last executing test programs: 1m2.567463062s ago: executing program 0 (id=3445): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = syz_open_dev$video4linux(&(0x7f0000000200), 0x800000000000004, 0xc0200) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x2, 0x5, 0x6}) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r3, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 1m2.022562084s ago: executing program 0 (id=3446): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_open_dev$video4linux(&(0x7f0000000200), 0x800000000000004, 0xc0200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 1m1.592196792s ago: executing program 0 (id=3447): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x8000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0xff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x34, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_GATEWAY={0x8, 0x1e, @private=0xa010102}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG={0x8}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x840000000002, 0x3, 0xff) getgroups(0x0, 0x0) setpriority(0x2, 0x0, 0x4) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') r4 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000100)=@tipc=@id, 0x80, 0xffffffffffffffff}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf250000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32, @ANYBLOB="b4c90a", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) 58.955023938s ago: executing program 0 (id=3456): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x9, 0x0, &(0x7f00000001c0)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r3, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="2a000000060000000000000000000000010000000000000000000000002000000100"], 0x2a) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0x6, 0x0, 0x969, {0x0, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x2, 0xc000, 0x200000, 0x0, 0x0, 0x2000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) getsockopt$netlink(r5, 0x10e, 0x1, &(0x7f00000000c0)=""/93, &(0x7f0000000140)=0x5d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x1b, 0x2, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 58.340257584s ago: executing program 0 (id=3459): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = syz_usb_connect$cdc_ecm(0x5, 0x5c, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x9, 0x70, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x6, 0x24, 0x6, 0x0, 0x0, "d1"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8, 0xb, 0x83}, [@obex={0x5, 0x24, 0x15, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x3, 0xfe}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x80, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x7, 0xc6}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x4, 0x4, 0x6c, 0x8, 0xa9}, 0x4e, &(0x7f0000000180)={0x5, 0xf, 0x4e, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0xd, 0x4}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x2, 0xf00, 0x2, [0x3f00, 0xf, 0xff00c0, 0x0, 0x0, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x5, 0x5, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "1421289885d11ac34202feeb397ac5da"}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x4c34}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x20, 0x3, 0x73, {0x73, 0x24, "f9eab41b76a18348f5b0ba03b1415d0a7e277d5249b5b7f228cd84ac27016ee9d0d434984b629fb72313950b9ccd089528a597b8b382b9d7354f59f17e3ce64c42f34332b203f5a44037ee9dad19b3c92542f9647fc2da3b41e8729fccadf39c0c354fc06af1ecf5df7987eedd1ca9a6a1"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000440)={0x0, 0x15, 0x81, "8293dfa9c5b9e09b480e009d0051b060795b57b221d5246bcc58b7b11c8d6b73d0526c7240582490cb9a81064aca040c0778724ba09892e6bda2295aefb522fb8b0282c2e969f635c2df01b18a59aac4dd90ee6da4cc119f2ecda138b8f3a878a96db4c26942cc44178e692a67ed7a0d2f6046855827f5d43e95eae3160506c092"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x29) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x2) close(0x4) 57.69592451s ago: executing program 0 (id=3461): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000080)='./file0\x00', 0x400648) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x3, 0x7ffcfffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='\"\x00c\xe28~\x06\vWj\xefn\xfd/\xf8S`\'\x19\xf3H\x9f\xdc\xf1\xa8L\xb9iMB9\x06,\x9ec\xe5\xeb\xac') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1083, 0x1f0) 57.003927547s ago: executing program 32 (id=3461): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000080)='./file0\x00', 0x400648) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x3, 0x7ffcfffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='\"\x00c\xe28~\x06\vWj\xefn\xfd/\xf8S`\'\x19\xf3H\x9f\xdc\xf1\xa8L\xb9iMB9\x06,\x9ec\xe5\xeb\xac') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1083, 0x1f0) 12.359975439s ago: executing program 2 (id=3596): socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x80000018}) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000005c0)={0x48, 0x0, 0x1, 0x70bd26, 0x4000, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x48}, 0x1, 0x0, 0x0, 0x20008004}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x6c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x40, 0xc5, "3e0eadcd7e4aa67da66cd04543b0741862b0dfdfe35655cf3f7da36e8b6925086cb9ffc0cc7c4f0771996b476637e25707929bdd34de5fa268653f72"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) 11.813613297s ago: executing program 2 (id=3600): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@dev, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000005c0)=0xe8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010103, 0x4e20, 0x3, 'sh\x00', 0x11, 0xa7e, 0x70}, 0x2c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="ff93af273af5cf9c2f3b16ca8434780000001000010400"/34, @ANYRES32=0x0, @ANYBLOB="5d5800000000000044001a8040000a8014000700fe8000000000000000000000000000aa14000700fc01000000000000000000000000000014000700"/72], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='{\x00', &(0x7f0000000080)='/@-^#}&\\%\x00', 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @remote}}}, 0x118) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0x4}}, 0xd31, 0x2, 0x8, 0xffffffff, 0x56, 0x7, 0x1d}, &(0x7f0000000200)=0x9c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x8, 0x40080) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x0) 11.780230533s ago: executing program 3 (id=3601): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f80000001600010025bd700003dcdf"], 0xf8}, 0x1, 0x0, 0x0, 0x880}, 0x48000) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xfe33) r3 = socket$kcm(0x2, 0x1, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x32, &(0x7f0000000880)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f00000003c0), 0x8, 0x45, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x2, 0x0, &(0x7f0000000340)) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00'}) sendmmsg$inet(r6, 0x0, 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x38}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000018"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) mknodat$loop(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x6000, 0x0) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_usb_connect(0x2, 0x464, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x82, 0x7, 0xf, 0x10, 0x7}, 0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="050f4400051410048132c1f98b5e1dea19b1f7aa67c2d0dfe80a1003020000050307000b100108360000070100010b10010c040006fd0900050b10010c8000fb03060067682e3549463ddbdb9452ae51f2b1a670411006713e14a58bab08fb6e94c96c10ce19d98d36e9627f8b6e4f09e3b003ba6fb1d37087bc27e9dd282571013d86187a"], 0x2, [{0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="7a03480da8930e5b600f23b1fc48cdd818517fa54adaafc7628a711d1df5a43d8b051d30e4fa3242822932b32cc43cbeced7846c70182aff0d08ed6bf5d2c0c90521ec7309b4bb4315b396bdc890a2634b41c0b320bb915b7c2711b615ec26e2b012b43c6f12a43b2a5a520f54a6574f3bd0a3139f893a3a02b0"]}, {0xf6, &(0x7f00000001c0)=ANY=[@ANYBLOB="f603c8d52943ced6dd605774a3b8be936cbf94194f123dcabe9f15514265d90f6131abe6614298872249d41dc33d0a9987a55d419e433f57f0d66ac4a3525b42bd57593296165acbc375e6d8a76cd0564e038faeecc392d4e325eed597acbbab86ff671ba68cfb2cf0ea43539c9283d4ab2e8d0f51532abade3078f9579252da3ce7437f1328e0334779ed7df508db1d565df45fa6d9447247b8d1d0e13a7d44a118aa5dff01932f3f8c2aba5fede0cdb9428c4923f9fda3e9e187b2d35ba6a4f050a0a66e25c980dd6ac40159a0b6bbfcfe7e380b76acceff01c00f2bd442170b2fdf59da0607018b6579a62e6622e0664bcab226c7"]}]}) 10.76096725s ago: executing program 2 (id=3607): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x81}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x3ed, 0x8, [0x0, 0x6, 0x2, 0x40, 0x7, 0x9, 0x4, 0xf000]}, &(0x7f0000000100)=0x18) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[], 0x7) 10.380013707s ago: executing program 2 (id=3608): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xaa776000) creat(&(0x7f0000000100)='./file0\x00', 0x40) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) unlink(&(0x7f0000000180)='./file0\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000e80)=[{{&(0x7f0000000680)=@xdp, 0x80, &(0x7f0000000980)=[{&(0x7f0000000280)=""/38, 0x26}, {&(0x7f00000003c0)=""/151, 0x97}, {&(0x7f00000007c0)=""/175, 0xaf}, {&(0x7f0000000880)=""/255, 0xff}, {&(0x7f00000004c0)=""/49, 0x31}], 0x5, &(0x7f0000000a00)=""/146, 0x92}}, {{&(0x7f0000000ac0)=@generic, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/222, 0xde}, {&(0x7f0000000c40)=""/19, 0x13}, {&(0x7f0000000c80)=""/110, 0x6e}, {&(0x7f0000000d00)=""/57, 0x39}], 0x4, &(0x7f0000000f00)=""/243, 0xf3}, 0x3}], 0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000500)='xprtrdma_cb_setup\x00', r5}, 0xfffffffffffffff9) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000002c0)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(0xffffffffffffffff, 0x80047456, 0x0) socket$inet(0x2, 0x3, 0x13) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x2030402, &(0x7f0000002140)=ANY=[]) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="200601000900362e894abaded55a34c33015d24bae8de7beba1bb126644a94ef16759028781cca9d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r6, &(0x7f0000004280)={0x2020}, 0xffe7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 8.619340814s ago: executing program 3 (id=3610): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x6c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x40, 0xc5, "3e0eadcd7e4aa67da66cd04543b0741862b0dfdfe35655cf3f7da36e8b6925086cb9ffc0cc7c4f0771996b476637e25707929bdd34de5fa268653f72"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) 8.523978733s ago: executing program 3 (id=3612): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) socket(0x1, 0x803, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024"], 0x64}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8=r0], 0x64}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000200)={&(0x7f0000000040)=[{0xff, 0x5201, 0x0, 0x0}], 0x1}) r5 = semget(0x3, 0x0, 0x729) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000240)=[0xdb]) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='dummy0\x00', 0x10) sendmmsg$inet(r6, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000c600001c0012800b00010062726964676500000c000280080013"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.794334947s ago: executing program 1 (id=3614): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="16000000246837f7", 0x8}], 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xff59}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9682, 0x199) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r2, 0x58, &(0x7f00000003c0)}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x0, 0x100}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000580)={0x2020}, 0x2020) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './cgroup\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) 7.434556778s ago: executing program 1 (id=3617): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x3) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xffc00000}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettfilter={0x24, 0x29, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x3}, {0x0, 0xffff}}}, 0x24}}, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000200)={r1}, 0x8) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000040)=0x6, 0x4) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000900)={0xd8, 0x0, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_MASTER={0x6c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa}}]}, @CTA_TUPLE_ORIG={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x10}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24000010}, 0xc004) gettid() 6.873898232s ago: executing program 3 (id=3621): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f80000001600010025bd700003dcdf"], 0xf8}, 0x1, 0x0, 0x0, 0x880}, 0x48000) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xfe33) r3 = socket$kcm(0x2, 0x1, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x32, &(0x7f0000000880)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f00000003c0), 0x8, 0x45, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x2, 0x0, &(0x7f0000000340)) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00'}) sendmmsg$inet(r6, 0x0, 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x38}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000018"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) mknodat$loop(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x6000, 0x0) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_usb_connect(0x2, 0x464, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x82, 0x7, 0xf, 0x10, 0x7}, 0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="050f4400051410048132c1f98b5e1dea19b1f7aa67c2d0dfe80a1003020000050307000b100108360000070100010b10010c040006fd0900050b10010c8000fb03060067682e3549463ddbdb9452ae51f2b1a670411006713e14a58bab08fb6e94c96c10ce19d98d36e9627f8b6e4f09e3b003ba6fb1d37087bc27e9dd282571013d86187a"], 0x2, [{0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="7a03480da8930e5b600f23b1fc48cdd818517fa54adaafc7628a711d1df5a43d8b051d30e4fa3242822932b32cc43cbeced7846c70182aff0d08ed6bf5d2c0c90521ec7309b4bb4315b396bdc890a2634b41c0b320bb915b7c2711b615ec26e2b012b43c6f12a43b2a5a520f54a6574f3bd0a3139f893a3a02b0"]}, {0xf6, &(0x7f00000001c0)=ANY=[@ANYBLOB="f603c8d52943ced6dd605774a3b8be936cbf94194f123dcabe9f15514265d90f6131abe6614298872249d41dc33d0a9987a55d419e433f57f0d66ac4a3525b42bd57593296165acbc375e6d8a76cd0564e038faeecc392d4e325eed597acbbab86ff671ba68cfb2cf0ea43539c9283d4ab2e8d0f51532abade3078f9579252da3ce7437f1328e0334779ed7df508db1d565df45fa6d9447247b8d1d0e13a7d44a118aa5dff01932f3f8c2aba5fede0cdb9428c4923f9fda3e9e187b2d35ba6a4f050a0a66e25c980dd6ac40159a0b6bbfcfe7e380b76acceff01c00f2bd442170b2fdf59da0607018b6579a62e6622e0664bcab226c7"]}]}) 5.096789053s ago: executing program 2 (id=3629): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000000r_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$bind(&(0x7f0000000280)='./bus\x00', &(0x7f0000000340)='./bus\x00', 0x0, 0x15000, 0x0) (async) mount$bind(&(0x7f0000000280)='./bus\x00', &(0x7f0000000340)='./bus\x00', 0x0, 0x15000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 4.000847263s ago: executing program 1 (id=3632): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x101}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000200), 0x100000001, 0x80401) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x3f, 0x0) writev(r0, &(0x7f0000000400)=[{0x0}], 0x1) lstat(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_procfs(0x0, &(0x7f0000000840)='comm\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r2, @ANYBLOB="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"], 0x230}, 0x1, 0x0, 0x0, 0xc080}, 0x20000800) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.682349092s ago: executing program 4 (id=3633): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x18, 0x2}, 0x48) 3.519571419s ago: executing program 5 (id=3634): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x6c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x40, 0xc5, "3e0eadcd7e4aa67da66cd04543b0741862b0dfdfe35655cf3f7da36e8b6925086cb9ffc0cc7c4f0771996b476637e25707929bdd34de5fa268653f72"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) 3.282372181s ago: executing program 3 (id=3635): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x90, 0x1e, 0x109, 0x0, 0xfffffffe, {}, [{0x7c, 0x1, [@m_ct={0x78, 0xc, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "240f6bd39baa40cc4284547234bf0d50"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @multicast2}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "cfc11146aa6a7b5dc6e34631ba00aa90"}, @TCA_CT_ZONE={0x6, 0x4, 0x81}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x90}, 0x1, 0x2b1e}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x3, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000040)) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010100000000000000000200000a0500010007040000"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x10}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001d0001008a0000000000000007000000", @ANYRES32, @ANYBLOB="f60012000a00020013"], 0x28}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x9, 0x1, {{0xd, 0x4, 0x3, 0x3, 0x34, 0x67, 0x0, 0x9, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x20, 0xc7, 0x0, 0x6, [0x1d, 0x10000, 0x10001, 0x2000, 0x4, 0x42, 0x8]}]}}}}}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000001e80)=ANY=[@ANYBLOB="64140000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbdf250c0000005400018008000100", @ANYRES32=r7, @ANYBLOB="1400020076657468315f746f5f6272696467650008000100", @ANYRES32=0x0, @ANYBLOB="e67c03000100000008000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1400020076657468315f6d6163767461700000004800018014000200626f6e643000000000000000000000000800030001000000140002007866726d3000000000000000000000001400020070696d367265673000000000000000005c000180140002007767320000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d7270310000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="fc1203804a000400a842a2492025ec14f60e91eac40e5e6e59f26e30b257c599b764d68d66e95c18586aaf28b062e5c904d275e94d1c3d1dae4805ce55f17b5f22180284bc5e6e295f19922519030000080002000400000006000400694a000055000400adcd6e1532ca43679d02c908a64b9466130c2e6b62fc8368182277c4e5fec54b130325a2f55d0e3e3d19dbcc396e8bbd6454c3659777d78552b5f1636e81ea88488da89d8af6a26dd90271a1d0923beed5000000150005000853489f75b9dd0405e7ce4a37f41df70300000008000200c5000000041004001ba7bd2553b91d338e5c0ae0ae040b2a3f1268f5a754d8d5a3aa4c0f4d83907e441b08c7452db2c7580cc166679755639d2074bad773a04b0c46579121319978d8f7ad43a8c092c5d8e8ad0c4fb1ebc1563cc2bb9000932b3d57606bc367e0416b666fea8e367470d4b232900292bbb3a30bf85209a5e9c74ef90982e2a90abaa3c20d689eb124dd7beb70e0de6421623c21f71b53f322827d20fda2ee1a35ccc15f7deafacc45472510df08e60ddbfa553037ebfd5e1118a372ea3bd1356599163d32b9d86e1166a19145db265e85e805450ae02926a2515deace8334b78080f353e88c9881bd6e841ddc74b3d789b20521a6580c3516c1e47d33b08f3ea99eb32c7dd2bcf9b6be972397461f9a32ec9b75910734ecf5dc4b9fa747793fd6cbebe540ddafab08c3b973cc534c0776cf8c810bb48fc5713147e8555e118908032257e0630ddb1b934d01d760ef582005a9d659aace59a72c35ff8f826f3e24432562d411280c58392d9f56ff1716fa8811c69a43f631b7205434244de5a181e16e035807682fa94c2b6640b1c585f22ae090d703762f9be8ebda5ac9d34c95d4ba01bbaf7f2a80896bd939560d9d43e62fa72882bd6fb69363622e8e50ebdc31ecd1905904ffe2ce77129c4a55635b7e9d4030d5478d99dcc20ad26f6bcc60ee327c0a85abc278501fcbff014d781e1d82bc5b8fd82ce7d17ab3883f713640a1d57ce68c56d2802ac40a1f290e9d7de6b88ef9b64148b71b135b892fbdf72084a28dd900881f753d6af43d313e1cacb0cd5d86106fea9adeff8d17c6a75e10c9172cf7c49293ca5900911f497b088cc4d5a7613778ae0303fff4b3758eb49f3cac66fbad64eb8d368840e03d877a6964558e577c6501e2fce37aafa382a7943fa41a8ee070a9f90f2d169b8ce43b041f01e2bd2f7b087ab69383f861e35ffdcb218ed47fc408f574d199e7aa7bbe0dec107dbc4baf1356bee0cc44fcbdeddfaf4c9f91b7b932e08a4696f330210b9e7f3de4239affedc730c780957ff35f1eff41aaa9ce866c6a14c832eab1d48d2f9c102a985e79ce44f5701c6dee1b8344e07c00a7565c1d740ce159bb6f4d4c3095d20c68e3ea68ea249caf46f15f73379424eb48d12452af59ac5936af8d42df26caac6d02272a71d228387771e9be9c9f03b6ea1f912c581ffbdc02ca9e301015ebbd8403f9a855afd73342ae8825a640f1537a1d312f6c9b26963bd310c1a13ab23e6e30995ac8d9d52f87597c5d455549956b07286ec49b6fb0cdfbabf97721c0afce1ea5e2da40f88274ac16ed3e2776e245ca0b969bc8b86ae4e8b90364a6a27b38a2d86b352a73601b56e89f01334fe58ee558084c845e37cb5c12b776f175e6e287e8715235bf6ae3d9d1a2ec0d8295ec8cc9a83af39707325a04e68afe9018ae1ffe225556ee22fcbdfd6a61e99eccd91789f957