last executing test programs: 12m48.701034509s ago: executing program 32 (id=2808): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000340)='ns/mnt\x00') (async, rerun: 32) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) getresgid(&(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) (async, rerun: 64) r11 = getgid() (async, rerun: 64) r12 = getpid() sched_setscheduler(r12, 0x2, &(0x7f0000000200)=0x7) (async) lstat(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r15 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000f40), 0x4000, 0x0) (rerun: 64) r16 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r16, &(0x7f0000000040), 0x8) listen(r16, 0x6) connect$bt_sco(r16, &(0x7f00000000c0), 0x8) (async) r17 = syz_open_dev$sndpcmc(&(0x7f0000000f80), 0x1000, 0x80b00) (async) r18 = socket(0x1e, 0x4, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r18, 0x10f, 0x15, 0x0, 0x62) (async, rerun: 32) r19 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 32) r20 = dup(r19) (async) r21 = getpid() sched_setscheduler(r21, 0x2, &(0x7f0000000200)=0x6) (async) sched_setaffinity(r21, 0x8, &(0x7f0000000240)=0x2) (async) sendmmsg$unix(r3, &(0x7f00000010c0)=[{{&(0x7f0000000080)=@file={0xc98714d8b8f39c44, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)="ed29f52abcd06a89f0230e4cecd16dd0b0f54519b77d8d3afdfe90f9b04e579a5d899540ec4bcf4f1874c7eadfc981c45819dbe9c2df9af59f6af3fd721987118ac6e9b87edeab727b18ac29edf1a871c8c616412988ecde62e04244428ab3e0787d7d169e72a9da85233c889370b5853de1bc72b9c0e279ff2ce6add37b63abc472d1ea7979467b730a73252181cc623a2236bea292e9e2cc29e2ab3618fa690d498aa462969a1dcf10b16e762fb185bddffc6b51131df358c0260a154e5879dd7642fbb60aadeb6743635474", 0xcd}, {&(0x7f0000000200)="b998bb97b5c5341ba54b725c7b1457bd2e77054753d93dfaefce27ac4aee9bbce62ffe63dab46872edf0549b4ea8cf9ab00a67631fcccc253086596490924ff11045d1f30ba6e9d47f26bbbaee6a4dc10e06f8e6ad0692fa89895cdeb96a68216c86ab398e", 0x65}, {&(0x7f0000000280)="6f4b928148c027afa20c1982d0601b038f70999273e7b83279493ac8741bc37dba151a166cc87851a1addf265c07f59d92db7a140ad3784c4f91a8a3f498aea36725b7279b97a670e56c5ade6be334c2", 0x50}, {&(0x7f0000000300)="1b94bb919a9ff3b1c775", 0xfffffeb1}, {&(0x7f0000000340)="d7b46047de5aacdca93a264107c957ddd57ed9b27c753559bf482e857dd3f126f5074aa05b05c224e1fab06602e760202481c04eeced6ea939a74c1a9ad6", 0x3e}, {&(0x7f0000000380)="d7b64d681a7b6317053280d1b94badd897608b11a1981f51cf5fafbbeee8249dffe98101baa091aabdc9eace6e78cb4004d5b926e39f1908a4653752819f8c6edbefb0d11dcac991c6043fa75fdcb7b9150e2fa8ac4a8e269954ae5b3c239b3158b78c5f7dcc", 0x66}, {&(0x7f0000000400)="734e199653eb0a843e7c109b4e6cf4a3aa7007a841fbfc1b5769e3f3b4a65c6e74f798dea5b3a1c9624de8d9982946", 0x2f}], 0x7, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {r4, r6, r8}}}], 0x20, 0x40048800}}, {{&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000700)="b108d587b9464601641aa5570a70b05cd766c63c1ebd952f8e9a2777609d2a4054", 0x21}, {&(0x7f0000000740)="b73aaf934e6df10dc8f39dd6820433c100d36b5d9992bf5bd41146ce2ffdf4655b1bc3b961887812bc74945f7ea90930bc18f4559d5c6bf781c73b9d4bf33a3e8b3746098a8c2810e8f1c7927e2f0db399bb1a2b79c794ac9387cda3222017135ae06b13581a43d92fa3916506dae31724835ddda1862e8d0fc01b988c8d298d249a96bc33e491507fac90f7d39a605428fd1da789ad6828e5cb68cde53ccb202f60a04ca4ae5e361ba76e08c4e5bd343a9762a07dc60ae8aa82e736aa9d11acb1", 0xc1}, {&(0x7f0000000840)="2d8e1ed93004e4b52219f23f339c6fe53549f148b541347d2e0d25450c80356bece83ac4ef49f72cbf9eeb90b52aa6de2e4135ba448771357d61d89032f485fd6e61b272ba39a7c776dab85d89e47ad2c8d738e7619fe4d729d7580343ec", 0x5e}, {&(0x7f00000008c0)="57bcfb78d2049c811f6bc0f786d83c6d985ce91dd8952f88305dc461805764666e2b1b456f24401395ac2abf91d0941a37ce1e3af45e507414b38b34fbd85217c0854eaa96c71fa4e3db5ba1bf202693b6ce1a73596ac602dbb1ad8f9f0e3fbc90eb44bfa5f0568865164e6bdf3eb0119b3bae81057b012d7a44b204f178d194b57c652ca5ac4759cbe4b3be8ece45f8888293f6ce4cd56ae700", 