0x7f0000000140)={'full'}, 0xfffffdef) keyctl$chown(0x4, r7, 0xee01, 0x0) keyctl$setperm(0x5, r7, 0x30925) keyctl$KEYCTL_MOVE(0x3, r7, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4e22, 0xfff, 0x4e22, 0x5, 0xa, 0x120, 0x80, 0x62, r6, r3}, {0x47257afc, 0x10001, 0x7, 0x3, 0x9, 0x1, 0x5, 0x2}, {0x6, 0x9, 0x8, 0x8}, 0x400, 0x0, 0x2, 0x1, 0x1, 0x2}, {{@in=@multicast1, 0x4d6, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x2, 0x1, 0x7, 0x47c, 0x1, 0xab1}}, 0xe8) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 15.922548114s ago: executing program 7 (id=4866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008000000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) unshare(0x26020480) r6 = socket(0x10, 0x80002, 0x2) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW2(r4, 0x80047456, &(0x7f0000000040)={0x6, 0xb, 0x6, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff, 0x5}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r6) sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40408c4}, 0x20000000) close_range(r8, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900010000000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES64], 0x84}}, 0x20008040) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) 13.712403914s ago: executing program 9 (id=4867): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) lseek(r0, 0x2, 0x4) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x20}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newchain={0x8f8, 0x64, 0x10, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffff, 0xffff}, {0xb, 0xc}, {0xffff, 0x62eca931931b539f}}, [@filter_kind_options=@f_flow={{0x9}, {0x8b0, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xcd}, @TCA_FLOW_POLICE={0x894, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0xf}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xd4, 0x4, 0x5, 0xfffffff9, 0x6, 0x3, 0xa, 0xffffffff, 0x8, 0x4, 0xffff, 0xfffffff8, 0x1, 0x10001, 0x9, 0x73, 0x6, 0x4, 0x81, 0x4324ffeb, 0xfffffb8c, 0xa, 0x6, 0xffffff00, 0x80000001, 0x1000, 0xdffa, 0x8, 0x6, 0x8, 0x121cae2, 0x6, 0xffffffff, 0x3, 0x9, 0x4, 0xc7f1, 0x4f3, 0x8, 0xb6, 0x0, 0x7, 0x6, 0x174b, 0x3, 0xffff, 0xeb75, 0x2, 0x4, 0xb48, 0x0, 0x3, 0x9, 0x2, 0x7ff, 0x0, 0x7, 0xfffffffa, 0x87, 0x1, 0x8001, 0x1, 0x3, 0xc, 0x8, 0x1000, 0x4, 0x5, 0xc, 0x4, 0x400, 0x1, 0x2, 0x3, 0x1000, 0x65, 0xd, 0x2fee3f11, 0x100, 0x80000001, 0x2, 0xd, 0x1bd, 0x5, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, 0xfb, 0x3, 0x7, 0x7fff, 0x9b, 0x2b5, 0x1000, 0x3, 0x4, 0x4, 0x401, 0x5, 0x5, 0xfffffff8, 0x3c07, 0x8000, 0x6, 0x9, 0x9, 0xf7, 0x8001, 0xdcc4, 0x0, 0xff27, 0x14, 0x200, 0x8, 0x5, 0xc, 0x34, 0x81, 0x0, 0x7ff, 0x2, 0xc7b, 0x1, 0x8, 0x3, 0x711, 0x0, 0x0, 0x8, 0x5, 0x1000, 0x0, 0x81, 0xfffeffff, 0x3, 0x4, 0x26, 0x9, 0x100, 0x10000, 0x6, 0x7, 0xffff0000, 0xfffffff7, 0xffff, 0xff, 0xffffffff, 0x3, 0xdfa, 0xffff338e, 0x2, 0x40, 0x2, 0x3, 0x7, 0xffff, 0x800, 0x2, 0x1, 0xcfd, 0x3, 0x1be6, 0x1, 0x9d5, 0xfffff801, 0x2, 0x1, 0x10001, 0xc3e, 0x1, 0x5, 0x2, 0x1, 0x8, 0x5, 0x0, 0x0, 0x7fffffff, 0xa, 0x4, 0x5f7, 0x7, 0xd, 0x7, 0x5, 0x9, 0x42, 0x3, 0x2, 0x8, 0x5, 0xa7, 0x7f, 0xfffff377, 0x4, 0x2, 0x0, 0xf6, 0x4, 0xc, 0x6, 0x8, 0x0, 0x8, 0x9, 0xf6, 0x2, 0x0, 0x8, 0x4, 0x1, 0x6, 0x7, 0x81, 0x8a3c, 0x2, 0xb, 0xff, 0x1, 0x4, 0x6d, 0x53, 0xfffffe01, 0x1, 0x9, 0x4, 0xb, 0x4, 0x5, 0x9, 0x0, 0xff, 0x3611, 0x7, 0x0, 0x8, 0x5, 0xffff7fff, 0x7f, 0x1, 0x9d, 0xee0, 0xb4d, 0x7, 0x8, 0x4, 0x2, 0x7d2d1d9b, 0x2, 0x8001, 0x2, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x8, 0xf46, 0xfc13, 0xc, 0x5f, 0x6, 0x4, 0xfffffffe, 0x6, 0x10b, 0x101, 0x4, 0x400, 0x19, 0x28, 0x7ff, 0x2, 0x2, 0x9, 0xd, 0xaa4d, 0x6, 0x1ff, 0x2, 0x1, 0x9f9, 0x1, 0x6c280, 0x101, 0x7, 0x80, 0x7973, 0x800, 0x1, 0x7ff, 0xff5, 0xa, 0x70000, 0x7a10, 0x0, 0xfffffff7, 0x8000, 0x2, 0x752, 0xb, 0x1, 0x20005, 0x9, 0x2, 0xd953, 0x9, 0x4, 0x8, 0x4, 0x1, 0x5, 0x100, 0x8001, 0x6, 0x10, 0x3, 0x2, 0x6, 0x1000, 0x10000, 0x7, 0xe, 0x8, 0x7ff, 0x3, 0x4, 0x1, 0x5, 0x7, 0x0, 0x6, 0x4, 0x5, 0x4, 0x9, 0x7fff, 0x8, 0x10001, 0x99bd, 0x7fff, 0x7, 0x4, 0x7, 0x2, 0x4b, 0xffffffff, 0x4, 0x9, 0x2, 0x6d3196bc, 0x8, 0x8, 0x6, 0x4, 0xb75, 0x8, 0x7ff, 0x4f2, 0x7, 0x2, 0x7, 0x7fff, 0x8e, 0x8, 0x101, 0x8, 0x4, 0x1, 0xfffffffc, 0x1, 0xaf, 0x4, 0x27, 0x407, 0x9, 0x7, 0x905, 0x0, 0x9, 0x4, 0x40, 0x6, 0x1, 0x1bbc6c1a, 0x8, 0x40, 0x6, 0x81, 0xfffffffb, 0x21, 0x0, 0x1f, 0x20000, 0x4, 0xc, 0xfffffffd, 0x100, 0x8003, 0x7, 0x81, 0x9, 0x3, 0x3, 0x0, 0x6, 0x9, 0x7ff, 0x3, 0xfffffffa, 0x3413, 0x81, 0x4, 0x3, 0x5, 0xfffffff8, 0xb47, 0x5, 0xfffffffe, 0x100, 0x3, 0xfffffffb, 0x8001, 0x8, 0x685, 0x7, 0x6, 0x1, 0x200, 0x2, 0x2, 0xff, 0x10000, 0x9d009998, 0x8, 0x1, 0x1000, 0x2, 0x2, 0x6, 0x10621fcf, 0x8, 0x8, 0x4, 0xff, 0x4, 0xfffffffb, 0x1, 0xf66a, 0x0, 0x40, 0x80000000, 0x2, 0x66, 0x8, 0x9, 0x6, 0x0, 0xac4, 0x401, 0x200, 0x66, 0x3, 0x1, 0x80, 0x4, 0x9, 0x3, 0x26d72ac7, 0x8, 0x3, 0x7, 0x10001, 0x9, 0x831, 0x3, 0x6, 0x9, 0x375a, 0xa7f7, 0x8, 0x5, 0x4, 0x56dc, 0x80, 0x1000, 0x3, 0xe8, 0x6, 0xc98c, 0x9, 0x7fff, 0x6, 0xa13, 0x100, 0x44937a19, 0x2, 0x3, 0x279, 0x4, 0xf7e7, 0x400, 0x200, 0x0, 0xffff, 0xff, 0x8bb, 0xfffffffd, 0xfffffff8, 0x9, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x866d, 0x20000002, 0x329b, 0x4, 0x76, {0x3, 0x0, 0x3, 0x8, 0xaeb, 0x1}, {0x1, 0x0, 0x2, 0x2, 0x9, 0x7fff}, 0x9, 0x1, 0x9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0xfffffff7, 0x1000, 0x9, {0x3, 0x0, 0x8, 0x401, 0x101, 0x7}, {0x3, 0x2, 0xa0, 0x0, 0xaf, 0x9}, 0x2, 0x9, 0x8}}]}, @TCA_FLOW_MODE={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0xfd}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x100}]}, 0x8f8}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000000467c65b892612", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f00000002c0)=0x4000) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=ANY=[@ANYBLOB="180000004f0ce20000000000fcffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e11e000085000000060000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x8001, &(0x7f0000000180)={[0xffffffffffffff95]}, 0x8) 13.567311939s ago: executing program 6 (id=4868): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000002c0), 0x4) 13.447202411s ago: executing program 8 (id=4869): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioperm(0x5, 0x6, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000295000/0x2000)=nil, 0x2000, 0xa) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) fchmodat(r3, &(0x7f0000000000)='./bus\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r6, @ANYBLOB="01032dbd7000f9dbdf25240000000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unlink(&(0x7f0000000180)='./bus\x00') 13.436578982s ago: executing program 4 (id=4870): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getchain={0x64, 0x66, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0xfff3}, {0x9, 0xfff1}, {0x10, 0x5}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x8de}, {0x8, 0xb, 0xff}, {0x8, 0xb, 0xc17f}, {0x8, 0xb, 0xd9de}, {0x8, 0xb, 0xffff}, {0x8, 0xb, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x205, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x10000}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x34}}, 0x0) 13.321234235s ago: executing program 6 (id=4871): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100", @ANYRES8], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2400, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fsopen(&(0x7f0000000180)='proc\x00', 0x1) socket(0x10, 0x800, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000100)={'pimreg\x00', {0x2, 0x4e20, @remote}}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 11.253570425s ago: executing program 8 (id=4872): socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0xb1) write$cgroup_int(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r5 = epoll_create1(0x0) r6 = gettid() kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r5, &(0x7f00000001c0)={r5, 0xffffffffffffffff, 0xffff}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x15) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) 11.171646689s ago: executing program 4 (id=4873): r0 = socket(0x29, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xfffffef1}, {&(0x7f0000000700)="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", 0x116}], 0x3, &(0x7f0000000380)=[@assoc={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x4101}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r8) socket$phonet_pipe(0x23, 0x5, 0x2) write$qrtrtun(r8, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r8, 0xc0245720, &(0x7f00000001c0)={0x1}) 10.054886663s ago: executing program 6 (id=4874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0xffffffffffffffff, 0xa, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) getdents64(r2, &(0x7f0000000680)=""/4067, 0xfe3) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) sendmsg$inet(r2, &(0x7f0000001680)={&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000200)="0f1cdb39454b7782165a2d29acbb6ff14201d769be88e74b041469b792c91ff9ca0d216f79462e55219537e680320df3770429e966b17a192f01bc2e0744", 0x3e}, {&(0x7f00000002c0)="30658e33f6fea85c709fc160f18ef7b0d1098fc3ab11dd9cc31dc0bbbe4eaf1c3b2e68c4954d1f931b87b8e48890040f890bce9e8bb1477f6fee1ba5c60fb4b080a038fe6fde7a864dd0284bdb9c3fa5203c18403c1c952e02422c94dee9278fc3d744b6bcf46b48ba8d77a6fd8205dc852775e2027f6d903203107fdd0ca8654e445461b7e6dcc2654166c714b53311398163ffc7924007c60497c2feb8c817872f0e4661cf8f97", 0xa8}, {&(0x7f0000000380)="f107a47cf3c1afd6f8904e", 0xb}], 0x3, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_retopts={{0xac, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0x9d, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x6}, {@broadcast, 0x2}, {@multicast2, 0x8}, {@loopback, 0xffff5536}, {@broadcast, 0xa}, {@local, 0x9af}]}, @timestamp_addr={0x44, 0x3c, 0xc9, 0x1, 0x1, [{@empty, 0x8000}, {@private=0xa010100, 0x1}, {@loopback, 0x5}, {@rand_addr=0x64010100, 0x1}, {@empty, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x3}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x2}]}, @rr={0x7, 0x23, 0xb5, [@dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010102, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xdf}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x128}, 0x4000014) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$hidraw(&(0x7f0000000000), 0x4, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r4, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'ah\x00'}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fc00100}]}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000480)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a3000005c002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d6148f0c08000240000000010c0001004e465155455545"], 0xd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x15, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) 9.922910879s ago: executing program 9 (id=4875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0xffffffffffffffff, 0xa, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) getdents64(r2, &(0x7f0000000680)=""/4067, 0xfe3) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) sendmsg$inet(r2, &(0x7f0000001680)={&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000200)="0f1cdb39454b7782165a2d29acbb6ff14201d769be88e74b041469b792c91ff9ca0d216f79462e55219537e680320df3770429e966b17a192f01bc2e0744", 0x3e}, {&(0x7f00000002c0)="30658e33f6fea85c709fc160f18ef7b0d1098fc3ab11dd9cc31dc0bbbe4eaf1c3b2e68c4954d1f931b87b8e48890040f890bce9e8bb1477f6fee1ba5c60fb4b080a038fe6fde7a864dd0284bdb9c3fa5203c18403c1c952e02422c94dee9278fc3d744b6bcf46b48ba8d77a6fd8205dc852775e2027f6d903203107fdd0ca8654e445461b7e6dcc2654166c714b53311398163ffc7924007c60497c2feb8c817872f0e4661cf8f97", 0xa8}, {&(0x7f0000000380)="f107a47cf3c1afd6f8904e", 0xb}], 0x3, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_retopts={{0xac, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0x9d, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x6}, {@broadcast, 0x2}, {@multicast2, 0x8}, {@loopback, 0xffff5536}, {@broadcast, 0xa}, {@local, 0x9af}]}, @timestamp_addr={0x44, 0x3c, 0xc9, 0x1, 0x1, [{@empty, 0x8000}, {@private=0xa010100, 0x1}, {@loopback, 0x5}, {@rand_addr=0x64010100, 0x1}, {@empty, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x3}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x2}]}, @rr={0x7, 0x23, 0xb5, [@dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010102, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xdf}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x128}, 0x4000014) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$hidraw(&(0x7f0000000000), 0x4, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r4, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'ah\x00'}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fc00100}]}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000480)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a3000005c002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d6148f0c08000240000000010c0001004e465155455545"], 0xd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x15, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) 9.610072484s ago: executing program 4 (id=4876): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x935, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0xc, 0x1, {0x22, 0x25}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xe, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r1}, 0x50) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r2, 0x0, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f00000000c0)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) write$binfmt_script(r4, &(0x7f0000001680)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) setns(r4, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) close(0x3) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x9, {0x9, 0x21, 0x2000}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.768251671s ago: executing program 7 (id=4877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008000000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) unshare(0x26020480) r5 = socket(0x10, 0x80002, 0x2) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, 0x0, 0x0, 0x0) r8 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r5) sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40408c4}, 0x20000000) close_range(r8, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900010000000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES64], 0x84}}, 0x20008040) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) 7.216949165s ago: executing program 8 (id=4878): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtaction={0x90, 0x30, 0x9, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_vlan={0x78, 0x1, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x6c02}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9bd, 0xa1e, 0x7, 0x0, 0x9}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r1, 0x0, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000080)) accept4$inet6(r3, 0x0, 0x0, 0x800) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0xc07256fc38edc676) 6.426615954s ago: executing program 9 (id=4879): socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0}, 0xc044) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x9a0da53b11d204aa, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x331, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x1, 0x1, 0xe, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0x805}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x1, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x6, 0x10}}]}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x3, 0x8, 0x0, 0x20, 0x9}, 0x7b, &(0x7f0000000480)={0x5, 0xf, 0x7b, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x2, 0x0, 0x4c}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "33fe73df94777eb7507c1def113092ac"}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x3, 0xf00f, 0x7, [0x0, 0xff0030, 0x0, 0xc0, 0x0]}, @ssp_cap={0x14, 0x10, 0xa, 0xa, 0x2, 0x1, 0x78f, 0x0, [0x3f0f, 0xc00f]}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0xff, 0xf00, 0x19b7, [0x0, 0x30, 0x30, 0x3fc0, 0xc0, 0xc000]}]}, 0xa, [{0x43, &(0x7f0000000500)=@string={0x43, 0x3, "431d6237a556673b7c5c75bc87062638e27c8f3f541060beac11ea305cbd22f26c971bc7a052680f23f742b775280bb57b63b30f4988f293544d1bcc1bb6be1dd8"}}, {0x101, &(0x7f0000000780)=@string={0x101, 0x3, "ebfdac8503646bd242d2e35a2c21c97bc16089fce99de7d053be4923cd6d147281897b72520cb9e355a1ceb46977a378ce351d127ca37271643cfe66de42008fd634bb8166363ff9c2f5618ce49c781fa37aa390b0d52d1d7e9cbfda2a62569a76e86518adfcd9af6884510bd3acde1a149ab6db1603717cac7304b181a0fa3b187e9475c7e7fe7bc4e7483dbd522f53f7bca35aa5c669735c5a0c878585bc36ad3b9ab2ec96e418378b9cc2c56fd9db5db2f995d93c27374fba38d1738f2aff38f767a8af2760d0f5fee90143d740ed783a06dd364044d184f4426375ab605be71cfda14f0d0ea626862fd4267ff7987745552f274a624e23927eace8c33d"}}, {0xb0, &(0x7f00000008c0)=@string={0xb0, 0x3, "b16839e8983285eec0a3ec8c00f84356d6e18424ad806230e08bc58e8e4709b2eb6a34626df52e0fac7addd9972640378cc9711bb7ac285b711bee8d8710c169b147327a1568a787c73657959c8fa687f013f0d3885af5a33325536dbd80d678166f444dacd5cf18ddca3b93e946c9b220cbbd8144b2f636328d5b272f11cfa1f5919838d0903f01dd1c7d5b9d870122bb79a87a8d452d0a95db19021f74c1d8b5bf53107094de55013626543897"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x423}}, {0xc2, &(0x7f0000000a00)=@string={0xc2, 0x3, "8bf5044db983f7870174e99baae533b3ab9a1471e13c6df9d049677190d6655e78ef2c91ecf09475d27c0457e3e2215cf999fa575bf6c55e8285c3386a8f8c2410c3dbf5b024467afa32acce94066ecb42a6d54dd3cd1dd36ff3a4708a4f3c4bc90b23da92e36833c0b24c9e0b2ad3b945ac70cb199fee05b5c4d69b902090e89aa7c7427d2bff35642fcf81e644c261a3be252a371679a316b6cd134d30d4868006442824809a3c2c8a557ec2165b3e4fd054eecf2e1d0ad262b35715a16a1e"}}, {0x23, &(0x7f0000000b00)=@string={0x23, 0x3, "ad1472c13b052d84a1d6e581aba0aa31d4f5642ee11e9804099d0c8fa6e0201c0d"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x81d}}, {0x64, &(0x7f0000000bc0)=@string={0x64, 0x3, "991752898aed708f0c54b980648cc0ca21fdb1aadc08645d4565185ea1e368cd1dad6217775b18565938652d3a0eacf9ba016e983065ed55bdae9c35425ce5e4ad37cf77426eca3f3c2ee37e1eb68d083260116f1ca751a21a28e6d533b5d10dd640"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x843}}]}) 5.852769409s ago: executing program 8 (id=4880): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x71096000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = syz_open_dev$loop(&(0x7f00000000c0), 0x6, 0x2b20) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x82140, 0xf8) open_by_handle_at(r7, &(0x7f0000000280)=@orangefs_parent={0x28, 0x2, {{"94e169c8ac206de4239ffebca273fe3b", 0x1ff}, {"54ecd256a8a032a3e4add37389c34861", 0x80000000}}}, 0x4203) ioctl$LOOP_CLR_FD(r6, 0x4c01) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, 0x0, 0x20000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r8, 0x8943, &(0x7f0000000000)) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4000) mprotect(&(0x7f000022e000/0x3000)=nil, 0x3000, 0xf120be53603232d2) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 5.850216514s ago: executing program 6 (id=4881): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000940)=0x20000000, 0x4) shutdown(r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.54758431s ago: executing program 4 (id=4882): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x200000000008, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c0c0000140a01020000000000080000000000010900020073797a30000000000c00064000000000000000030900010073797a31000000000900010073797a31000000003a000800daf919d378c44f247d809d110d0b7fc8c4300b0e8ea04dde904680dd9d45c7799bb7ac57af5c407eff7d6f1f65383c21350d0940a08e00000c0006400000000000000005140000001100010000000000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x24048850}, 