b0cfa9727a8c5e697387a58264c512b1d86f10e70b5b297e1d6763666de3cc36613639f99c54baf2d4d455c08f5fbe2f71637fc8a27bee3112a2d43218c49f7b909d2839c4e908db1e5c5f46c24b78fed2d2841b7300ded2e692d14adbd67ad21ab9f75c514c050c5fcfea0abb65e84a7ff6afc6f8ca314544c78b3ff74f0f9832cd1261c675290d13b2d0a5dbf2c24cc42886767559bbc28e4db77460b26f3cdad217ccf0b5a3b114cfd71abe790f9a9abd6bdf739c583f110d9e289d8e66a1bd6b539ea3d1520457c1a661f3e63a0430fe0dda4e03a7f71b0b04c65331e2817f4b5bf7c814d6c1eef040c56794445fcd778f6815b902b2ab8c64977228f49626efd6cc777c0b5672665a17892bdfb8387d14a62f686c0db513185c3c97a69cf76f63400917f9a9bb018afd665aabfdfde1ccb8edfb73ba347e7d2347fccad2f7a34e309d2fab8b423c3a33abe70995ebac0b1655472ee8571e04b5a2e0c085df2c8ef368c03174a5f3fab53443c09e6fc900e8bbc48399314a17bc2e0e1442f7d82c5e533baa570ff0358e6621c1e2c06b44844a8412c911ca9def36084ae148a02b5014a66ad0ad4cd2bb6d09071e130e15c654165be3a36749f44beee5aac031f83eef343d93f2507ccfc2f7563f77edf3ad1b0016a74dec2dae8962aad574e0cc0885477ac9b8cada226b350b237902c0070db552fe38d1360bd0fe300d17385b7722181da85527c50770dd5d1f0a870b2cb5177e3fa558f43f70917764166f4870b9e7de5d839cf5a045ade9db5c62523c12ac04072b50ed16c70f959e94051326bdd486714a4d2d9d22695120c11aa00b2e079194290e1652bca53eba64951f86a2b3b0a26ffda1697bb59198f4f014994e923e4edb085a6798007921d5a8c29c3d76b7576e860aa71bec3e85a576a1cfda426cbcf9e4234e53059d5180e8a4096e535f302571105f3baf061db4ccbb9e51f37851627f96ad91e7db21d80b6b66135a23bbb28d71055a343865a070f7f0092079815b7d8f731fd190880d8a4fb923440e2a5a1d9208a04cae6efefa574162410a0916703e3ad4db72e6f591ceb1bdb16666cd0fecf584e098cbca8318ce147b582fb6f3506395d77f1b8a5e25aefd081bd5014cb9e825aa96a862234a977360dff969876248d1272f6926b7591a50e96ef3f76b1555ab0b6e6216246e29dfbf8731fdafe59fc51700771097e71788395e04fb84259f7d9c5d7737793c4eee0ec166b58859dd002252880757301db1483bf9506505c0c244fd7703a161b098b031ebd6ecaa52a3e6bf3529f3a73eff85cdaef93417cf355c9a89fe8bfff9519c3bb74e2a26b340fb34e64a42bf245e82671e445d34cbf152864aebd9f4272b96f45405c94aa0136e762f3dcdcf4b2bb3778972900bf595e0b350f3510e9a3d350d20f4f70dc810eb2ef60e294b6be7cd11b856e92cac43dcfa86f50b5823c7199409ce160438e3698a59fdc2c10803510e4a7f32c3125beb16f7087d0c40af14af69c22efa424ad0800a882e2ccfdfee2a97c443aace7edd4aa86be6bf67d0a3e7a6c42e77e654dc19869b719c9042fd68dc59c3b6567d23360aff1cc49c2f0679035cefc39531f50074e67fe9f536cc6c4402aa289f8beafdaeea5a9343c9b54f67493e7ccccf57e3927d17c71f841e217b380389cdbbf4068050c9ffd546901af6bc1087d3757416ff1f1d12a1ad023eabb5f094a269d19428d65edc0db69cd142279ec5cdcb6b745cf3ae75319de2ed62db1070668d51f41ca6df9ca98d9870716d95de5ffb32313339985b7ced9d663391055748781609e2c2cac89c5f601e7437ed97be941ffed39160716b7eebd446973f1b5e6c1ccf2ac9f4b3cb287cd36ac80fa6e2e4eb74238158362f85be3f0a8654379b8ef93f7f05df708e11e9f74107037e7faaf0c440393a977c18360ab4b6b023fbc6eda7e309b340b00b9b2d1fd0a9264b2dfc3ec06924cbc1a54adc7a5015d8e940c79d639730175d5615c6d5cc65f3fac6ba5324654475e42c37a847d35f9328d83ebaf9b7eb40a7df0b501f2b1da24fe4bc6c171837e1870fa495157ae2af056fd3eb4e785b6c00b06e69f4330ece94c4bb5a9c80067c8d56f29621a82d5e8711c9e377fd545e0ee2cfcdc34e8562134c4c871d0f4d1e9b2f5b466aa6846514bb96bb30bf3892ad192855b45eb8b99743acfc532582ef271fc67f62d26cb888101a69e9ac85879c017240d910e2e02fcde34c0df79840de7fa00645fad4053bc2983b687590f2746592de3401931d4786bcef4da9504b575c22a24d2a33afc25ca476b94b915e5f95ad40d8cbbae906655046a4a5cabb43021ae5ad5293bc813644f3473e75657bd654b49ea94b5822b9c0d22591c300f64b80ad8a19773472d71063bf0a24ac458713de6d754a45e704f1c4556a537c82a547e8a9e2e1731f721ac66b34dcd3108e88a8f1053e78e0fa7047d2ce6250a3cd1db26b9f5cae597fc26a44f7144a4542a659df5f24fa2edff45c608fc573e32c034b06c7d8521e0853cdd7e70e23642c4a51037a2d57da88d295db4dd1da40b058d40aa4f25a2268d7d5d2b10190a6c4f108a601973983f484775d9722b7257feed51bea80486d81c1fff2ec9442ce76ef1273dbd933006df4cc7500d10cdf11cbc66f3959dc955e8f9fb21871edaab87a97d93bc1f244e15a780819bdfcdc4a69f3d818e7195623347b10995896e4c0d584aebcf875a06caa68759f75a5ea39155f3bf2e0e6e71cf93fd705015211e043c1b48d97f6de639b519cfaa2a1c47c91c8941e99450cd4abd5cd08aa04871ed267b853082ca11cb1db3090ff9e785b6a03f807dd28b8a898d3de03e5bfa6b993f27fd192567414d2e6cf896cf8767deaed2c3ff34cd26c9aed134cd06d53ee7c237624692736da746be60ec8963209c160cce52a32c7ad73200e36bad28bae194c071972871fddc27455d92d8ee6985a12b0d3601f4b4dd7fc74b1f63099f44cb223a14c9494ba08df0f400a307229bd5ab8f740edef9729248cae937f260867802427f2f01f415be3c43507990d7037dd6a46f34a025f4b43248ea15afd4e8a4304baf816e6396f4173a9d9371585c61a7e82c1333839a813dd0591e90a7d184a61cf10286da40c46e9275059ae348291ebe83d595383da559d2e58023672bd6a934e079faa5c1b507b98c4ee06a2037fb94c0f8963e510f81aa5f67b75cd0f09ac436000e2787abe65a103dc0b27661d0cf606052d857892f1f435b2808a5b58637684db50c430ef5866c853129ad626055798899a51a1e09fc2e2d925bbb1b3650b5d0b2d37f446ee70865da0a86185eb63c7cc06e147076b692473d08cf23a72d5cd8eff40a9378b3a25d95c9d405379fcf46b9de888e0c71e636f5cbd7ac1d5e64f1a75c22d04715d89d32f7edc722516821459f7172e94c5c5ae5dfe79ddde0180773e87d6a8db4645c7d9ec24a62d84036597a839622d07eba7ae04973af558b6c2a12c051d13af1271fbd6448783baaba586fd43be5f5a15fb1229cc5cccadda813badfbe26f5a2a354da06695827b675dc2ded82bead32ea8aedb26b23cb1c2b0f60e4d86978f4ae0b48b2d4afc8c2a471cdbb851c367f415bc4ee81baba3ede568c9d6148c9496fa2f1153f076fcbc90b0fc99fef8036b4f71e5028f7a0e8339a64b2cd1709f615b3490beaaba433316b4c50bd349d4302d16339be0567eb93ce1d9c71790d7629af1bb7a1f796621a0fb992ebc845ca878c8d9c0b677e3232b4611536eef8fb496791e1d47a7ff1917c8e9e23b3a2c30148248cbe48b989ea1f21c6b6c07c254ac46b71129b03e21cbc415844b5ad177debc269f47477a199820a08848a238385ed16c5f50313645a559ca5091cca72e3879625668af76aacae7e2e008f467f3226b490636a2bff7dde086f1207010b42884d8e36a507a914e9732204bd4c40b432d75f5a535fde4fae99e212b8b2979555eccd58e190cb597eb2822a17914c0a24a3edfd404e8fc4068421e7343e596cc6cec7be73e7d9c66edcc4d1496bdf171f27565bbdc8998e71fb7434677661ad62944996bed1a43158e2e8370744db03b557c51a7d75c83e7c1596bb80cc68ae2254d13dd95fd4172652c8986234cafba139f00c60d0f6dbe7ce7f2f231d168da522ad18253040a464fbd2fd1acc189d0bde3cdb6475365a4823a23d6d62b36253939f183fe7ecd210c6e4d108580abd47bfc7919443be5b680a8814f6706a8941c4c2d34378151ba6887cfc2ef557a5db756d57b7f318a04c2fe1075ceb9155121e427e53822d100050067b5d88e15a87e10ef53e029f6d0944e53c06bb948c5afebfdebc08527efbc35da9d9a742ba3545849c4b23c952fe781fc8e0fd2cb179bac82df6937ee64258dce6d1ae46cd282fe62a6da5f45c5f737e8c5659f4d1827a16c9e3a8ef56c3ddbd6c247cf61568e96f7176160f1478046d769636d893e98fc4bc442ecb1986ef84ca2c0b9f4793d8ada518ef16ffe2a82898e9c20a0152e7ad491491409a9b96392922d9d6a10d48bc5871abe0b5a9078a6dcefa00459c42335018f467e4a52b4ae38c627e0b3586be9201ec8ba0000004c0103800c0001800500020000000000040001800c000180080002007d2a2b001400018006000200ffff000008000100300000005000018005000200000000000500020000000000080001007d00000007000200a82d00000a0002002325ce282f000000050002000000000008000100020000000500020000000000070002005c2a000040000180040003000400030004000300040003000b00020067656e6576650000080001009d4700000b00020064766d72703100000400030008000100249c000024000180080001000800000008000100bc0d00000700020063740000070002005d7d0000340001800400030008000100fc00000004000300080001000900000008000100b800000008000100fffeffff08000100580000003000018004000300040003000500020000000000070002003a5b000004000300040003000400030006000200260000005c00018008000300010000001400020070696d367265673000000000000000000800030000000000080003000100000008000300030000000800030002000000140002006261746164765f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1464}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 3.23728836s ago: executing program 2 (id=3636): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000001c0)={@empty, @multicast1}, 0xc) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x17, &(0x7f0000000880)=0x3, 0x4) sched_setattr(r2, &(0x7f0000000200)={0x38, 0x3, 0x10000000, 0x9, 0x10, 0x4cde, 0x3, 0x9, 0x0, 0x8}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) read(r1, 0x0, 0x3c) 3.216336518s ago: executing program 1 (id=3637): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000005c0), 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2002000, &(0x7f0000000bc0)=ANY=[@ANYRESOCT=r3, @ANYBLOB="4ea5dcde78c70ea0ebdbd7e676bcee04baf02fd5a85c6f58ca6fd3301d51e28c5df85b39950d6840dba759edf4661f47d06abd8993a770498692774ebd210080131a3ebbbf6e537ec7521307ad7c6c803c13db13e53ccfa794da3dc8011362e14657094e784b2a35b57b444b7595ac32a6ce10572bf1c40d2034842e0c604ea9eb61166a76cab4296de4b647b08af38822aeaf7887e1c219feeedf90eb82b83c06614f17059eaab10603b0e8e46ac9255707b658d1646e1d3cbb0c355bd254f414b3bf11b374", @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000ddc0)={0x2020, 0x0, 0x0}, 0x2020) setreuid(0x0, 0xee00) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r5, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r6, &(0x7f0000000600), 0xfec8) recvmmsg(r6, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000780), 0x0, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000740)=""/24, 0x18}}], 0x2, 0x8b, &(0x7f0000008000)) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x41046100, 0x89a, 0xf5, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) read$msr(r2, &(0x7f0000048040)=""/102392, 0x18ff8) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) tkill(r1, 0xb) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) r7 = memfd_create(&(0x7f0000001b40)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\x05\x00\x00\x00\x00\x00\x00\x00\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x4) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.83731783s ago: executing program 4 (id=3638): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) r2 = eventfd(0xa) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x9, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) syz_emit_ethernet(0x43, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @rand_addr=0x64010101, @multicast1}, "0e60aa5900"}}}}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="b6"}, {&(0x7f0000000580)="b1cdc0a92435041e6be063329729ef5e76ad3fe345f5049c645eea4edf3eac61ac6125c4382bea15999372651c0bedb101c6de3cefe71b3c94b24b07b8aafdf4bdcc2569b869280ee381d3e45f30dbd8e28014119a6036cb506f7a2b2a5039de729d400860c16bc46bebeacfb205403097943553bbef64d6a817d60ca21b7944848733b0e4e78d36219fe86bf2274f10f977fa07fbc307484bc1feaf02343682711f9e4f55c773e427969ba85891fcf67bd340694e5cb9d5c00f376b9c56c24a7515286a8f0955784b81819d216b26cb77c27d976c9faeba5c250cac", 0xdc}, {&(0x7f00000007c0)="67a9692bdd01faed906c6411d8c3a7e0037340873e5a1f6e59dd24d02cac6a000e0000000000000000c5157b4b67317e2e9d65f6f94b47bb606a3b5972a27beec2880dae2aaf9fdf76039f47a0e9956f24bb4a2d94a5a46c4bcc8731b57e2dd876b270bfc262781bfefe470234d1af7089438b0300a46e3098df7afc754445be4f47dfc5548d483f2c9f1608e91ee2050fbbc9ab46e0fddf55f35049c188aaf606ec39f8e96e680d1c0e65", 0xffffff41}, {&(0x7f0000000680)="3568ced1970359734f553b38b7e823cd3e4b260c303ab8f70591545b2a2b14963069f94c3ca955f4bb502b1aeb095ad4c1b37b6b3b62288dfdd4c0b492978a19052e6e96eda0c016236e84100e5f5575853b502832362059529b4c31113a6c6befe743f70b26074f05cb699444c998bd9ed5b1765520c1581b18941abd3d3bd35902afb1637275c1924c35613d7c627f9478b466be188e7ca7b352919595291d82e87bc3127bc04a8575397369098197bc477a5f71b6e53cf90a926505375904", 0xc0}, {&(0x7f0000000980)="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", 0x51}], 0x5, 0x0, 0x0, 0x20040890}, 0x2404c800) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r3, &(0x7f0000000380)={@void, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @val={@void, {0x8100, 0x4, 0x1, 0x6}}, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "5393bf", 0x2e, 0x6, 0x1, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], @payload_named={{{{{0x2e, 0x0, 0x1, 0x1, 0x1, 0xa, 0x1, 0x2, 0x54, 0x0, 0x2, 0x2, 0x2, 0x2, 0xa, 0xb7aa, 0x4, 0x4e22, 0x4e24}, 0x3, 0x2}, 0x4, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}}, 0x68) 2.836625294s ago: executing program 5 (id=3639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) getpgid(0x0) r1 = syz_open_dev$video4linux(&(0x7f00000001c0), 0xf, 0x60100) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f00000007c0)={0x0, 0x24, 0x16, 0x1}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}}, {}, [@jmp={0x5, 0x0, 0x7, 0x5, 0x8, 0x30, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x102}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) bind$alg(r3, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(cast6),rmd128-generic)\x00'}, 0x58) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x88, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000000000000a004e2200000001ff020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aecd435254f937d79eab82d4dcca0a2b0176528a20938987a4897bf8039a9cc8d8a8e78f27a5b496491d6bd61aa049209bb7d58856a1386c66904e9735b3a52003af38d24e17e54a142a901d56d5531f34c3adf1a60477742cd04bbc5352be452db8619d0dc7cc521f8578a70d028701cc09b3e1412d24dcd5b96157bab9e49b"], 0x90) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000200)=r9) 2.480050816s ago: executing program 1 (id=3640): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="16000000246837f7", 0x8}], 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xff59}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9682, 0x199) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r2, 0x58, &(0x7f00000003c0)}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x0, 0x100}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000580)={0x2020}, 0x2020) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './cgroup\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) 2.080318766s ago: executing program 3 (id=3641): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100), 0x0, 0x24008094) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000740)=""/263, 0xfffffffffffffe47, 0x40000022, 0x0, 0x0) 2.048679488s ago: executing program 1 (id=3642): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x8000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0xff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x34, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_GATEWAY={0x8, 0x1e, @private=0xa010102}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG={0x8}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x840000000002, 0x3, 0xff) getgroups(0x0, 0x0) setpriority(0x2, 0x0, 0x4) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') r4 = socket$kcm(0x1e, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000100)=@tipc=@id, 0x80, 0xffffffffffffffff}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf250000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32, @ANYBLOB="b4c90a", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) r6 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) 2.035351106s ago: executing program 5 (id=3643): r0 = socket(0x2b, 0x0, 0x0) listen(r0, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/70, 0x46, 0x1, &(0x7f0000000080)=""/240, 0xf0}, &(0x7f00000001c0)=0x40) r2 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$sock(r2, &(0x7f0000001400)={&(0x7f0000000200)=@llc={0x1a, 0x304, 0xa4, 0xa, 0x90, 0x7f, @broadcast}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000280)="85cb139e2c183c489a061250a5474f0db29698d030b0d006e316687ee8c50707333325a663cd03d5e12c3a0c050af664a7c08c8bf1b2232699b8ce7e230a1a3afdc93cb95d5d4cdae73fdb42f18c9ca6ae1be6ac463e1115e19acdca773d24613fa60885170c2e53cc79f8c98866e9b8f34cefe5a69c0e11a61f63333175b845a405306ccaf5f5deb48eca91a075a7d0821c94b34f419c02ebb2737377eb4d558b2a", 0xa2}, {&(0x7f0000000340)="d2b17d771746616cbe611999a4ca0cc79f732dde1690b9d21cd06d0e1f824b5fc4ff7ef4cd6cd84c98a4a2c544e580d9afbd6eafa81a4d72507302dfac46d4a9c13247c83c8ae615d8d62b501e84f243d3cf2047f18a8632b8acf03eb6dd4e36a7455d66165dce1c1071e2edb413e14f6a6759d69a77729acf63da8df994a5e1b6d628336378370c79ac8480cf35886bd20ddeb5fbdaac8b549a25ae2f647625309f6a85651a7fb4ad01c9a5d8f3799800d2069418fffb905e6db1dc9fa38a0d6ba6a97cc0f9aeba9c50f3329d1ea45b20b84a4ac7e5bbee217bd9691d35d8b04c989602df86bded2b72067ffc312efb902efba9671da4b64d64cdc3ffe2ad6d98f811ed5a77401a7c8b014565d2320a3aaa8a0b4d81aa9f230fc843ed9b6c9aefb2b855a9739ed7a0f6352ba7e1a257aa23786ebbd122e14c04c4472346e86b4648b5881576a9c34e09693dacd7a631ed609471d62637adeabe801fdd733e6d927c3996576f9e73baa24d2c813fbb094f9d239c8c5fe0df6f35b454f81b2d2877f15f6b818a23932872e9f64c1f57af0ecd5c42deb86070f68601c41ec5bac3845ad119414ae547b9c135e494f4f5546863d326a94cde9ac24f8695b8762091d5486d0ca668a543df6c2047746fd33add7289bfe53ee173c1a48426574381715ef59a7785d4ebc5e486239af5a8268bd372324fd15eaac8086670d0bcb58f8b476b163a85a90f3153f412e9aaac29eb7fadd9acbb25ef7e3eddcba74debea3e388d760403160a1088dc031433d24108a80159d7b9dca4138fe69b3a5c14ab984c89d707394d7298891c87e0dbd6952a07493468fc89ed9411a394943ce80278e26bd8abb83793f60f035825e9e93adee0c05b50261142ba4427b06daecd9e8009ce91f00965ac788411faf93978f5dce5e6a10786cffd74062a52963d20c919e1569699ccc5ce384722d61f4810098d92a5a2c2a4c87c9ef3aa00ebc1e32b9c99c6c9e9847868ef0ba53d3ba99ac58af92e1e0783180275a7b9f91adc1a51891006a5ed381d4a5a204624535ce0ae537f3daa9551315f4060093453fe6bce572a3df7976a501357c9d10b48c4364d905e4dff2e3a803a6d9f04d1b28c34b99492282a9aa56ae08ccf310f68c5f2460af783d73ee9be052b8c6245204a0c828da13f04385e76c9d0869666976c8a0f3cc748323f24dd04c0fc57df86c388442d2319378fdf3da4692012e9fa666ff23c226d76252c63d7b606d74745c056832990981604c4c5e8e3b17a53584e512448a3823c4cc22c46f87d48591e3f22e33b259b6fb77d2f924b7d7068ff6de451b77a76c86cbf0472b8f6c742b392877e9b0acc3bf932423c374041d6812a7dec7a39bd6256496457d725bff93557d6c33d7c589aa092a7ac2ae790b0453934c95f576d4884a6988d41e0210b431916a433ae5057ece03678190195eec948f4bf36bafd64a1e349ead5a75067c4bee5c823d8cb59a697dfc419dabf4c4621606f97071ce80fd986dda130535867ac4763a50091fa5d12d584eab2b0fc3bc9709756ffd48fd596093ed136f667224cfc1656a8dd83b7e8330f57b50f418932ec74c3dbfdc6f3b4cfbbe247ecba37e550ae2ac999717a3c3773609309ec7a17025e2c2be970cfe168d977c94cb4af6cfae971d17b89759a34c4d014042934f4d54ceb8559036c406bc4a3ef1204a4e7705c3322522180a453fb81bb4eed2c9dcc655e5c661c620a75fd815ef1ae844fc9fdf649cbae6bbbf5dddce920b833ad4cb3a8231e5f206f8f1bb3553a26ee65034dabb5ed07154974d1d464b741535422a436d85013fbb45dd46cc30181b0ac739159fc84e7e9194c38f57ae48c115e836fc151f7d3ddbf99546bd3d3d9286073e9809dac0a212c24e1fee854a7b5485b9ae2e2aa274b8e7215e5f4e704fba698c8c293f76bf926a96008a3423e2c589a8c74a3a80cbd3823a1ae5b86c1cebeec8107ec05976c5d955b8b1457547f292c5aa6ada1d85b39426200c2d82a36869a8f006b2f22cf45aa395f0e2fe3203a7b36b0ba04baad539ef5c127f48bedbd39036f05bde9e3a9e4d4e4b6d80c6b14d9ac7fa099784ee37b0901590394ad8220f6f5f6726ae027f258aefbb249fcd57412a0788517709702ed5a25423ef8559188d84493d5dd5002db9923bd3993d2b7bac8217e5ac619bc2dc89ca76bd3dad2beaf02134a463ef09415ae9a83ac2d99eeca165fdb304d71245eb57419e4e821c1ec1aec9765846cc43cfb8318135c2ad340eee531b0baba66c21ff397c0ccec8e49333a970882078b167ae2b04cf066cf82bff8984f42117f07580b06fc1120bd6440fd4ea39dfc3c7b6ea7cde32e2d838824d51470f33b368bdf6dbe01c68dd15b37a7feeb30be2c15b1bf14f4a71df08fd4fa05b9d8847c70557552301d50d1df8e3dbba3e163f5aad0697dbed931fdde6ccbb09eb265c71cd0700ff2bbc20476181213b58657db9d0a457dacafe14d22df67414c49006a21faaf61b5f6bfe5e41c02fbb1a55bd3015e4e7633cda17c0e3247ff164814a6caab286220042eeadd1a43fefe19153ee9168ad308a03f301b151f7554bb3b72f3075c1fd2752b903796c5ca96252b4d0d7e6ea7c7319bcae50b7a0d07f5a01f197621727e16aad5892ef5fa7a258b8fca796047ebe37023669947364b6557744f18fb935dbf81c0cb07a7e1b19b7b07faece51c658081e20f5b13db0e3df2680f4e47d02e5717ae21352ef64195d4391fe08622065c616fb4055ff38d5d45a320fcb5baba8c6fe0848740f42b63388c20b293a1abcaa9c575879bfbf4c68311503192373baa5a39e9e303380d330df1dc7325f0381e1668b218f16d4cf7e9589e76357b04463fe1b851023687f782607851ded09c312d70a0e8d6b04f4f9a1cfbf6ea3b346cd01081cb1c2ba9fa1df95ca2b89376fab0ae8b769392e27a231697ecab3856299735278d80009d4714e96da55059f54687cb08bdad3561991385724fbd66fd58ba740f78e0575d09d03943d6b0b54435d172f70788bc143653532c72e43422bea11f257ae38e743cf96d22e99ba7c0f6ae4cd72be2d82f22bfd9bc6e05c90487426efdfbf3785f7a022f6393675a2c582a589c0666dfb0fcfb9759137847eef3eaaaa3ef9d677695e85c1e03ac02ab215bf2a07c208f373ce240e52bb890b2cc870d0573d63e99f003fe7ff8fe7665692ee35dbff8742b496a99d0493226b7c5f071a05a17dc9d0b23fe095d8a29232237cfb6b357bb0e0c73f3b5eda30eedec030cffdda47991b24545ed6473a8156669af7c4d7bbade0fc239c9cdb2aa4f38fe27c79e8948183956c121dc6a57e83776b9158ecfcc499eb236e41c070650b42c6be80ab95fdbbd6c15e4c1c6f0349ed5c8a75778f6a072b09ae56c38d0b97320ae8d3b0586d629743c6ab645edd462eebc3545ef3849afaeec747f086e1deb86e5e29cf579fd5a70cc582a16cdfa9f5127797808fa6eff991ba68506e571d72eb3869101e0053c8bc611b95a642a5f165144eb25e8ccce0937741a9609c22ce127fa475ed12bb244dc2cca481e1134af9769184ee47c8b59134dc7c82ccd7d1850198bb53a090082897a576c38831835a477ff4da43ae3ae44fabf1844b69202bb56f6a8821f479893a5498f4fd896b178949ad9984014c49576809baf53709f5393808589edec009eadefbdeac865a0b03fb80bd63f0192f43756586e9d27182f0b18c457c3ccfe2a87c2eda3387e25cc54beba08af76da670bcefdfa5d04af5793c38221f1bd6b0c3d9d00afcb6a21ac2420cde800fa3f0b2815ef9b166c98164ab5458d805e991c92c5d8feb4a5b78fa290d1571210dfe21c15901325b414609f59cf66043e39ddf2563a4a1a434926bb0e4e1517588fb838f6ee7c22cb7f3ccb28799925c63c2b2110c257007079b852dc1f8df4ea8c004b32934ca553a2ac925c91ad5e7ebbbca7b422f584f7d5b4567f6b66360497dc9df29e5a2b6dc3d9941467c43a223fcc47a7c2c3651285a2387685dfbf01877dbf5eda421b60a4b7eb6ad872894313448e75f601198153fc128cf5b1d35885d0e7df1674b0b9d7410a5795a9e163ff9c52c1807b91d5f7cfe362d4d36337bfb4182bd0db8f3b8a24aaf8384cbbf4bbc7cb7e761260c7b42ca40f7e6030b3f735daef474fe7c992e84aae68e62157bb61e8936cd7d38c25ada41a828f2b32947e3999cc28b3e0109f9a5cefac147f26c3a3e206c5b2fa7dbbb7185070d9b4d81e492b27f4be3af1d761c095243f8b94f96f7ee3c2df1188b481ba61c349d4b3b0aa2a7fdf4387565b5448561de764b7e42b61ff8eecf67b1b249b57ffadf8996142ad9a93ccb3ab5c46586070a2c2caa895f756c8b941be08c5b9fd3393435ab4e6ddb184f0463a7fe99648b09203deb448077cec76caf70ecf3a4e55fee256610b57a1c37e31d16c88c8c6feb156e2ff275318998de65e4e4058fccf8d8fa7fa5b6a06370e93904ec58be5f31afccb65fea77aa97241b31fbf83917861808a3248672ec982ff1b47ad2a996b4d3051a42497da10b5887ad1a05684a8e8b44bf2b741020affecbc31c56971465b2a5d1c40263c04a7d8ad655e55649f22efe73191a0dd63ca6251117e3a3a412d44c116bb49daf25fdfe616f72fa9961e7f97bd0e5e19f92f7727d36ac748e221e2f0457683283384fb16f9ec269f692ec747d4fabc75254300571a75f4025c3de6d58cb77df7b4d716d9666a946e77c9327b029e83747893387d89303e5323facf6f7cc5a835b1f46aff8c5b09233d9b1e042ae6dc53214018778a6a61e7add3b99ffd162d4c26bb54e528ecf32ffd0348327ff2c5ae430651bff263a71d36f2cd5cefa11d2e6c499335c9c54b6aa5f5a27a8ac4d9e9960916f99f8998f61abb75c418a73e68474bd6fc2dd4a2dc6cc4d30139833a0c8ac98cc9852936ff650be8509db338bc93dff6bb9f949a3cd57d1bde75471101cc3f32fd575d96a22093deb6b3b007b33e2b7e8ff620fc9b6af5247a9b050398c2bcf1c831c46015cbedd9e080517b35ec865524cbeded567314b66029de43acdb14959bb155dcd2b4e8548aebb60081281fc0bc0f33c564db1116041fb8de71b5efc9ed3a27ffb8ad035e2bea808146538a1cedff4492029cf7ad801aa6448878394bc653d5b2260ba253032f8ce66a4018bb349c26c26095a56d1ae1aab0c119da67b02c814d64d2c0cef0c777488d6885c55a84ab60dbb07a4c8142cd52a21fb283131f5f0dfbfca9d456c29140c560610124c8d9d7edf5fd12d6d06f4902e7791c4384f69ba18dc2a6d3298d9bd49a7127db0add25058cf5b3e2ab08ba6fcb267044802a7a8d57d14981dd1dc2ba740ef351bcdbef0f03a01d10fe1aded1363d46c63c21ba68e89b46c89f33df134e4a36c369874909fe7f38cb98c1538534d84386ea355f33b29d72d2a1501b4753b4c2faf906ba7bf5a3cf851c8b94634b8a71d13b4a6d079220d32cc06993d1d195d6dfe56ad095d62c9b1b39489a7b75cab1ef58c68d74247fe8f3f79dce780c735044b279741b54d2e927feec020bae4170d6a990291f9e7b7bf9d25ea265982fb3ce1bc0efc42d043bd18e4bebc121a1034f8ac3ff83d580e9c947eb02049789b2106f29834b971badfe3d9ee5620578d88c8f2ac185c0ae9c10edfdbc6fbe3b5f4530772599a4d5f425c5ee3bdfdbeb30193eb2fb5bf75951a283c93726b95f5c3909cb941f82f94bd345b60758c48a0793da54", 