0x9a}, {&(0x7f0000000980)="78f449a86455a2a641a18e7289f1b28e319b324c1a51aef41145180553f9f9fa9d95a5153ad0965ee7e49a22ecc54161ab8c23a4a24de9ffc1ba8c0359e2f34086d376db0c58c4234440b683b379c855bac1e647a6d3b313d9e22619423234d472c1043354e719738769e1c73a5936b3ca5bdce079398861f3b6a556a725073d873d5712ef6659ce346c964f6d7c81f7afe6ff8de58cb870af79f4a35763646e251f020c459612d8cae054a8d5b45f9f5871e4d61b5a60f164f71c98493677647882af0cc88a8e08b8e8700b0c6dc584f4ac9c27876c0bfa433c4ac3a4", 0xdd}], 0x5, &(0x7f0000000fc0)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0x0, r10}}}, @rights={{0x24, 0x1, 0x1, [r20, r1, r3, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r9}}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r9}}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r11}}}], 0xc0, 0x48402}}, {{&(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000c40)="7c0a284ef0b577060c47d96c1fb74416a569837f8db25491e75c4fad1bb67f8ccd33eecb04b2ce6fe09f7007f41e48b100a0c560372554ac01e048de41edf63af3a636f6aff3b7adac19a0816af3c8a1d2942c648de516885940bd50a1e51b0bf5e56324374119cdd06dee1de95b1ac842cddc303b56d1f6ed6333564503000a58e719fd990c0ee3c662da457135b21d760ca7b319edb243cd80fdb45034dc2e55d50ba04e362e60fb8dc3a1fb77aa66bcf5190614c73446066a8dc9f95c00bb721e9f7a3f1860242b5f6d6fe836ddbf736ac548468598051901aaf427a6d8bd15d28d422c726ca0589571f24a2aadfed6675d1c4e", 0xf5}, {&(0x7f0000000d40)="b9e2f48ef3e5346b56cfcaeadce1014f1252706c395fbd45c6126910328bd763cc4ea885f8435ce7648e68443a1ab6ae73db9dd68192918be59157330cba3682e8a9f42ac9da66ee85b3b39f425e3f96df35b5baa046214b210c1abd6090bbf106e3cc6bdd46d3", 0x67}, {&(0x7f0000000dc0)="f5201a333cbdad607e458ef8f80a724fb49791ce91864a51649d04e8e90054fb3e8caa2ff9295a52d25975480f45a16abfe3deeeb5e498250233b7560bcd77d7fd0baa3686fc7a44e47637ff41a4b8e4ddc489bf423acec112b8", 0x5a}], 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r6, @ANYRES32=r14, @ANYBLOB="00000000140000000000000001000000010000005b283d3e424708bdc7da9d5a984eae1cecda9e878e", @ANYRES32=r15, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESOCT, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r13, @ANYRES32=r0, @ANYRES32=r1, @ANYRES64=r4, @ANYRES32=r3, @ANYRES32=r16, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r10, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r17, @ANYRES32=r0, @ANYRES32=r18, @ANYRES32=r19, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r21, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0xc010}}], 0x3, 0x0) (async) recvmsg(r1, 0x0, 0x20000100) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) (async) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) (async) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 6m7.717013586s ago: executing program 33 (id=4013): r0 = syz_usb_connect(0x7, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc00"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010004020000102505a10700000002030109024b00010103d093090400b202020600bc06240600006a85de39ae05240006000d240f01020000002b0000000e042402020724"], &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xd, 0x7f, 0x2, 0xff, 0x6}, 0xfc, &(0x7f0000000100)={0x5, 0xf, 0xfc, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x9, 0x2, 0x2c58}, @generic={0xd2, 0x10, 0x3, "c47d000f69739f648fbb35f83004149aaa7bffff35bd461aeba7aa5e8e22f6acd7ab77f77ac14ffd1b81488ea58e1cfbcc304032330bc6e0cfa7ef5ac2db00062b3ca2e725be224fe467279482e5e944525e8fccdbd1b8e3f3065aff95111b83e7900f29e806ae8820273ca91d1dbf9de1714254b0d78b3cf134657df28e85a11841a59e26381148351e30bd53c01d0faf0d7f01b2f62f774bef01fec1630d38541c11a97d74fe2118d436cbc6ce162226202c1fd4429fcd88efbbdc39712f52f1afe0a6834f498a05288d73c8d187"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "b49e34631b1321eb4d3f8bfbbf657207"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x9, 0x9, 0x1}, @ptm_cap={0x3}]}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x30, 0x4, 