0x4008840) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x1448, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x13c4, 0x3, 0x0, 0x1, [{0x1fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1c4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe9, 0x1, "ce34e174ca5125a6033e542ba84a9173d413c3bafef7b2ea887a40ef3bda6ab624cddfd3ece2d4f503a2f833dfff34077391cef18bebd317d3dd941e5a33267d445a86acca1d090693b6234a5a707977d532e835d6eaa293cb7a28409303f4bd3136a68e7a01aa7d22900ed47e2fd76b54b2d74252c873dad17bcd8e6db715320130c4980472d43c8eebcb570d8ba2e0c79b07b50865f7be6f5cb5b56933add0112dd6827c22473605565e399087af9b24fcabbcf71a089ff5e9153d1e65a656954293118f32f042baa70370e190742a74b6ddf06b7234e37b6077808e6f77399f7b06c985"}, @NFTA_DATA_VALUE={0xa7, 0x1, "ecb11346b86f35c8d36530b88ea4423f1f56305b1eb25bad15cad0aac61ef2b9acda03893dd92be3cd577e9063b8a2b6091777ae09d2d9116f0f19122d8236d8b9390a0bacaa1394d6b93aec70b5c591cbbbaae57ec98ef3e5f4f9e2b9633f5679afb763b96ff7b93995929e823ddb461d0b3239e0b1965d5e6da66f3602b45e951f4ea07a63f63320f8f19a5c40f0489e73a9dcfe08c5df499501d81e05a80178a60f"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @synproxy={{0xd}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}, {0x2a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x298, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "2b4dc9c18b36ed14eef6dd52ba53f1f9991262b26d2c7d9cfe167b2bcef733fd371e0a793108b4c9b2934bc4ccee88fdeaa6e0410be57b05fc14814958f7eb471d3ee9e8ff91a6b10a538a8f6569d15e9b57f096f04eab7b08f0c877659d32ed506c848bbb38a2c09106ef679da50df374515b552090f8b043a49a6f8904c54842c91f02cce79efe3924289da7b14f8fd7b76a356918abfc99c75baccd8da1dec81ad7322475c1b21f3b1d99b66303dff9f610cb04545110af"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x13, 0x1, "74d5d5d399f552cd22dd467443f933"}, @NFTA_DATA_VALUE={0x8b, 0x1, "296842efd615a6ee0b2b64e745e4ca2a2bd6292b1542f811e8348caba194a2b0e625a06ef80ca0f96beadb278a7cad158315413222bb3c058d0303b32ca9e5b24bd7a9e8c6949011662110f0a31aa18e35e8f02aa9bbea841c2d0cb022c041b76d9e34b5cbcc00a3765ed11ec3031c1ff145769a1e6616a677e605e36175674e122f89fcdda47b"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x92, 0x1, "f52f5a5a34d86fa5d5fdee11a95b0d6cada8375955ce126db68523e37b6a6652576f82012ab64b046602a32cf18854fa94a342ef1f864d3c7ccdf795021e37df197bbfca926edab22e508ea323dfcd7c640edc7eb53f6e638fedbe546bb5b0e099c334a0ae7cdb97f50cd0e8a3d8c25fea559ea4618de5256c5ae2530e440a46369b667dcc16c60182eb95efa7b7"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0xb34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x8c, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x30, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x900, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x64, 0x1, "e102063fd4e4f4d9adbd80932e1e7cd50658450a8fe529d6fa7d9cf0e2a1a715b98f0a1ea6bafdf60a9fd64701878ebcb9e0a211217ddfd261d67ec9588290c7583594531f61d23aa6e78b7f27a0456bc820a88a93b9dddfc24eb98b6cc68f6c"}, @NFTA_DATA_VALUE={0x34, 0x1, "749688ad2e94169c05e356917dc6b63d55793915de9b4f6587279414da8c95419d1dd210e9068c3352d69fbd26eb3585"}, @NFTA_DATA_VALUE={0x27, 0x1, "897b7c30965475be0990fc370ce785b80075217d422065ca23a8abc290e0cc6e0f0801"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x804, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_KEY={0x10c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb2, 0x1, "fbc0841ccb4b1992b226c7891e379f9902fe10d4c31dff552474f367e3988ee250d3b086ffae3472dcca8299d82e8f8bbad35d17187b4960515bf79652bfe85e9688d56438a092b5f124c52e451d247ed4266473c33ea3d075ebfe0ba8fc3130a83f91e7ffa3b88259dde79f53a31892b45feefdd13857870589de09e67f26d1ebcabbf74de57f828265b1c0279ed3cbb5ee9773aaceb76747e4d3f1ddcd6fb80be2a3a96f585934c9c87ce1fd38"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPR={0x54, 0x7, 0x0, 0x1, @hash={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x6}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1ff}, @NFTA_SET_ELEM_KEY_END={0x28, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @masq={{0x9}, @void}}]}, {0xf4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xe3, 0x6, 0x1, 0x0, "0f91b9e0268fc8c250f8d8880043b23703f4fecc998e1cf527f40d153b9dee595c1f69ab647c3b28b1cd0841140c02e09906c25ad966146d49014d4b8cedf4c73423cb409848dd754abde1b968487198c64b673e470d488885b5ba091db7c2d1ee2c3cf740f0c6081f54e5fc695f45e8acc3ce716e23584ba9ca9c0a1c5afdc2a85d7a90a3c16c0fe22dc7abfcded88584133367e30750f35d387ef882d00725c03a32c2ba9ae444034b41ce795de6864b06fe85a462ef7955468056d6b838da8ad3eeed0324dd0f2f3558840289eaf61d1578892510201c25f1f5d17765d5"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}, {0x2e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0xd8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd1, 0x1, "3c7d1083c5a336161308cff1007a41bd588249e5ca40ae6983dfe7d4975c6236785ec0ab5a5c3a401f5da66434a4e00394084172c60fb5cdd2bcdce09adb3010fe2437a02c07cac2a8366df4335247401ea78cfc264f63bff0b608140d080547a3c8b9c02f1000c94229ca961961377936346190ac7b5b6ce4d3803cbc4bde0ca0041dc1d50af955fa5d4ec58fa23fc2db94e05dd36cb2dcb0a2e9c05630c668c0c10931bdd0a6e4aaa029862612b9d78fe2b6db2df383e46b45d31953d439a4b6b885180c56acd222b900c07c"}]}, @NFTA_SET_ELEM_KEY_END={0xfc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "740513197bc68557db109addde83ba5a684c204599dda3c9aeac3516ebc89629fbc59454e89f687276de0eb703849e504580cf30f340ce51c9dad59c76e75c350977129181a1795356af9cfea217ff93e089fb1dd6ba0709cc08624fcf6075474c54eb503f76e9191d8004fbb9c255597769fd3d80e59278c4cb29bc2cff8bbc4c30f94fc78c711416b0f81ff7230933e28448a3c28b9b18afbb89286dd38a98a96f11b4676a3bc828b5b2c6e9c158d573727326b9276fc1fc4151cb1f"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x100, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xab, 0x1, "993540d19fe7975fe426244d3b54f102b7e2bcb075edd75c645352073e30c71372613b590c224d9807e0312201533c5fa2a3205fb0bb25e8599e8c9ee969aa755606a7299a7ddabb40415d81da8ef9cecd158e80c0514bfe308f15f8ed633c24af336fbdea406fb4275c751e77b1d8b54a7ea62a728688965724d88f665f7f8efe1d59bceb62d2e1e71768708cacef36e62cc2acbfab1596ab9bb02a397b27692f5ea359ed80ab"}, @NFTA_DATA_VALUE={0x4f, 0x1, "81a80a56082f9cbb7067997ccf5733bc4c1dec524a6a4a518a1145ca11ef5a0966c39d3676d9d13b7229d2e4776b040a527f49df4bf9d20ba8d304d33482dba6d0c18d886bfe5efae12468"}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x64, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_KEY_END={0x44, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe, 0x1, "be4ce3b48245a341f958"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xc}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1470}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) 4.34113422s ago: executing program 8 (id=4883): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="380000002e000100000000000000000800400000", @ANYRES32=r7, @ANYBLOB="0b000280976b64086860300014000180476833590f66aa6e7a564d8a2b31feac"], 0x38}], 0x1}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000000)='\x00', &(0x7f0000000440)='!', 0x1) r8 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000180)=0x1b, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x44) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000340)={{0xa000, 0x2000, 0xb, 0xad, 0x4, 0xff, 0x7f, 0x5, 0x0, 0x2b, 0x9}, {0x2, 0x70000, 0x0, 0x2c, 0x8, 0x0, 0x7f, 0x1, 0x3, 0xf0, 0x9, 0x5}, {0x2, 0x5000, 0x8, 0x5, 0x1, 0xf3, 0x0, 0xb, 0x0, 0x5, 0xb, 0x9}, {0xdddd0000, 0xffff1000, 0x0, 0xe7, 0x4, 0x2, 0x1, 0x86, 0x8, 0x8b, 0xd, 0xed}, {0x4, 0x8080000, 0x8, 0x3, 0x5, 0x86, 0x9, 0x7f, 0x4, 0x0, 0xf2, 0x43}, {0x70000, 0x6000, 0xb, 0x7c, 0xb1, 0x24, 0x7f, 0xaf, 0x83, 0xc, 0x15, 0x3d}, {0xd000, 0x100002, 0xd, 0x3, 0x2, 0x5, 0x0, 0x3, 0x5, 0x7f, 0x5}, {0x3000, 0xffff1000, 0x1, 0x5, 0x9, 0xf, 0x0, 0x37, 0x4, 0x9, 0xf0}, {0xeeee8000, 0x2070}, {0x2, 0x7}, 0x80000033, 0x0, 0xeeef0000, 0x542204, 0x0, 0x0, 0x80a0000, [0x4, 0x7, 0x7, 0x9]}) r10 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) ioctl$MON_IOCG_STATS(r10, 0x80089203, 0x0) r11 = socket(0x1e, 0x1, 0x0) r12 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r12, 0x8008563f, &(0x7f0000000040)) shutdown(r11, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 4.284194283s ago: executing program 6 (id=4884): socket$nl_netfilter(0x10, 0x3, 0xc) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc=unc']) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x38}}, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) connect$unix(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) fanotify_init(0x200, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x2) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) 3.702926774s ago: executing program 4 (id=4885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008000000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) unshare(0x26020480) r6 = socket(0x10, 0x80002, 0x2) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW2(r4, 0x80047456, &(0x7f0000000040)={0x6, 0xb, 0x6, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff, 0x5}) r7 = socket$inet6(0xa, 0x3, 0x7) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, 0x0, 0x0, 0x0) r9 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r6) sendmsg$DEVLINK_CMD_PORT_SET(r8, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40408c4}, 0x20000000) close_range(r9, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900010000000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES64], 0x84}}, 0x20008040) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) 3.1697095s ago: executing program 9 (id=4886): r0 = socket(0x29, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, 0x0, 0x0, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x4101}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r8) socket$phonet_pipe(0x23, 0x5, 0x2) write$qrtrtun(r8, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r8, 0xc0245720, &(0x7f00000001c0)={0x1}) 2.523339034s ago: executing program 7 (id=4887): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0xc, 0x0, 0x0) connect$unix(r3, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0x5, 0x0, &(0x7f0000000000)="63eced8e46", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8b2c, &(0x7f0000000040)) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'batadv_slave_1\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x20080, 0x3, 0xf, 0xd, 0xf6, 0x4, 0x10, 0x9d, 0x4, [0x1, 0x4, 0x1, 0x468, 0x80, 0x3, 0x9, 0x100]}}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000840)={0x5, @capture={0x1000, 0x1, {0x6, 0x4}, 0x4, 0x642a}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000fc000800b7080000000000007b8af8ff00000000b7080000180000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4c72e0000000007040000f0ffffffb702000008ffffffffffffff7f00000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000023200000f0ffffff9500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x69}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000700)='erofs\x00', 0x2319034, 0x0) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 2.450882141s ago: executing program 8 (id=4888): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x5, 0xfffbfffd, 0x2, 0x0, "0c41920887e8d2b791f805000000000000006b", 0x10, 0x203}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x8) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYBLOB="4d768b498fbdcf49a6221d03f4bc060963955ceb602b05ce29018f4e315946ed3cb4f921a5f3ea758bb1019f9803a1ba3d76e408834d00b613d84fe8ce82516037b290aa7dd55e9716892246942db4da3a6a4fc3338319ac93b3bb2782ec9d40b9e9c5dafac87606f04ec1b05f4c9b3a96e0fe0107852ae9dd5b8f91c3cfe1077331d812c556e54121749293e32a0f732a1686e81356695d2a18995b665f756ce0f8a2be4f90de968f1bcd0e84995d7b7b2310205c10178977fa16d44898ff401e644b756c9aac91f3ab2496276b4d93290b2cf56b0cde8b52583c983c9b24", @ANYRES64, @ANYRESHEX=r0], 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={r3, 0x0, 0x0}, 0x10) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000080)=[0x7615cb14, 0x101]) 2.332901611s ago: executing program 9 (id=4889): socket$nl_netfilter(0x10, 0x3, 0xc) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc=unc']) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x38}}, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) connect$unix(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) fanotify_init(0x200, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x2) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) 1.244855653s ago: executing program 7 (id=4890): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x800}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x40, 0x4}, {}, {0x2000, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0xff09}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x800}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x1000}, {0xffbffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x78}, {}, {0x0, 0x0, 0x6, 0xd0}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4fc}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x8, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000, 0x0, 0x0, 0x10}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x2}, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x98}, {}, {}, {0x0, 0x0, 0x40000}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x10001}, {0x8}, {0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x100, 0x400000}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x2}, {}, {}, {0x4}, {}, {}, {}, {}, {0x3}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x15) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) r3 = openat$kvm(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0xa) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000100)="0f4eee260f013c660faeb99ee80fc7af008036f30f1eddd2924b00b8ce008ee00f070f09", 0x26}], 0x180, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x0, 0x2, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x200, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8c], 0xeeee8000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 265.948819ms ago: executing program 7 (id=4891): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301040, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000040)={0x4, 0x9, 0x9b}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ppoll(&(0x7f0000000240)=[{r3, 0x8216}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$TUNGETVNETLE(r0, 0x80047441, &(0x7f0000000180)) 0s ago: executing program 6 (id=4892): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x80000000002f423f, 0xfffffffffffffffc, 0x6, 0x0, 0x5, 0x8, 0x4, 0x80000000, 0x80000, 0x2, 0x1, 0x100, 0xfffffffffffffffc, 0x0, 0x2000000000000, 0x8, 0x3, 0x1, 0x4000000000200, 0x0, 0x0, 0x816, 0x80000001, 0x37, 0x6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r0, &(0x7f0000000140)=@FILEID_INO32_GEN={0x8, 0x1, {0x50, 0x7e}}, 0x2241c2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) kernel console output (not intermixed with test programs): .197047][T22482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1339.197058][T22482] Call Trace: [ 1339.197065][T22482] [ 1339.197074][T22482] dump_stack_lvl+0x100/0x190 [ 1339.197107][T22482] should_fail_ex.cold+0x5/0xa [ 1339.197134][T22482] ? tomoyo_encode2+0xfb/0x3c0 [ 1339.197160][T22482] should_failslab+0xc2/0x120 [ 1339.197181][T22482] __kmalloc_noprof+0xe0/0x850 [ 1339.197206][T22482] ? d_absolute_path+0x136/0x1b0 [ 1339.197230][T22482] tomoyo_encode2+0xfb/0x3c0 [ 1339.197257][T22482] tomoyo_encode+0x29/0x50 [ 1339.197279][T22482] tomoyo_realpath_from_path+0x18c/0x690 [ 1339.197308][T22482] tomoyo_path_number_perm+0x23c/0x580 [ 1339.197327][T22482] ? tomoyo_path_number_perm+0x22e/0x580 [ 1339.197348][T22482] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1339.197391][T22482] ? find_held_lock+0x2b/0x80 [ 1339.197411][T22482] ? __fget_files+0x215/0x3d0 [ 1339.197431][T22482] ? hook_file_ioctl_common+0x149/0x410 [ 1339.197456][T22482] ? __fget_files+0x215/0x3d0 [ 1339.197481][T22482] ? __fget_files+0x21f/0x3d0 [ 1339.197506][T22482] security_file_ioctl+0xd3/0x230 [ 1339.197529][T22482] __x64_sys_ioctl+0xb7/0x210 [ 1339.197550][T22482] do_syscall_64+0x10b/0xf80 [ 1339.197571][T22482] ? clear_bhb_loop+0x40/0x90 [ 1339.197594][T22482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.197612][T22482] RIP: 0033:0x7f7675b9cdd9 [ 1339.197629][T22482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1339.197645][T22482] RSP: 002b:00007f7676a61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1339.197666][T22482] RAX: ffffffffffffffda RBX: 00007f7675e15fa0 RCX: 00007f7675b9cdd9 [ 1339.197677][T22482] RDX: 0000200000000000 RSI: 0000000000003b85 RDI: 0000000000000003 [ 1339.197688][T22482] RBP: 00007f7676a61090 R08: 0000000000000000 R09: 0000000000000000 [ 1339.197698][T22482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1339.197707][T22482] R13: 00007f7675e16038 R14: 00007f7675e15fa0 R15: 00007ffd3a831398 [ 1339.197732][T22482] [ 1339.439837][ T9] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1339.466255][T22484] netlink: 80 bytes leftover after parsing attributes in process `syz.8.4484'. [ 1339.483055][ T9] usb 5-1: USB disconnect, device number 127 [ 1339.492600][T22482] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1339.500210][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1339.827525][ T5737] usbhid 7-1:0.0: can't add hid device: -71 [ 1339.889297][ T5737] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1340.671276][ T5737] usb 7-1: USB disconnect, device number 106 [ 1340.737463][T22497] FAULT_INJECTION: forcing a failure. [ 1340.737463][T22497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1340.860677][T22497] CPU: 1 UID: 0 PID: 22497 Comm: syz.4.4489 Tainted: G L syzkaller #0 PREEMPT(full) [ 1340.860701][T22497] Tainted: [L]=SOFTLOCKUP [ 1340.860706][T22497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1340.860714][T22497] Call Trace: [ 1340.860719][T22497] [ 1340.860725][T22497] dump_stack_lvl+0x100/0x190 [ 1340.860748][T22497] should_fail_ex.cold+0x5/0xa [ 1340.860767][T22497] _copy_from_iter+0x1f4/0x1690 [ 1340.860789][T22497] ? __pfx__copy_from_iter+0x10/0x10 [ 1340.860805][T22497] ? find_held_lock+0x2b/0x80 [ 1340.860817][T22497] ? dev_get_by_index+0x180/0x380 [ 1340.860836][T22497] ? dev_get_by_index+0x180/0x380 [ 1340.860855][T22497] packet_sendmsg+0x1bb3/0x5100 [ 1340.860874][T22497] ? avc_has_perm+0x135/0x1e0 [ 1340.860892][T22497] ? __pfx_avc_has_perm+0x10/0x10 [ 1340.860916][T22497] ? __lock_acquire+0x4a5/0x2630 [ 1340.860934][T22497] ? sock_has_perm+0x258/0x2f0 [ 1340.860947][T22497] ? __pfx_sock_has_perm+0x10/0x10 [ 1340.860960][T22497] ? __pfx_packet_sendmsg+0x10/0x10 [ 1340.860981][T22497] __sys_sendto+0x468/0x4b0 [ 1340.860996][T22497] ? __pfx_packet_sendmsg+0x10/0x10 [ 1340.861009][T22497] ? __pfx___sys_sendto+0x10/0x10 [ 1340.861036][T22497] ? ksys_write+0x1ac/0x250 [ 1340.861049][T22497] ? __pfx_ksys_write+0x10/0x10 [ 1340.861062][T22497] __x64_sys_sendto+0xe0/0x1c0 [ 1340.861077][T22497] ? do_syscall_64+0x90/0xf80 [ 1340.861091][T22497] ? lockdep_hardirqs_on+0x78/0x100 [ 1340.861103][T22497] do_syscall_64+0x10b/0xf80 [ 1340.861116][T22497] ? clear_bhb_loop+0x40/0x90 [ 1340.861131][T22497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.861143][T22497] RIP: 0033:0x7f5a7d99cdd9 [ 1340.861153][T22497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1340.861164][T22497] RSP: 002b:00007f5a7e840028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1340.861177][T22497] RAX: ffffffffffffffda RBX: 00007f5a7dc15fa0 RCX: 00007f5a7d99cdd9 [ 1340.861184][T22497] RDX: 0000000000000020 RSI: 00002000000006c0 RDI: 0000000000000004 [ 1340.861191][T22497] RBP: 00007f5a7e840090 R08: 0000200000000140 R09: 0000000000000014 [ 1340.861197][T22497] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 1340.861203][T22497] R13: 00007f5a7dc16038 R14: 00007f5a7dc15fa0 R15: 00007ffcad138148 [ 1340.861218][T22497] [ 1341.577582][ T5730] usb 10-1: new full-speed USB