0x1000}], 0x2, &(0x7f0000001380)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0xc948}}, @timestamping={{0x14}}], 0x78}, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000001440), &(0x7f0000001480), 0x2, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000001640)={&(0x7f00000014c0), 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x54, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x77}}}}, [@NL80211_ATTR_SSID={0x21, 0x34, @random="096ef50530b4809bb2b1d05854611deef51a789cc88b2f265110923f4b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x800}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001680), 0x400) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x50, r3, 0x302, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x70000, {0x0, 0x1, 0x4, 0x4}}}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_SSID={0xa, 0x34, @random="c906fa4f5a04"}]}, 0x50}}, 0x80890) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000001800)=0x2, 0x4) r8 = socket$inet(0x2, 0x80000, 0x7) open_by_handle_at(r6, &(0x7f0000001840)=@reiserfs_6={0x18, 0x6, {0x200, 0x1, 0x5, 0xb2, 0x4, 0xe4}}, 0x28002) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001880)={{0x1, 0x1, 0x18, r8, {0x1}}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001b00)=@o_path={&(0x7f0000001ac0)='./file0\x00', 0x0, 0x30, r0}, 0x18) r12 = openat$null(0xffffffffffffff9c, &(0x7f0000001b40), 0x80, 0x0) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001b80)={0x0, 0x2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x1e, 0x10, &(0x7f00000018c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2cc7fe1c}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000001940)='GPL\x00', 0x3, 0x62, &(0x7f0000001980)=""/98, 0x41100, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001a00)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001a40)={0x4, 0x1, 0x8, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0)=[r10, r11, r12, r13], &(0x7f0000001c00)=[{0x5, 0x4, 0x2, 0x2}, {0x1, 0x5, 0xa, 0xb}, {0x4, 0x1, 0xb, 0x7}, {0x5, 0x1, 0x10, 0x8}, {0x2, 0x5, 0xe, 0x9}, {0x0, 0x4, 0x0, 0x9}, {0x0, 0x1, 0x1}, {0x5, 0x4, 0x5, 0x2}], 0x10, 0x8}, 0x94) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r12, &(0x7f0000001f40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001d80)={0x164, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x164}, 0x1, 0x0, 0x0, 0x85}, 0x20020885) fcntl$setown(r5, 0x8, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000001f80), &(0x7f0000001fc0)=0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000002000)={{0x3a, @empty, 0x4e24, 0x1, 'rr\x00', 0x18, 0x8, 0x7c}, {@multicast2, 0x4e23, 0x1, 0xffffffff, 0x2, 0x6}}, 0x44) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48804}, 0x4044) ioctl$sock_inet_SIOCSIFBRDADDR(r7, 0x891a, &(0x7f0000002180)={'veth0_to_hsr\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000021c0)=0x4, 0x4) 1.745074899s ago: executing program 5 (id=3644): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = syz_open_dev$video4linux(&(0x7f0000000200), 0x800000000000004, 0xc0200) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x2, 0x5, 0x6}) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r3, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 1.330460264s ago: executing program 4 (id=3645): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = syz_open_dev$video4linux(&(0x7f0000000200), 0x800000000000004, 0xc0200) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x2, 0x5, 0x6}) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r3, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 1.240796511s ago: executing program 5 (id=3646): socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x80000018}) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000005c0)={0x48, 0x0, 0x1, 0x70bd26, 0x4000, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x48}, 0x1, 0x0, 0x0, 0x20008004}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x6c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x40, 0xc5, "3e0eadcd7e4aa67da66cd04543b0741862b0dfdfe35655cf3f7da36e8b6925086cb9ffc0cc7c4f0771996b476637e25707929bdd34de5fa268653f72"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r6 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) 812.883186ms ago: executing program 4 (id=3647): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x101}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000200), 0x100000001, 0x80401) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x3f, 0x0) writev(r0, &(0x7f0000000400)=[{0x0}], 0x1) lstat(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_procfs(0x0, &(0x7f0000000840)='comm\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r2, @ANYBLOB="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"], 0x230}, 0x1, 0x0, 0x0, 0xc080}, 0x20000800) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 475.398183ms ago: executing program 4 (id=3648): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2420000000000502002000"/20, @ANYRES32=0x0, @ANYBLOB="00000000080002000b000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='nmi_handler\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0xfffffffffffffeaa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000400)={0x20000b, 0x1, 0x3, "f819ebf45608e255b61c5deb3eb574d486d27e0600000000040000000006f100", 0x32344d59}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_open(0x0, 0x40, 0x22, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = timerfd_create(0x7, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) close(r1) socket(0x400000000010, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000300)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 47.731132ms ago: executing program 5 (id=3649): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) r2 = eventfd(0xa) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x9, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) syz_emit_ethernet(0x43, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @rand_addr=0x64010101, @multicast1}, "0e60aa5900"}}}}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="b6"}, {&(0x7f0000000580)="b1cdc0a92435041e6be063329729ef5e76ad3fe345f5049c645eea4edf3eac61ac6125c4382bea15999372651c0bedb101c6de3cefe71b3c94b24b07b8aafdf4bdcc2569b869280ee381d3e45f30dbd8e28014119a6036cb506f7a2b2a5039de729d400860c16bc46bebeacfb205403097943553bbef64d6a817d60ca21b7944848733b0e4e78d36219fe86bf2274f10f977fa07fbc307484bc1feaf02343682711f9e4f55c773e427969ba85891fcf67bd340694e5cb9d5c00f376b9c56c24a7515286a8f0955784b81819d216b26cb77c27d976c9faeba5c250cac", 0xdc}, {&(0x7f00000007c0)="67a9692bdd01faed906c6411d8c3a7e0037340873e5a1f6e59dd24d02cac6a000e0000000000000000c5157b4b67317e2e9d65f6f94b47bb606a3b5972a27beec2880dae2aaf9fdf76039f47a0e9956f24bb4a2d94a5a46c4bcc8731b57e2dd876b270bfc262781bfefe470234d1af7089438b0300a46e3098df7afc754445be4f47dfc5548d483f2c9f1608e91ee2050fbbc9ab46e0fddf55f35049c188aaf606ec39f8e96e680d1c0e65", 0xffffff41}, {&(0x7f0000000680)="3568ced1970359734f553b38b7e823cd3e4b260c303ab8f70591545b2a2b14963069f94c3ca955f4bb502b1aeb095ad4c1b37b6b3b62288dfdd4c0b492978a19052e6e96eda0c016236e84100e5f5575853b502832362059529b4c31113a6c6befe743f70b26074f05cb699444c998bd9ed5b1765520c1581b18941abd3d3bd35902afb1637275c1924c35613d7c627f9478b466be188e7ca7b352919595291d82e87bc3127bc04a8575397369098197bc477a5f71b6e53cf90a926505375904", 0xc0}, {&(0x7f0000000980)="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", 0x51}], 0x5, 0x0, 0x0, 0x20040890}, 0x2404c800) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r3, &(0x7f0000000380)={@void, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @val={@void, {0x8100, 0x4, 0x1, 0x6}}, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "5393bf", 0x2e, 0x6, 0x1, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], @payload_named={{{{{0x2e, 0x0, 0x1, 0x1, 0x1, 0xa, 0x1, 0x2, 0x54, 0x0, 0x2, 0x2, 0x2, 0x2, 0xa, 0xb7aa, 0x4, 0x4e22, 0x4e24}, 0x3, 0x2}, 0x4, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}}, 0x68) 0s ago: executing program 4 (id=3650): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000100)='./file1/file2/file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYRES64=r1], &(0x7f00000000c0)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd825}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x2efe, &(0x7f0000000400)={0x0, 0xe8e5, 0x1000, 0x20001, 0x2d6}) r6 = io_uring_setup(0x7625, &(0x7f0000000380)={0x0, 0x653f, 0x1000, 0x1, 0xd4, 0x0, r5}) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000000)={0x2108, r0}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="f1ffffffffffaaaaaaaaaa3486dd6076db4000442f00fe801800000000000000000000000021ff020000000000000000000000000001042065580000020000000800000086dd080088be00000000100000000100000000000000080022eb0000000020008010020000000000000000010000"], 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902120001000000000904"], 0x0) kernel console output (not intermixed with test programs): IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.699368][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.774753][ T24] usb 4-1: USB disconnect, device number 69 [ 915.359787][T18017] veth0_to_bond: entered allmulticast mode [ 915.387728][T18016] syzkaller0: entered promiscuous mode [ 915.393244][T18016] syzkaller0: entered allmulticast mode [ 915.780576][T18024] binder: 18022:18024 ioctl 4018620d 0 returned -22 [ 916.081241][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 916.091185][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 916.098823][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 916.107306][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 916.126395][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 916.389702][ T5893] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 916.673657][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.689410][ T5893] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 916.703997][ T5893] usb 3-1: config 0 interface 0 has no altsetting 0 [ 916.721298][ T5893] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 916.736920][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 916.745457][ T5893] usb 3-1: Product: syz [ 916.750579][ T5893] usb 3-1: Manufacturer: syz [ 916.759445][ T5893] usb 3-1: SerialNumber: syz [ 916.774329][ T5893] usb 3-1: config 0 descriptor?? [ 916.812089][ T5893] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 916.852184][T17918] udevd[17918]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 917.000445][T18034] netlink: 35863 bytes leftover after parsing attributes in process `syz.2.3150'. [ 917.020018][ T5872] usb 3-1: USB disconnect, device number 88 [ 917.409923][ T5872] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 917.615901][ T5872] usb 3-1: config 2 has an invalid interface number: 240 but max is 0 [ 917.649621][ T5872] usb 3-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 917.699153][ T5872] usb 3-1: config 2 has an invalid descriptor of length 37, skipping remainder of the config [ 917.760045][ T5872] usb 3-1: config 2 has no interface number 0 [ 917.766162][ T5872] usb 3-1: config 2 interface 240 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 917.860583][ T5872] usb 3-1: config 2 interface 240 has no altsetting 0 [ 917.930667][ T5872] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=fb.ce [ 917.960451][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.998818][ T5872] usb 3-1: Product: syz [ 918.008943][ T5872] usb 3-1: Manufacturer: 허䌩훎惝瑗뢣鎾뽬ᦔ቏쨽龾儕敂࿙ㅡ䉡螘䤢ᷔ㷃養ꖇ䅝䎞圿훰쑪劣䉛垽㉙ᚖ쭚痃沧囐͎꺏쏬풒◣헮겗ꮻﾆ᭧貦⳻千銜풃⺫ྍ卑먪マ兩鉗罃⠓㏠祇緭ࣵᷛ嵖忴牄롇탑㫡䑽ᢡ嶪ǿ⾓谿먪췠䊹䦌藍ꏽ늇寓꒦僰ꚠ╮胉櫝DŽꁙ뮶ﻼ㡾瘋캬ǿ࿀퐫ᝂ⼋姟ۚć斋ꙹ昮䭦닊윦 [ 918.179587][ T5822] Bluetooth: hci2: command tx timeout [ 918.186210][ T5872] usb 3-1: SerialNumber: syz [ 918.416446][ T5872] adutux 3-1:2.240: interrupt endpoints not found [ 918.437224][ T5872] usb 3-1: USB disconnect, device number 89 [ 919.007782][ T60] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.281722][ T60] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.305047][T18050] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3152'. [ 919.447828][T18030] chnl_net:caif_netlink_parms(): no params data found [ 919.498811][ T60] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.635450][ T60] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.071998][T18030] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.087324][T18030] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.097314][T18030] bridge_slave_0: entered allmulticast mode [ 920.116697][T18030] bridge_slave_0: entered promiscuous mode [ 920.177445][T18030] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.195675][T18030] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.259820][ T5822] Bluetooth: hci2: command tx timeout [ 920.317126][T18030] bridge_slave_1: entered allmulticast mode [ 920.481042][T18030] bridge_slave_1: entered promiscuous mode [ 920.564858][T18030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 920.614106][T18030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.045181][T18030] team0: Port device team_slave_0 added [ 921.059333][T18030] team0: Port device team_slave_1 added [ 921.066311][T18079] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3161'. [ 921.118269][T18030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.152329][T18030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.279573][T18030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.306422][T16403] libceph: connect (1)[c::]:6789 error -101 [ 921.370716][T16403] libceph: mon0 (1)[c::]:6789 connect error [ 921.434727][T18030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.454076][T18030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.459799][T18083] ceph: No mds server is up or the cluster is laggy [ 921.555208][T18030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.208125][T18030] hsr_slave_0: entered promiscuous mode [ 922.349666][ T5822] Bluetooth: hci2: command tx timeout [ 922.467589][T18030] hsr_slave_1: entered promiscuous mode [ 922.493088][T18092] syzkaller0: entered promiscuous mode [ 922.498572][T18092] syzkaller0: entered allmulticast mode [ 923.264438][T18116] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 923.756045][T18116] can: request_module (can-proto-0) failed. [ 924.419581][ T5822] Bluetooth: hci2: command tx timeout [ 924.427171][T18128] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3168'. [ 926.929306][T18146] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 926.945339][T18145] veth0_to_bond: entered allmulticast mode [ 926.952638][T18153] block nbd4: not configured, cannot reconfigure [ 927.240727][T18144] netem: incorrect gi model size [ 927.286087][T18144] netem: change failed [ 927.458379][T18147] syzkaller0: entered promiscuous mode [ 927.472561][T18157] can: request_module (can-proto-0) failed. [ 927.483428][T18147] syzkaller0: entered allmulticast mode [ 928.580861][ T5822] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 928.595509][ T5822] Bluetooth: hci5: Injecting HCI hardware error event [ 928.598925][T18185] block nbd3: not configured, cannot reconfigure [ 928.604163][ T5822] Bluetooth: hci5: hardware error 0x00 [ 929.315291][T18184] netem: incorrect gi model size [ 929.320379][T18184] netem: change failed [ 930.664719][ T5822] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 931.069952][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.354322][T18216] input: syz0 as /devices/virtual/input/input107 [ 932.159912][T18234] overlay: ./file0 is not a directory [ 932.382925][T18213] syzkaller0: entered promiscuous mode [ 932.408060][T18213] syzkaller0: entered allmulticast mode [ 932.684134][T18030] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 932.754762][T18237] veth0_to_bond: entered allmulticast mode [ 932.763994][T18030] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 933.169564][ T5808] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 933.359520][ T5808] usb 2-1: Using ep0 maxpacket: 8 [ 933.365880][ T5808] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 933.375266][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.482219][ T5808] pvrusb2: Hardware description: Terratec Grabster AV400 [ 933.489397][ T5808] pvrusb2: ********** [ 933.531758][ T5808] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 933.573997][ T5808] pvrusb2: Important functionality might not be entirely working. [ 933.594499][ T5808] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 933.623886][ T5808] pvrusb2: ********** [ 933.698492][ T2335] pvrusb2: Invalid write control endpoint [ 933.784617][ T2335] pvrusb2: Invalid write control endpoint [ 933.792948][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 933.813980][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 933.829993][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 933.848996][ T2335] pvrusb2: Device being rendered inoperable [ 933.876035][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 933.896835][T18248] pvrusb2: Attempted to execute control transfer when device not ok [ 933.907190][ T24] usb 2-1: USB disconnect, device number 80 [ 933.934301][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 933.950556][ T2335] pvrusb2: Attached sub-driver cx25840 [ 933.969516][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 933.989567][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 935.153270][T18030] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 935.283567][T18241] syzkaller0: entered promiscuous mode [ 935.289043][T18241] syzkaller0: entered allmulticast mode [ 935.428542][T18266] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 935.680138][T18266] can: request_module (can-proto-0) failed. [ 936.549011][T18270] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3194'. [ 937.490127][T18030] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 