0x0, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8000, 0x40, 0x9d, 0x3}}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000c000000080005"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x2000000000000158, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000080)=0x200000000) dup2(r7, r7) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb2505000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x20, 0xf, 0x10, 0x5, 0x40, 0x1, 0xe4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1f}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m16.208008029s ago: executing program 34 (id=4259): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f000000040000000900000012000000000000005e9084bec9b61a4b5ff99c75897456a574367c234ea8af6e32", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x400000, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x1, 0x2]}, 0x45c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000010501022abd7000fcdbdf25030000030546502990d0f3a1c2df6c0174f1d42afbbfb46cd7dfe7d60f012774f7ae15de0517ecc42f62ad0047c2cb0c61172adae422120a410835b3a31b4b416fda58bc9f992441620430493dcd6699a52a15a2d45bf914c48b37a30dc92406efd8e6f7d3919085d73786b67e1f892c070a9135ad1f62ee20923887fac9b830870210aff8d56795af950aacb8f3bfb26dabdba2a73dec52e246b2c2e56393dc7e6418060a55f1769108c69636288b72d38831dd6c3d5e8d9a044ef4195cfb77b481c8d76fa50c91c5d45cd952aca9"], 0x14}, 0x1, 0x0, 0x0, 0x4044001}, 0x40) setrlimit(0xb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000004c0)={'tunl0\x00', {0x2, 0x4e22, @loopback}}) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(0x0, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$sndpcmc(&(0x7f0000000180), 0x1, 0x42002) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) 5m3.059475234s ago: executing program 35 (id=4306): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) (fail_nth: 9) 4m59.914805289s ago: executing program 36 (id=4321): syz_emit_ethernet(0x46, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}]}}}}}}}, 0x0) 4m49.616349786s ago: executing program 37 (id=4340): io_setup(0x1, &(0x7f0000000000)=0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) eventfd2(0x101, 0x800) r5 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f0000000180)=""/135) r6 = accept$packet(0xffffffffffffffff, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001340)=0x14) r7 = eventfd2(0x3, 0x80801) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0xfffffffc, 0x0, 0x3631564e, 0x4, 0x2, [{}, {0x277c}, {}, {}, {}, {0xd360}, {0x7, 0xfffffffd}, {0x0, 0x80000}], 0x10, 0x0, 0x0, 0x0, 0x5}}) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000380)={0x6, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) r9 = eventfd2(0x8, 0x80000) r10 = syz_open_dev$swradio(&(0x7f0000001500), 0x1, 0x2) r11 = eventfd(0x8) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) r14 = eventfd2(0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r15, &(0x7f0000000000), 0x651, 0x0) r16 = eventfd2(0x3, 0x801) io_submit(r0, 0x9, &(0x7f0000001780)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x5, 0xffffffffffffffff, &(0x7f0000000040)="607b4afb2c6081e254ca9106b7a7585bd79bf62550b01bce65acbd11e421ceec2f807d98eb2b8d4f2ab219ed574f312302a04623763563692bdd7ff9fc8f4eb94d743c61291f6dd3f9e0341debb48ff491a773a9283b8d1a929c3817f41b9f4968dbf25058e5f4d21156fe86e75c93f698784eb0f8f488ab087b805c859a9684f15d4a237989b43482cdb6bd4252", 0x8e, 0xc41, 0x0, 0x2, r2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x2, r3, &(0x7f0000000140)="4a02a3eaf46595", 0x7, 0xffffffffffffffff, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x9, r4, &(0x7f0000000200)="9464b0025ddb7980c52deda70c42b5c60e78d5c3c552184369bd6ac6c809ff20fa5e6ebcc5f81926b3f60a74c492eb47f25967d814426aa7a32d68ce0e5e5d6d192756189f61d7dc1ea2c8508d347e3ee335caa140576f7149bab15ac204714c2181f789896b82c581af05aa44070fc4d2", 0x71, 0x50000000, 0x0, 0x0, r7}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x5, 