device number 32 using dummy_hcd [ 1341.708889][T15874] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1341.839430][T22498] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4487'. [ 1341.841227][ T5730] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1341.959701][T15874] usb 7-1: Using ep0 maxpacket: 16 [ 1342.532066][ T5730] usb 10-1: not running at top speed; connect to a high speed hub [ 1342.557799][T15874] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1342.582903][ T5730] usb 10-1: config 1 has an invalid interface number: 188 but max is 0 [ 1342.600202][T15874] usb 7-1: config 0 has no interface number 0 [ 1342.617339][ T5730] usb 10-1: config 1 has no interface number 0 [ 1342.634802][ T5730] usb 10-1: config 1 interface 188 has no altsetting 0 [ 1342.662885][T15874] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1342.690403][ T5730] usb 10-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=6e.45 [ 1342.717048][T15874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.737554][T15874] usb 7-1: Product: syz [ 1342.741807][T15874] usb 7-1: Manufacturer: syz [ 1342.746423][T15874] usb 7-1: SerialNumber: syz [ 1342.751591][ T5730] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.759764][ T5730] usb 10-1: Product: syz [ 1342.764039][ T5730] usb 10-1: Manufacturer: syz [ 1342.768756][ T5730] usb 10-1: SerialNumber: syz [ 1342.789693][T15874] usb 7-1: config 0 descriptor?? [ 1343.363574][ T29] audit: type=1400 audit(1777645958.262:805): avc: denied { read } for pid=22523 comm="syz.8.4493" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1343.366856][T15874] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1343.599528][T22533] Cannot find del_set index 1 as target [ 1343.609200][T22533] overlayfs: missing 'lowerdir' [ 1343.659168][ T5730] radio-si470x 10-1:1.188: could not find interrupt in endpoint [ 1343.682330][ T5730] radio-si470x 10-1:1.188: probe with driver radio-si470x failed with error -5 [ 1343.745337][ T5730] radio-raremono 10-1:1.188: this is not Thanko's Raremono. [ 1343.777006][ T5730] usbhid 10-1:1.188: couldn't find an input interrupt endpoint [ 1343.836118][ T5730] usb 10-1: USB disconnect, device number 32 [ 1343.899788][T22526] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1343.912783][T22526] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1344.029317][T15874] gspca_spca1528: reg_w err -110 [ 1344.057958][T15874] spca1528 7-1:0.1: probe with driver spca1528 failed with error -110 [ 1344.301959][T22526] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1344.319259][T22526] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1344.348806][T22526] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1344.388992][T22526] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1344.402181][T22548] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4497'. [ 1344.691380][T22526] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1344.720957][T22526] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1345.148324][T22526] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1345.175737][T22526] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1345.486236][ T9] usb 7-1: USB disconnect, device number 107 [ 1345.503494][T22563] Cannot find del_set index 1 as target [ 1345.686524][T22569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4502'. [ 1346.036968][T14183] Bluetooth: hci5: command 0x0406 tx timeout [ 1346.062920][T22563] overlayfs: missing 'lowerdir' [ 1346.319070][T22564] FAULT_INJECTION: forcing a failure. [ 1346.319070][T22564] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.333342][ T29] audit: type=1400 audit(1777645961.652:806): avc: denied { ioctl } for pid=22561 comm="syz.8.4500" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1346.382661][T14183] Bluetooth: hci3: command 0x0406 tx timeout [ 1346.389596][T14183] Bluetooth: hci0: command 0x0406 tx timeout [ 1346.400861][T22564] CPU: 1 UID: 0 PID: 22564 Comm: syz.8.4500 Tainted: G L syzkaller #0 PREEMPT(full) [ 1346.400900][T22564] Tainted: [L]=SOFTLOCKUP [ 1346.400906][T22564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1346.400917][T22564] Call Trace: [ 1346.400925][T22564] [ 1346.400932][T22564] dump_stack_lvl+0x100/0x190 [ 1346.400966][T22564] should_fail_ex.cold+0x5/0xa [ 1346.400993][T22564] ? tomoyo_encode2+0xfb/0x3c0 [ 1346.401017][T22564] should_failslab+0xc2/0x120 [ 1346.401036][T22564] __kmalloc_noprof+0xe0/0x850 [ 1346.401061][T22564] ? d_absolute_path+0x136/0x1b0 [ 1346.401082][T22564] tomoyo_encode2+0xfb/0x3c0 [ 1346.401105][T22564] tomoyo_encode+0x29/0x50 [ 1346.401127][T22564] tomoyo_realpath_from_path+0x18c/0x690 [ 1346.401157][T22564] tomoyo_path_number_perm+0x23c/0x580 [ 1346.401175][T22564] ? tomoyo_path_number_perm+0x22e/0x580 [ 1346.401196][T22564] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1346.401240][T22564] ? find_held_lock+0x2b/0x80 [ 1346.401258][T22564] ? __fget_files+0x215/0x3d0 [ 1346.401279][T22564] ? hook_file_ioctl_common+0x149/0x410 [ 1346.401304][T22564] ? __fget_files+0x215/0x3d0 [ 1346.401329][T22564] ? __fget_files+0x21f/0x3d0 [ 1346.401354][T22564] security_file_ioctl+0xd3/0x230 [ 1346.401376][T22564] __x64_sys_ioctl+0xb7/0x210 [ 1346.401395][T22564] do_syscall_64+0x10b/0xf80 [ 1346.401420][T22564] ? clear_bhb_loop+0x40/0x90 [ 1346.401444][T22564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.401463][T22564] RIP: 0033:0x7f816699cdd9 [ 1346.401480][T22564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1346.401499][T22564] RSP: 002b:00007f8164bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1346.401519][T22564] RAX: ffffffffffffffda RBX: 00007f8166c15fa0 RCX: 00007f816699cdd9 [ 1346.401531][T22564] RDX: 0000200000000280 RSI: 00000000c0189378 RDI: 0000000000000006 [ 1346.401542][T22564] RBP: 00007f8164bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1346.401554][T22564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.401564][T22564] R13: 00007f8166c16038 R14: 00007f8166c15fa0 R15: 00007fff81660c18 [ 1346.401589][T22564] [ 1346.401694][T22564] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1346.636488][T22574] Bluetooth: hci6: command 0x0406 tx timeout [ 1346.919470][ T29] audit: type=1400 audit(1777645962.252:807): avc: denied { unmount } for pid=18017 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1347.197462][T22574] Bluetooth: hci7: command 0x0406 tx timeout [ 1347.887064][T22583] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4503'. [ 1347.954345][T22583] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4503'. [ 1348.037613][ T802] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1348.119343][T22574] Bluetooth: hci5: command 0x0406 tx timeout [ 1348.574040][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 1348.574088][T22574] Bluetooth: hci0: command 0x0406 tx timeout [ 1348.687518][ T802] usb 7-1: Using ep0 maxpacket: 32 [ 1348.687564][T22574] Bluetooth: hci6: command 0x0406 tx timeout [ 1348.937769][ T802] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1349.007017][ T802] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1349.059989][ T802] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1349.105196][ T802] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1349.153404][ T802] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.209526][ T802] usb 7-1: config 0 descriptor?? [ 1349.317391][T22574] Bluetooth: hci7: command 0x0406 tx timeout [ 1349.392022][T22612] Cannot find del_set index 1 as target [ 1349.410256][T22612] overlayfs: missing 'lowerdir' [ 1349.644975][T22611] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4512'. [ 1349.702082][ T802] hid_parser_main: 30 callbacks suppressed [ 1349.702112][ T802] corsair-cpro 0003:1B1C:0C10.0049: unknown main item tag 0x0 [ 1349.734722][ T802] corsair-cpro 0003:1B1C:0C10.0049: unknown main item tag 0x0 [ 1349.752290][ T802] corsair-cpro 0003:1B1C:0C10.0049: unknown main item tag 0x0 [ 1349.801877][ T802] corsair-cpro 0003:1B1C:0C10.0049: unknown main item tag 0x0 [ 1349.831086][ T802] corsair-cpro 0003:1B1C:0C10.0049: unknown main item tag 0x0 [ 1349.860317][ T802] corsair-cpro 0003:1B1C:0C10.0049: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.6-1/input0 [ 1350.026526][ T802] corsair-cpro 0003:1B1C:0C10.0049: probe with driver corsair-cpro failed with error -90 [ 1350.104079][ T802] usb 7-1: USB disconnect, device number 108 [ 1350.163312][T22629] FAULT_INJECTION: forcing a failure. [ 1350.163312][T22629] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1350.228230][T22629] CPU: 0 UID: 0 PID: 22629 Comm: syz.9.4515 Tainted: G L syzkaller #0 PREEMPT(full) [ 1350.228263][T22629] Tainted: [L]=SOFTLOCKUP [ 1350.228268][T22629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1350.228279][T22629] Call Trace: [ 1350.228286][T22629] [ 1350.228292][T22629] dump_stack_lvl+0x100/0x190 [ 1350.228325][T22629] should_fail_ex.cold+0x5/0xa [ 1350.228347][T22629] ? prepare_alloc_pages+0x16d/0x5f0 [ 1350.228372][T22629] should_fail_alloc_page+0xeb/0x140 [ 1350.228394][T22629] prepare_alloc_pages+0x1f0/0x5f0 [ 1350.228415][T22629] ? kernel_text_address+0x8d/0x100 [ 1350.228446][T22629] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1350.228485][T22629] ? copy_splice_read+0x1a3/0xb90 [ 1350.228507][T22629] ? stack_trace_save+0x8e/0xc0 [ 1350.228528][T22629] ? __pfx_stack_trace_save+0x10/0x10 [ 1350.228548][T22629] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1350.228583][T22629] ? copy_splice_read+0x1a3/0xb90 [ 1350.228604][T22629] ? kasan_save_stack+0x3f/0x50 [ 1350.228632][T22629] ? kasan_save_stack+0x30/0x50 [ 1350.228656][T22629] ? kasan_save_track+0x14/0x30 [ 1350.228682][T22629] ? __kasan_kmalloc+0xaa/0xb0 [ 1350.228706][T22629] ? __kmalloc_noprof+0x301/0x850 [ 1350.228730][T22629] ? copy_splice_read+0x1a3/0xb90 [ 1350.228753][T22629] ? __x64_sys_splice+0x187/0x250 [ 1350.228775][T22629] ? do_syscall_64+0x10b/0xf80 [ 1350.228796][T22629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.228828][T22629] alloc_pages_bulk_noprof+0x657/0x1390 [ 1350.228864][T22629] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1350.228897][T22629] ? __kmalloc_noprof+0x320/0x850 [ 1350.228920][T22629] ? lock_acquire+0x1b1/0x370 [ 1350.228945][T22629] copy_splice_read+0x1e1/0xb90 [ 1350.228967][T22629] ? trace_contention_end+0x122/0x170 [ 1350.228993][T22629] ? __mutex_lock+0x26d/0x1b10 [ 1350.229015][T22629] ? __pfx_copy_splice_read+0x10/0x10 [ 1350.229050][T22629] sock_splice_read+0xe9/0x110 [ 1350.229084][T22629] ? __pfx_sock_splice_read+0x10/0x10 [ 1350.229108][T22629] do_splice_read+0x285/0x370 [ 1350.229132][T22629] splice_file_to_pipe+0x82/0x120 [ 1350.229156][T22629] do_splice+0xda1/0x1fd0 [ 1350.229179][T22629] ? __lock_acquire+0x4a5/0x2630 [ 1350.229208][T22629] ? __pfx_do_splice+0x10/0x10 [ 1350.229228][T22629] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1350.229251][T22629] ? find_held_lock+0x2b/0x80 [ 1350.229271][T22629] __do_splice+0x113/0x370 [ 1350.229295][T22629] ? __pfx___do_splice+0x10/0x10 [ 1350.229326][T22629] __x64_sys_splice+0x187/0x250 [ 1350.229351][T22629] do_syscall_64+0x10b/0xf80 [ 1350.229370][T22629] ? clear_bhb_loop+0x40/0x90 [ 1350.229392][T22629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.229410][T22629] RIP: 0033:0x7f3956f9cdd9 [ 1350.229428][T22629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.229444][T22629] RSP: 002b:00007f3957e03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1350.229463][T22629] RAX: ffffffffffffffda RBX: 00007f3957215fa0 RCX: 00007f3956f9cdd9 [ 1350.229474][T22629] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 1350.229484][T22629] RBP: 00007f3957e03090 R08: 0000000000000006 R09: 0000000000000000 [ 1350.229494][T22629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.229503][T22629] R13: 00007f3957216038 R14: 00007f3957215fa0 R15: 00007fff4a3a3538 [ 1350.229526][T22629] [ 1350.680919][T22634] netlink: 'syz.7.4516': attribute type 10 has an invalid length. [ 1350.704161][T22632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1351.346300][T22650] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4518'. [ 1351.435715][T22650] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4518'. [ 1352.406015][T22656] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4521'. [ 1352.424107][T22656] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4521'. [ 1352.467312][ T802] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1353.620681][ T29] audit: type=1326 audit(1777645968.492:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.6.4522" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b119cdd9 code=0x7ffc0000 [ 1353.717609][ T802] usb 9-1: Using ep0 maxpacket: 8 [ 1353.728914][ T29] audit: type=1326 audit(1777645968.492:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.6.4522" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b119cdd9 code=0x7ffc0000 [ 1353.774360][ T29] audit: type=1326 audit(1777645968.712:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.6.4522" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fc9b119cdd9 code=0x7ffc0000 [ 1353.811769][ T802] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.829857][ T802] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1353.839255][ T802] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1353.848312][ T802] usb 9-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1353.918775][ T29] audit: type=1326 audit(1777645968.712:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.6.4522" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b119cdd9 code=0x7ffc0000 [ 1353.956315][ T29] audit: type=1326 audit(1777645968.712:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.6.4522" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b119cdd9 code=0x7ffc0000 [ 1353.976455][ T802] usb 9-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1354.017341][ T29] audit: type=1326 audit(1777645968.862:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.6.4522" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc9b119cdd9 code=0x7ffc0000 [ 1354.047671][ T802] usb 9-1: Product: syz [ 1354.065322][ T802] usb 9-1: Manufacturer: syz [ 1354.072670][ T802] usb 9-1: SerialNumber: syz [ 1354.105558][ T29] audit: type=1326 audit(1777645968.862:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.6.4522" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b119cdd9 code=0x7ffc0000 [ 1354.163362][T22630] syz.4.4513 (22630): drop_caches: 1 [ 1354.198979][ T29] audit: type=1326 audit(1777645968.862:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.6.4522" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b119cdd9 code=0x7ffc0000 [ 1354.372887][ T29] audit: type=1326 audit(1777645968.952:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.6.4522" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9b119cdd9 code=0x7ffc0000 [ 1355.597639][ T29] audit: type=1326 audit(1777645968.952:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.6.4522" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b119cdd9 code=0x7ffc0000 [ 1355.732987][ T802] usb 9-1: 0:2 : does not exist [ 1355.867449][ T5730] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1356.013296][T22679] FAULT_INJECTION: forcing a failure. [ 1356.013296][T22679] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.027934][T22679] CPU: 1 UID: 0 PID: 22679 Comm: syz.8.4528 Tainted: G L syzkaller #0 PREEMPT(full) [ 1356.027967][T22679] Tainted: [L]=SOFTLOCKUP [ 1356.027974][T22679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1356.027984][T22679] Call Trace: [ 1356.027991][T22679] [ 1356.027999][T22679] dump_stack_lvl+0x100/0x190 [ 1356.028032][T22679] should_fail_ex.cold+0x5/0xa [ 1356.028059][T22679] should_failslab+0xc2/0x120 [ 1356.028080][T22679] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1356.028108][T22679] ? __alloc_skb+0x140/0x710 [ 1356.028135][T22679] ? __alloc_skb+0x5b7/0x710 [ 1356.028162][T22679] __alloc_skb+0x140/0x710 [ 1356.028186][T22679] ? __alloc_skb+0x5b7/0x710 [ 1356.028209][T22679] ? __pfx___alloc_skb+0x10/0x10 [ 1356.028241][T22679] netlink_alloc_large_skb+0x69/0x150 [ 1356.028268][T22679] netlink_sendmsg+0x680/0xda0 [ 1356.028292][T22679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1356.028320][T22679] ____sys_sendmsg+0x9e1/0xb70 [ 1356.028339][T22679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1356.028363][T22679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1356.028394][T22679] ___sys_sendmsg+0x190/0x1e0 [ 1356.028413][T22679] ? __pfx____sys_sendmsg+0x10/0x10 [ 1356.028454][T22679] __sys_sendmsg+0x170/0x220 [ 1356.028475][T22679] ? __pfx___sys_sendmsg+0x10/0x10 [ 1356.028505][T22679] ? rcu_is_watching+0x12/0xc0 [ 1356.028533][T22679] do_syscall_64+0x10b/0xf80 [ 1356.028551][T22679] ? clear_bhb_loop+0x40/0x90 [ 1356.028570][T22679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.028584][T22679] RIP: 0033:0x7f816699cdd9 [ 1356.028599][T22679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1356.028613][T22679] RSP: 002b:00007f8164bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1356.028630][T22679] RAX: ffffffffffffffda RBX: 00007f8166c15fa0 RCX: 00007f816699cdd9 [ 1356.028639][T22679] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 1356.028647][T22679] RBP: 00007f8164bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1356.028656][T22679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1356.028664][T22679] R13: 00007f8166c16038 R14: 00007f8166c15fa0 R15: 00007fff81660c18 [ 1356.028684][T22679] [ 1356.041980][ T802] usb 9-1: selecting invalid altsetting 1 [ 1356.271821][ T5730] usb 10-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1356.298893][ T5730] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.342335][ T5730] usb 10-1: config 0 descriptor?? [ 1356.356706][T22686] bridge0: port 3(vlan2) entered blocking state [ 1356.375452][ T802] snd-usb-us122l 9-1:1.1: usb_set_interface error [ 1356.388473][T22686] bridge0: port 3(vlan2) entered disabled state [ 1356.397115][T22686] vlan2: entered allmulticast mode [ 1356.408220][T22686] geneve0: entered allmulticast mode [ 1356.420230][ T802] snd-usb-us122l 9-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1356.430804][T22690] FAULT_INJECTION: forcing a failure. [ 1356.430804][T22690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1356.444467][T22690] CPU: 0 UID: 0 PID: 22690 Comm: syz.6.4532 Tainted: G L syzkaller #0 PREEMPT(full) [ 1356.444498][T22690] Tainted: [L]=SOFTLOCKUP [ 1356.444505][T22690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1356.444517][T22690] Call Trace: [ 1356.444524][T22690] [ 1356.444539][T22690] dump_stack_lvl+0x100/0x190 [ 1356.444573][T22690] should_fail_ex.cold+0x5/0xa [ 1356.444602][T22690] _copy_from_user+0x2e/0xd0 [ 1356.444632][T22690] memdup_user+0x6b/0xe0 [ 1356.444654][T22690] strndup_user+0x78/0xe0 [ 1356.444673][T22690] __x64_sys_mount+0x136/0x310 [ 1356.444702][T22690] ? __pfx___x64_sys_mount+0x10/0x10 [ 1356.444731][T22690] ? rcu_is_watching+0x12/0xc0 [ 1356.444764][T22690] do_syscall_64+0x10b/0xf80 [ 1356.444785][T22690] ? clear_bhb_loop+0x40/0x90 [ 1356.444810][T22690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.444829][T22690] RIP: 0033:0x7fc9b119cdd9 [ 1356.444847][T22690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1356.444866][T22690] RSP: 002b:00007fc9b1f87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1356.444887][T22690] RAX: ffffffffffffffda RBX: 00007fc9b1416090 RCX: 00007fc9b119cdd9 [ 1356.444898][T22690] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00002000000000c0 [ 1356.444909][T22690] RBP: 00007fc9b1f87090 R08: 0000000000000000 R09: 0000000000000000 [ 1356.444920][T22690] R10: 0000000000208000 R11: 0000000000000246 R12: 0000000000000001 [ 1356.444930][T22690] R13: 00007fc9b1416128 R14: 00007fc9b1416090 R15: 00007fff8146fea8 [ 1356.444955][T22690] [ 