938.526618][T18030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.582185][T18030] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.598017][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.605166][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.936838][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.944006][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.057769][T18287] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.106715][T18291] syzkaller0: entered promiscuous mode [ 939.119743][T18291] syzkaller0: entered allmulticast mode [ 939.159982][T18287] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.508165][T18287] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.527204][T18030] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 939.575516][T18030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 939.701207][T18287] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.325007][T18329] input: syz0 as /devices/virtual/input/input108 [ 940.674758][T18324] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3201'. [ 942.811051][ T976] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.821848][T14947] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.847970][T14947] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.881492][T14947] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.758719][T18030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.929744][ T5894] IPVS: starting estimator thread 0... [ 944.959408][T18030] veth0_vlan: entered promiscuous mode [ 945.109717][T18407] IPVS: using max 35 ests per chain, 84000 per kthread [ 945.157049][T18030] veth1_vlan: entered promiscuous mode [ 945.178009][T18030] veth0_macvtap: entered promiscuous mode [ 945.193394][T18030] veth1_macvtap: entered promiscuous mode [ 945.225338][T18030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.252907][T18030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.281682][ T7196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.291071][ T7196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.345351][ T7196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.354135][ T7196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.582761][T18418] netlink: 'syz.3.3212': attribute type 21 has an invalid length. [ 945.612133][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.639108][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.671065][T18418] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3212'. [ 945.696503][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.705322][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.317630][T18422] netlink: 'syz.0.3146': attribute type 21 has an invalid length. [ 946.340256][T18422] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3146'. [ 946.388550][T18422] netlink: 'syz.0.3146': attribute type 21 has an invalid length. [ 946.439608][T18422] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3146'. [ 947.460146][T18448] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 948.504276][T11077] Bluetooth: hci1: command 0x0406 tx timeout [ 948.829840][ T5894] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 949.190774][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.201478][T18462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 949.201490][ T5894] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 949.227305][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0 [ 949.246410][ T5894] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 949.268949][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 949.338669][ T5894] usb 2-1: Product: syz [ 949.536571][ T5894] usb 2-1: Manufacturer: syz [ 949.587649][ T5894] usb 2-1: SerialNumber: syz [ 949.602767][ T5894] usb 2-1: config 0 descriptor?? [ 949.654921][ T5894] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 949.772359][T18454] udevd[18454]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 949.842463][ C0] Unknown status report in ack skb [ 950.693941][T18453] netlink: 35863 bytes leftover after parsing attributes in process `syz.1.3222'. [ 950.706421][ T5894] usb 2-1: USB disconnect, device number 81 [ 951.045832][T18498] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3234'. [ 951.115482][T18489] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.149545][ T5894] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 951.409519][ T5894] usb 2-1: config 2 has an invalid interface number: 240 but max is 0 [ 951.417712][ T5894] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 951.499577][ T5894] usb 2-1: config 2 has an invalid descriptor of length 37, skipping remainder of the config [ 951.570913][ T5894] usb 2-1: config 2 has no interface number 0 [ 951.609607][ T5894] usb 2-1: config 2 interface 240 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 951.641147][T18489] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.723639][ T5894] usb 2-1: config 2 interface 240 has no altsetting 0 [ 951.786112][ T5894] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=fb.ce [ 951.851434][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.949525][ T5894] usb 2-1: Product: syz [ 951.953710][ T5894] usb 2-1: Manufacturer: 허䌩훎惝瑗뢣鎾뽬ᦔ቏쨽龾儕敂࿙ㅡ䉡螘䤢ᷔ㷃養ꖇ䅝䎞圿훰쑪劣䉛垽㉙ᚖ쭚痃沧囐͎꺏쏬풒◣헮겗ꮻﾆ᭧貦⳻千銜풃⺫ྍ卑먪マ兩鉗罃⠓㏠祇緭ࣵᷛ嵖忴牄롇탑㫡䑽ᢡ嶪ǿ⾓谿먪췠䊹䦌藍ꏽ늇寓꒦僰ꚠ╮胉櫝DŽꁙ뮶ﻼ㡾瘋캬ǿ࿀퐫ᝂ⼋姟ۚć斋ꙹ昮䭦닊윦 [ 952.017171][T18489] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.019544][ T24] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 952.044115][ T5894] usb 2-1: SerialNumber: syz [ 952.061522][ T5894] usb 2-1: can't set config #2, error -71 [ 952.068369][ T5894] usb 2-1: USB disconnect, device number 82 [ 952.137663][T18489] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.264977][ T976] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.290320][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 952.382905][ T24] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 952.392124][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.442647][ T24] usb 4-1: Product: syz [ 952.464235][ T976] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.473329][ T24] usb 4-1: Manufacturer: syz [ 952.548730][ T24] usb 4-1: SerialNumber: syz [ 952.556798][ T7196] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.581149][ T24] usb 4-1: config 0 descriptor?? [ 952.595169][ T7196] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.595352][T18518] SELinux: ebitmap: truncated map [ 952.609634][T18518] SELinux: failed to load policy [ 952.624335][T18518] tmpfs: Bad value for 'huge' [ 952.702257][T18520] Cannot find del_set index 2 as target [ 952.797148][ T24] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 953.100913][ T30] audit: type=1400 audit(1760018089.993:1064): avc: denied { listen } for pid=18506 comm="syz.3.3236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 953.124643][ T5894] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 953.310370][ T24] gspca_sunplus: reg_w_riv err -110 [ 953.311959][ T5925] IPVS: starting estimator thread 0... [ 953.321825][ T24] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 953.478765][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.505347][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.559699][T18530] IPVS: using max 44 ests per chain, 105600 per kthread [ 953.573855][ T5894] usb 2-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 953.597160][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.649968][ T5894] usb 2-1: config 0 descriptor?? [ 953.757122][ T24] usb 4-1: USB disconnect, device number 70 [ 954.288494][ T5894] usbhid 2-1:0.0: can't add hid device: -71 [ 954.294671][ T5894] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 954.312871][ T5894] usb 2-1: USB disconnect, device number 83 [ 955.332524][T18550] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3247'. [ 956.086924][T18558] FAULT_INJECTION: forcing a failure. [ 956.086924][T18558] name failslab, interval 1, probability 0, space 0, times 0 [ 956.104683][T18558] CPU: 0 UID: 0 PID: 18558 Comm: syz.1.3251 Not tainted syzkaller #0 PREEMPT(full) [ 956.104707][T18558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 956.104718][T18558] Call Trace: [ 956.104724][T18558] [ 956.104732][T18558] dump_stack_lvl+0x16c/0x1f0 [ 956.104764][T18558] should_fail_ex+0x512/0x640 [ 956.104790][T18558] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 956.104820][T18558] should_failslab+0xc2/0x120 [ 956.104840][T18558] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 956.104864][T18558] ? d_lookup+0xe7/0x190 [ 956.104889][T18558] ? alloc_inode+0x61/0x240 [ 956.104915][T18558] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 956.104941][T18558] ? alloc_inode+0x61/0x240 [ 956.104962][T18558] alloc_inode+0x61/0x240 [ 956.104984][T18558] new_inode+0x22/0x1c0 [ 956.105009][T18558] __debugfs_create_file+0x11c/0x6b0 [ 956.105030][T18558] debugfs_create_file_full+0x41/0x60 [ 956.105050][T18558] ? __pfx_vlan_setup+0x10/0x10 [ 956.105070][T18558] ref_tracker_dir_debugfs+0x19d/0x290 [ 956.105088][T18558] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 956.105128][T18558] ? alloc_netdev_mqs+0xd7/0x1550 [ 956.105156][T18558] ? lockdep_init_map_type+0x5c/0x280 [ 956.105178][T18558] alloc_netdev_mqs+0x314/0x1550 [ 956.105211][T18558] rtnl_create_link+0xc08/0xf90 [ 956.105242][T18558] rtnl_newlink+0xb69/0x2000 [ 956.105284][T18558] ? __pfx_rtnl_newlink+0x10/0x10 [ 956.105309][T18558] ? find_held_lock+0x2b/0x80 [ 956.105333][T18558] ? avc_has_perm_noaudit+0x117/0x3b0 [ 956.105360][T18558] ? avc_has_perm_noaudit+0x149/0x3b0 [ 956.105407][T18558] ? find_held_lock+0x2b/0x80 [ 956.105427][T18558] ? __pfx_rtnl_newlink+0x10/0x10 [ 956.105452][T18558] ? __pfx_rtnl_newlink+0x10/0x10 [ 956.105476][T18558] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 956.105504][T18558] ? __pfx_rtnl_newlink+0x10/0x10 [ 956.105530][T18558] rtnetlink_rcv_msg+0x95e/0xe90 [ 956.105560][T18558] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 956.105595][T18558] ? ref_tracker_free+0x37c/0x830 [ 956.105615][T18558] netlink_rcv_skb+0x155/0x420 [ 956.105632][T18558] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 956.105661][T18558] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 956.105687][T18558] ? netlink_deliver_tap+0x1ae/0xd30 [ 956.105719][T18558] netlink_unicast+0x5aa/0x870 [ 956.105739][T18558] ? __pfx_netlink_unicast+0x10/0x10 [ 956.105766][T18558] netlink_sendmsg+0x8c8/0xdd0 [ 956.105788][T18558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 956.105815][T18558] ____sys_sendmsg+0xa95/0xc70 [ 956.105836][T18558] ? copy_msghdr_from_user+0x10a/0x160 [ 956.105862][T18558] ? __pfx_____sys_sendmsg+0x10/0x10 [ 956.105893][T18558] ___sys_sendmsg+0x134/0x1d0 [ 956.105921][T18558] ? __pfx____sys_sendmsg+0x10/0x10 [ 956.105981][T18558] __sys_sendmsg+0x16d/0x220 [ 956.106007][T18558] ? __pfx___sys_sendmsg+0x10/0x10 [ 956.106051][T18558] do_syscall_64+0xcd/0xfa0 [ 956.106080][T18558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.106098][T18558] RIP: 0033:0x7f229a78eec9 [ 956.106113][T18558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 956.106130][T18558] RSP: 002b:00007f229b6d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 956.106148][T18558] RAX: ffffffffffffffda RBX: 00007f229a9e5fa0 RCX: 00007f229a78eec9 [ 956.106159][T18558] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 956.106170][T18558] RBP: 00007f229b6d9090 R08: 0000000000000000 R09: 0000000000000000 [ 956.106180][T18558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.106191][T18558] R13: 00007f229a9e6038 R14: 00007f229a9e5fa0 R15: 00007ffc53672428 [ 956.106218][T18558] [ 956.106225][T18558] debugfs: out of free dentries, can not create file 'netdev@ffff888028a32610' [ 956.112640][T18562] netlink: 'syz.3.3248': attribute type 10 has an invalid length. [ 956.424284][ T30] audit: type=1400 audit(1760018093.313:1065): avc: denied { listen } for pid=18563 comm="syz.1.3253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 956.535464][T18562] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 956.772426][ T30] audit: type=1400 audit(1760018093.633:1066): avc: denied { connect } for pid=18572 comm="syz.2.3254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 956.820978][ T30] audit: type=1400 audit(1760018093.633:1067): avc: denied { bind } for pid=18572 comm="syz.2.3254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 959.509533][T18604] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3261'. [ 959.837780][T18605] input: syz0 as /devices/virtual/input/input109 [ 960.534764][T18610] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 960.550574][T18610] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 960.604683][T18619] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3266'. [ 960.709564][ T5894] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 961.345130][ T5894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.436187][ T5894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 961.460641][T18628] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 961.480507][ T5894] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 961.495054][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.526361][ T5894] usb 4-1: Product: syz [ 961.531929][ T5894] usb 4-1: Manufacturer: syz [ 961.537727][ T5894] usb 4-1: SerialNumber: syz [ 962.060804][ T5894] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 962.066836][ T5894] cdc_ncm 4-1:1.0: bind() failure [ 962.078697][ T5894] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 962.096266][ T5894] cdc_ncm 4-1:1.1: bind() failure [ 962.263355][ T5894] usb 4-1: USB disconnect, device number 71 [ 962.289255][T18639] Bluetooth: hci3: Frame reassembly failed (-84) [ 962.300584][ T5965] Bluetooth: hci3: Frame reassembly failed (-84) [ 962.674733][T18655] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3273'. [ 963.136077][T18658] Unknown status report in ack skb [ 963.748209][T18665] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 963.756994][T18665] VFS: Can't find a romfs filesystem on dev nullb0. [ 963.756994][T18665] [ 964.339825][ T5822] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 964.581443][T18678] binder: 18676:18678 ioctl 8010aa01 200000000100 returned -22 [ 965.443564][T18681] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3279'. [ 965.895350][T18693] netem: incorrect gi model size [ 965.909809][T18693] netem: change failed [ 966.026814][T18693] block nbd0: not configured, cannot reconfigure [ 967.267465][T18704] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3288'. [ 968.376790][T18734] netlink: 'syz.0.3295': attribute type 12 has an invalid length. [ 968.384860][ T30] audit: type=1400 audit(1760018105.263:1068): avc: denied { getopt } for pid=18733 comm="syz.0.3295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 968.922661][T18746] netem: incorrect gi model size [ 968.927618][T18746] netem: change failed [ 968.981831][T18746] block nbd0: not configured, cannot reconfigure [ 969.070051][ T5894] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 969.425043][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.664733][ T5894] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 969.957869][T18760] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3300'. [ 970.159509][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0 [ 970.191925][ T5894] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 970.281843][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 970.355447][ T5894] usb 2-1: Product: syz [ 970.360460][ T5894] usb 2-1: Manufacturer: syz [ 970.691373][ T5894] usb 2-1: SerialNumber: syz [ 970.723337][ T5894] usb 2-1: config 0 descriptor?? [ 970.753890][ T5894] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 971.246574][T18730] udevd[18730]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 971.362775][T18743] netlink: 35863 bytes leftover after parsing attributes in process `syz.1.3297'. [ 971.505024][ T24] usb 2-1: USB disconnect, device number 84 [ 971.711281][T18769] netlink: 'syz.0.3302': attribute type 21 has an invalid length. [ 971.790439][T18769] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3302'. [ 971.899540][ T24] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 971.907546][T18771] netlink: 'syz.0.3302': attribute type 21 has an invalid length. [ 971.925930][T18771] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3302'. [ 971.939618][ T5808] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 972.085141][ T24] usb 2-1: config 2 has an invalid interface number: 240 but max is 0 [ 972.105089][ T5808] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 972.132339][ T24] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 972.162818][ T5808] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 972.221766][ T24] usb 2-1: config 2 has an invalid descriptor of length 37, skipping remainder of the config [ 972.264268][ T5808] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 972.309975][ T24] usb 2-1: config 2 has no interface number 0 [ 972.335801][ T5808] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 972.365394][ T24] usb 2-1: config 2 interface 240 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 972.429294][ T5808] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 972.476800][ T24] usb 2-1: config 2 interface 240 has no altsetting 0 [ 972.531460][ T5808] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 972.561827][ T24] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=fb.ce [ 972.619558][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 972.627738][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.697288][ T5808] usb 4-1: Product: syz [ 972.699836][T18786] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3305'. [ 972.720615][ T24] usb 2-1: Product: syz [ 972.724786][ T24] usb 2-1: Manufacturer: 허䌩훎惝瑗뢣鎾뽬ᦔ቏쨽龾儕敂࿙ㅡ䉡螘䤢ᷔ㷃養ꖇ䅝䎞圿훰쑪劣䉛垽㉙ᚖ쭚痃沧囐͎꺏쏬풒◣헮겗ꮻﾆ᭧貦⳻千銜풃⺫ྍ卑먪マ兩鉗罃⠓㏠祇緭ࣵᷛ嵖忴牄롇탑㫡䑽ᢡ嶪ǿ⾓谿먪췠䊹䦌藍ꏽ늇寓꒦僰ꚠ╮胉櫝DŽꁙ뮶ﻼ㡾瘋캬ǿ࿀퐫ᝂ⼋姟ۚć斋ꙹ昮䭦닊윦 [ 972.814980][ T5808] usb 4-1: Manufacturer: syz [ 972.977535][ T5808] cdc_wdm 4-1:1.0: skipping garbage [ 972.982969][ T5808] cdc_wdm 4-1:1.0: skipping garbage [ 972.989097][ T5808] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 972.995658][ T5808] cdc_wdm 4-1:1.0: Unknown control protocol [ 973.028248][ T24] usb 2-1: SerialNumber: syz [ 973.062375][ T24] usb 2-1: can't set config #2, error -71 [ 973.079307][ T24] usb 2-1: USB disconnect, device number 85 [ 975.743512][T18810] syzkaller0: entered promiscuous mode [ 975.749025][T18810] syzkaller0: entered allmulticast mode [ 976.513244][ T5872] usb 4-1: USB disconnect, device number 72 [ 976.570780][T18822] input: syz0 as /devices/virtual/input/input110 [ 976.902358][T18826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3316'. [ 977.738759][ T30] audit: type=1400 audit(1760018114.623:1069): avc: denied { read write } for pid=17485 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 977.811815][T18840] No control pipe specified [ 978.079891][ T30] audit: type=1400 audit(1760018114.623:1070): avc: denied { open } for pid=17485 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 978.122969][ T30] audit: type=1400 audit(1760018114.623:1071): avc: denied { ioctl } for pid=17485 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 978.160396][ T30] audit: type=1400 audit(1760018114.663:1072): avc: denied { map_create } for pid=18834 comm="syz.4.3318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 978.197092][ T30] audit: type=1400 audit(1760018114.673:1073): avc: denied { execute } for pid=18841 comm="syz.2.3321" dev="tmpfs" ino=1482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 978.219614][ T30] audit: type=1400 audit(1760018114.673:1074): avc: denied { execute_no_trans } for pid=18841 comm="syz.2.3321" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 978.249885][ T30] audit: type=1400 audit(1760018114.673:1075): avc: denied { read write } for pid=18841 comm="syz.2.3321" name="v4l-subdev2" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 978.281872][ T30] audit: type=1400 audit(1760018114.673:1076): avc: denied { open } for pid=18841 comm="syz.2.3321" path="/dev/v4l-subdev2" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 978.306981][ T30] audit: type=1400 audit(1760018114.673:1077): avc: denied { read } for pid=18841 comm="syz.2.3321" dev="nsfs" ino=4026532815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 978.352757][ T30] audit: type=1400 audit(1760018114.673:1078): avc: denied { open } for pid=18841 comm="syz.2.3321" path="net:[4026532815]" dev="nsfs" ino=4026532815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 978.882982][T18854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3322'. [ 980.471910][T18859] : renamed from bridge_slave_0 (while UP) [ 981.378463][T18877] 9pnet: Found fid 0 not clunked [ 