0x6, r13, &(0x7f00000002c0)="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", 0x1000, 0x466, 0x0, 0x2}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000001380)="78294867319a11d51938bfc29bd01aea74a9aedab473f8bbe775108693ab09c68914b2dcb098e49250d4fe8a43fa6f7cf09fd706bd4f077af4582a27afe48bd03b477d2df8faa659c3a9ef84623a8977881d811994abc4235fcc650cc9dcc2a17d34898801527e23caad69c0be19c4d2cb381e7a973809", 0x77, 0xe5, 0x0, 0x2, r7}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x7a4, r8, &(0x7f0000001440)="7251c74600b4f041533dde0a16d14c0af35bbfb1d19fbdccd3f4144b179bae3a146b9ed01197ba683fb265d8510ad88ad86bf4c6b9a90f041c0d2ce51c42128be14002ca14ff9fca83bf509892043c983a1a9592f0b003223202d6456160ebecc3f03875a810b3863e3eee569991dc824d7cbe2e32ec3bbe59", 0x79, 0x3, 0x0, 0x2, r9}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0xafc3a2ad62b4b0ed, 0x0, r10, &(0x7f0000001540)="203cf5733615a5af8aed7ca3b1fe8a6a1444d000ead89db3225c56840cfe33183ef5f3b407a32dc7810b000eb41c1fcd46b268e441972f9d9f210b24c51aab9ec1848ca6e80305177ae563d71b8a84bc24f75d4c53", 0x55, 0x4, 0x0, 0x0, r11}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x2, 0x2, r12, &(0x7f0000001600)="95421590e465932117f7b7687e6aba88ecb6e55c75237ae771f1748e26e59dcee6d35ea179e4f9d11e375e16b3729facfa6dd60cb30e435460c2f78daa8dbe064788ea3594e03a8849cba944878d138ebc0df305d0d2bbc2b96f02875049b15c9f13c999fd15ece73add109fc6b0c6ea0ef361684225c14a6b0e", 0x7a, 0x8, 0x0, 0x3, r14}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x7, 0x0, r15, &(0x7f00000016c0)="254c85d3a11c57b2bafedfe1f1058df958c681d3c68961efe282d63f8a3e0f081e22f0b309061be4a5c81b24115c36cdf6eaced378f8c8b64335352a5903c50f9099c0d5e0d83e36a39761caf11d444ea55716acf758fbff7fbbda2300", 0x5d, 0xe, 0x0, 0x1, r16}]) 4m46.88903331s ago: executing program 38 (id=4346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) sched_setscheduler(0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0xb, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0xfffff800, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x10000226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m32.871171632s ago: executing program 39 (id=4370): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r5, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x1) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100)={'#! ', './file0'}, 0xb) ftruncate(r6, 0x5) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044010) r10 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r10, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="d00c0000", @ANYRES16=r11, @ANYBLOB="000428bd0600fcdbdf0000", @ANYRES32=r12, @ANYBLOB="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"], 0xcd0}, 0x1, 0x0, 0x0, 0x2040041}, 0x20004000) syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001300)}, 0x2}], 0x1, 0x40010100, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/224, 0xe0}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4m30.846413681s ago: executing program 40 (id=4375): r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) syz_io_uring_setup(0xa5a, 0x0, 0x0, &(0x7f0000000200)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair(0x2b, 0x80000, 0x5, &(0x7f0000000100)) r1 = syz_io_uring_setup(0x19bc, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r5, r6, 0x60000000000, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000080)={0x1, 0xf, 0xf}) socket$kcm(0x29, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000b7050000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x5}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) dup3(r0, r7, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0xb3, 0x7, 0x1a9, 0x40, @remote, @mcast2, 0x0, 0x8, 0x6, 0x3}}) r9 = syz_open_procfs(0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000001d40)={&(0x7f0000000280)=""/160, 0xa0, 0x0, &(0x7f0000001d80)=""/63, 