1356.745293][T15874] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1356.768752][T22686] vlan2: entered promiscuous mode [ 1356.792722][T22686] geneve0: entered promiscuous mode [ 1356.924879][ T802] usb 9-1: USB disconnect, device number 32 [ 1357.014733][T22662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1357.045500][T22662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1357.249270][ T5730] hackrf 10-1:0.0: usb_control_msg() failed -71 request 0f [ 1357.256583][ T5730] hackrf 10-1:0.0: Could not detect board [ 1357.302927][ T5730] hackrf 10-1:0.0: probe with driver hackrf failed with error -71 [ 1357.314846][ T5730] usb 10-1: USB disconnect, device number 33 [ 1357.432364][T21838] udevd[21838]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1358.602305][T15874] usb 5-1: Using ep0 maxpacket: 32 [ 1358.612177][T15874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.300426][T15874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.613591][T15874] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1359.631425][T15874] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1359.645178][T15874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.662655][T15874] usb 5-1: config 0 descriptor?? [ 1359.677377][T22697] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1359.685482][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1359.685500][ T29] audit: type=1400 audit(1777645975.002:825): avc: denied { mounton } for pid=22696 comm="syz.6.4534" path="/485/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1359.774933][T22697] FAULT_INJECTION: forcing a failure. [ 1359.774933][T22697] name failslab, interval 1, probability 0, space 0, times 0 [ 1359.789082][T22697] CPU: 0 UID: 0 PID: 22697 Comm: syz.6.4534 Tainted: G L syzkaller #0 PREEMPT(full) [ 1359.789118][T22697] Tainted: [L]=SOFTLOCKUP [ 1359.789125][T22697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1359.789137][T22697] Call Trace: [ 1359.789146][T22697] [ 1359.789154][T22697] dump_stack_lvl+0x100/0x190 [ 1359.789191][T22697] should_fail_ex.cold+0x5/0xa [ 1359.789221][T22697] should_failslab+0xc2/0x120 [ 1359.789242][T22697] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1359.789268][T22697] ? alloc_empty_file+0x5b/0x1c0 [ 1359.789300][T22697] alloc_empty_file+0x5b/0x1c0 [ 1359.789326][T22697] dentry_open+0x46/0xd0 [ 1359.789351][T22697] ovl_path_open+0x182/0x1d0 [ 1359.789385][T22697] ovl_dir_read_merged+0x2e8/0x790 [ 1359.789416][T22697] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 1359.789445][T22697] ? __pfx_ovl_fill_merge+0x10/0x10 [ 1359.789484][T22697] ovl_iterate+0xb7b/0x11e0 [ 1359.789520][T22697] ? __pfx_down_read_killable+0x10/0x10 [ 1359.789550][T22697] ? __pfx_ovl_iterate+0x10/0x10 [ 1359.789573][T22697] wrap_directory_iterator+0xa2/0xe0 [ 1359.789596][T22697] iterate_dir+0x296/0xae0 [ 1359.789619][T22697] __x64_sys_getdents64+0x13b/0x2c0 [ 1359.789640][T22697] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 1359.789659][T22697] ? fput+0x79/0x100 [ 1359.789680][T22697] ? __pfx_filldir64+0x10/0x10 [ 1359.789703][T22697] ? rcu_is_watching+0x12/0xc0 [ 1359.789736][T22697] do_syscall_64+0x10b/0xf80 [ 1359.789761][T22697] ? clear_bhb_loop+0x40/0x90 [ 1359.789785][T22697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.789803][T22697] RIP: 0033:0x7fc9b119cdd9 [ 1359.789824][T22697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1359.789840][T22697] RSP: 002b:00007fc9b1fa8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1359.789860][T22697] RAX: ffffffffffffffda RBX: 00007fc9b1415fa0 RCX: 00007fc9b119cdd9 [ 1359.789871][T22697] RDX: 0000000000000c00 RSI: 0000200000000400 RDI: 0000000000000004 [ 1359.789881][T22697] RBP: 00007fc9b1fa8090 R08: 0000000000000000 R09: 0000000000000000 [ 1359.789892][T22697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1359.789901][T22697] R13: 00007fc9b1416038 R14: 00007fc9b1415fa0 R15: 00007fff8146fea8 [ 1359.789927][T22697] [ 1360.128370][T15874] usb 5-1: can't set config #0, error -71 [ 1360.381216][T15874] usb 5-1: USB disconnect, device number 2 [ 1360.600094][ T29] audit: type=1400 audit(1777645975.562:826): avc: denied { write } for pid=22702 comm="syz.4.4537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1360.824847][ T29] audit: type=1326 audit(1777645975.642:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22702 comm="syz.4.4537" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a7d99cdd9 code=0x0 [ 1360.908464][ T29] audit: type=1400 audit(1777645975.722:828): avc: denied { ioctl } for pid=22701 comm="syz.8.4536" path="socket:[108080]" dev="sockfs" ino=108080 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1361.268257][ T5774] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1361.513127][T22721] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4539'. [ 1361.538643][ T29] audit: type=1400 audit(1777645976.862:829): avc: denied { unmount } for pid=13054 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1361.687254][ T5774] usb 8-1: Using ep0 maxpacket: 8 [ 1361.708516][ T5774] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1361.735929][ T5774] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.773355][ T5774] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1361.788033][ T5774] pvrusb2: ********** [ 1361.793341][ T5774] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1361.819140][ T5774] pvrusb2: Important functionality might not be entirely working. [ 1361.857341][ T5774] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1361.897733][ T5774] pvrusb2: ********** [ 1361.973511][ T2360] pvrusb2: Invalid write control endpoint [ 1364.197643][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.960387][T22735] FAULT_INJECTION: forcing a failure. [ 1366.960387][T22735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1367.164613][T15874] usb 8-1: USB disconnect, device number 51 [ 1367.227661][T22735] CPU: 1 UID: 0 PID: 22735 Comm: syz.4.4544 Tainted: G L syzkaller #0 PREEMPT(full) [ 1367.227698][T22735] Tainted: [L]=SOFTLOCKUP [ 1367.227705][T22735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1367.227716][T22735] Call Trace: [ 1367.227724][T22735] [ 1367.227732][T22735] dump_stack_lvl+0x100/0x190 [ 1367.227766][T22735] should_fail_ex.cold+0x5/0xa [ 1367.227796][T22735] _copy_to_iter+0x1f3/0x1720 [ 1367.227827][T22735] ? seq_write+0xd7/0x150 [ 1367.227849][T22735] ? __pfx__copy_to_iter+0x10/0x10 [ 1367.227873][T22735] ? __up_read+0x2c1/0x6e0 [ 1367.227902][T22735] ? __pfx___up_read+0x10/0x10 [ 1367.227925][T22735] ? seq_read_iter+0xd33/0x1270 [ 1367.227944][T22735] ? seq_read_iter+0xd33/0x1270 [ 1367.227968][T22735] seq_read_iter+0xdab/0x1270 [ 1367.227996][T22735] ? __pfx_seq_read_iter+0x10/0x10 [ 1367.228017][T22735] vfs_read+0x825/0xb30 [ 1367.228043][T22735] ? __pfx_vfs_read+0x10/0x10 [ 1367.228079][T22735] ksys_read+0x12a/0x250 [ 1367.228099][T22735] ? __pfx_ksys_read+0x10/0x10 [ 1367.228121][T22735] ? rcu_is_watching+0x12/0xc0 [ 1367.228154][T22735] do_syscall_64+0x10b/0xf80 [ 1367.228176][T22735] ? clear_bhb_loop+0x40/0x90 [ 1367.228200][T22735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.228219][T22735] RIP: 0033:0x7f5a7d99cdd9 [ 1367.228236][T22735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1367.228253][T22735] RSP: 002b:00007f5a7e840028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1367.228274][T22735] RAX: ffffffffffffffda RBX: 00007f5a7dc15fa0 RCX: 00007f5a7d99cdd9 [ 1367.228286][T22735] RDX: 0000000000002020 RSI: 0000200000002c00 RDI: 0000000000000003 [ 1367.228297][T22735] RBP: 00007f5a7e840090 R08: 0000000000000000 R09: 0000000000000000 [ 1367.228308][T22735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1367.228318][T22735] R13: 00007f5a7dc16038 R14: 00007f5a7dc15fa0 R15: 00007ffcad138148 [ 1367.228345][T22735] [ 1367.552150][ T2360] pvrusb2: Invalid write control endpoint [ 1367.558432][ T2360] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1367.568624][ T2360] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1367.576830][ T2360] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1367.586833][ T2360] pvrusb2: Device being rendered inoperable [ 1367.592806][ T2360] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1367.599905][ T2360] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1367.608208][ T2360] pvrusb2: Attached sub-driver cx25840 [ 1367.613688][ T2360] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1367.623766][ T2360] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1367.864771][T22744] binder: BINDER_SET_CONTEXT_MGR already set [ 1367.870896][T22744] binder: 22743:22744 ioctl 4018620d 200000004a80 returned -16 [ 1367.915821][T22749] FAULT_INJECTION: forcing a failure. [ 1367.915821][T22749] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1367.935857][T22751] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4547'. [ 1368.007299][ T5774] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1368.027332][T22749] CPU: 0 UID: 0 PID: 22749 Comm: syz.4.4548 Tainted: G L syzkaller #0 PREEMPT(full) [ 1368.027371][T22749] Tainted: [L]=SOFTLOCKUP [ 1368.027378][T22749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1368.027389][T22749] Call Trace: [ 1368.027398][T22749] [ 1368.027407][T22749] dump_stack_lvl+0x100/0x190 [ 1368.027442][T22749] should_fail_ex.cold+0x5/0xa [ 1368.027466][T22749] ? prepare_alloc_pages+0x16d/0x5f0 [ 1368.027493][T22749] should_fail_alloc_page+0xeb/0x140 [ 1368.027516][T22749] prepare_alloc_pages+0x1f0/0x5f0 [ 1368.027541][T22749] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1368.027570][T22749] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1368.027599][T22749] ? __pfx___might_resched+0x10/0x10 [ 1368.027634][T22749] ? __lock_acquire+0x4a5/0x2630 [ 1368.027661][T22749] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1368.027700][T22749] ? __lock_acquire+0x4a5/0x2630 [ 1368.027728][T22749] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1368.027754][T22749] ? policy_nodemask+0xed/0x4f0 [ 1368.027777][T22749] alloc_pages_mpol+0x1fb/0x540 [ 1368.027799][T22749] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1368.027826][T22749] alloc_pages_noprof+0x1a/0x160 [ 1368.027849][T22749] pte_alloc_one+0x1c/0x3d0 [ 1368.027879][T22749] do_huge_pmd_anonymous_page+0x2bf/0x16c0 [ 1368.027915][T22749] __handle_mm_fault+0x239e/0x2a00 [ 1368.027946][T22749] ? mt_find+0x45e/0x8e0 [ 1368.027970][T22749] ? __pfx___handle_mm_fault+0x10/0x10 [ 1368.027997][T22749] ? __pfx_mt_find+0x10/0x10 [ 1368.028035][T22749] ? find_vma+0xbf/0x140 [ 1368.028053][T22749] ? __pfx_find_vma+0x10/0x10 [ 1368.028074][T22749] handle_mm_fault+0x36d/0xa20 [ 1368.028104][T22749] do_user_addr_fault+0x74c/0x12f0 [ 1368.028133][T22749] ? trace_page_fault_kernel+0x7a/0x200 [ 1368.028159][T22749] exc_page_fault+0x6f/0xd0 [ 1368.028181][T22749] asm_exc_page_fault+0x26/0x30 [ 1368.028200][T22749] RIP: 0010:filldir64+0x19e/0x640 [ 1368.028221][T22749] Code: d0 48 0f 47 c2 48 89 44 24 20 0f 01 cb e8 da 61 79 ff 31 f6 31 ff e8 21 5c 79 ff e8 cc 61 79 ff 48 8b 4c 24 10 48 8b 44 24 20 <48> 89 48 08 e8 b9 61 79 ff 4c 8b 74 24 08 48 8b 74 24 18 49 89 36 [ 1368.028239][T22749] RSP: 0018:ffffc9000c9a7cd0 EFLAGS: 00050293 [ 1368.028257][T22749] RAX: 0000200000001f80 RBX: 0000000000000001 RCX: 0000000000000000 [ 1368.028268][T22749] RDX: ffff88801e292500 RSI: ffffffff828f29d4 RDI: ffff88801e292500 [ 1368.028279][T22749] RBP: ffffffff8bc5dee0 R08: 0000000000000001 R09: 0000000000000000 [ 1368.028289][T22749] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000c9a7e60 [ 1368.028300][T22749] R13: 0000000000000018 R14: 0000000000000000 R15: ffffc9000c9a7e84 [ 1368.028324][T22749] ? filldir64+0x194/0x640 [ 1368.028354][T22749] ? __pfx_filldir64+0x10/0x10 [ 1368.028371][T22749] offset_readdir+0x424/0x780 [ 1368.028393][T22749] ? avc_policy_seqno+0x9/0x20 [ 1368.028421][T22749] ? selinux_file_permission+0x8f/0x6d0 [ 1368.028452][T22749] iterate_dir+0x296/0xae0 [ 1368.028476][T22749] __x64_sys_getdents64+0x13b/0x2c0 [ 1368.028497][T22749] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 1368.028517][T22749] ? fput+0x79/0x100 [ 1368.028541][T22749] ? __pfx_filldir64+0x10/0x10 [ 1368.028563][T22749] ? rcu_is_watching+0x12/0xc0 [ 1368.028595][T22749] do_syscall_64+0x10b/0xf80 [ 1368.028615][T22749] ? clear_bhb_loop+0x40/0x90 [ 1368.028637][T22749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.028654][T22749] RIP: 0033:0x7f5a7d99cdd9 [ 1368.028672][T22749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.028687][T22749] RSP: 002b:00007f5a7e81f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1368.028703][T22749] RAX: ffffffffffffffda RBX: 00007f5a7dc16090 RCX: 00007f5a7d99cdd9 [ 1368.028714][T22749] RDX: 000000000000100c RSI: 0000200000001f80 RDI: 0000000000000004 [ 1368.028724][T22749] RBP: 00007f5a7e81f090 R08: 0000000000000000 R09: 0000000000000000 [ 1368.028734][T22749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1368.028744][T22749] R13: 00007f5a7dc16128 R14: 00007f5a7dc16090 R15: 00007ffcad138148 [ 1368.028769][T22749] [ 1368.887633][ T5774] usb 10-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 1368.899385][ T5774] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1368.939491][ T5774] usb 10-1: string descriptor 0 read error: -22 [ 1368.951292][ T5774] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1369.004193][ T5774] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.283487][T22738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.296717][T22774] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20003 [ 1371.343969][T22738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.375995][T22574] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 1371.697639][ T5774] usbhid 10-1:1.0: can't add hid device: -71 [ 1371.750021][ T5774] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 1371.799422][ T5774] usb 10-1: USB disconnect, device number 34 [ 1373.594672][T22797] tipc: Enabled bearer , priority 0 [ 1373.802116][T22797] syzkaller0: entered promiscuous mode [ 1373.815612][T22802] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4557'. [ 1373.826472][T22797] syzkaller0: entered allmulticast mode [ 1373.841185][T22797] tipc: Resetting bearer [ 1373.908957][T22795] tipc: Resetting bearer [ 1374.139457][T22802] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4557'. [ 1374.425237][T22769] syz.6.4541 (22769): drop_caches: 1 [ 1374.537241][T22807] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4556'. [ 1374.955395][ T29] audit: type=1400 audit(1777645990.272:830): avc: denied { ioctl } for pid=22808 comm="syz.6.4559" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 ioctlcmd=0x5456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1375.054611][ T29] audit: type=1400 audit(1777645990.272:831): avc: denied { ioctl } for pid=22808 comm="syz.6.4559" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1381.950942][T22795] tipc: Disabling bearer [ 1382.296272][T22821] FAULT_INJECTION: forcing a failure. [ 1382.296272][T22821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1382.309378][T22821] CPU: 1 UID: 0 PID: 22821 Comm: syz.8.4563 Tainted: G L syzkaller #0 PREEMPT(full) [ 1382.309420][T22821] Tainted: [L]=SOFTLOCKUP [ 1382.309427][T22821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1382.309438][T22821] Call Trace: [ 1382.309446][T22821] [ 1382.309453][T22821] dump_stack_lvl+0x100/0x190 [ 1382.309492][T22821] should_fail_ex.cold+0x5/0xa [ 1382.309521][T22821] _copy_from_user+0x2e/0xd0 [ 1382.309555][T22821] move_addr_to_kernel+0x65/0x170 [ 1382.309582][T22821] __sys_connect+0xb5/0x170 [ 1382.309604][T22821] ? __pfx___sys_connect+0x10/0x10 [ 1382.309623][T22821] ? __fget_files+0x21f/0x3d0 [ 1382.309656][T22821] ? __pfx_ksys_write+0x10/0x10 [ 1382.309680][T22821] __x64_sys_connect+0x72/0xb0 [ 1382.309702][T22821] ? lockdep_hardirqs_on+0x78/0x100 [ 1382.309725][T22821] do_syscall_64+0x10b/0xf80 [ 1382.309744][T22821] ? clear_bhb_loop+0x40/0x90 [ 1382.309769][T22821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.309787][T22821] RIP: 0033:0x7f816699cdd9 [ 1382.309807][T22821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1382.309824][T22821] RSP: 002b:00007f8164bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1382.309844][T22821] RAX: ffffffffffffffda RBX: 00007f8166c15fa0 RCX: 00007f816699cdd9 [ 1382.309855][T22821] RDX: 0000000000000011 RSI: 0000200000000400 RDI: 0000000000000003 [ 1382.309866][T22821] RBP: 00007f8164bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1382.309875][T22821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1382.309885][T22821] R13: 00007f8166c16038 R14: 00007f8166c15fa0 R15: 00007fff81660c18 [ 1382.309909][T22821] [ 1382.533914][ T802] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1382.586595][T22824] FAULT_INJECTION: forcing a failure. [ 1382.586595][T22824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1382.600747][T22824] CPU: 0 UID: 0 PID: 22824 Comm: syz.9.4564 Tainted: G L syzkaller #0 PREEMPT(full) [ 1382.600783][T22824] Tainted: [L]=SOFTLOCKUP [ 1382.600791][T22824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1382.600802][T22824] Call Trace: [ 1382.600810][T22824] [ 1382.600818][T22824] dump_stack_lvl+0x100/0x190 [ 1382.600855][T22824] should_fail_ex.cold+0x5/0xa [ 1382.600885][T22824] _copy_from_iter+0x1f4/0x1690 [ 1382.600921][T22824] ? __pfx__copy_from_iter+0x10/0x10 [ 1382.600946][T22824] ? trace_kmalloc+0xe3/0x110 [ 1382.600970][T22824] ? __kasan_kmalloc+0xaa/0xb0 [ 1382.601002][T22824] ? file_tty_write.isra.0+0x694/0x890 [ 1382.601033][T22824] ? rcu_is_watching+0x12/0xc0 [ 1382.601066][T22824] ? file_tty_write.isra.0+0x694/0x890 [ 1382.601088][T22824] ? kfree+0x1dd/0x6c0 [ 1382.601117][T22824] file_tty_write.isra.0+0x45b/0x890 [ 1382.601148][T22824] vfs_write+0x6ac/0x1070 [ 1382.601171][T22824] ? __pfx_tty_write+0x10/0x10 [ 1382.601203][T22824] ? __pfx_vfs_write+0x10/0x10 [ 1382.601221][T22824] ? find_held_lock+0x2b/0x80 [ 1382.601258][T22824] ksys_write+0x12a/0x250 [ 1382.601279][T22824] ? __pfx_ksys_write+0x10/0x10 [ 1382.601301][T22824] ? rcu_is_watching+0x12/0xc0 [ 1382.601331][T22824] do_syscall_64+0x10b/0xf80 [ 1382.601353][T22824] ? clear_bhb_loop+0x40/0x90 [ 1382.601378][T22824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.601397][T22824] RIP: 0033:0x7f3956f9cdd9 [ 1382.601417][T22824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1382.601435][T22824] RSP: 002b:00007f3957e03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1382.601454][T22824] RAX: ffffffffffffffda RBX: 00007f3957215fa0 RCX: 00007f3956f9cdd9 [ 1382.601466][T22824] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000006 [ 1382.601476][T22824] RBP: 00007f3957e03090 R08: 0000000000000000 R09: 0000000000000000 [ 1382.601487][T22824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1382.601498][T22824] R13: 00007f3957216038 R14: 00007f3957215fa0 R15: 00007fff4a3a3538 [ 1382.601525][T22824] [ 1382.829437][T15874] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1382.928012][ T802] usb 5-1: Using ep0 maxpacket: 8 [ 1382.937460][ T802] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.948498][ T802] usb 5-1: config 0 has no interfaces? [ 1382.967550][ T802] usb 5-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=5b.65 [ 1382.998910][ T802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.007370][ T802] usb 5-1: Product: syz [ 1383.018767][ T802] usb 5-1: Manufacturer: syz [ 1383.037655][ T802] usb 5-1: SerialNumber: syz [ 1383.075974][ T802] usb 5-1: config 0 descriptor?? [ 1383.537651][T15874] usb 8-1: Using ep0 maxpacket: 32 [ 1383.545945][T22831] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1044 sclass=netlink_tcpdiag_socket pid=22831 comm=syz.9.4566 [ 1383.573073][T22813] syzkaller0: entered promiscuous mode [ 1383.586604][T15874] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1383.612645][T15874] usb 8-1: config 0 has no interface number 0 [ 1383.639221][T15874] usb 8-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1383.652912][ T5737] usb 5-1: USB disconnect, device number 3 [ 1383.694665][T22813] syzkaller0: entered allmulticast mode [ 1383.699400][T15874] usb 8-1: config 0 interface 1 has no altsetting 0 [ 1383.729547][T15874] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1383.763591][T15874] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.791280][T15874] usb 8-1: Product: syz [ 1383.809621][T15874] usb 8-1: Manufacturer: syz [ 1383.847112][T15874] usb 8-1: SerialNumber: syz [ 1383.893444][T15874] usb 8-1: config 0 descriptor?? [ 1384.217604][T22817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.235351][T22817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.357934][T15874] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1385.453157][T15874] cx231xx 8-1:0.1: Failed to read PCB config [ 1385.489410][T15874] cx231xx 8-1:0.1: probe with driver cx231xx failed with error -71 [ 1385.515251][T15874] usb 8-1: USB disconnect, device number 52 [ 1385.647613][ T802] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1385.708055][T22849] Cannot find del_set index 1 as target [ 1385.733264][T22849] overlayfs: missing 'lowerdir' [ 1386.739179][T22852] syz.7.4569 (22852): drop_caches: 1 [ 1386.749799][ T802] usb 9-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 1386.762883][ T802] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1386.774463][ T802] usb 9-1: string descriptor 0 read error: -22 [ 1386.781362][ T802] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1386.792818][ T802] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.310581][T22842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1387.347567][T22842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.297076][ T802] usbhid 9-1:1.0: can't add hid device: -110 [ 1392.303507][ T802] usbhid 9-1:1.0: probe with driver usbhid failed with error -110 [ 1394.476958][T22868] tipc: Enabling of bearer rejected, failed to enable media [ 1394.505881][ T5737] usb 9-1: USB disconnect, device number 33 [ 1394.836263][ T29] audit: type=1400 audit(1777646010.162:832): avc: denied { append } for pid=22886 comm="syz.6.4578" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1395.119492][ T9] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1395.137267][ T802] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1395.409778][ T802] usb 5-1: config index 0 descriptor too short (expected 23598, got 92) [ 1395.420563][ T9] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1395.430843][ T802] usb 5-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 1395.441553][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.549731][ T802] usb 5-1: config 2 has no interfaces? [ 1395.582882][ T9] usb 8-1: config 0 descriptor?? [ 1395.609162][ T802] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1395.676341][ T9] cp210x 8-1:0.0: cp210x converter detected [ 1395.698182][ T802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.767798][ T802] usb 5-1: Product: syz [ 1395.887882][ T802] usb 5-1: Manufacturer: syz [ 1395.911285][ T802] usb 5-1: SerialNumber: syz [ 1396.225499][ T802] usb 5-1: USB disconnect, device number 4 [ 1396.244039][ T9] cp210x 8-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1396.412466][ T9] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1396.917962][T22909] FAULT_INJECTION: forcing a failure. [ 1396.917962][T22909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1397.139376][T22909] CPU: 0 UID: 0 PID: 22909 Comm: syz.4.4583 Tainted: G L syzkaller #0 PREEMPT(full) [ 1397.139411][T22909] Tainted: [L]=SOFTLOCKUP [ 1397.139418][T22909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1397.139430][T22909] Call Trace: [ 1397.139437][T22909] [ 1397.139446][T22909] dump_stack_lvl+0x100/0x190 [ 1397.139480][T22909] should_fail_ex.cold+0x5/0xa [ 1397.139506][T22909] _copy_to_user+0x32/0xd0 [ 1397.139536][T22909] csum_and_copy_to_iter+0x298/0x1ef0 [ 1397.139569][T22909] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 1397.139593][T22909] ? do_raw_spin_lock+0x128/0x260 [ 1397.139621][T22909] ? find_held_lock+0x2b/0x80 [ 1397.139638][T22909] ? __skb_recv_udp+0x725/0x950 [ 1397.139659][T22909] ? rcu_is_watching+0x12/0xc0 [ 1397.139689][T22909] __skb_datagram_iter+0x801/0x900 [ 1397.139709][T22909] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 1397.139732][T22909] ? do_csum+0x1e5/0x380 [ 1397.139759][T22909] skb_copy_and_csum_datagram_msg+0x222/0x380 [ 1397.139783][T22909] ? __pfx_skb_copy_and_csum_datagram_msg+0x10/0x10 [ 1397.139813][T22909] udp_recvmsg+0x416/0xf80 [ 1397.139841][T22909] ? __pfx_udp_recvmsg+0x10/0x10 [ 1397.139863][T22909] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1397.139884][T22909] ? is_bpf_text_address+0x94/0x1a0 [ 1397.139912][T22909] ? __pfx_udp_recvmsg+0x10/0x10 [ 1397.139931][T22909] inet_recvmsg+0x277/0x4c0 [ 1397.139955][T22909] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1397.139982][T22909] ? __pfx_inet_recvmsg+0x10/0x10 [ 1397.140007][T22909] sock_recvmsg+0x187/0x1f0 [ 1397.140030][T22909] ____sys_recvmsg+0x218/0x640 [ 1397.140055][T22909] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1397.140085][T22909] ? __lock_acquire+0x4a5/0x2630 [ 1397.140112][T22909] ___sys_recvmsg+0x16a/0x1a0 [ 1397.140134][T22909] ? __pfx____sys_recvmsg+0x10/0x10 [ 1397.140158][T22909] ? find_held_lock+0x2b/0x80 [ 1397.140191][T22909] do_recvmmsg+0x301/0x760 [ 1397.140223][T22909] ? __pfx_do_recvmmsg+0x10/0x10 [ 1397.140242][T22909] ? ksys_write+0x190/0x250 [ 1397.140269][T22909] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1397.140292][T22909] ? kernel_write+0x5e3/0x6c0 [ 1397.140319][T22909] ? __fget_files+0x21f/0x3d0 [ 1397.140347][T22909] __x64_sys_recvmmsg+0x22a/0x280 [ 1397.140376][T22909] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1397.140409][T22909] ? rcu_is_watching+0x12/0xc0 [ 1397.140440][T22909] do_syscall_64+0x10b/0xf80 [ 1397.140462][T22909] ? clear_bhb_loop+0x40/0x90 [ 1397.140486][T22909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.140509][T22909] RIP: 0033:0x7f5a7d99cdd9 [ 1397.140527][T22909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1397.140544][T22909] RSP: 002b:00007f5a7e81f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1397.140565][T22909] RAX: ffffffffffffffda RBX: 00007f5a7dc16090 RCX: 00007f5a7d99cdd9 [ 1397.140577][T22909] RDX: 0000000000000001 RSI: 0000200000001300 RDI: 0000000000000003 [ 1397.140587][T22909] RBP: 00007f5a7e81f090 R08: 0000000000000000 R09: 0000000000000000 [ 1397.140597][T22909] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000001 [ 1397.140608][T22909] R13: 00007f5a7dc16128 R14: 00007f5a7dc16090 R15: 00007ffcad138148 [ 1397.140633][T22909] [ 1398.927760][T17585] usb 8-1: USB disconnect, device number 53 [ 1398.936459][T17585] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1398.984597][T17585] cp210x 8-1:0.0: device disconnected [ 1399.060098][T22922] tipc: Enabled bearer , priority 0 [ 1399.075607][T22925] program syz.9.4587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1399.124582][T22918] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4586'. [ 1399.334754][T22922] syzkaller0: entered promiscuous mode [ 1399.347444][T22922] syzkaller0: entered allmulticast mode [ 1399.372474][T22922] tipc: Resetting bearer [ 1399.388658][T22923] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4586'. [ 1399.801521][T22921] tipc: Resetting bearer [ 1402.339766][T15874] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1402.832721][T15874] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 1402.844670][T15874] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1402.881668][T15874] usb 7-1: string descriptor 0 read error: -22 [ 1402.889266][T15874] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1402.919721][T15874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.453387][T22950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.486340][T22950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.782260][T22921] tipc: Disabling bearer [ 1408.013634][T15874] usbhid 7-1:1.0: can't add hid device: -71 [ 1408.020534][T15874] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1408.074646][T15874] usb 7-1: USB disconnect, device number 109 [ 1410.155760][T22977] FAULT_INJECTION: forcing a failure. [ 1410.155760][T22977] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.168946][T22977] CPU: 1 UID: 0 PID: 22977 Comm: syz.6.4599 Tainted: G L syzkaller #0 PREEMPT(full) [ 1410.168979][T22977] Tainted: [L]=SOFTLOCKUP [ 1410.168986][T22977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1410.168998][T22977] Call Trace: [ 1410.169009][T22977] [ 1410.169018][T22977] dump_stack_lvl+0x100/0x190 [ 1410.169053][T22977] should_fail_ex.cold+0x5/0xa [ 1410.169087][T22977] should_failslab+0xc2/0x120 [ 1410.169109][T22977] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1410.169138][T22977] ? __alloc_skb+0x140/0x710 [ 1410.169172][T22977] __alloc_skb+0x140/0x710 [ 1410.169197][T22977] ? __alloc_skb+0x5b7/0x710 [ 1410.169222][T22977] ? __pfx___alloc_skb+0x10/0x10 [ 1410.169255][T22977] netlink_alloc_large_skb+0x69/0x150 [ 1410.169281][T22977] netlink_sendmsg+0x680/0xda0 [ 1410.169307][T22977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1410.169339][T22977] ____sys_sendmsg+0x9e1/0xb70 [ 1410.169359][T22977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1410.169383][T22977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1410.169407][T22977] ? debug_object_assert_init+0x1c4/0x300 [ 1410.169442][T22977] ___sys_sendmsg+0x190/0x1e0 [ 1410.169466][T22977] ? __pfx____sys_sendmsg+0x10/0x10 [ 1410.169485][T22977] ? find_held_lock+0x2b/0x80 [ 1410.169505][T22977] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 1410.169562][T22977] __sys_sendmsg+0x170/0x220 [ 1410.169590][T22977] ? __pfx___sys_sendmsg+0x10/0x10 [ 1410.169626][T22977] ? trace_irq_enable.constprop.0+0x31/0x160 [ 1410.169672][T22977] ? rcu_is_watching+0x12/0xc0 [ 1410.169706][T22977] do_syscall_64+0x10b/0xf80 [ 1410.169729][T22977] ? clear_bhb_loop+0x40/0x90 [ 1410.169753][T22977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.169772][T22977] RIP: 0033:0x7fc9b119cdd9 [ 1410.169789][T22977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1410.169807][T22977] RSP: 002b:00007fc9b1fa8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1410.169826][T22977] RAX: ffffffffffffffda RBX: 00007fc9b1415fa0 RCX: 00007fc9b119cdd9 [ 1410.169838][T22977] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000003 [ 1410.169849][T22977] RBP: 00007fc9b1fa8090 R08: 0000000000000000 R09: 0000000000000000 [ 1410.169860][T22977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1410.169871][T22977] R13: 00007fc9b1416038 R14: 00007fc9b1415fa0 R15: 00007fff8146fea8 [ 1410.169897][T22977] [ 1410.637302][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1410.670414][ T29] audit: type=1400 audit(1777646026.002:833): avc: denied { mount } for pid=22981 comm="syz.6.4604" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1410.697597][T22983] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4604'. [ 1410.716315][T22986] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4604'. [ 1410.756644][ T29] audit: type=1400 audit(1777646026.032:834): avc: denied { read write } for pid=22981 comm="syz.6.4604" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1410.820526][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1410.947419][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.960073][ T29] audit: type=1400 audit(1777646026.032:835): avc: denied { ioctl open } for pid=22981 comm="syz.6.4604" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1411.059763][T22991] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4602'. [ 1411.271521][ T9] usb 5-1: Product: syz [ 1411.277523][ T9] usb 5-1: Manufacturer: syz [ 1411.284035][ T9] usb 5-1: SerialNumber: syz [ 1411.307610][T22990] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4602'. [ 1411.316721][T22990] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4602'. [ 1411.332889][T22990] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4602'. [ 1411.342152][T22990] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4602'. [ 1411.384240][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1411.397738][ T29] audit: type=1400 audit(1777646026.632:836): avc: denied { unmount } for pid=13054 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1411.456671][T22989] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4603'. [ 1411.489239][ T5774] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1411.910933][T22989] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4603'. [ 1412.033831][ T29] audit: type=1400 audit(1777646027.362:837): avc: denied { watch_reads } for pid=22976 comm="syz.4.4600" path="/374" dev="tmpfs" ino=1983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1412.059468][T23003] No control pipe specified [ 1412.100529][T23005] syz.6.4609 (23005): drop_caches: 2 [ 1412.116996][T15874] usb 5-1: USB disconnect, device number 5 [ 1413.272875][ T5774] usb 5-1: Service connection timeout for: 256 [ 1413.304469][ T5774] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1413.540300][ T5774] ath9k_htc: Failed to initialize the device [ 1413.553476][T15874] usb 5-1: ath9k_htc: USB layer deinitialized [ 1413.959366][T17585] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1417.570285][T23028] tmpfs: Bad value for 'mpol' [ 1417.837624][ T5774] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 1418.482927][ T5774] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1418.525537][ T5774] usb 5-1: not running at top speed; connect to a high speed hub [ 1418.563242][ T5774] usb 5-1: config 12 has an invalid interface number: 231 but max is 0 [ 1418.602086][ T5774] usb 5-1: config 12 has no interface number 0 [ 1418.638536][ T5774] usb 5-1: config 12 interface 231 has no altsetting 0 [ 1418.678360][ T5774] usb 5-1: New USB device found, idVendor=2040, idProduct=9941, bcdDevice=93.b7 [ 1418.726985][ T5774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.765870][ T5774] usb 5-1: Product: syz [ 1418.781806][ T5774] usb 5-1: Manufacturer: syz [ 1418.803473][ T5774] usb 5-1: SerialNumber: syz [ 1419.200928][T17585] usb 9-1: device descriptor read/all, error -71 [ 1419.232861][T23030] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4615'. [ 1419.305354][T23030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1419.319843][T23030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1419.435107][ T5774] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 1420.613501][ T5774] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1420.629878][ T5774] dib0700: firmware download failed at 7 with -71 [ 1420.648241][ T5774] usb 5-1: USB disconnect, device number 6 [ 1421.178296][T23053] syz.4.4623 (23053): drop_caches: 2 [ 1422.342052][T17585] usb 9-1: new low-speed USB device number 36 using dummy_hcd [ 1422.642095][T17585] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1422.697523][T17585] usb 9-1: config 0 has no interface number 0 [ 1422.732981][T17585] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1422.776481][T17585] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1422.941991][T17585] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1422.955943][T17585] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.954922][T17585] usb 9-1: config 0 descriptor?? [ 1423.986262][T23051] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1424.367808][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.668436][T17585] usb 9-1: can't set config #0, error -71 [ 1425.688886][T17585] usb 9-1: USB disconnect, device number 36 [ 1427.814525][T23091] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4629'. [ 1427.838209][T23099] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4632'. [ 1428.025336][T23102] FAULT_INJECTION: forcing a failure. [ 1428.025336][T23102] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.058006][T23102] CPU: 0 UID: 0 PID: 23102 Comm: syz.8.4633 Tainted: G L syzkaller #0 PREEMPT(full) [ 1428.058043][T23102] Tainted: [L]=SOFTLOCKUP [ 1428.058050][T23102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1428.058062][T23102] Call Trace: [ 1428.058070][T23102] [ 1428.058077][T23102] dump_stack_lvl+0x100/0x190 [ 1428.058112][T23102] should_fail_ex.cold+0x5/0xa [ 1428.058140][T23102] should_failslab+0xc2/0x120 [ 1428.058162][T23102] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1428.058191][T23102] ? __alloc_skb+0x140/0x710 [ 1428.058217][T23102] ? __alloc_skb+0x5b7/0x710 [ 1428.058244][T23102] __alloc_skb+0x140/0x710 [ 1428.058268][T23102] ? __alloc_skb+0x5b7/0x710 [ 1428.058291][T23102] ? __pfx___alloc_skb+0x10/0x10 [ 1428.058322][T23102] netlink_alloc_large_skb+0x69/0x150 [ 1428.058348][T23102] netlink_sendmsg+0x680/0xda0 [ 1428.058373][T23102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1428.058396][T23102] ? security_socket_sendmsg+0x18/0x230 [ 1428.058425][T23102] ____sys_sendmsg+0x9e1/0xb70 [ 1428.058446][T23102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1428.058468][T23102] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1428.058499][T23102] ___sys_sendmsg+0x190/0x1e0 [ 1428.058522][T23102] ? __pfx____sys_sendmsg+0x10/0x10 [ 1428.058573][T23102] __sys_sendmsg+0x170/0x220 [ 1428.058601][T23102] ? __pfx___sys_sendmsg+0x10/0x10 [ 1428.058638][T23102] ? rcu_is_watching+0x12/0xc0 [ 1428.058669][T23102] do_syscall_64+0x10b/0xf80 [ 1428.058692][T23102] ? clear_bhb_loop+0x40/0x90 [ 1428.058716][T23102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.058734][T23102] RIP: 0033:0x7f816699cdd9 [ 1428.058752][T23102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1428.058771][T23102] RSP: 002b:00007f8164bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1428.058791][T23102] RAX: ffffffffffffffda RBX: 00007f8166c15fa0 RCX: 00007f816699cdd9 [ 1428.058803][T23102] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1428.058814][T23102] RBP: 00007f8164bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1428.058824][T23102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1428.058835][T23102] R13: 00007f8166c16038 R14: 00007f8166c15fa0 R15: 00007fff81660c18 [ 1428.058860][T23102] [ 1430.072188][T23109] FAULT_INJECTION: forcing a failure. [ 1430.072188][T23109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1430.085336][T23109] CPU: 0 UID: 0 PID: 23109 Comm: syz.6.4636 Tainted: G L syzkaller #0 PREEMPT(full) [ 1430.085364][T23109] Tainted: [L]=SOFTLOCKUP [ 1430.085371][T23109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1430.085382][T23109] Call Trace: [ 1430.085390][T23109] [ 1430.085398][T23109] dump_stack_lvl+0x100/0x190 [ 1430.085430][T23109] should_fail_ex.cold+0x5/0xa [ 1430.085457][T23109] _copy_from_user+0x2e/0xd0 [ 1430.085486][T23109] memdup_user+0x6b/0xe0 [ 1430.085507][T23109] strndup_user+0x78/0xe0 [ 1430.085525][T23109] __x64_sys_mount+0x136/0x310 [ 1430.085553][T23109] ? __pfx___x64_sys_mount+0x10/0x10 [ 1430.085580][T23109] ? rcu_is_watching+0x12/0xc0 [ 1430.085611][T23109] do_syscall_64+0x10b/0xf80 [ 1430.085632][T23109] ? clear_bhb_loop+0x40/0x90 [ 1430.085654][T23109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.085672][T23109] RIP: 0033:0x7fc9b119cdd9 [ 1430.085689][T23109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1430.085705][T23109] RSP: 002b:00007fc9b1fa8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1430.085725][T23109] RAX: ffffffffffffffda RBX: 00007fc9b1415fa0 RCX: 00007fc9b119cdd9 [ 1430.085736][T23109] RDX: 0000200000000080 RSI: 0000200000000180 RDI: 0000000000000000 [ 1430.085746][T23109] RBP: 00007fc9b1fa8090 R08: 0000000000000000 R09: 0000000000000000 [ 1430.085756][T23109] R10: 0000000001214040 R11: 0000000000000246 R12: 0000000000000001 [ 1430.085766][T23109] R13: 00007fc9b1416038 R14: 00007fc9b1415fa0 R15: 00007fff8146fea8 [ 1430.085790][T23109] [ 1430.247239][T23109] overlayfs: overlapping lowerdir path [ 1432.187273][ T802] usb 7-1: new full-speed USB device number 110 using dummy_hcd [ 1433.362066][ T802] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1433.372741][ T802] usb 7-1: not running at top speed; connect to a high speed hub [ 1433.383952][ T802] usb 7-1: config 12 has an invalid interface number: 231 but max is 0 [ 1433.394488][ T802] usb 7-1: config 12 has no interface number 0 [ 1433.408497][ T802] usb 7-1: config 12 interface 231 has no altsetting 0 [ 1433.596704][ T802] usb 7-1: New USB device found, idVendor=2040, idProduct=9941, bcdDevice=93.b7 [ 1433.607286][ T802] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.617889][ T802] usb 7-1: Product: syz [ 1433.622112][ T802] usb 7-1: Manufacturer: syz [ 1433.626824][ T802] usb 7-1: SerialNumber: syz [ 1433.873638][T23114] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4637'. [ 1433.918974][T23114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.149659][T23114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.530848][ T802] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 1434.546426][ T802] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1434.556008][ T802] dib0700: firmware download failed at 7 with -71 [ 1434.601280][ T802] usb 7-1: USB disconnect, device number 110 [ 1435.676848][ T29] audit: type=1326 audit(1777646051.002:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23123 comm="syz.4.4634" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7d99cdd9 code=0x7ffc0000 [ 1435.975596][ T29] audit: type=1326 audit(1777646051.002:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23123 comm="syz.4.4634" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7d99cdd9 code=0x7ffc0000 [ 1436.264919][ T29] audit: type=1326 audit(1777646051.002:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23123 comm="syz.4.4634" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f5a7d99cdd9 code=0x7ffc0000 [ 1436.367346][T18138] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1436.385753][ T29] audit: type=1326 audit(1777646051.002:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23123 comm="syz.4.4634" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7d99cdd9 code=0x7ffc0000 [ 1436.425783][ T29] audit: type=1326 audit(1777646051.002:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23123 comm="syz.4.4634" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7d99cdd9 code=0x7ffc0000 [ 1436.523878][T23141] FAULT_INJECTION: forcing a failure. [ 1436.523878][T23141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1436.537592][T23141] CPU: 0 UID: 0 PID: 23141 Comm: syz.7.4643 Tainted: G L syzkaller #0 PREEMPT(full) [ 1436.537628][T23141] Tainted: [L]=SOFTLOCKUP [ 1436.537635][T23141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1436.537647][T23141] Call Trace: [ 1436.537655][T23141] [ 1436.537663][T23141] dump_stack_lvl+0x100/0x190 [ 1436.537699][T23141] should_fail_ex.cold+0x5/0xa [ 1436.537727][T23141] _copy_to_user+0x32/0xd0 [ 1436.537757][T23141] simple_read_from_buffer+0xcb/0x170 [ 1436.537790][T23141] proc_fail_nth_read+0x1af/0x230 [ 1436.537814][T23141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1436.537835][T23141] ? rw_verify_area+0xce/0x6d0 [ 1436.537865][T23141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1436.537884][T23141] vfs_read+0x1e4/0xb30 [ 1436.537907][T23141] ? __pfx_vfs_read+0x10/0x10 [ 1436.537925][T23141] ? __fget_files+0x215/0x3d0 [ 1436.537954][T23141] ? __fget_files+0x21f/0x3d0 [ 1436.537983][T23141] ksys_read+0x12a/0x250 [ 1436.538002][T23141] ? __pfx_ksys_read+0x10/0x10 [ 1436.538020][T23141] ? rcu_is_watching+0x12/0xc0 [ 1436.538050][T23141] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 1436.538075][T23141] ? rcu_is_watching+0x12/0xc0 [ 1436.538104][T23141] do_syscall_64+0x10b/0xf80 [ 1436.538127][T23141] ? clear_bhb_loop+0x40/0x90 [ 1436.538150][T23141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.538168][T23141] RIP: 0033:0x7f7675b5d60e [ 1436.538187][T23141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1436.538205][T23141] RSP: 002b:00007f7676a1efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1436.538225][T23141] RAX: ffffffffffffffda RBX: 00007f7676a1f6c0 RCX: 00007f7675b5d60e [ 1436.538237][T23141] RDX: 000000000000000f RSI: 00007f7676a1f0a0 RDI: 0000000000000007 [ 1436.538249][T23141] RBP: 00007f7676a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 1436.538259][T23141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1436.538269][T23141] R13: 00007f7675e16218 R14: 00007f7675e16180 R15: 00007ffd3a831398 [ 1436.538294][T23141] [ 1436.769416][ T29] audit: type=1326 audit(1777646051.002:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23123 comm="syz.4.4634" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f5a7d99cdd9 code=0x7ffc0000 [ 1436.808030][ T29] audit: type=1326 audit(1777646051.002:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23123 comm="syz.4.4634" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7d99cdd9 code=0x7ffc0000 [ 1437.640365][ T29] audit: type=1326 audit(1777646051.002:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23123 comm="syz.4.4634" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7d99cdd9 code=0x7ffc0000 [ 1437.778268][T18138] usb 9-1: config 1 interface 0 altsetting 64 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 1437.796569][ T29] audit: type=1326 audit(1777646051.002:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23123 comm="syz.4.4634" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a7d99cdd9 code=0x7ffc0000 [ 1437.841038][ T29] audit: type=1326 audit(1777646051.002:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23123 comm="syz.4.4634" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7d99cdd9 code=0x7ffc0000 [ 1438.088041][T18138] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1438.156773][T18138] usb 9-1: string descriptor 0 read error: -71 [ 1438.191061][T18138] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 1438.218299][T18138] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.243605][T23151] tipc: Enabled bearer , priority 10 [ 1438.281435][T18138] usb 9-1: can't set config #1, error -71 [ 1438.430943][T23155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4644'. [ 1438.621980][ T5774] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 1439.131534][T18138] usb 9-1: USB disconnect, device number 37 [ 1439.357683][ T5774] usb 7-1: device descriptor read/64, error -71 [ 1442.024401][ T5774] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1443.265563][T23183] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4650'. [ 1443.356722][T23176] ubi16: attaching mtd0 [ 1443.723335][T23180] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4651'. [ 1443.792891][T23176] ubi16: scanning is finished [ 1443.797651][T23176] ubi16: empty MTD device detected [ 1443.910403][T23185] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4651'. [ 1444.297958][T23193] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4657'. [ 1444.726586][T23176] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1444.784784][T23176] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1444.814322][T23176] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1444.859687][T23176] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 1444.884585][T23176] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1444.922493][T23176] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1444.954556][T23176] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 365037953 [ 1445.015260][T23176] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1445.070892][T23194] ubi16: background thread "ubi_bgt16d" started, PID 23194 [ 1445.306241][T23199] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4659'. [ 1445.402283][T23199] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4659'. [ 1445.593347][T23205] vxcan0: tx address claim with dlc 0 [ 1446.896300][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1446.896649][ T29] audit: type=1400 audit(1777646062.192:850): avc: denied { append } for pid=23202 comm="syz.9.4656" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1448.273868][T23222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4662'. [ 1448.637034][T23216] tipc: Enabled bearer , priority 0 [ 1448.875014][ T29] audit: type=1400 audit(1777646064.202:851): avc: denied { open } for pid=23225 comm="syz.7.4666" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=111038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1448.977528][T23227] syzkaller0: entered promiscuous mode [ 1449.021582][T23227] syzkaller0: entered allmulticast mode [ 1449.161092][T23235] FAULT_INJECTION: forcing a failure. [ 1449.161092][T23235] name failslab, interval 1, probability 0, space 0, times 0 [ 1449.174968][T23235] CPU: 1 UID: 0 PID: 23235 Comm: syz.9.4668 Tainted: G L syzkaller #0 PREEMPT(full) [ 1449.174992][T23235] Tainted: [L]=SOFTLOCKUP [ 1449.174997][T23235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1449.175004][T23235] Call Trace: [ 1449.175010][T23235] [ 1449.175015][T23235] dump_stack_lvl+0x100/0x190 [ 1449.175038][T23235] should_fail_ex.cold+0x5/0xa [ 1449.175057][T23235] ? tomoyo_encode2+0xfb/0x3c0 [ 1449.175074][T23235] should_failslab+0xc2/0x120 [ 1449.175087][T23235] __kmalloc_noprof+0xe0/0x850 [ 1449.175104][T23235] ? tomoyo_encode2+0xca/0x3c0 [ 1449.175118][T23235] ? tomoyo_encode2+0x59/0x3c0 [ 1449.175134][T23235] tomoyo_encode2+0xfb/0x3c0 [ 1449.175151][T23235] tomoyo_encode+0x29/0x50 [ 1449.175164][T23235] tomoyo_realpath_from_path+0x18c/0x690 [ 1449.175183][T23235] tomoyo_path_number_perm+0x23c/0x580 [ 1449.175195][T23235] ? tomoyo_path_number_perm+0x22e/0x580 [ 1449.175208][T23235] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1449.175225][T23235] ? irqentry_exit+0x246/0x790 [ 1449.175244][T23235] ? lockdep_hardirqs_on+0x78/0x100 [ 1449.175270][T23235] ? hook_file_ioctl_common+0x36/0x410 [ 1449.175290][T23235] ? hook_file_ioctl_common+0x93/0x410 [ 1449.175308][T23235] ? hook_file_ioctl_common+0x149/0x410 [ 1449.175323][T23235] ? __fget_files+0x215/0x3d0 [ 1449.175340][T23235] ? __fget_files+0x21f/0x3d0 [ 1449.175356][T23235] security_file_ioctl+0xd3/0x230 [ 1449.175371][T23235] __x64_sys_ioctl+0xb7/0x210 [ 1449.175385][T23235] do_syscall_64+0x10b/0xf80 [ 1449.175397][T23235] ? clear_bhb_loop+0x40/0x90 [ 1449.175411][T23235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.175423][T23235] RIP: 0033:0x7f3956f9cdd9 [ 1449.175434][T23235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1449.175445][T23235] RSP: 002b:00007f3957de2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1449.175457][T23235] RAX: ffffffffffffffda RBX: 00007f3957216090 RCX: 00007f3956f9cdd9 [ 1449.175464][T23235] RDX: 0000200000000100 RSI: 0000000040045431 RDI: 0000000000000009 [ 1449.175471][T23235] RBP: 00007f3957de2090 R08: 0000000000000000 R09: 0000000000000000 [ 1449.175478][T23235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1449.175484][T23235] R13: 00007f3957216128 R14: 00007f3957216090 R15: 00007fff4a3a3538 [ 1449.175498][T23235] [ 1449.418337][T23235] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1449.429248][T23227] tipc: Resetting bearer [ 1449.649345][T23215] tipc: Resetting bearer [ 1452.271379][ T29] audit: type=1400 audit(1777646067.602:852): avc: denied { accept } for pid=23249 comm="syz.4.4672" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1453.435880][T23261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4675'. [ 1453.567063][T23262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4675'. [ 1455.637320][T23255] syz.9.4673 (23255): drop_caches: 1 [ 1461.337706][T23215] tipc: Disabling bearer [ 1461.353379][ T5617] tipc: Node number set to 2438946382 [ 1462.234906][ T48] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1462.268452][T23288] FAULT_INJECTION: forcing a failure. [ 1462.268452][T23288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1462.269248][ T48] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1462.311833][T23288] CPU: 0 UID: 0 PID: 23288 Comm: syz.4.4681 Tainted: G L syzkaller #0 PREEMPT(full) [ 1462.311868][T23288] Tainted: [L]=SOFTLOCKUP [ 1462.311874][T23288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1462.311886][T23288] Call Trace: [ 1462.311893][T23288] [ 1462.311902][T23288] dump_stack_lvl+0x100/0x190 [ 1462.311937][T23288] should_fail_ex.cold+0x5/0xa [ 1462.311967][T23288] strncpy_from_user+0x3b/0x2d0 [ 1462.311999][T23288] do_getname+0x78/0x390 [ 1462.312032][T23288] do_sys_openat2+0xc5/0x1e0 [ 1462.312058][T23288] ? __pfx_do_sys_openat2+0x10/0x10 [ 1462.312082][T23288] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1462.312110][T23288] ? __fget_files+0x21f/0x3d0 [ 1462.312144][T23288] __x64_sys_openat+0x12d/0x210 [ 1462.312170][T23288] ? __pfx___x64_sys_openat+0x10/0x10 [ 1462.312194][T23288] ? ksys_write+0x1ac/0x250 [ 1462.312217][T23288] ? rcu_is_watching+0x12/0xc0 [ 1462.312250][T23288] do_syscall_64+0x10b/0xf80 [ 1462.312269][T23288] ? clear_bhb_loop+0x40/0x90 [ 1462.312290][T23288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.312308][T23288] RIP: 0033:0x7f5a7d95d60e [ 1462.312325][T23288] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1462.312340][T23288] RSP: 002b:00007f5a7e81eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1462.312359][T23288] RAX: ffffffffffffffda RBX: 00007f5a7e81f6c0 RCX: 00007f5a7d95d60e [ 1462.312368][T23288] RDX: 0000000000000002 RSI: 00007f5a7e81ef90 RDI: ffffffffffffff9c [ 1462.312379][T23288] RBP: 00007f5a7e81f090 R08: 0000000000000000 R09: 0000000000000000 [ 1462.312389][T23288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1462.312397][T23288] R13: 00007f5a7dc16128 R14: 00007f5a7dc16090 R15: 00007ffcad138148 [ 1462.312421][T23288] [ 1462.554457][ T57] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1462.651550][ T48] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1462.766225][T23296] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4682'. [ 1463.687457][ T29] audit: type=1400 audit(1777646079.002:853): avc: denied { getopt } for pid=23298 comm="syz.7.4683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1463.962960][T23307] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4686'. [ 1464.040887][T23307] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4686'. [ 1464.130866][T23307] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4686'. [ 1465.745410][T23320] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4689'. [ 1466.066526][T23331] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4691'. [ 1466.167331][T23163] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1466.220379][T23331] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4691'. [ 1466.256986][T23339] netlink: 157 bytes leftover after parsing attributes in process `syz.8.4695'. [ 1466.347288][T23163] usb 8-1: Using ep0 maxpacket: 16 [ 1466.360990][T23163] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.473122][T23163] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1467.446992][T23163] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1467.456952][T23163] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1467.466784][T23163] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1467.480909][T23163] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1467.627258][T23163] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1467.635357][T23163] usb 8-1: Manufacturer: syz [ 1467.653052][T23163] usb 8-1: config 0 descriptor?? [ 1467.786516][T23354] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4698'. [ 1467.815509][T23354] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4698'. [ 1467.911626][T23360] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4697'. [ 1467.941555][T23360] netlink: 'syz.4.4697': attribute type 10 has an invalid length. [ 1468.228131][T23163] rc_core: IR keymap rc-hauppauge not found [ 1468.293361][T23163] Registered IR keymap rc-empty [ 1468.458316][T23163] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1468.477966][T23163] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1468.812042][T23163] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1468.828695][ T5774] libceph: connect (1)[c::]:6789 error -101 [ 1468.916478][T23163] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input200 [ 1468.934292][ T5774] libceph: mon0 (1)[c::]:6789 connect error [ 1468.998734][T23163] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1469.058178][T23163] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1469.093521][T23163] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1469.127822][T23163] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1469.167548][T23163] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1469.204123][T23163] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1469.227771][ T5774] libceph: connect (1)[c::]:6789 error -101 [ 1469.234916][T23163] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1469.243816][ T5774] libceph: mon0 (1)[c::]:6789 connect error [ 1469.277854][T23163] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1469.287621][T23363] ceph: No mds server is up or the cluster is laggy [ 1469.327679][T23163] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1469.405977][T23163] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1469.445874][T23163] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1469.454893][ T5617] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1469.464329][T23163] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1469.541091][T23163] usb 8-1: USB disconnect, device number 54 [ 1469.706921][ T5617] usb 5-1: config 8 has an invalid interface number: 80 but max is 0 [ 1469.742297][ T5617] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.772747][ T5617] usb 5-1: config 8 has no interface number 0 [ 1469.788539][ T5617] usb 5-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 1469.851394][ T5617] usb 5-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1469.898152][ T5617] usb 5-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1470.052072][ T5617] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1470.062907][ T5617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.178991][ T5617] usb 5-1: NFC: intf ffff8880363c5000 id ffffffff8f7dc900 [ 1472.285024][T23388] 9p: Bad value for 'rfdno' [ 1472.943080][ T29] audit: type=1107 audit(1777646088.082:854): pid=23370 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='W' [ 1475.293507][T23406] fuse: Bad value for 'fd' [ 1476.548369][ T5774] usb 5-1: USB disconnect, device number 7 [ 1476.827322][T23418] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4708'. [ 1476.883779][T23418] netlink: 'syz.6.4708': attribute type 10 has an invalid length. [ 1477.371983][T23424] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4710'. [ 1477.923646][T23430] netlink: 'syz.7.4710': attribute type 10 has an invalid length. [ 1478.041959][T23432] tipc: Enabled bearer , priority 0 [ 1478.051246][T23432] syzkaller0: entered promiscuous mode [ 1478.057541][T23432] syzkaller0: entered allmulticast mode [ 1478.526778][T23432] tipc: Resetting bearer [ 1478.546887][T23431] tipc: Resetting bearer [ 1478.654040][T23431] tipc: Disabling bearer [ 1478.917241][T18138] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 1479.517746][T18138] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1479.570826][T18138] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.707570][T18138] usb 7-1: config 220 has no interface number 2 [ 