981.510274][T18872] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3327'. [ 981.629533][ T5894] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 981.778569][T18888] netem: incorrect gi model size [ 981.818211][T18888] netem: change failed [ 981.823743][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 981.913398][ T5894] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 981.923446][ T5894] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 982.032238][ T5894] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 982.049294][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 982.076730][T18892] input: syz0 as /devices/virtual/input/input111 [ 982.106293][ T5894] usb 2-1: SerialNumber: syz [ 982.179738][T18876] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 982.187385][T18876] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 982.412584][T18876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.422662][T18876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.442247][T18876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3326'. [ 982.646541][T18895] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3332'. [ 983.541815][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 983.541830][ T30] audit: type=1400 audit(1760018120.433:1136): avc: denied { create } for pid=18899 comm="syz.2.3334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 983.599521][ T10] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 983.759507][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 983.766032][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 983.775130][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.788825][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 983.819485][ T10] pvrusb2: ********** [ 983.823574][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 983.857414][ T10] pvrusb2: Important functionality might not be entirely working. [ 984.049639][ T30] audit: type=1400 audit(1760018120.833:1137): avc: denied { map_read map_write } for pid=18905 comm="syz.2.3336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 984.053335][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 984.081770][ T10] pvrusb2: ********** [ 984.182667][ T2335] pvrusb2: Invalid write control endpoint [ 984.237815][ T30] audit: type=1400 audit(1760018120.883:1138): avc: denied { module_request } for pid=18905 comm="syz.2.3336" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 984.355331][ T30] audit: type=1400 audit(1760018121.153:1139): avc: denied { sys_module } for pid=18905 comm="syz.2.3336" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 984.383878][ T5894] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 984.725217][T18908] syzkaller0: entered promiscuous mode [ 984.957064][T18908] syzkaller0: entered allmulticast mode [ 984.962521][ T2335] pvrusb2: Invalid write control endpoint [ 984.968329][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 984.990540][ T30] audit: type=1400 audit(1760018121.353:1140): avc: denied { create } for pid=18914 comm="syz.1.3338" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 985.286141][ T5894] usb 2-1: USB disconnect, device number 86 [ 985.300114][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 985.330327][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 985.334292][ T30] audit: type=1400 audit(1760018122.213:1141): avc: denied { unlink } for pid=17107 comm="syz-executor" name="file0" dev="tmpfs" ino=373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 985.378631][ T2335] pvrusb2: Device being rendered inoperable [ 985.395597][T18920] pvrusb2: Attempted to execute control transfer when device not ok [ 985.409119][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 985.417582][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 985.417912][ T5808] usb 4-1: USB disconnect, device number 73 [ 985.431395][ T2335] pvrusb2: Attached sub-driver cx25840 [ 985.441766][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 985.456784][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 985.713042][ T5894] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 985.881395][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 985.890623][ T5894] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 985.900019][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.913501][ T5894] pvrusb2: Hardware description: Terratec Grabster AV400 [ 985.926039][ T5894] pvrusb2: ********** [ 985.930332][ T5894] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 985.949586][ T5894] pvrusb2: Important functionality might not be entirely working. [ 985.959917][ T5894] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 985.975946][ T5894] pvrusb2: ********** [ 986.130618][ T2335] pvrusb2: Invalid write control endpoint [ 986.240432][ T2335] pvrusb2: Invalid write control endpoint [ 986.259299][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 986.271342][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 986.295923][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 986.315714][ T2335] pvrusb2: Device being rendered inoperable [ 986.322057][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 986.329306][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 986.360743][ T2335] pvrusb2: Attached sub-driver cx25840 [ 986.366682][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 986.390863][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 986.575381][T18928] pvrusb2: Attempted to execute control transfer when device not ok [ 986.786771][ T5872] usb 2-1: USB disconnect, device number 87 [ 987.741384][T18935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3342'. [ 987.940102][T18933] netlink: 'syz.4.3341': attribute type 21 has an invalid length. [ 987.983889][ T30] audit: type=1400 audit(1760018124.873:1142): avc: denied { write } for pid=18939 comm="syz.1.3344" name="psched" dev="proc" ino=4026533239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 988.129600][T18934] netlink: 'syz.4.3341': attribute type 21 has an invalid length. [ 988.631825][ T30] audit: type=1400 audit(1760018125.103:1143): avc: denied { setopt } for pid=18939 comm="syz.1.3344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 988.655729][ T30] audit: type=1400 audit(1760018125.103:1144): avc: denied { bind } for pid=18939 comm="syz.1.3344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 988.676460][ T30] audit: type=1400 audit(1760018125.103:1145): avc: denied { name_bind } for pid=18939 comm="syz.1.3344" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 988.725620][ T30] audit: type=1400 audit(1760018125.103:1146): avc: denied { node_bind } for pid=18939 comm="syz.1.3344" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 988.825389][ T30] audit: type=1400 audit(1760018125.113:1147): avc: denied { write } for pid=18939 comm="syz.1.3344" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 988.847492][ T30] audit: type=1400 audit(1760018125.113:1148): avc: denied { connect } for pid=18939 comm="syz.1.3344" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 988.877640][ T30] audit: type=1400 audit(1760018125.113:1149): avc: denied { name_connect } for pid=18939 comm="syz.1.3344" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 988.945953][ T30] audit: type=1400 audit(1760018125.833:1150): avc: denied { ioctl } for pid=18945 comm="syz.1.3345" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=75752 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 989.166344][T18933] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3341'. [ 989.175880][T18934] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3341'. [ 989.229490][ T5894] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 989.389504][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 989.629832][ T30] audit: type=1400 audit(1760018126.513:1151): avc: denied { create } for pid=18951 comm="syz.0.3349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 989.633161][ T5894] usb 2-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 989.804991][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.823720][ T5894] usb 2-1: config 0 descriptor?? [ 990.145840][ T30] audit: type=1400 audit(1760018126.553:1152): avc: denied { ioctl } for pid=18949 comm="syz.2.3347" path="socket:[75767]" dev="sockfs" ino=75767 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 990.204744][T18957] input: syz0 as /devices/virtual/input/input112 [ 990.464555][ T5894] logitech 0003:046D:C219.000F: hidraw0: USB HID v0.00 Device [HID 046d:c219] on usb-dummy_hcd.1-1/input0 [ 990.484936][ T5894] logitech 0003:046D:C219.000F: no inputs found [ 990.695014][ T5894] usb 2-1: USB disconnect, device number 88 [ 990.715328][T18960] fido_id[18960]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 991.052703][ T5925] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 991.388216][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 991.409823][ T5925] usb 4-1: unable to get BOS descriptor or descriptor too short [ 991.437472][ T5925] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 991.976935][ T5925] usb 4-1: config 4 has no interface number 0 [ 992.005862][ T5925] usb 4-1: config 4 interface 30 has no altsetting 0 [ 992.382902][ T5925] usb 4-1: string descriptor 0 read error: -22 [ 992.389144][ T5925] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 992.459469][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.491396][ T5925] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 992.498469][ T5925] dw2102: su3000_power_ctrl: 1, initialized 0 [ 992.509692][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.534153][ T5925] dvb-usb: bulk message failed: -22 (2/0) [ 992.545416][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 992.558396][ T5925] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 992.574036][ T5925] usb 4-1: media controller created [ 992.579336][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 992.617467][ T5925] dw2102: i2c transfer failed. [ 992.627813][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 992.642817][ T5925] dw2102: i2c transfer failed. [ 992.654339][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 992.661258][ T5925] dw2102: i2c transfer failed. [ 992.670511][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 992.676774][ T5925] dw2102: i2c transfer failed. [ 992.699566][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 992.719247][ T5925] dw2102: i2c transfer failed. [ 992.733565][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 992.827450][ T5925] dw2102: i2c transfer failed. [ 992.832560][ T5925] dvb-usb: MAC address: 02:02:02:02:02:02 [ 993.306621][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 993.369910][ T5925] dvb-usb: bulk message failed: -22 (3/0) [ 993.396163][ T5925] dw2102: command 0x0e transfer failed. [ 993.410452][ T5925] dvb-usb: bulk message failed: -22 (3/0) [ 993.426258][ T5925] dw2102: command 0x0e transfer failed. [ 993.529270][T18987] syzkaller0: entered promiscuous mode [ 993.539823][T18987] syzkaller0: entered allmulticast mode [ 993.761241][T18996] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3355'. [ 993.771381][ T5925] dvb-usb: bulk message failed: -22 (3/0) [ 993.777087][ T5925] dw2102: command 0x0e transfer failed. [ 993.783129][ T5925] dvb-usb: bulk message failed: -22 (3/0) [ 993.788848][ T5925] dw2102: command 0x0e transfer failed. [ 993.807188][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 993.819824][ T5925] dw2102: command 0x51 transfer failed. [ 993.826575][ T5925] dvb-usb: bulk message failed: -22 (5/0) [ 993.827055][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 993.827067][ T30] audit: type=1400 audit(1760018130.713:1159): avc: denied { create } for pid=18998 comm="syz.1.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 993.909824][ T30] audit: type=1400 audit(1760018130.723:1160): avc: denied { bind } for pid=18998 comm="syz.1.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 993.993173][ T5925] dw2102: i2c probe for address 0x68 failed. [ 994.003269][ T5925] dvb-usb: bulk message failed: -22 (5/0) [ 994.009004][ T5925] dw2102: i2c probe for address 0x69 failed. [ 994.498792][ T5925] dvb-usb: bulk message failed: -22 (5/0) [ 994.533348][ T5925] dw2102: i2c probe for address 0x6a failed. [ 994.584728][ T5925] dw2102: probing for demodulator failed. Is the external power switched on? [ 994.593737][T11077] Bluetooth: hci0: command 0x0406 tx timeout [ 994.594008][ T5925] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 994.750229][ T5925] rc_core: IR keymap rc-tt-1500 not found [ 994.777357][ T5925] Registered IR keymap rc-empty [ 994.854033][T19011] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3360'. [ 994.872958][ T5925] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 994.939626][ T5925] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input113 [ 994.953600][ T5925] dvb-usb: schedule remote query interval to 250 msecs. [ 994.961814][ T5925] dw2102: su3000_power_ctrl: 0, initialized 1 [ 994.968316][ T5925] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 995.032025][ T5925] usb 4-1: USB disconnect, device number 74 [ 995.223967][ T5925] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 995.647422][ T30] audit: type=1400 audit(1760018132.513:1161): avc: denied { read append } for pid=19013 comm="syz.0.3363" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 995.679973][ T30] audit: type=1400 audit(1760018132.513:1162): avc: denied { open } for pid=19013 comm="syz.0.3363" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 996.198595][ T30] audit: type=1400 audit(1760018132.613:1163): avc: denied { create } for pid=19013 comm="syz.0.3363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 996.227733][ T30] audit: type=1400 audit(1760018132.633:1164): avc: denied { getopt } for pid=19013 comm="syz.0.3363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 997.307813][T19026] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3367'. [ 997.376770][ T30] audit: type=1400 audit(1760018134.263:1165): avc: denied { create } for pid=19025 comm="syz.4.3367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 997.431774][T16403] libceph: connect (1)[c::]:6789 error -101 [ 997.438124][ T30] audit: type=1400 audit(1760018134.263:1166): avc: denied { setopt } for pid=19025 comm="syz.4.3367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 997.494982][T16403] libceph: mon0 (1)[c::]:6789 connect error [ 997.708411][ T30] audit: type=1400 audit(1760018134.593:1167): avc: denied { bind } for pid=19031 comm="syz.1.3368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 997.731704][ T30] audit: type=1400 audit(1760018134.593:1168): avc: denied { ioctl } for pid=19031 comm="syz.1.3368" path="socket:[76878]" dev="sockfs" ino=76878 ioctlcmd=0x48d5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 997.770103][T16403] libceph: connect (1)[c::]:6789 error -101 [ 997.776245][T16403] libceph: mon0 (1)[c::]:6789 connect error [ 998.189606][T19028] ceph: No mds server is up or the cluster is laggy [ 998.895902][T19052] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 998.969504][ T30] audit: type=1400 audit(1760018135.613:1169): avc: denied { setopt } for pid=19040 comm="syz.1.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 999.066338][ T30] audit: type=1400 audit(1760018135.613:1170): avc: denied { accept } for pid=19040 comm="syz.1.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 999.175202][T19052] can: request_module (can-proto-0) failed. [ 999.201838][ T30] audit: type=1400 audit(1760018135.613:1171): avc: denied { write } for pid=19040 comm="syz.1.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 999.242375][ T30] audit: type=1400 audit(1760018135.783:1172): avc: denied { mount } for pid=19049 comm="syz.0.3373" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 999.290674][ C1] Unknown status report in ack skb [ 999.707116][ T30] audit: type=1400 audit(1760018135.823:1173): avc: denied { mounton } for pid=19034 comm="syz.3.3369" path="/92/file0" dev="tmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 999.730213][ T30] audit: type=1400 audit(1760018135.823:1174): avc: denied { mount } for pid=19049 comm="syz.0.3373" name="/" dev="overlay" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 999.765634][ T30] audit: type=1400 audit(1760018135.823:1175): avc: denied { mount } for pid=19034 comm="syz.3.3369" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1000.152176][ T30] audit: type=1400 audit(1760018135.833:1176): avc: denied { read write } for pid=19034 comm="syz.3.3369" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1000.201975][ T30] audit: type=1400 audit(1760018135.833:1177): avc: denied { open } for pid=19034 comm="syz.3.3369" path="/92/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1000.224698][ T30] audit: type=1400 audit(1760018136.093:1178): avc: denied { unmount } for pid=16777 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1000.958588][T19081] bridge0: port 3(batadv1) entered blocking state [ 1000.968102][T19081] bridge0: port 3(batadv1) entered disabled state [ 1000.974784][T19081] batadv1: entered allmulticast mode [ 1000.997991][T19081] batadv1: entered promiscuous mode [ 1001.203701][T19070] syzkaller0: entered promiscuous mode [ 1001.209237][T19070] syzkaller0: entered allmulticast mode [ 1001.469728][ T49] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1001.479330][ T49] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1001.576440][T19093] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3376'. [ 1001.702204][T16403] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1001.862967][T16403] usb 2-1: too many configurations: 176, using maximum allowed: 8 [ 1001.880990][T16403] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1001.895642][T16403] usb 2-1: can't read configurations, error -61 [ 1002.040973][T16403] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1002.202712][T16403] usb 2-1: too many configurations: 176, using maximum allowed: 8 [ 1002.224520][T16403] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1002.232181][T16403] usb 2-1: can't read configurations, error -61 [ 1002.244894][T16403] usb usb2-port1: attempt power cycle [ 1002.742306][T16403] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1002.795401][T16403] usb 2-1: too many configurations: 176, using maximum allowed: 8 [ 1002.813716][T16403] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1002.839534][T16403] usb 2-1: can't read configurations, error -61 [ 1002.982251][T16403] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1003.015350][T16403] usb 2-1: too many configurations: 176, using maximum allowed: 8 [ 1003.033825][T16403] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1003.046849][T16403] usb 2-1: can't read configurations, error -61 [ 1003.058538][T16403] usb usb2-port1: unable to enumerate USB device [ 1003.617928][T19109] netlink: 'syz.0.3386': attribute type 4 has an invalid length. [ 1004.193002][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1004.193015][ T30] audit: type=1400 audit(1760018141.083:1200): avc: denied { create } for pid=19116 comm="syz.1.3389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1005.269516][ T30] audit: type=1400 audit(1760018141.163:1201): avc: denied { setopt } for pid=19115 comm="syz.4.3388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1005.289948][ T30] audit: type=1400 audit(1760018141.723:1202): avc: denied { ioctl } for pid=19116 comm="syz.1.3389" path="socket:[76282]" dev="sockfs" ino=76282 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1005.321437][ T30] audit: type=1400 audit(1760018141.943:1203): avc: denied { read } for pid=19116 comm="syz.1.3389" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1005.345938][ T30] audit: type=1400 audit(1760018141.943:1204): avc: denied { open } for pid=19116 comm="syz.1.3389" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1005.411807][ T30] audit: type=1400 audit(1760018142.303:1205): avc: denied { connect } for pid=19121 comm="syz.4.3392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1005.490247][ T30] audit: type=1400 audit(1760018142.333:1206): avc: denied { name_bind } for pid=19121 comm="syz.4.3392" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1005.580394][T19131] fuse: Bad value for 'fd' [ 1005.593765][T19134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3390'. [ 1005.614382][ T30] audit: type=1400 audit(1760018142.503:1207): avc: denied { read write } for pid=19132 comm="syz.1.3394" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1005.664084][T19135] overlay: ./file0 is not a directory [ 1005.732677][T16403] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1005.895987][ T30] audit: type=1400 audit(1760018142.503:1208): avc: denied { open } for pid=19132 comm="syz.1.3394" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1005.955431][ T30] audit: type=1400 audit(1760018142.843:1209): avc: denied { read } for pid=19132 comm="syz.1.3394" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1006.334804][T16403] usb 1-1: Using ep0 maxpacket: 16 [ 1006.350819][T16403] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.361769][T16403] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.371704][T16403] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1006.380903][T16403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.390300][T16403] usb 1-1: config 0 descriptor?? [ 1007.029254][T19148] lo speed is unknown, defaulting to 1000 [ 1007.149969][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 1007.200529][T19148] lo speed is unknown, defaulting to 1000 [ 1007.309716][T19148] lo speed is unknown, defaulting to 1000 [ 1007.374306][T19142] syzkaller0: entered promiscuous mode [ 1007.380410][T19142] syzkaller0: entered allmulticast mode [ 1007.436350][T19148] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1007.779763][T19148] lo speed is unknown, defaulting to 1000 [ 1008.989557][ T5894] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1009.209697][ T5894] usb 4-1: device descriptor read/64, error -71 [ 1009.449824][ T5894] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1009.593391][ T5894] usb 4-1: device descriptor read/64, error -71 [ 1009.712746][ T5894] usb usb4-port1: attempt power cycle [ 1010.061607][ T5894] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1010.098636][T19148] lo speed is unknown, defaulting to 1000 [ 1010.100153][ T5894] usb 4-1: device descriptor read/8, error -71 [ 1010.108856][T19148] lo speed is unknown, defaulting to 1000 [ 1010.131242][T19148] lo speed is unknown, defaulting to 1000 [ 1010.144877][T19148] lo speed is unknown, defaulting to 1000 [ 1010.170641][T19148] lo speed is unknown, defaulting to 1000 [ 1010.312732][T16403] usbhid 1-1:0.0: can't add hid device: -71 [ 1010.318764][T16403] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1010.335510][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1010.335526][ T30] audit: type=1400 audit(1760018147.223:1221): avc: denied { lock } for pid=19175 comm="syz.4.3405" path="socket:[77359]" dev="sockfs" ino=77359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1010.351265][T19176] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1010.373043][ T5894] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1010.401036][T16403] usb 1-1: USB disconnect, device number 88 [ 1010.429944][ T5894] usb 4-1: device descriptor read/8, error -71 [ 1010.530543][ T5950] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1010.531653][T19180] FAULT_INJECTION: forcing a failure. [ 1010.531653][T19180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1010.551924][T19180] CPU: 1 UID: 0 PID: 19180 Comm: syz.0.3407 Not tainted syzkaller #0 PREEMPT(full) [ 1010.551948][T19180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1010.551958][T19180] Call Trace: [ 1010.551964][T19180] [ 1010.551971][T19180] dump_stack_lvl+0x16c/0x1f0 [ 1010.552001][T19180] should_fail_ex+0x512/0x640 [ 1010.552030][T19180] _copy_from_user+0x2e/0xd0 [ 1010.552057][T19180] copy_msghdr_from_user+0x98/0x160 [ 1010.552083][T19180] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1010.552118][T19180] ___sys_sendmsg+0xfe/0x1d0 [ 1010.552144][T19180] ? __pfx____sys_sendmsg+0x10/0x10 [ 1010.552201][T19180] __sys_sendmsg+0x16d/0x220 [ 1010.552226][T19180] ? __pfx___sys_sendmsg+0x10/0x10 [ 1010.552267][T19180] do_syscall_64+0xcd/0xfa0 [ 1010.552273][ T5894] usb usb4-port1: unable to enumerate USB device [ 1010.552294][T19180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.552312][T19180] RIP: 0033:0x7f8c3d58eec9 [ 1010.552326][T19180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1010.552341][T19180] RSP: 002b:00007f8c3e352038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1010.552357][T19180] RAX: ffffffffffffffda RBX: 00007f8c3d7e5fa0 RCX: 00007f8c3d58eec9 [ 1010.552367][T19180] RDX: 0000000000000000 RSI: 0000200000004340 RDI: 0000000000000003 [ 1010.552377][T19180] RBP: 00007f8c3e352090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.552386][T19180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.552395][T19180] R13: 00007f8c3d7e6038 R14: 00007f8c3d7e5fa0 R15: 00007fff3373c058 [ 1010.552418][T19180] [ 1010.610907][ T30] audit: type=1400 audit(1760018147.483:1222): avc: denied { read } for pid=19184 comm="syz.0.3409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1010.895882][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1010.965716][ T5950] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1010.999626][ T55] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 1010.999729][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.015872][ T5950] usb 2-1: Product: syz [ 1011.021570][ T5950] usb 2-1: Manufacturer: syz [ 1011.026268][ T5950] usb 2-1: SerialNumber: syz [ 1011.075031][ T5950] usb 2-1: config 0 descriptor?? [ 1011.153074][ T55] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=63.01 [ 1011.164416][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.172941][ T55] usb 1-1: Product: syz [ 1011.177521][ T55] usb 1-1: Manufacturer: syz [ 1011.182581][ T55] usb 1-1: SerialNumber: syz [ 1011.190164][ T55] usb 1-1: config 0 descriptor?? [ 1012.175224][ T5950] usb 2-1: USB disconnect, device number 93 [ 1012.270143][T18880] udevd[18880]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1012.906282][T19217] fuse: Bad value for 'fd' [ 1012.944585][ T55] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1013.021769][ T55] usb 1-1: USB disconnect, device number 89 [ 1013.046955][T19219] overlay: ./file0 is not a directory [ 1013.243597][T18882] udevd[18882]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1013.700909][T19232] netem: incorrect gi model size [ 1013.706547][T19232] netem: change failed [ 1013.712670][T19232] block nbd3: not configured, cannot reconfigure [ 1014.315734][T19248] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3424'. [ 1014.326513][T19248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65049 sclass=netlink_route_socket pid=19248 comm=syz.0.3424 [ 1014.361779][ T30] audit: type=1400 audit(1760018151.253:1223): avc: denied { connect } for pid=19242 comm="syz.0.3424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1014.425279][ T30] audit: type=1400 audit(1760018151.313:1224): avc: denied { write } for pid=19239 comm="syz.3.3422" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1014.617027][T19252] Unknown status report in ack skb [ 1014.693747][T19257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3426'. [ 1014.821587][ T30] audit: type=1400 audit(1760018151.693:1225): avc: denied { bind } for pid=19250 comm="syz.0.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1014.846221][ T30] audit: type=1400 audit(1760018151.693:1226): avc: denied { write } for pid=19250 comm="syz.0.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1015.811778][T19274] ALSA: mixer_oss: invalid OSS volume 'PHONEX0IN' [ 1015.991792][ T30] audit: type=1400 audit(1760018152.883:1227): avc: denied { connect } for pid=19269 comm="syz.3.3430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1016.020292][ T5822] Bluetooth: hci2: link tx timeout [ 1016.026986][ T5822] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1016.048920][T11077] Bluetooth: hci2: link tx timeout [ 1016.055043][T11077] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1016.063725][T11077] Bluetooth: hci2: link tx timeout [ 1016.068945][T11077] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1016.549116][ T30] audit: type=1400 audit(1760018152.903:1228): avc: denied { write } for pid=19269 comm="syz.3.3430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1017.082407][T19281] netem: incorrect gi model size [ 1017.087933][T19281] netem: change failed [ 1017.120084][ T30] audit: type=1400 audit(1760018154.003:1229): avc: denied { read write } for pid=19277 comm="syz.1.3432" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1017.145001][ T30] audit: type=1400 audit(1760018154.013:1230): avc: denied { open } for pid=19277 comm="syz.1.3432" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1017.177493][ T30] audit: type=1400 audit(1760018154.013:1231): avc: denied { ioctl } for pid=19277 comm="syz.1.3432" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1017.189670][T19281] block nbd2: not configured, cannot reconfigure [ 1017.463857][T19296] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3438'. [ 1017.595269][T19287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3435'. [ 1017.669497][ T5893] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1017.677097][ T5950] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1017.820951][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.831192][ T5893] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1017.844313][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1017.850990][ T55] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1017.851084][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.860672][ T5893] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1017.869217][ T5950] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1017.877804][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1017.891166][ T5950] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1017.898910][ T5893] usb 1-1: Product: syz [ 1017.909964][ T5893] usb 1-1: Manufacturer: syz [ 1017.914569][ T5893] usb 1-1: SerialNumber: syz [ 1017.921550][ T5950] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1017.922221][ T5893] usb 1-1: config 0 descriptor?? [ 1017.930899][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1017.944269][ T5950] usb 3-1: Product: syz [ 1017.948476][ T5950] usb 3-1: Manufacturer: syz [ 1017.953420][ T5950] usb 3-1: SerialNumber: syz [ 1017.955377][ T5893] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1017.960217][ T5950] usb 3-1: config 0 descriptor?? [ 1017.987012][T18882] udevd[18882]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1017.995903][ T5950] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1018.003686][ T55] usb 4-1: device descriptor read/64, error -71 [ 1018.041149][T18882] udevd[18882]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1018.104092][T11077] Bluetooth: hci2: command 0x0406 tx timeout [ 1018.168348][T19286] netlink: 35863 bytes leftover after parsing attributes in process `syz.0.3434'. [ 1018.189130][T19293] netlink: 35863 bytes leftover after parsing attributes in process `syz.2.3437'. [ 1018.195748][ T5950] usb 1-1: USB disconnect, device number 90 [ 1018.200948][ T5893] usb 3-1: USB disconnect, device number 90 [ 1018.257112][ T55] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1018.419666][ T55] usb 4-1: device descriptor read/64, error -71 [ 1018.570630][ T55] usb usb4-port1: attempt power cycle [ 1018.609863][ T5893] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1018.640726][ T5950] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 1018.880366][ T5893] usb 3-1: config 2 has an invalid interface number: 240 but max is 0 [ 1018.917459][ T5893] usb 3-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 1018.989513][ T55] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1018.997179][ T5893] usb 3-1: config 2 has an invalid descriptor of length 37, skipping remainder of the config [ 1019.049524][ T5893] usb 3-1: config 2 has no interface number 0 [ 1019.063888][ T55] usb 4-1: device descriptor read/8, error -71 [ 1019.087582][ T5950] usb 1-1: config 2 has an invalid interface number: 240 but max is 0 [ 1019.104924][ T5893] usb 3-1: config 2 interface 240 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1019.126232][ T5950] usb 1-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 1019.169052][ T5893] usb 3-1: config 2 interface 240 has no altsetting 0 [ 1019.211325][ T5893] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=fb.ce [ 1019.219461][ T5950] usb 1-1: config 2 has an invalid descriptor of length 37, skipping remainder of the config [ 1019.269494][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.297896][ T5950] usb 1-1: config 2 has no interface number 0 [ 1019.312435][ T5893] usb 3-1: Product: syz [ 1019.316610][ T5893] usb 3-1: Manufacturer: 허䌩훎惝瑗뢣鎾뽬ᦔ቏쨽龾儕敂࿙ㅡ䉡螘䤢ᷔ㷃養ꖇ䅝䎞圿훰쑪劣䉛垽㉙ᚖ쭚痃沧囐͎꺏쏬풒◣헮겗ꮻﾆ᭧貦⳻千銜풃⺫ྍ卑먪マ兩鉗罃⠓㏠祇緭ࣵᷛ嵖忴牄롇탑㫡䑽ᢡ嶪ǿ⾓谿먪췠䊹䦌藍ꏽ늇寓꒦僰ꚠ╮胉櫝DŽꁙ뮶ﻼ㡾瘋캬ǿ࿀퐫ᝂ⼋姟ۚć斋ꙹ昮䭦닊윦 [ 1019.351936][ T5950] usb 1-1: config 2 interface 240 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1019.380168][ T55] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1019.469438][ T5950] usb 1-1: config 2 interface 240 has no altsetting 0 [ 1019.469561][ T55] usb 4-1: device descriptor read/8, error -71 [ 1019.512845][ T5950] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=fb.ce [ 1019.569489][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.577500][ T5950] usb 1-1: Product: syz [ 1019.629542][ T5893] usb 3-1: SerialNumber: syz [ 1019.669781][ T55] usb usb4-port1: unable to enumerate USB device [ 1019.679487][ T5950] usb 1-1: Manufacturer: 허䌩훎惝瑗뢣鎾뽬ᦔ቏쨽龾儕敂࿙ㅡ䉡螘䤢ᷔ㷃養ꖇ䅝䎞圿훰쑪劣䉛垽㉙ᚖ쭚痃沧囐͎꺏쏬풒◣헮겗ꮻﾆ᭧貦⳻千銜풃⺫ྍ卑먪マ兩鉗罃⠓㏠祇緭ࣵᷛ嵖忴牄롇탑㫡䑽ᢡ嶪ǿ⾓谿먪췠䊹䦌藍ꏽ늇寓꒦僰ꚠ╮胉櫝DŽꁙ뮶ﻼ㡾瘋캬ǿ࿀퐫ᝂ⼋姟ۚć斋ꙹ昮䭦닊윦 [ 1019.880700][ T5893] adutux 3-1:2.240: interrupt endpoints not found [ 1019.899482][ T5950] usb 1-1: SerialNumber: syz [ 1019.931812][ T5893] usb 3-1: USB disconnect, device number 91 [ 1020.132587][ T5950] adutux 1-1:2.240: interrupt endpoints not found [ 1020.152054][ T5950] usb 1-1: USB disconnect, device number 91 [ 1020.179891][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 1021.038785][T19320] input: syz0 as /devices/virtual/input/input114 [ 1021.087680][ T30] audit: type=1400 audit(1760018157.973:1232): avc: denied { nlmsg_write } for pid=19306 comm="syz.1.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1021.256100][ T30] audit: type=1400 audit(1760018158.143:1233): avc: denied { create } for pid=19306 comm="syz.1.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1021.554720][ T30] audit: type=1400 audit(1760018158.163:1234): avc: denied { ioctl } for pid=19306 comm="syz.1.3440" path="socket:[77861]" dev="sockfs" ino=77861 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1022.347065][T19333] netem: incorrect gi model size [ 1022.371834][T19334] block nbd2: not configured, cannot reconfigure [ 1022.387027][T19333] netem: change failed [ 1022.741007][T19336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3447'. [ 1023.017843][T19345] exFAT-fs (loop1): unable to read boot sector [ 1023.024118][T19345] exFAT-fs (loop1): failed to read boot sector [ 1023.030313][T19345] exFAT-fs (loop1): failed to recognize exfat type [ 1024.159476][ T5950] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1024.231760][ T30] audit: type=1400 audit(1760018161.123:1235): avc: denied { write } for pid=19356 comm="syz.1.3454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1024.283190][ T30] audit: type=1400 audit(1760018161.123:1236): avc: denied { ioctl } for pid=19356 comm="syz.1.3454" path="socket:[77773]" dev="sockfs" ino=77773 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1024.339834][ T30] audit: type=1400 audit(1760018161.153:1237): avc: denied { bind } for pid=19356 comm="syz.1.3454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1024.392316][ T5950] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.430594][ T5950] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1024.549767][ T5950] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1024.643853][ T30] audit: type=1400 audit(1760018161.223:1238): avc: denied { create } for pid=19356 comm="syz.1.3454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1024.700213][ T5950] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1024.709377][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1024.719452][ T5950] usb 4-1: Product: syz [ 1024.750816][ T5950] usb 4-1: Manufacturer: syz [ 1024.765687][ T5950] usb 4-1: SerialNumber: syz [ 1024.784667][ T5950] usb 4-1: config 0 descriptor?? [ 1024.839514][ T5950] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1024.856669][ T30] audit: type=1400 audit(1760018161.743:1239): avc: denied { create } for pid=19364 comm="syz.4.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1024.888669][T18882] udevd[18882]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1024.909256][ T30] audit: type=1400 audit(1760018161.773:1240): avc: denied { create } for pid=19362 comm="syz.0.3456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1024.938895][ T30] audit: type=1400 audit(1760018161.773:1241): avc: denied { getopt } for pid=19362 comm="syz.0.3456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1025.251141][T19371] netlink: 35863 bytes leftover after parsing attributes in process `syz.3.3453'. [ 1025.267719][ T55] usb 4-1: USB disconnect, device number 83 [ 1025.592727][ T55] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 1026.011345][ T55] usb 4-1: config 2 has an invalid interface number: 240 but max is 0 [ 1026.051353][ T55] usb 4-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 1026.102753][ T55] usb 4-1: config 2 has an invalid descriptor of length 37, skipping remainder of the config [ 1026.207024][ T55] usb 4-1: config 2 has no interface number 0 [ 1026.264662][ T55] usb 4-1: config 2 interface 240 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1026.319561][ T55] usb 4-1: config 2 interface 240 has no altsetting 0 [ 1026.341112][ T55] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=fb.ce [ 1026.379501][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.387516][ T55] usb 4-1: Product: syz [ 1026.409914][ T55] usb 4-1: Manufacturer: 허䌩훎惝瑗뢣鎾뽬ᦔ቏쨽龾儕敂࿙ㅡ䉡螘䤢ᷔ㷃養ꖇ䅝䎞圿훰쑪劣䉛垽㉙ᚖ쭚痃沧囐͎꺏쏬풒◣헮겗ꮻﾆ᭧貦⳻千銜풃⺫ྍ卑먪マ兩鉗罃⠓㏠祇緭ࣵᷛ嵖忴牄롇탑㫡䑽ᢡ嶪ǿ⾓谿먪췠䊹䦌藍ꏽ늇寓꒦僰ꚠ╮胉櫝DŽꁙ뮶ﻼ㡾瘋캬ǿ࿀퐫ᝂ⼋姟ۚć斋ꙹ昮䭦닊윦 [ 1026.559472][ T55] usb 4-1: SerialNumber: syz [ 1027.065168][ T55] adutux 4-1:2.240: interrupt endpoints not found [ 1027.071690][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1027.071703][ T30] audit: type=1400 audit(1760018163.953:1244): avc: denied { kexec_image_load } for pid=19378 comm="syz.2.3464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1027.079607][ T55] usb 4-1: USB disconnect, device number 84 [ 1027.349737][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1027.360045][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1027.369009][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1027.378193][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1027.396266][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1027.429001][ T30] audit: type=1400 audit(1760018164.313:1245): avc: denied { mounton } for pid=19389 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1027.453378][T19389] lo speed is unknown, defaulting to 1000 [ 1027.690627][T19389] chnl_net:caif_netlink_parms(): no params data found [ 1027.843191][T19407] 9pnet_fd: Insufficient options for proto=fd [ 1027.886715][T19389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.894181][T19389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.939679][T19389] bridge_slave_0: entered allmulticast mode [ 1027.966601][T19389] bridge_slave_0: entered promiscuous mode [ 1028.136257][T19389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.846595][ T30] audit: type=1400 audit(1760018165.453:1246): avc: denied { ioctl } for pid=19413 comm="syz.4.3470" path="socket:[79008]" dev="sockfs" ino=79008 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1028.846630][T19389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.888908][T19389] bridge_slave_1: entered allmulticast mode [ 1028.922655][T19389] bridge_slave_1: entered promiscuous mode [ 1028.969465][ T30] audit: type=1400 audit(1760018165.453:1247): avc: denied { connect } for pid=19413 comm="syz.4.3470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1028.993428][ T30] audit: type=1400 audit(1760018165.453:1248): avc: denied { write } for pid=19413 comm="syz.4.3470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1029.064170][T19389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.103652][T19389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.414124][T19389] team0: Port device team_slave_0 added [ 1029.423839][T19389] team0: Port device team_slave_1 added [ 1029.469660][T16779] Bluetooth: hci2: command tx timeout [ 1029.971826][T19389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.978801][T19389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.004670][ C0] vkms_vblank_simulate: vblank timer overrun [ 