0x3f}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70200005245855db7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r12, 0x0, 0x0) syz_usb_control_io$uac1(r12, 0x0, 0x0) syz_usb_control_io(r12, 0x0, 0x0) syz_usb_control_io(r12, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00'/10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x4) 4m6.475973711s ago: executing program 41 (id=4420): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x1000000, 0x0, 0x800}, 0x4004004) 3m59.527498701s ago: executing program 42 (id=4441): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x0, 0x0, 0x200000, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x0, 0x5, 0x0, 0x10000, 0x4, 0x4, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x6, 0x0, 0x0, 0x6, 0xae4f, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa0, 0x0, 0xfffffffffffffffb, 0xea4d, 0x377, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x9, 0x4000000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xd30, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71]}) 3m38.870426863s ago: executing program 43 (id=4499): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0xc, 0xb, 0x5, 0x9, 0x5, 0x3, 0x8, 0x3, 0x3, 0xc4, 0x7, 0xd, 0x8, 0x6, 0xb}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() setrlimit(0xb, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 3m25.820804771s ago: executing program 44 (id=4528): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x4000004) r2 = openat$kvm(0x0, &(0x7f00000004c0), 0x501000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 3m19.887740188s ago: executing program 45 (id=4542): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 3m15.367680727s ago: executing program 46 (id=4550): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = add_key(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0x20, r1, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xd, 0x3, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r2, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0}}, {{&(0x7f00000004c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0}}], 0x2, 0x8c37c2b979564e6e) 2m36.225438839s ago: executing program 47 (id=4609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 2m27.690162924s ago: executing program 6 (id=4625): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x4, 0xfeb, 0x20, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x40, 0x10001, 0x7fff}}) r0 = socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) (async) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r4, &(0x7f00000062c0)="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", 0x2000, 0x0) statx(0xffffffffffffffff, 0x0, 0x100, 0x40, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc801000"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) r6 = syz_io_uring_setup(0x7540, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000200)=0x0) r8 = syz_io_uring_setup(0x34ef, &(0x7f0000000400)={0x0, 0x0, 0x1}, &(0x7f00000003c0)=0x0, &(0x7f0000001480)) syz_io_uring_submit(r9, r7, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r8, 0x0, 0x0}) io_uring_enter(r6, 0x2003, 0x0, 0x0, 0x0, 0x0) 2m26.708085241s ago: executing program 6 (id=4626): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000240)={0xf846, 0x1, 0xb, 0xffffffff, &(0x7f0000000200)=[{}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe000000008500000057000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) open_tree(r3, &(0x7f0000006180)='./mnt\x00', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24000840) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/wireless\x00') preadv(r5, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/165, 0xa5}], 0x10000000000002f1, 0x4, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7050000000000006110440000000000dc0500002000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb186ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b0027bd7000fedbdf25000000000000000008ea01001e6c1938"], 