1479.722658][T18138] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1479.746764][T18138] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1479.759555][T18138] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1479.768469][T18138] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1480.200214][T18138] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1480.238124][T18138] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.258362][T18138] usb 7-1: Product: syz [ 1480.263535][T18138] usb 7-1: Manufacturer: syz [ 1480.270374][T18138] usb 7-1: SerialNumber: syz [ 1480.794913][ T46] kworker/1:1 (46) used greatest stack depth: 16680 bytes left [ 1480.857782][T18138] usb 7-1: selecting invalid altsetting 0 [ 1480.973313][T18138] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1481.066285][T18138] uvcvideo 7-1:220.0: No valid video chain found. [ 1481.104676][T18138] usb 7-1: selecting invalid altsetting 0 [ 1481.126106][T18138] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1481.166522][T18138] usb 7-1: USB disconnect, device number 113 [ 1481.605164][T23442] tmpfs: Bad value for 'mpol' [ 1481.675857][T23442] tmpfs: Unknown parameter 'grPӽWk@Nbquota_i~odesource [ 1481.679749][ T29] audit: type=1400 audit(1777646097.012:855): avc: denied { execute } for pid=23441 comm="syz.4.4715" path="/dev/adsp1" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1485.932953][T23495] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4726'. [ 1485.957728][T23495] netlink: 'syz.8.4726': attribute type 10 has an invalid length. [ 1486.193576][T23495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.200729][T23495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1486.219046][T23495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.226919][T23495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1486.335799][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.413744][T23495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.424614][T23495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.341314][ T29] audit: type=1107 audit(1777646102.592:856): pid=23501 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='W' [ 1490.063704][ T5774] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1490.190749][T23515] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4732'. [ 1490.262404][ T5774] usb 9-1: config 1 interface 0 altsetting 64 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 1490.298258][ T5774] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1490.316534][ T5774] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 1490.326530][ T5774] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.334857][ T5774] usb 9-1: Product: 梱㊘ꏀ賬噃⒄肭ぢ诠軅䞎눉櫫戴༮窬⚗㝀즌᭱겷嬨᭱跮ႇ槁䞱稲栕螧㛇镗辜螦Ᏸ폰媈ꏵ┳浓肽磖漖䵄햬ᣏ쫝錻䛩닉쬠膽뉄㛶贲❛ᄯꇏ釵㢘郐Ŀ᳝孽螝∁离窨䖍ਭș琟뾵ၓ鑰嗞㘁否霸 [ 1490.384685][ T5774] usb 9-1: SerialNumber: У [ 1490.857989][ T29] audit: type=1400 audit(1777646106.182:857): avc: denied { ioctl } for pid=23518 comm="syz.6.4733" path="socket:[110344]" dev="sockfs" ino=110344 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1491.039957][ T5774] usbhid 9-1:1.0: can't add hid device: -71 [ 1491.048526][ T5774] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 1491.063697][ T5774] usb 9-1: USB disconnect, device number 38 [ 1491.458425][ T802] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1491.522545][T23529] loop8: detected capacity change from 0 to 8 [ 1491.538881][T23529] Dev loop8: unable to read RDB block 8 [ 1491.617244][ T802] usb 10-1: Using ep0 maxpacket: 8 [ 1491.628017][ T802] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1491.643770][T23529] loop8: unable to read partition table [ 1491.654298][ T802] usb 10-1: config 4 has an invalid interface number: 147 but max is 0 [ 1491.673247][T23529] loop8: partition table beyond EOD, truncated [ 1491.674546][ T802] usb 10-1: config 4 has an invalid descriptor of length 20, skipping remainder of the config [ 1491.681343][T23529] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1491.740275][ T802] usb 10-1: config 4 has no interface number 0 [ 1491.754641][ T802] usb 10-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1491.767580][ T802] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.779937][ T802] usb 10-1: Product: syz [ 1491.784372][ T802] usb 10-1: Manufacturer: syz [ 1491.789909][ T802] usb 10-1: SerialNumber: syz [ 1492.099039][ T802] uvcvideo 10-1:4.147: Found multiple Units with ID 6 [ 1492.112672][ T802] uvcvideo 10-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 1492.121505][ T802] uvcvideo 10-1:4.147: No valid video chain found. [ 1492.441930][ T29] audit: type=1400 audit(1777646107.602:858): avc: denied { getopt } for pid=23532 comm="syz.4.4737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1492.489298][ T802] usb 10-1: USB disconnect, device number 35 [ 1493.326972][T23541] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4738'. [ 1494.056410][T23541] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4738'. [ 1494.208279][T17585] usb 9-1: new full-speed USB device number 39 using dummy_hcd [ 1494.748508][T23565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4744'. [ 1494.799790][T23566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4744'. [ 1494.814544][T17585] usb 9-1: config 0 has no interfaces? [ 1494.931177][T17585] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1495.066484][T17585] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.341538][T17585] usb 9-1: config 0 descriptor?? [ 1495.681072][ T5774] usb 9-1: USB disconnect, device number 39 [ 1496.460621][T23579] netlink: 'syz.4.4748': attribute type 10 has an invalid length. [ 1496.714512][T23577] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4747'. [ 1496.795515][T23582] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4747'. [ 1497.401229][T15874] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1497.419579][ T5737] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1497.581939][T15874] usb 8-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 1497.608067][ T5737] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1497.628250][T15874] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1497.645391][ T5737] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1497.675082][T15874] usb 8-1: string descriptor 0 read error: -22 [ 1497.696485][T15874] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1497.707353][ T5737] usb 10-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1497.777313][ T5737] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.785879][T15874] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.802464][ T5737] usb 10-1: config 0 descriptor?? [ 1498.006503][T23598] 9p: Bad value for 'rfdno' [ 1498.556365][ T29] audit: type=1400 audit(1777646113.882:859): avc: denied { mount } for pid=23586 comm="syz.9.4751" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1498.817867][ T5737] usbhid 10-1:0.0: can't add hid device: -71 [ 1498.830409][ T5737] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1498.860748][ T5737] usb 10-1: USB disconnect, device number 36 [ 1498.877749][T23584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1498.920401][T23584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1500.330488][T15874] usbhid 8-1:1.0: can't add hid device: -71 [ 1500.365324][T15874] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 1500.425933][T15874] usb 8-1: USB disconnect, device number 55 [ 1501.162818][T23621] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4759'. [ 1502.737333][T23631] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4759'. [ 1504.312403][T23652] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4765'. [ 1504.511546][T23659] comedi comedi2: comedi_config --init_data is deprecated [ 1505.049081][T23652] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4765'. [ 1505.367776][ T29] audit: type=1400 audit(1777646120.532:860): avc: denied { ioctl } for pid=23662 comm="syz.6.4770" path="socket:[110562]" dev="sockfs" ino=110562 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1505.696479][T23669] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4769'. [ 1506.163456][T23669] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4769'. [ 1509.501542][T23700] netlink: 'syz.7.4778': attribute type 1 has an invalid length. [ 1509.588857][ T29] audit: type=1400 audit(1777646124.922:861): avc: denied { ioctl } for pid=23705 comm="syz.6.4780" path="socket:[112325]" dev="sockfs" ino=112325 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1509.660925][T23708] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4778'. [ 1509.770912][T23711] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4780'. [ 1509.835396][T23710] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4779'. [ 1509.847422][T23711] netlink: 'syz.6.4780': attribute type 1 has an invalid length. [ 1509.939125][T23704] bond1: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 1509.995463][T23709] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4780'. [ 1510.086808][T23714] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4779'. [ 1510.107226][T23163] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1510.231934][T23708] bond1 (unregistering): (slave ip6gretap0): Releasing backup interface [ 1510.287489][T23163] usb 8-1: Using ep0 maxpacket: 16 [ 1510.318005][T23163] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1510.338799][T23708] bond1 (unregistering): Released all slaves [ 1510.369578][T23163] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1510.406983][T23163] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 1510.619381][T23163] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1510.747901][T23163] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1511.038383][T23163] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1511.067395][T23163] usb 8-1: Manufacturer: syz [ 1511.096157][T23163] usb 8-1: config 0 descriptor?? [ 1514.008618][T23739] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4785'. [ 1514.698199][T23163] rc_core: IR keymap rc-hauppauge not found [ 1514.737868][T23163] Registered IR keymap rc-empty [ 1514.767434][T23163] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1514.829046][T23163] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1514.881277][T23163] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1514.944637][T23163] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input201 [ 1515.012583][T23163] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1515.060870][T23163] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1515.117552][T23163] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1515.169705][T23163] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1515.217602][T23163] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1515.260812][T23163] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1515.307576][T23163] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1515.350853][T23163] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1515.398416][T23163] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1515.437909][T23163] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1515.488088][T23163] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 1515.538446][T23163] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1515.605937][T23163] usb 8-1: USB disconnect, device number 56 [ 1516.058838][T23769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4794'. [ 1518.419567][T17585] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 1518.577368][T17585] usb 7-1: device descriptor read/64, error -71 [ 1518.907432][T17585] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 1519.137386][T17585] usb 7-1: device descriptor read/64, error -71 [ 1519.211149][T23801] usb usb8: usbfs: interface 0 claimed by hub while 'syz.7.4802' sets config #2 [ 1519.247625][T17585] usb usb7-port1: attempt power cycle [ 1519.647449][T17585] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 1519.689614][T17585] usb 7-1: device descriptor read/8, error -71 [ 1520.047442][T17585] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 1520.167671][T17585] usb 7-1: device descriptor read/8, error -71 [ 1520.297580][T17585] usb usb7-port1: unable to enumerate USB device [ 1523.117483][T23827] 9p: Bad value for 'rfdno' [ 1527.674729][T23846] fuse: Invalid rootmode [ 1527.933629][T23163] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1529.851548][T23163] usb 8-1: config 1 interface 0 altsetting 64 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 1529.895474][T23163] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1529.920734][T23163] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 1529.952027][T23163] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.983331][T23163] usb 8-1: Product: 梱㊘ꏀ賬噃⒄肭ぢ诠軅䞎눉櫫戴༮窬⚗㝀즌᭱겷嬨᭱跮ႇ槁䞱稲栕螧㛇镗辜螦Ᏸ폰媈ꏵ┳浓肽磖漖䵄햬ᣏ쫝錻䛩닉쬠膽뉄㛶贲❛ᄯꇏ釵㢘郐Ŀ᳝孽螝∁离窨䖍ਭș琟뾵ၓ鑰嗞㘁否霸 [ 1530.070904][T23163] usb 8-1: SerialNumber: У [ 1530.077478][T15874] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 1530.218175][T23163] usbhid 8-1:1.0: can't add hid device: -71 [ 1530.233530][T15874] usb 7-1: device descriptor read/64, error -71 [ 1530.239621][T23163] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 1530.285138][T23866] FAULT_INJECTION: forcing a failure. [ 1530.285138][T23866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1530.297573][T23163] usb 8-1: USB disconnect, device number 57 [ 1530.299735][T23866] CPU: 1 UID: 0 PID: 23866 Comm: syz.7.4820 Tainted: G L syzkaller #0 PREEMPT(full) [ 1530.299763][T23866] Tainted: [L]=SOFTLOCKUP [ 1530.299768][T23866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1530.299779][T23866] Call Trace: [ 1530.299786][T23866] [ 1530.299792][T23866] dump_stack_lvl+0x100/0x190 [ 1530.299829][T23866] should_fail_ex.cold+0x5/0xa [ 1530.299857][T23866] _copy_to_user+0x32/0xd0 [ 1530.299887][T23866] simple_read_from_buffer+0xcb/0x170 [ 1530.299913][T23866] proc_fail_nth_read+0x1af/0x230 [ 1530.299934][T23866] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1530.299954][T23866] ? rw_verify_area+0xce/0x6d0 [ 1530.299981][T23866] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1530.299998][T23866] vfs_read+0x1e4/0xb30 [ 1530.300020][T23866] ? __pfx_vfs_read+0x10/0x10 [ 1530.300037][T23866] ? __fget_files+0x215/0x3d0 [ 1530.300063][T23866] ? __fget_files+0x21f/0x3d0 [ 1530.300089][T23866] ksys_read+0x12a/0x250 [ 1530.300106][T23866] ? __pfx_ksys_read+0x10/0x10 [ 1530.300125][T23866] ? rcu_is_watching+0x12/0xc0 [ 1530.300156][T23866] do_syscall_64+0x10b/0xf80 [ 1530.300179][T23866] ? clear_bhb_loop+0x40/0x90 [ 1530.300202][T23866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1530.300219][T23866] RIP: 0033:0x7f7675b5d60e [ 1530.300236][T23866] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1530.300251][T23866] RSP: 002b:00007f7676a60fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1530.300269][T23866] RAX: ffffffffffffffda RBX: 00007f7676a616c0 RCX: 00007f7675b5d60e [ 1530.300280][T23866] RDX: 000000000000000f RSI: 00007f7676a610a0 RDI: 0000000000000004 [ 1530.300289][T23866] RBP: 00007f7676a61090 R08: 0000000000000000 R09: 0000000000000000 [ 1530.300298][T23866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1530.300307][T23866] R13: 00007f7675e16038 R14: 00007f7675e15fa0 R15: 00007ffd3a831398 [ 1530.300330][T23866] [ 1530.499934][T15874] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 1530.568730][ T802] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 1531.539998][T23874] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1531.558202][T15874] usb 7-1: device descriptor read/64, error -71 [ 1531.616140][ T802] usb 9-1: config 8 has an invalid interface number: 80 but max is 0 [ 1531.655237][ T802] usb 9-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1531.669488][ T802] usb 9-1: config 8 has no interface number 0 [ 1531.675705][ T802] usb 9-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 1531.698715][ T802] usb 9-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1531.729042][ T802] usb 9-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1531.767166][ T802] usb 9-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 1531.872511][T15874] usb usb7-port1: attempt power cycle [ 1532.238123][ T29] audit: type=1400 audit(1777646147.322:862): avc: denied { remount } for pid=23880 comm="syz.7.4824" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1532.250299][T22574] Bluetooth: hci3: Dropping invalid advertising data [ 1532.283565][T22574] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1532.287914][ T802] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.869780][ T802] usb 9-1: NFC: intf ffff888075577000 id ffffffff8f7dc900 [ 1532.975467][ T29] audit: type=1400 audit(1777646148.302:863): avc: denied { write } for pid=23891 comm="syz.9.4826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1533.500514][T23163] usb 9-1: USB disconnect, device number 40 [ 1535.768434][T23916] 9p: Bad value for 'rfdno' [ 1536.865336][T23921] Bluetooth: MGMT ver 1.23 [ 1536.991588][T23925] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4833'. [ 1537.570507][T15874] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1537.721347][T23932] overlayfs: missing 'lowerdir' [ 1537.857498][T15874] usb 5-1: device descriptor read/64, error -71 [ 1538.690616][T23922] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4833'. [ 1540.050761][T15874] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1540.355797][T23948] fuse: Bad value for 'fd' [ 1540.681725][T23951] netlink: 'syz.6.4840': attribute type 10 has an invalid length. [ 1543.142758][T23967] 9p: Bad value for 'rfdno' [ 1544.067848][T23970] fuse: Unknown parameter 'use00000000000000000000' [ 1546.797582][T23991] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4849'. [ 1547.003636][T23991] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4849'. [ 1547.314270][T24003] netlink: 'syz.7.4852': attribute type 10 has an invalid length. [ 1547.346019][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.586821][T24009] FAULT_INJECTION: forcing a failure. [ 1547.586821][T24009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1547.612516][T24009] CPU: 0 UID: 0 PID: 24009 Comm: syz.8.4855 Tainted: G L syzkaller #0 PREEMPT(full) [ 1547.612542][T24009] Tainted: [L]=SOFTLOCKUP [ 1547.612546][T24009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1547.612554][T24009] Call Trace: [ 1547.612559][T24009] [ 1547.612568][T24009] dump_stack_lvl+0x100/0x190 [ 1547.612591][T24009] should_fail_ex.cold+0x5/0xa [ 1547.612613][T24009] _copy_from_user+0x2e/0xd0 [ 1547.612632][T24009] msr_io+0x93/0x480 [ 1547.612651][T24009] ? __pfx_do_get_msr+0x10/0x10 [ 1547.612670][T24009] ? __pfx_msr_io+0x10/0x10 [ 1547.612686][T24009] ? __pfx_widen_string+0x10/0x10 [ 1547.612704][T24009] ? __kernel_text_address+0xd/0x30 [ 1547.612726][T24009] kvm_arch_vcpu_ioctl+0x1950/0x5730 [ 1547.612743][T24009] ? kvm_arch_vcpu_ioctl+0x1928/0x5730 [ 1547.612763][T24009] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 1547.612780][T24009] ? __pfx_stack_trace_save+0x10/0x10 [ 1547.612794][T24009] ? stack_depot_save_flags+0x27/0x9d0 [ 1547.612817][T24009] ? __lock_acquire+0x4a5/0x2630 [ 1547.612832][T24009] ? tomoyo_path_number_perm+0x46d/0x580 [ 1547.612851][T24009] ? __lock_acquire+0x4a5/0x2630 [ 1547.612865][T24009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.612882][T24009] ? lock_acquire+0x1b1/0x370 [ 1547.612898][T24009] ? rcu_is_watching+0x12/0xc0 [ 1547.612915][T24009] ? trace_contention_end+0x122/0x170 [ 1547.612932][T24009] ? __mutex_lock+0x26d/0x1b10 [ 1547.612946][T24009] ? kvm_vcpu_ioctl+0x322/0x1720 [ 1547.612962][T24009] ? __pfx___mutex_lock+0x10/0x10 [ 1547.612975][T24009] ? kasan_quarantine_put+0x104/0x240 [ 1547.612997][T24009] ? tomoyo_path_number_perm+0x28f/0x580 [ 1547.613012][T24009] ? tomoyo_path_number_perm+0x188/0x580 [ 1547.613026][T24009] ? kvm_vcpu_ioctl+0x8a0/0x1720 [ 1547.613037][T24009] kvm_vcpu_ioctl+0x8a0/0x1720 [ 1547.613051][T24009] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1547.613063][T24009] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1547.613079][T24009] ? do_vfs_ioctl+0x226/0x13e0 [ 1547.613091][T24009] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1547.613103][T24009] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1547.613123][T24009] ? __fget_files+0x215/0x3d0 [ 1547.613136][T24009] ? hook_file_ioctl_common+0x149/0x410 [ 1547.613162][T24009] ? selinux_file_ioctl+0x13b/0x290 [ 1547.613175][T24009] ? selinux_file_ioctl+0xb6/0x290 [ 1547.613189][T24009] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1547.613202][T24009] __x64_sys_ioctl+0x18e/0x210 [ 1547.613215][T24009] do_syscall_64+0x10b/0xf80 [ 1547.613227][T24009] ? clear_bhb_loop+0x40/0x90 [ 1547.613240][T24009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.613252][T24009] RIP: 0033:0x7f816699cdd9 [ 1547.613264][T24009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1547.613275][T24009] RSP: 002b:00007f8164bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1547.613288][T24009] RAX: ffffffffffffffda RBX: 00007f8166c15fa0 RCX: 00007f816699cdd9 [ 1547.613295][T24009] RDX: 0000200000000040 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 1547.613302][T24009] RBP: 00007f8164bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1547.613308][T24009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1547.613315][T24009] R13: 00007f8166c16038 R14: 00007f8166c15fa0 R15: 00007fff81660c18 [ 1547.613331][T24009] [ 1547.989718][T23163] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 1548.009037][T15874] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1548.151095][T15874] usb 5-1: device descriptor read/64, error -71 [ 1548.671123][T23163] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 1548.686710][T23163] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1548.731454][T23163] usb 7-1: string descriptor 0 read error: -22 [ 1548.761333][T23163] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1548.796285][T23163] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.797421][T15874] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1548.957535][T15874] usb 5-1: device descriptor read/64, error -71 [ 1549.123163][T15874] usb usb5-port1: attempt power cycle [ 1549.546527][T15874] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1549.751587][T24020] 9p: Bad value for 'rfdno' [ 1550.238321][T15874] usb 5-1: device descriptor read/8, error -71 [ 1550.402003][T23995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1550.460509][T23995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1550.517994][T15874] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1551.634514][T23163] usbhid 7-1:1.0: can't add hid device: -71 [ 1551.661131][T23163] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1551.690834][T23163] usb 7-1: USB disconnect, device number 121 [ 1551.707315][T15874] usb 5-1: device not accepting address 13, error -71 [ 1551.707326][T18138] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1551.747457][T24033] fuse: Unknown parameter 'use00000000000000000000' [ 1551.760164][T15874] usb usb5-port1: unable to enumerate USB device [ 1552.245077][T18138] usb 9-1: config 1 interface 0 altsetting 64 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 1552.258820][T18138] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1552.268162][T18138] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 1552.284243][T18138] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.309113][T18138] usb 9-1: Product: 梱㊘ꏀ賬噃⒄肭ぢ诠軅䞎눉櫫戴༮窬⚗㝀즌᭱겷嬨᭱跮ႇ槁䞱稲栕螧㛇镗辜螦Ᏸ폰媈ꏵ┳浓肽磖漖䵄햬ᣏ쫝錻䛩닉쬠膽뉄㛶贲❛ᄯꇏ釵㢘郐Ŀ᳝孽螝∁离窨䖍ਭș琟뾵ၓ鑰嗞㘁否霸 [ 1552.384245][T18138] usb 9-1: SerialNumber: У [ 1553.634453][T24049] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4865'. [ 1554.941123][T18138] usbhid 9-1:1.0: can't add hid device: -71 [ 1554.966106][ T29] audit: type=1400 audit(1777646170.292:864): avc: denied { setopt } for pid=24052 comm="syz.6.4868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1554.988275][T18138] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 1555.026552][T18138] usb 9-1: USB disconnect, device number 41 [ 1555.998797][T15874] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 1556.661749][T15874] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1556.968186][T15874] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1557.151285][T15874] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1557.202054][T15874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.265425][T15874] usb 7-1: config 0 descriptor?? [ 1558.324840][T15874] usb 7-1: string descriptor 0 read error: -71 [ 1558.389361][T15874] usb 7-1: USB disconnect, device number 122 [ 1559.127386][ T5617] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1559.307325][ T5617] usb 5-1: Using ep0 maxpacket: 16 [ 1559.326089][ T5617] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1559.388561][ T5617] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1559.456655][ T5617] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1559.492525][ T5617] usb 5-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 1559.541169][ T5617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.602346][ T5617] usb 5-1: config 0 descriptor?? [ 1560.332503][T24095] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4877'. [ 1561.222902][ T5617] usbhid 5-1:0.0: can't add hid device: -71 [ 1561.250224][ T5617] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1561.324741][ T5617] usb 5-1: USB disconnect, device number 14 [ 1561.371355][T24095] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4877'. [ 1562.768543][T18138] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1563.871284][T18138] usb 10-1: config 1 interface 0 altsetting 64 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 1564.036367][T18138] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1564.064364][T18138] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 1564.086734][T18138] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.114752][T18138] usb 10-1: Product: 梱㊘ꏀ賬噃⒄肭ぢ诠軅䞎눉櫫戴༮窬⚗㝀즌᭱겷嬨᭱跮ႇ槁䞱稲栕螧㛇镗辜螦Ᏸ폰媈ꏵ┳浓肽磖漖䵄햬ᣏ쫝錻䛩닉쬠膽뉄㛶贲❛ᄯꇏ釵㢘郐Ŀ᳝孽螝∁离窨䖍ਭș琟뾵ၓ鑰嗞㘁否霸 [ 1564.200425][T18138] usb 10-1: SerialNumber: У [ 1564.255145][T24121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4882'. [ 1564.274620][T24119] ceph: No mds server is up or the cluster is laggy [ 1564.333081][T23163] libceph: connect (1)[c::]:6789 error -101 [ 1564.345316][T24127] netlink: 156 bytes leftover after parsing attributes in process `syz.8.4883'. [ 1564.363187][T24128] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4882'. [ 1564.379170][T23163] libceph: mon0 (1)[c::]:6789 connect error [ 1564.422205][T24129] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.4884' sets config #2 [ 1564.573070][T18138] usbhid 10-1:1.0: can't add hid device: -71 [ 1564.593540][T18138] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 1564.657708][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1564.668934][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1564.689822][T18138] usb 10-1: USB disconnect, device number 37 [ 1565.020623][T24136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4885'. [ 1565.128893][T24136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4885'. [ 1565.265732][ T29] audit: type=1400 audit(1777646180.572:865): avc: denied { shutdown } for pid=24118 comm="syz.8.4883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1566.403187][T22574] Bluetooth: hci3: Dropping invalid advertising data [ 1566.410236][T22574] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1567.187371][ T5737] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1567.471790][ T5737] usb 9-1: device descriptor read/64, error -71 [ 1567.784873][T24151] usb usb8: usbfs: interface 0 claimed by hub while 'syz.9.4889' sets config #2 [ 1567.957250][ T5737] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1568.147371][ T5737] usb 9-1: device descriptor read/64, error -71 [ 1568.287923][ T5737] usb usb9-port1: attempt power cycle [ 1674.004711][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1674.011744][ C0] rcu: 1-...!: (0 ticks this GP) idle=8e24/0/0x1 softirq=167814/167814 fqs=0 [ 1674.022283][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P24135/1:b..l [ 1674.030317][ C0] rcu: (detected by 0, t=10506 jiffies, g=223101, q=219 ncpus=2) [ 1674.038128][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1674.038187][ C1] NMI backtrace for cpu 1 [ 1674.038214][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1674.038235][ C1] Tainted: [L]=SOFTLOCKUP [ 1674.038241][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1674.038252][ C1] RIP: 0010:__remove_hrtimer+0x226/0x440 [ 1674.038291][ C1] Code: 74 28 e8 7d 2e 14 00 49 8d 7f 28 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 e1 01 00 00 49 8b 47 28 <48> 89 44 24 08 e8 50 2e 14 00 48 8d 7d 48 48 8b 44 24 08 48 ba 00 [ 1674.038306][ C1] RSP: 0000:ffffc90000a08e40 EFLAGS: 00000046 [ 1674.038320][ C1] RAX: 7fffffffffffffff RBX: ffff888077c0c300 RCX: 0000000000000001 [ 1674.038330][ C1] RDX: 1ffff110170a50cc RSI: ffffffff81f45cec RDI: ffff8880b8528660 [ 1674.038340][ C1] RBP: ffff8880b8528600 R08: 0000000000000005 R09: 000000000000001f [ 1674.038350][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 1674.038359][ C1] R13: ffff8880b85284c0 R14: 0000000000000000 R15: 0000000000000000 [ 1674.038368][ C1] FS: 0000000000000000(0000) GS:ffff888124476000(0000) knlGS:0000000000000000 [ 1674.038384][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1674.038394][ C1] CR2: 00002000000b8030 CR3: 000000003e571000 CR4: 00000000003526f0 [ 1674.038404][ C1] Call Trace: [ 1674.038412][ C1] [ 1674.038424][ C1] __hrtimer_run_queues+0x359/0xa00 [ 1674.038453][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1674.038472][ C1] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 1674.038498][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1674.038522][ C1] [ 1674.038527][ C1] [ 1674.038532][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1674.038551][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1674.038570][ C1] Code: 66 93 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 a0 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1674.038582][ C1] RSP: 0000:ffffc90000197df0 EFLAGS: 00000246 [ 1674.038594][ C1] RAX: 0000000005f5184d RBX: ffff88801e2c2500 RCX: ffffffff8b89f045 [ 1674.038603][ C1] RDX: 0000000000000000 RSI: ffffffff8df1f719 RDI: ffffffff8c1c3500 [ 1674.038612][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 1674.038621][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 1674.038629][ C1] R13: ffffed1003c584a0 R14: 0000000000000001 R15: ffffffff90d79350 [ 1674.038642][ C1] ? ct_kernel_exit+0x125/0x180 [ 1674.038662][ C1] default_idle+0x9/0x10 [ 1674.038678][ C1] default_idle_call+0x6c/0xb0 [ 1674.038695][ C1] do_idle+0x464/0x590 [ 1674.038713][ C1] ? __pfx_do_idle+0x10/0x10 [ 1674.038730][ C1] ? finish_task_switch.isra.0+0x152/0x1010 [ 1674.038749][ C1] cpu_startup_entry+0x4f/0x60 [ 1674.038763][ C1] start_secondary+0x21d/0x2d0 [ 1674.038779][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1674.038797][ C1] common_startup_64+0x13e/0x148 [ 1674.038826][ C1] [ 1674.039153][ C0] task:syz.4.4885 state:R running task stack:26024 pid:24135 tgid:24133 ppid:14837 task_flags:0x400040 flags:0x00080002 [ 1674.343411][ C0] Call Trace: [ 1674.346681][ C0] [ 1674.349785][ C0] __schedule+0x10e9/0x6820 [ 1674.354296][ C0] ? page_table_check_set+0x477/0x920 [ 1674.359668][ C0] ? page_table_check_set+0x477/0x920 [ 1674.365039][ C0] ? __pfx___schedule+0x10/0x10 [ 1674.369885][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1674.375327][ C0] preempt_schedule_common+0x42/0xc0 [ 1674.380609][ C0] preempt_schedule_thunk+0x16/0x30 [ 1674.385803][ C0] _raw_spin_unlock+0x3e/0x50 [ 1674.390479][ C0] do_wp_page+0x13d2/0x4350 [ 1674.394995][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 1674.399845][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1674.405255][ C0] __handle_mm_fault+0x1ab6/0x2a00 [ 1674.410369][ C0] ? mt_find+0x45e/0x8e0 [ 1674.414618][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1674.420071][ C0] ? __pfx_mt_find+0x10/0x10 [ 1674.424673][ C0] ? find_vma+0xbf/0x140 [ 1674.428916][ C0] ? __pfx_find_vma+0x10/0x10 [ 1674.433590][ C0] handle_mm_fault+0x36d/0xa20 [ 1674.438357][ C0] do_user_addr_fault+0x74c/0x12f0 [ 1674.443475][ C0] ? trace_page_fault_kernel+0x7a/0x200 [ 1674.449019][ C0] exc_page_fault+0x6f/0xd0 [ 1674.453519][ C0] asm_exc_page_fault+0x26/0x30 [ 1674.458363][ C0] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 1674.464089][ C0] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 c7 d7 03 00 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1674.483687][ C0] RSP: 0000:ffffc900032179d8 EFLAGS: 00050246 [ 1674.489745][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000003b4030 [ 1674.497791][ C0] RDX: 0000000000080000 RSI: ffffffff895561c1 RDI: ffff888066c1a500 [ 1674.505750][ C0] RBP: ffffc90003217d78 R08: 0000000000000005 R09: 0000000000000000 [ 1674.513716][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 1674.521674][ C0] R13: 00002000003b4000 R14: ffffc90003217dbc R15: 0000000000000002 [ 1674.529642][ C0] ? ____sys_recvmsg+0x2e1/0x640 [ 1674.534585][ C0] ____sys_recvmsg+0x2ec/0x640 [ 1674.539346][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1674.544895][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1674.550185][ C0] ? rcu_is_watching+0x12/0xc0 [ 1674.554950][ C0] ? ___sys_recvmsg+0x177/0x1a0 [ 1674.559797][ C0] ? kfree+0x1dd/0x6c0 [ 1674.563867][ C0] ___sys_recvmsg+0x16a/0x1a0 [ 1674.568540][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1674.573749][ C0] ? __pfx___might_resched+0x10/0x10 [ 1674.579039][ C0] do_recvmmsg+0x301/0x760 [ 1674.583455][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1674.588397][ C0] ? irqentry_exit+0x246/0x790 [ 1674.593153][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1674.598356][ C0] ? kcov_ioctl+0x16a/0x720 [ 1674.602873][ C0] ? rcu_is_watching+0x12/0xc0 [ 1674.607659][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 1674.612718][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1674.618301][ C0] ? kcov_ioctl+0x16a/0x720 [ 1674.622834][ C0] ? rcu_is_watching+0x12/0xc0 [ 1674.627612][ C0] do_syscall_64+0x10b/0xf80 [ 1674.632206][ C0] ? clear_bhb_loop+0x40/0x90 [ 1674.636884][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.642773][ C0] RIP: 0033:0x7f5a7d99cdd9 [ 1674.647179][ C0] RSP: 002b:00007f5a7e81f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1674.655677][ C0] RAX: ffffffffffffffda RBX: 00007f5a7dc16090 RCX: 00007f5a7d99cdd9 [ 1674.663642][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1674.671623][ C0] RBP: 00007f5a7da32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1674.679593][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1674.687562][ C0] R13: 00007f5a7dc16128 R14: 00007f5a7dc16090 R15: 00007ffcad138148 [ 1674.695552][ C0] [ 1674.698587][ C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g223101 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1674.709906][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1674.719871][ C0] rcu: RCU grace-period kthread stack dump: [ 1674.725744][ C0] task:rcu_preempt state:R running task stack:26472 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1674.739274][ C0] Call Trace: [ 1674.742555][ C0] [ 1674.745483][ C0] __schedule+0x10e9/0x6820 [ 1674.750013][ C0] ? __pfx___schedule+0x10/0x10 [ 1674.754863][ C0] ? find_held_lock+0x2b/0x80 [ 1674.759534][ C0] ? schedule+0x2bf/0x390 [ 1674.763860][ C0] schedule+0xdd/0x390 [ 1674.767921][ C0] schedule_timeout+0x127/0x280 [ 1674.772772][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1674.778154][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1674.783438][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1674.789235][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1674.794695][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1674.799459][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1674.804749][ C0] ? prepare_to_swait_event+0xae/0x4a0 [ 1674.810201][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1674.815134][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1674.820326][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1674.826124][ C0] rcu_gp_kthread+0x179/0x230 [ 1674.830794][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1674.835985][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1674.841785][ C0] ? __kthread_parkme+0x18c/0x230 [ 1674.846809][ C0] ? kthread+0x13a/0x450 [ 1674.851046][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1674.856236][ C0] kthread+0x370/0x450 [ 1674.860303][ C0] ? __pfx_kthread+0x10/0x10 [ 1674.864886][ C0] ret_from_fork+0x72b/0xd50 [ 1674.869476][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1674.874591][ C0] ? __switch_to+0x800/0x1100 [ 1674.879267][ C0] ? __pfx_kthread+0x10/0x10 [ 1674.883861][ C0] ret_from_fork_asm+0x1a/0x30 [ 1674.888637][ C0] [ 1674.891661][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1674.897976][ C0] CPU: 0 UID: 0 PID: 24162 Comm: syz.6.4892 Tainted: G L syzkaller #0 PREEMPT(full) [ 1674.908990][ C0] Tainted: [L]=SOFTLOCKUP [ 1674.913391][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1674.923548][ C0] RIP: 0010:smp_call_function_many_cond+0x589/0x1700 [ 1674.930303][ C0] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 89 7c 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31 [ 1674.949954][ C0] RSP: 0018:ffffc9000357fa00 EFLAGS: 00000246 [ 1674.956034][ C0] RAX: 0000000000080000 RBX: 0000000000000001 RCX: ffffc900119c2000 [ 1674.963998][ C0] RDX: 0000000000080000 RSI: ffffffff81fc0f17 RDI: ffff88803e0ba500 [ 1674.971991][ C0] RBP: ffff8880b8540f40 R08: 0000000000000005 R09: 0000000000000000 [ 1674.979951][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1674.987908][ C0] R13: ffffed10170a81e9 R14: 0000000000000001 R15: ffff8880b843c5c0 [ 1674.995866][ C0] FS: 00007fc9b1fa86c0(0000) GS:ffff888124376000(0000) knlGS:0000000000000000 [ 1675.004786][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1675.011367][ C0] CR2: 0000001b34923ffc CR3: 000000003a1cc000 CR4: 00000000003526f0 [ 1675.019328][ C0] Call Trace: [ 1675.022607][ C0] [ 1675.025546][ C0] ? __pfx_retrigger_next_event+0x10/0x10 [ 1675.031278][ C0] ? clock_was_set+0x1c3/0x870 [ 1675.036039][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1675.042370][ C0] ? mark_held_locks+0x40/0x70 [ 1675.047130][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1675.052932][ C0] clock_was_set+0x62b/0x870 [ 1675.057530][ C0] ? __pfx_clock_was_set+0x10/0x10 [ 1675.062640][ C0] ? futex_wake+0x456/0x530 [ 1675.067144][ C0] do_adjtimex+0x302/0x370 [ 1675.071560][ C0] ? __pfx_do_adjtimex+0x10/0x10 [ 1675.076510][ C0] ? __pfx_posix_clock_realtime_adj+0x10/0x10 [ 1675.082576][ C0] __do_sys_clock_adjtime+0x177/0x290 [ 1675.087945][ C0] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 1675.093839][ C0] ? __pfx_do_futex+0x10/0x10 [ 1675.098512][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 1675.103725][ C0] ? rcu_is_watching+0x12/0xc0 [ 1675.108496][ C0] do_syscall_64+0x10b/0xf80 [ 1675.113093][ C0] ? clear_bhb_loop+0x40/0x90 [ 1675.117767][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.123653][ C0] RIP: 0033:0x7fc9b119cdd9 [ 1675.128069][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1675.147666][ C0] RSP: 002b:00007fc9b1fa8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 1675.156088][ C0] RAX: ffffffffffffffda RBX: 00007fc9b1415fa0 RCX: 00007fc9b119cdd9 [ 1675.164046][ C0] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000000 [ 1675.172007][ C0] RBP: 00007fc9b1232d69 R08: 0000000000000000 R09: 0000000000000000 [ 1675.179965][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1675.187922][ C0] R13: 00007fc9b1416038 R14: 00007fc9b1415fa0 R15: 00007fff8146fea8 [ 1675.195895][ C0]