1030.011725][T19389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.257211][T19389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.314938][T19389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.350892][T19389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.442937][ T30] audit: type=1400 audit(1760018167.323:1249): avc: denied { ioctl } for pid=19432 comm="syz.4.3475" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1030.468148][ C0] vkms_vblank_simulate: vblank timer overrun [ 1030.531986][T19389] hsr_slave_0: entered promiscuous mode [ 1030.559690][T19389] hsr_slave_1: entered promiscuous mode [ 1030.565649][T19389] debugfs: 'hsr0' already exists in 'hsr' [ 1030.573339][T19389] Cannot create hsr debugfs directory [ 1030.607653][T19439] block nbd3: not configured, cannot reconfigure [ 1030.679941][ T24] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1030.747804][T19442] tmpfs: Unknown parameter 'R^ grpquota_inodehar' [ 1030.765666][T19389] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1030.775183][T19389] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1030.795186][T19389] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1030.812683][T19442] ISOFS: Unable to identify CD-ROM format. [ 1030.843593][T19389] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1030.922613][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.942805][ T24] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1031.006132][ T30] audit: type=1400 audit(1760018167.893:1250): avc: denied { read } for pid=19443 comm="syz.3.3479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1031.378314][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1031.388082][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1031.397474][ T24] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1031.412884][ T24] usb 3-1: Product: syz [ 1031.417109][ T24] usb 3-1: Manufacturer: syz [ 1031.421345][ T30] audit: type=1400 audit(1760018168.303:1251): avc: denied { read write } for pid=19453 comm="syz.1.3480" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1031.422091][ T24] usb 3-1: SerialNumber: syz [ 1031.445307][ T30] audit: type=1400 audit(1760018168.303:1252): avc: denied { open } for pid=19453 comm="syz.1.3480" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1031.560679][T16779] Bluetooth: hci2: command tx timeout [ 1031.569588][ T30] audit: type=1400 audit(1760018168.303:1253): avc: denied { append } for pid=19453 comm="syz.1.3480" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1031.569934][T19389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.108743][ T24] usb 3-1: config 0 descriptor?? [ 1032.110079][T19389] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.189885][ T24] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1032.192292][ T7196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.205924][ T7196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.328433][T19462] loop6: detected capacity change from 0 to 524288000 [ 1032.349597][T19462] buffer_io_error: 11 callbacks suppressed [ 1032.349691][T19462] Buffer I/O error on dev loop6, logical block 0, async page read [ 1032.364660][T19462] Buffer I/O error on dev loop6, logical block 0, async page read [ 1032.373661][T19462] Buffer I/O error on dev loop6, logical block 0, async page read [ 1032.381813][T19462] Buffer I/O error on dev loop6, logical block 0, async page read [ 1032.390633][T19462] Buffer I/O error on dev loop6, logical block 0, async page read [ 1032.399433][T19462] Buffer I/O error on dev loop6, logical block 0, async page read [ 1032.408628][T19462] Buffer I/O error on dev loop6, logical block 0, async page read [ 1032.421638][T19462] Buffer I/O error on dev loop6, logical block 0, async page read [ 1032.430628][T19462] ldm_validate_partition_table(): Disk read failed. [ 1032.437751][T19462] Buffer I/O error on dev loop6, logical block 0, async page read [ 1032.446321][T19462] Buffer I/O error on dev loop6, logical block 0, async page read [ 1032.458916][T19462] Dev loop6: unable to read RDB block 0 [ 1032.467701][T19462] loop6: unable to read partition table [ 1032.477219][T19462] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 1032.639694][ T30] audit: type=1400 audit(1760018169.523:1254): avc: denied { shutdown } for pid=19453 comm="syz.1.3480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1032.668913][T18882] udevd[18882]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1032.691834][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.698934][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.717441][T19435] netlink: 35863 bytes leftover after parsing attributes in process `syz.2.3476'. [ 1032.731622][ T5925] usb 3-1: USB disconnect, device number 92 [ 1032.928547][T19389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1033.100072][ T5925] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1033.385041][ T5925] usb 3-1: config 2 has an invalid interface number: 240 but max is 0 [ 1033.539883][ T5925] usb 3-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 1033.619831][T16779] Bluetooth: hci2: command tx timeout [ 1033.669697][ T5925] usb 3-1: config 2 has an invalid descriptor of length 37, skipping remainder of the config [ 1033.909206][ T5925] usb 3-1: config 2 has no interface number 0 [ 1033.952768][ T5925] usb 3-1: config 2 interface 240 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1034.019512][ T5925] usb 3-1: config 2 interface 240 has no altsetting 0 [ 1034.063591][ T5925] usb 3-1: string descriptor 0 read error: -71 [ 1034.090160][ T5925] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=fb.ce [ 1034.371372][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.606285][ T5925] usb 3-1: can't set config #2, error -71 [ 1034.617459][ T5925] usb 3-1: USB disconnect, device number 93 [ 1034.676603][T19470] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.802820][T19470] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.817866][T19486] block nbd4: not configured, cannot reconfigure [ 1034.858216][T19474] syzkaller0: entered promiscuous mode [ 1034.863736][T19474] syzkaller0: entered allmulticast mode [ 1034.873998][T19389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.941200][T19470] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.699864][T16779] Bluetooth: hci2: command tx timeout [ 1035.811044][T19498] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3489'. [ 1037.069769][T19508] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1037.070989][ T30] audit: type=1400 audit(1760018173.103:1255): avc: denied { setopt } for pid=19503 comm="syz.4.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1037.100240][ T30] audit: type=1400 audit(1760018173.363:1256): avc: denied { create } for pid=19503 comm="syz.4.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1038.650517][T19470] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.089623][ T30] audit: type=1400 audit(1760018175.973:1257): avc: denied { write } for pid=19521 comm="syz.2.3495" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1039.144521][ T10] kernel read not supported for file /input/event1 (pid: 10 comm: kworker/0:1) [ 1039.190061][T19389] veth0_vlan: entered promiscuous mode [ 1039.193535][ T30] audit: type=1400 audit(1760018175.973:1258): avc: denied { open } for pid=19521 comm="syz.2.3495" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1039.196264][ T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.236360][ T30] audit: type=1400 audit(1760018175.973:1259): avc: denied { mounton } for pid=19521 comm="syz.2.3495" path="/syzcgroup/net/syz2/cgroup.procs" dev="cgroup" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 1039.434967][T19389] veth1_vlan: entered promiscuous mode [ 1039.449745][T14947] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.457972][T14947] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.554206][T19534] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3496'. [ 1039.605735][ T30] audit: type=1400 audit(1760018176.313:1260): avc: denied { name_connect } for pid=19523 comm="syz.4.3496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1039.625250][T19389] veth0_macvtap: entered promiscuous mode [ 1039.636337][T19389] veth1_macvtap: entered promiscuous mode [ 1039.648226][ T30] audit: type=1400 audit(1760018176.463:1261): avc: denied { bind } for pid=19530 comm="syz.2.3498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1039.668021][T14947] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.681045][ T30] audit: type=1400 audit(1760018176.463:1262): avc: denied { connect } for pid=19530 comm="syz.2.3498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1039.722300][T19389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.735321][T19389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1039.750325][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.850663][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.886403][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.621363][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.733130][ T55] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1040.995432][ T30] audit: type=1400 audit(1760018177.563:1263): avc: denied { ioctl } for pid=19547 comm="syz.2.3501" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1041.393124][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 1041.430977][ T5965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.431179][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.441687][ T5965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.463816][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1041.487057][ T55] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 1041.498588][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.503580][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.508721][ T55] usb 4-1: config 0 descriptor?? [ 1041.520526][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.536506][ T30] audit: type=1400 audit(1760018178.423:1264): avc: denied { mounton } for pid=19389 comm="syz-executor" path="/root/syzkaller.9oCLYB/syz-tmp" dev="sda1" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1041.829674][ T30] audit: type=1400 audit(1760018178.693:1265): avc: denied { mount } for pid=19389 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1041.911698][ T30] audit: type=1400 audit(1760018178.693:1266): avc: denied { mount } for pid=19389 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1042.014723][T19563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3462'. [ 1042.116714][T19565] block nbd5: not configured, cannot reconfigure [ 1042.331730][T19567] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3504'. [ 1042.956516][ T55] usbhid 4-1:0.0: can't add hid device: -71 [ 1042.963553][ T55] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1043.047318][ T55] usb 4-1: USB disconnect, device number 85 [ 1044.056256][T19588] sp0: Synchronizing with TNC [ 1044.161840][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1044.161855][ T30] audit: type=1400 audit(1760018181.053:1279): avc: denied { search } for pid=5477 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1044.301712][ T30] audit: type=1400 audit(1760018181.083:1280): avc: denied { search } for pid=5477 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1044.323921][ T30] audit: type=1400 audit(1760018181.083:1281): avc: denied { search } for pid=5477 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1044.346396][ T30] audit: type=1400 audit(1760018181.083:1282): avc: denied { read } for pid=5477 comm="dhcpcd" name="n130" dev="tmpfs" ino=9708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1044.546749][ T30] audit: type=1400 audit(1760018181.083:1283): avc: denied { open } for pid=5477 comm="dhcpcd" path="/run/udev/data/n130" dev="tmpfs" ino=9708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1044.619522][ T30] audit: type=1400 audit(1760018181.083:1284): avc: denied { getattr } for pid=5477 comm="dhcpcd" path="/run/udev/data/n130" dev="tmpfs" ino=9708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1044.650152][ T30] audit: type=1400 audit(1760018181.543:1285): avc: denied { write } for pid=19600 comm="syz.1.3517" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1044.677130][T19601] binder: 19600:19601 ioctl 4018620d 0 returned -22 [ 1045.485734][ T30] audit: type=1400 audit(1760018182.363:1286): avc: denied { bind } for pid=19613 comm="syz.2.3520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1048.463653][ T30] audit: type=1400 audit(1760018185.223:1287): avc: denied { setattr } for pid=19638 comm="syz.5.3529" name="dmmidi2" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1048.821208][T19646] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1049.130716][ T30] audit: type=1400 audit(1760018185.973:1288): avc: denied { getopt } for pid=19631 comm="syz.1.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1050.408855][T19668] input: syz0 as /devices/virtual/input/input115 [ 1050.950655][T19672] 9pnet_fd: Insufficient options for proto=fd [ 1050.958579][T19672] overlayfs: overlapping lowerdir path [ 1051.075779][ T30] audit: type=1400 audit(1760018187.843:1289): avc: denied { setopt } for pid=19662 comm="syz.2.3534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1051.156752][T19657] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3531'. [ 1051.487219][T19684] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1051.513630][T19684] CIFS mount error: No usable UNC path provided in device string! [ 1051.513630][T19684] [ 1051.523863][T19684] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1051.538971][T19684] binder: 19682:19684 ioctl c0046209 9999999999999999 returned -22 [ 1053.951298][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.906951][T19716] devpts: Invalid uid '0x00000000ffffffff' [ 1054.959515][ T30] audit: type=1400 audit(1760018191.793:1290): avc: denied { mount } for pid=19706 comm="syz.1.3545" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1055.037227][ T30] audit: type=1400 audit(1760018191.793:1291): avc: denied { getopt } for pid=19706 comm="syz.1.3545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1055.169310][ T30] audit: type=1400 audit(1760018191.793:1292): avc: denied { remount } for pid=19706 comm="syz.1.3545" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1055.430709][T19722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3548'. [ 1055.432126][T19723] netlink: 'syz.2.3548': attribute type 3 has an invalid length. [ 1056.078730][ T30] audit: type=1400 audit(1760018192.963:1293): avc: denied { unmount } for pid=17107 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1056.126239][T19729] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3550'. [ 1056.151850][T19729] FAULT_INJECTION: forcing a failure. [ 1056.151850][T19729] name failslab, interval 1, probability 0, space 0, times 0 [ 1056.249617][T19729] CPU: 1 UID: 0 PID: 19729 Comm: syz.4.3550 Not tainted syzkaller #0 PREEMPT(full) [ 1056.249635][T19729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1056.249642][T19729] Call Trace: [ 1056.249646][T19729] [ 1056.249650][T19729] dump_stack_lvl+0x16c/0x1f0 [ 1056.249671][T19729] should_fail_ex+0x512/0x640 [ 1056.249688][T19729] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1056.249701][T19729] should_failslab+0xc2/0x120 [ 1056.249713][T19729] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1056.249730][T19729] ? skb_clone+0x190/0x3f0 [ 1056.249749][T19729] ? skb_clone+0x190/0x3f0 [ 1056.249763][T19729] skb_clone+0x190/0x3f0 [ 1056.249780][T19729] netlink_deliver_tap+0xabd/0xd30 [ 1056.249799][T19729] netlink_unicast+0x71f/0x870 [ 1056.249812][T19729] ? __pfx_netlink_unicast+0x10/0x10 [ 1056.249821][T19729] ? __pfx_rtnl_newlink+0x10/0x10 [ 1056.249842][T19729] netlink_ack+0x696/0xb80 [ 1056.249856][T19729] netlink_rcv_skb+0x332/0x420 [ 1056.249866][T19729] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1056.249884][T19729] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1056.249899][T19729] ? netlink_deliver_tap+0x1ae/0xd30 [ 1056.249918][T19729] netlink_unicast+0x5aa/0x870 [ 1056.249930][T19729] ? __pfx_netlink_unicast+0x10/0x10 [ 1056.249945][T19729] netlink_sendmsg+0x8c8/0xdd0 [ 1056.249957][T19729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1056.249977][T19729] ____sys_sendmsg+0xa95/0xc70 [ 1056.249989][T19729] ? copy_msghdr_from_user+0x10a/0x160 [ 1056.250005][T19729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1056.250023][T19729] ___sys_sendmsg+0x134/0x1d0 [ 1056.250040][T19729] ? __pfx____sys_sendmsg+0x10/0x10 [ 1056.250073][T19729] __sys_sendmsg+0x16d/0x220 [ 1056.250089][T19729] ? __pfx___sys_sendmsg+0x10/0x10 [ 1056.250114][T19729] do_syscall_64+0xcd/0xfa0 [ 1056.250131][T19729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.250142][T19729] RIP: 0033:0x7f39f118eec9 [ 1056.250151][T19729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1056.250162][T19729] RSP: 002b:00007f39f2062038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1056.250173][T19729] RAX: ffffffffffffffda RBX: 00007f39f13e5fa0 RCX: 00007f39f118eec9 [ 1056.250180][T19729] RDX: 0000000020004090 RSI: 0000200000000180 RDI: 0000000000000004 [ 1056.250186][T19729] RBP: 00007f39f2062090 R08: 0000000000000000 R09: 0000000000000000 [ 1056.250192][T19729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1056.250199][T19729] R13: 00007f39f13e6038 R14: 00007f39f13e5fa0 R15: 00007ffd67d99d78 [ 1056.250213][T19729] [ 1056.685394][T19720] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3547'. [ 1057.172726][ T30] audit: type=1400 audit(1760018193.963:1294): avc: denied { create } for pid=19740 comm="syz.4.3554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1058.779889][T19756] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3551'. [ 1059.836911][T19763] can: request_module (can-proto-0) failed. [ 1060.401963][ T30] audit: type=1400 audit(1760018197.203:1295): avc: denied { connect } for pid=19775 comm="syz.2.3564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1063.097725][T19793] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3568'. [ 1064.583775][T19816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3573'. [ 1064.814129][T19812] can: request_module (can-proto-0) failed. [ 1064.860496][ T5925] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1065.039667][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 1065.084062][ T5925] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1065.095262][ T5925] usb 3-1: config 8 has an invalid interface number: 103 but max is 1 [ 1065.108558][ T5925] usb 3-1: config 8 has an invalid interface number: 179 but max is 1 [ 1065.132901][ T5925] usb 3-1: config 8 has no interface number 0 [ 1065.139701][ T5925] usb 3-1: config 8 has no interface number 1 [ 1065.147014][ T5925] usb 3-1: config 8 interface 103 has no altsetting 0 [ 1065.155118][ T5925] usb 3-1: config 8 interface 179 has no altsetting 0 [ 1065.164346][ T5925] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=31.12 [ 1065.178114][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.299621][ T5925] usb 3-1: Product: syz [ 1065.304174][ T5925] usb 3-1: Manufacturer: syz [ 1065.308887][ T5925] usb 3-1: SerialNumber: syz [ 1065.614020][T19829] 9pnet_fd: p9_fd_create_unix (19829): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1066.695706][ T5894] IPVS: starting estimator thread 0... [ 1066.788157][ C0] vkms_vblank_simulate: vblank timer overrun [ 1066.859766][T19846] IPVS: using max 49 ests per chain, 117600 per kthread [ 1067.657339][ T30] audit: type=1400 audit(1760018204.533:1296): avc: denied { create } for pid=19856 comm="syz.2.3583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1068.014149][ T5925] msi2500 3-1:8.103: Registered as swradio24 [ 1068.098869][ T5925] msi2500 3-1:8.103: SDR API is still slightly experimental and functionality changes may follow [ 1068.505448][ T30] audit: type=1400 audit(1760018205.003:1297): avc: denied { ioctl } for pid=19856 comm="syz.2.3583" path="socket:[80421]" dev="sockfs" ino=80421 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1068.853214][ T5925] videodev: could not get a free minor [ 1068.858697][ T5925] msi2500 3-1:8.179: Failed to register as video device (-23) [ 1068.902223][ T5925] msi2500 3-1:8.179: probe with driver msi2500 failed with error -23 [ 1069.200474][ T5925] usb 3-1: USB disconnect, device number 94 [ 1069.695257][T19882] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3587'. [ 1071.325710][ T30] audit: type=1326 audit(1760018208.213:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19902 comm="syz.5.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c9f8eec9 code=0x7ffc0000 [ 1071.447579][ T30] audit: type=1326 audit(1760018208.213:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19902 comm="syz.5.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c9f8eec9 code=0x7ffc0000 [ 1071.768641][ T30] audit: type=1326 audit(1760018208.213:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19902 comm="syz.5.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f54c9f8eec9 code=0x7ffc0000 [ 1071.847942][ T30] audit: type=1326 audit(1760018208.213:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19902 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c9f8eec9 code=0x7ffc0000 [ 1071.875476][ T30] audit: type=1326 audit(1760018208.213:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19902 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c9f8eec9 code=0x7ffc0000 [ 1071.912765][ T30] audit: type=1326 audit(1760018208.213:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19902 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54c9f8eec9 code=0x7ffc0000 [ 1071.939526][ T30] audit: type=1326 audit(1760018208.213:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19902 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c9f8eec9 code=0x7ffc0000 [ 1071.979488][ T30] audit: type=1326 audit(1760018208.213:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19902 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54c9f8eec9 code=0x7ffc0000 [ 1072.015412][T19923] bridge0: port 3(erspan0) entered blocking state [ 1072.024855][T19923] bridge0: port 3(erspan0) entered disabled state [ 1072.042662][T19923] erspan0: entered allmulticast mode [ 1072.052484][T19923] erspan0: entered promiscuous mode [ 1072.060555][T19923] bridge0: port 3(erspan0) entered blocking state [ 1072.067076][T19923] bridge0: port 3(erspan0) entered forwarding state [ 1072.143810][T19930] block nbd4: not configured, cannot reconfigure [ 1072.300663][T19926] erspan0: left allmulticast mode [ 1072.305802][T19926] erspan0: left promiscuous mode [ 1072.309642][ T5925] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1072.312969][T19926] bridge0: port 3(erspan0) entered disabled state [ 1072.784640][ T5925] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.799420][ T5925] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1072.833861][ T5925] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1072.849450][ T5925] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1072.859735][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1072.868658][ T5925] usb 4-1: Product: syz [ 1072.877192][ T5925] usb 4-1: Manufacturer: syz [ 1072.882589][ T5925] usb 4-1: SerialNumber: syz [ 1072.900056][ T5925] usb 4-1: config 0 descriptor?? [ 1073.127465][ T5925] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1073.140312][T19920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46860 sclass=netlink_route_socket pid=19920 comm=syz.3.3601 [ 1073.161842][T19770] udevd[19770]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1073.267786][ T24] usb 4-1: USB disconnect, device number 86 [ 1073.619936][ T24] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 1073.865505][ T24] usb 4-1: config 2 has an invalid interface number: 240 but max is 0 [ 1073.884023][ T24] usb 4-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 1073.979426][ T24] usb 4-1: config 2 has an invalid descriptor of length 37, skipping remainder of the config [ 1074.079401][ T24] usb 4-1: config 2 has no interface number 0 [ 1074.171771][ T24] usb 4-1: config 2 interface 240 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1074.295475][ T24] usb 4-1: config 2 interface 240 has no altsetting 0 [ 1074.378569][ T24] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=fb.ce [ 1074.440491][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.499095][ T24] usb 4-1: Product: syz [ 1074.555001][ T24] usb 4-1: Manufacturer: 허䌩훎惝瑗뢣鎾뽬ᦔ቏쨽龾儕敂࿙ㅡ䉡螘䤢ᷔ㷃養ꖇ䅝䎞圿훰쑪劣䉛垽㉙ᚖ쭚痃沧囐͎꺏쏬풒◣헮겗ꮻﾆ᭧貦⳻千銜풃⺫ྍ卑먪マ兩鉗罃⠓㏠祇緭ࣵᷛ嵖忴牄롇탑㫡䑽ᢡ嶪ǿ⾓谿먪췠䊹䦌藍ꏽ늇寓꒦僰ꚠ╮胉櫝DŽꁙ뮶ﻼ㡾瘋캬ǿ࿀퐫ᝂ⼋姟ۚć斋ꙹ昮䭦닊윦 [ 1074.814473][ T24] usb 4-1: SerialNumber: syz [ 1075.034345][ T24] adutux 4-1:2.240: interrupt endpoints not found [ 1075.076204][ T24] usb 4-1: USB disconnect, device number 87 [ 1075.090275][ T5925] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1075.286165][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 1075.367283][T19964] loop6: detected capacity change from 0 to 524288000 [ 1075.524932][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1075.559742][ T5925] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1075.580951][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.599627][ T5925] usb 3-1: Product: syz [ 1075.621091][ T5925] usb 3-1: Manufacturer: syz [ 1075.625701][ T5925] usb 3-1: SerialNumber: syz [ 1075.660188][ T5925] usb 3-1: config 0 descriptor?? [ 1075.675581][ T5925] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1075.689420][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1075.689435][ T30] audit: type=1400 audit(1760018212.563:1319): avc: denied { setopt } for pid=19961 comm="syz.3.3612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1075.752597][ T5925] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1075.790190][ T30] audit: type=1400 audit(1760018212.563:1320): avc: denied { write } for pid=19961 comm="syz.3.3612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1076.036913][T19974] input: syz0 as /devices/virtual/input/input116 [ 1076.303746][T19976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3617'. [ 1076.350932][T19979] netlink: 'syz.4.3616': attribute type 21 has an invalid length. [ 1076.358955][T19979] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3616'. [ 1076.422964][ T5925] em28xx 3-1:0.0: chip ID is em2874 [ 1076.633282][T19982] netlink: 'syz.4.3616': attribute type 21 has an invalid length. [ 1076.642379][T19982] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3616'. [ 1076.767552][ T10] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1076.919419][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1076.926379][ T10] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1076.934765][ T10] usb 2-1: config 0 has no interface number 0 [ 1076.943135][ T10] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1076.956487][ T10] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1076.967615][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1076.978676][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.987445][ T10] usb 2-1: Product: syz [ 1076.993765][ T10] usb 2-1: Manufacturer: syz [ 1076.998394][ T10] usb 2-1: SerialNumber: syz [ 1077.010388][ T10] usb 2-1: config 0 descriptor?? [ 1077.100204][ T5950] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1077.391861][ T5950] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.409456][ T5950] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1077.424861][ T5950] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1077.434390][ T5950] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1077.443735][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1077.452092][ T5950] usb 4-1: Product: syz [ 1077.456494][ T5950] usb 4-1: Manufacturer: syz [ 1077.462046][ T5950] usb 4-1: SerialNumber: syz [ 1077.609817][ T5925] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1077.649456][ T10] appletouch 2-1:0.85: Geyser mode initialized. [ 1077.682518][ T5950] usb 4-1: config 0 descriptor?? [ 1077.763529][ T30] audit: type=1326 audit(1760018214.543:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19948 comm="syz.2.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a8b8eec9 code=0x7fc00000 [ 1077.787212][ T5925] em28xx 3-1:0.0: board has no eeprom [ 1077.794817][ T10] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input117 [ 1077.858038][ T5950] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1077.899494][ T5925] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1077.907422][ T5925] em28xx 3-1:0.0: dvb set to bulk mode. [ 1078.041483][T20010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=20010 comm=syz.1.3617 [ 1078.161632][T19855] udevd[19855]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1078.178205][ T5950] em28xx 3-1:0.0: Binding DVB extension [ 1078.210128][ T5925] usb 3-1: USB disconnect, device number 95 [ 1078.216656][ T5925] em28xx 3-1:0.0: Disconnecting em28xx [ 1078.228745][T19990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46860 sclass=netlink_route_socket pid=19990 comm=syz.3.3621 [ 1078.319473][ T24] usb 4-1: USB disconnect, device number 88 [ 1078.469243][ T5950] em28xx 3-1:0.0: Registering input extension [ 1078.557183][T20017] input: syz0 as /devices/virtual/input/input118 [ 1078.829501][ T24] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 1079.031185][ T24] usb 4-1: config 2 has an invalid interface number: 240 but max is 0 [ 1079.079449][ T5950] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 1079.091916][ T24] usb 4-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 1079.149683][ T5950] Registered IR keymap rc-empty [ 1079.191978][ T5950] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1079.199473][ T24] usb 4-1: config 2 has an invalid descriptor of length 37, skipping remainder of the config [ 1079.209432][ T30] audit: type=1400 audit(1760018216.063:1322): avc: denied { mount } for pid=20020 comm="syz.2.3629" name="/" dev="autofs" ino=81265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1079.294491][ T24] usb 4-1: config 2 has no interface number 0 [ 1079.311972][ T5950] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input119 [ 1079.341778][ T24] usb 4-1: config 2 interface 240 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1079.364152][T10428] usb 2-1: USB disconnect, device number 94 [ 1079.577798][T10428] appletouch 2-1:0.85: input: appletouch disconnected [ 1079.681847][ T24] usb 4-1: config 2 interface 240 has no altsetting 0 [ 1079.799332][ T24] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=fb.ce [ 1079.810877][ T30] audit: type=1400 audit(1760018216.063:1323): avc: denied { mounton } for pid=20020 comm="syz.2.3629" path="/116/file1/bus" dev="autofs" ino=81266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 1079.811111][ T5950] em28xx 3-1:0.0: Input extension successfully initialized [ 1079.905843][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.021593][ T24] usb 4-1: Product: syz [ 1080.025785][ T24] usb 4-1: Manufacturer: 허䌩훎惝瑗뢣鎾뽬ᦔ቏쨽龾儕敂࿙ㅡ䉡螘䤢ᷔ㷃養ꖇ䅝䎞圿훰쑪劣䉛垽㉙ᚖ쭚痃沧囐͎꺏쏬풒◣헮겗ꮻﾆ᭧貦⳻千銜풃⺫ྍ卑먪マ兩鉗罃⠓㏠祇緭ࣵᷛ嵖忴牄롇탑㫡䑽ᢡ嶪ǿ⾓谿먪췠䊹䦌藍ꏽ늇寓꒦僰ꚠ╮胉櫝DŽꁙ뮶ﻼ㡾瘋캬ǿ࿀퐫ᝂ⼋姟ۚć斋ꙹ昮䭦닊윦 [ 1080.094264][ T5925] em28xx 3-1:0.0: Closing input extension [ 1080.424650][ T30] audit: type=1400 audit(1760018217.313:1324): avc: denied { unmount } for pid=17485 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1080.488932][ T24] usb 4-1: SerialNumber: syz [ 1080.502574][ T5925] em28xx 3-1:0.0: Freeing device [ 1080.546486][ T24] usb 4-1: can't set config #2, error -71 [ 1080.665731][ T24] usb 4-1: USB disconnect, device number 89 [ 1080.884155][ T30] audit: type=1400 audit(1760018217.753:1325): avc: denied { execute } for pid=20039 comm="syz.1.3637" dev="hugetlbfs" ino=81304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1081.158646][ T30] audit: type=1400 audit(1760018217.753:1326): avc: denied { execute_no_trans } for pid=20039 comm="syz.1.3637" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=81304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1081.198543][T20045] veth0_to_bond: entered allmulticast mode [ 1081.244612][ T30] audit: type=1400 audit(1760018218.103:1327): avc: denied { ioctl } for pid=20037 comm="syz.3.3635" path="socket:[81315]" dev="sockfs" ino=81315 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1081.270775][ T30] audit: type=1400 audit(1760018218.103:1328): avc: denied { connect } for pid=20037 comm="syz.3.3635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1081.418344][T20051] input: syz0 as /devices/virtual/input/input120 [ 1081.799316][ T30] audit: type=1400 audit(1760018218.673:1329): avc: denied { create } for pid=20057 comm="syz.5.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1081.866303][ T30] audit: type=1400 audit(1760018218.673:1330): avc: denied { setattr } for pid=20057 comm="syz.5.3643" name="PPPOL2TP" dev="sockfs" ino=81335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1081.893928][ T30] audit: type=1400 audit(1760018218.673:1331): avc: denied { setopt } for pid=20057 comm="syz.5.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1081.959467][ T30] audit: type=1400 audit(1760018218.743:1332): avc: denied { ioctl } for pid=20057 comm="syz.5.3643" path="socket:[81338]" dev="sockfs" ino=81338 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1082.741630][T20074] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3642'. [ 1084.019912][ T31] INFO: task kworker/u8:4:60 blocked for more than 143 seconds. [ 1084.027652][ T31] Not tainted syzkaller #0 [ 1084.034309][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1084.515297][ T31] task:kworker/u8:4 state:D stack:23528 pid:60 tgid:60 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1084.540967][ T31] Workqueue: netns cleanup_net [ 1084.551655][ T31] Call Trace: [ 1084.566875][ T31] [ 1084.569936][ T31] __schedule+0x1190/0x5de0 [ 1084.574528][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 1084.580815][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1084.585746][ T31] ? __pfx___schedule+0x10/0x10 [ 1084.590639][ T31] ? find_held_lock+0x2b/0x80 [ 1084.595310][ T31] ? schedule+0x2d7/0x3a0 [ 1084.599693][ T31] schedule+0xe7/0x3a0 [ 1084.603772][ T31] afs_cell_purge+0x41f/0x4f0 [ 1084.608441][ T31] ? __try_to_del_timer_sync+0x115/0x170 [ 1084.614171][ T31] ? __pfx_afs_cell_purge+0x10/0x10 [ 1084.619601][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 1084.625062][ T31] ? __timer_delete_sync+0x108/0x1b0 [ 1084.630347][ T31] ? __pfx_afs_net_exit+0x10/0x10 [ 1084.635376][ T31] afs_net_exit+0x83/0x140 [ 1084.639791][ T31] ops_undo_list+0x2ee/0xab0 [ 1084.644390][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1084.649574][ T31] ? cleanup_net+0x347/0x8b0 [ 1084.654154][ T31] ? idr_destroy+0x62/0x2e0 [ 1084.658647][ T31] cleanup_net+0x41b/0x8b0 [ 1084.666862][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1084.671946][ T31] ? rcu_is_watching+0x12/0xc0 [ 1084.676718][ T31] process_one_work+0x9cf/0x1b70 [ 1084.681674][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1084.687042][ T31] ? assign_work+0x1a0/0x250 [ 1084.691704][ T31] worker_thread+0x6c8/0xf10 [ 1084.696294][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1084.701479][ T31] kthread+0x3c2/0x780 [ 1084.705541][ T31] ? __pfx_kthread+0x10/0x10 [ 1084.710128][ T31] ? rcu_is_watching+0x12/0xc0 [ 1084.714902][ T31] ? __pfx_kthread+0x10/0x10 [ 1084.719506][ T31] ret_from_fork+0x672/0x7d0 [ 1084.724082][ T31] ? __pfx_kthread+0x10/0x10 [ 1084.728648][ T31] ret_from_fork_asm+0x1a/0x30 [ 1084.733551][ T31] [ 1084.736850][ T31] [ 1084.736850][ T31] Showing all locks held in the system: [ 1084.744797][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 1084.750227][ T31] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1084.760205][ T31] 1 lock held by khungtaskd/31: [ 1084.765024][ T31] #0: ffffffff8e3c44a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1084.775068][ T31] 3 locks held by kworker/u8:3/49: [ 1084.780295][ T31] #0: ffff88813ff69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1084.791619][ T31] #1: ffffc90000ba7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1084.801979][ T31] #2: ffffffff900fa988 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1084.811096][ T31] 3 locks held by kworker/u8:4/60: [ 1084.816193][ T31] #0: ffff88801bad4948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1084.826683][ T31] #1: ffffc9000211fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1084.836607][ T31] #2: ffffffff900e4570 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 1084.845961][ T31] 2 locks held by getty/5573: [ 1084.850705][ T31] #0: ffff88814e1790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1084.860522][ T31] #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1084.870643][ T31] 2 locks held by syz.5.3649/20083: [ 1084.875883][ T31] #0: ffffffff900fa988 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1084.884865][ T31] #1: ffffffff8e3cfa38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1084.895071][ T31] [ 1084.897391][ T31] ============================================= [ 1084.897391][ T31] [ 1084.905926][ T31] NMI backtrace for cpu 0 [ 1084.905942][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1084.905961][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1084.905972][ T31] Call Trace: [ 1084.905978][ T31] [ 1084.905985][ T31] dump_stack_lvl+0x116/0x1f0 [ 1084.906013][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1084.906031][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1084.906057][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1084.906085][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1084.906107][ T31] watchdog+0xf3f/0x1170 [ 1084.906133][ T31] ? rcu_is_watching+0x12/0xc0 [ 1084.906156][ T31] ? __pfx_watchdog+0x10/0x10 [ 1084.906180][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1084.906208][ T31] ? __kthread_parkme+0x19e/0x250 [ 1084.906235][ T31] ? __pfx_watchdog+0x10/0x10 [ 1084.906255][ T31] kthread+0x3c2/0x780 [ 1084.906272][ T31] ? __pfx_kthread+0x10/0x10 [ 1084.906289][ T31] ? rcu_is_watching+0x12/0xc0 [ 1084.906310][ T31] ? __pfx_kthread+0x10/0x10 [ 1084.906328][ T31] ret_from_fork+0x672/0x7d0 [ 1084.906342][ T31] ? __pfx_kthread+0x10/0x10 [ 1084.906358][ T31] ret_from_fork_asm+0x1a/0x30 [ 1084.906390][ T31] [ 1084.906397][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1085.033824][ C1] NMI backtrace for cpu 1 [ 1085.033838][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1085.033854][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1085.033863][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1085.033886][ C1] Code: e7 75 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 f6 24 00 fb f4 0c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1085.033900][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c2 [ 1085.033912][ C1] RAX: 0000000005d57791 RBX: 0000000000000001 RCX: ffffffff8b6522d9 [ 1085.033921][ C1] RDX: 0000000000000000 RSI: ffffffff8db026b0 RDI: ffffffff8bf1cfc0 [ 1085.033930][ C1] RBP: ffffed1003adb490 R08: 0000000000000001 R09: ffffed10170a6655 [ 1085.033938][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 1085.033947][ C1] R13: ffff88801d6da480 R14: ffffffff908324d0 R15: 0000000000000000 [ 1085.033955][ C1] FS: 0000000000000000(0000) GS:ffff888124adf000(0000) knlGS:0000000000000000 [ 1085.033969][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1085.033978][ C1] CR2: 0000001b301f9ff8 CR3: 000000007e665000 CR4: 00000000003526f0 [ 1085.033987][ C1] Call Trace: [ 1085.033992][ C1] [ 1085.033997][ C1] default_idle+0x13/0x20 [ 1085.034013][ C1] default_idle_call+0x6c/0xb0 [ 1085.034026][ C1] do_idle+0x38d/0x500 [ 1085.034044][ C1] ? __pfx_do_idle+0x10/0x10 [ 1085.034060][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 1085.034077][ C1] cpu_startup_entry+0x4f/0x60 [ 1085.034093][ C1] start_secondary+0x21d/0x2b0 [ 1085.034113][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1085.034133][ C1] common_startup_64+0x13e/0x148 [ 1085.034152][ C1] [ 1085.211882][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1085.218718][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1085.227801][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1085.237838][ T31] Call Trace: [ 1085.241093][ T31] [ 1085.244000][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1085.248573][ T31] vpanic+0x640/0x6f0 [ 1085.252537][ T31] panic+0xca/0xd0 [ 1085.256239][ T31] ? __pfx_panic+0x10/0x10 [ 1085.260635][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1085.265985][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1085.272125][ T31] ? watchdog+0xe48/0x1170 [ 1085.276539][ T31] ? watchdog+0xe3b/0x1170 [ 1085.280931][ T31] watchdog+0xe59/0x1170 [ 1085.285154][ T31] ? rcu_is_watching+0x12/0xc0 [ 1085.289897][ T31] ? __pfx_watchdog+0x10/0x10 [ 1085.294549][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1085.299734][ T31] ? __kthread_parkme+0x19e/0x250 [ 1085.304757][ T31] ? __pfx_watchdog+0x10/0x10 [ 1085.309414][ T31] kthread+0x3c2/0x780 [ 1085.313471][ T31] ? __pfx_kthread+0x10/0x10 [ 1085.318033][ T31] ? rcu_is_watching+0x12/0xc0 [ 1085.322777][ T31] ? __pfx_kthread+0x10/0x10 [ 1085.327347][ T31] ret_from_fork+0x672/0x7d0 [ 1085.331914][ T31] ? __pfx_kthread+0x10/0x10 [ 1085.336482][ T31] ret_from_fork_asm+0x1a/0x30 [ 1085.341236][ T31] [ 1085.344417][ T31] Kernel Offset: disabled [ 1085.348715][ T31] Rebooting in 86400 seconds..