0x20}}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000385246d50000000000150000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000", @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='percpu_alloc_percpu\x00', r7}, 0x10) 2m25.409238053s ago: executing program 6 (id=4627): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xc0200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000080)={0x7, 0x7fffffff}) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x100) r5 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0x60000005}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = socket(0x2a, 0x800000002, 0x0) ioctl$SIOCPNENABLEPIPE(r6, 0x541b, 0x1000000000000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) chdir(&(0x7f0000000140)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x400000000001, 0x180, 0x20ff, 0x6, 0x89, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x1}}, {0x0, 0x13}}}, 0xa0) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r7, 0xc0245720, &(0x7f0000000180)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x2, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 2m25.205176384s ago: executing program 6 (id=4628): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) 2m24.163187901s ago: executing program 6 (id=4629): openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0x19}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='afs_cb_miss\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRESHEX=r4], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7, 0x0, 0x800000000}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r8, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRESDEC=r6], 0x50) sendmsg$nl_route(r8, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x8000) r9 = socket(0x0, 0x6, 0x87) sendmmsg$unix(r9, &(0x7f0000002180)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=[@cred={{0x1c}}], 0x20, 0x10}}], 0x1, 0x814) socket$inet_tcp(0x2, 0x1, 0x0) 2m23.064424934s ago: executing program 6 (id=4632): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) openat$sequencer(0xffffffffffffff9c, 0x0, 0x519b02, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x7, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="4b7b15fce97b21cb42b4d4d0037dba0e4610c6db097046c16b51aa0c3357a2491cafc5d60ad7df0ca4", 0x29}, {&(0x7f0000000200)="30abc4ba4ac261468acda6a56a3a25a73d3dbc69028dbe87889801cf59d196cd8ed1423cb7e2c2c07b623f580faf54d143d135e688960136006b1f2c5b2ff132fbc39126cc090b8c28999072d587bee399de535e630de75ef1c9f764f3c658797875df0f869790eda43a2d848257d38967289f702f195205e3e380519368e3bd11109d85038aa7b0fa5b3c4df079d4fe2b30e753e1e0ec09e42d9146dbd4b2780d6030fa5593403b660781261413ec052e5a59e53e6412bde935e8a0f64824733efa94f1eb2c88fb6a66f2c9b508e0eb4848", 0xd2}], 0x2}}], 0x1, 0x4008000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340)='esdfs\x00', 0x208000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 2m22.172228563s ago: executing program 48 (id=4632): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) openat$sequencer(0xffffffffffffff9c, 0x0, 0x519b02, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x7, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="4b7b15fce97b21cb42b4d4d0037dba0e4610c6db097046c16b51aa0c3357a2491cafc5d60ad7df0ca4", 0x29}, {&(0x7f0000000200)="30abc4ba4ac261468acda6a56a3a25a73d3dbc69028dbe87889801cf59d196cd8ed1423cb7e2c2c07b623f580faf54d143d135e688960136006b1f2c5b2ff132fbc39126cc090b8c28999072d587bee399de535e630de75ef1c9f764f3c658797875df0f869790eda43a2d848257d38967289f702f195205e3e380519368e3bd11109d85038aa7b0fa5b3c4df079d4fe2b30e753e1e0ec09e42d9146dbd4b2780d6030fa5593403b660781261413ec052e5a59e53e6412bde935e8a0f64824733efa94f1eb2c88fb6a66f2c9b508e0eb4848", 0xd2}], 0x2}}], 0x1, 0x4008000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340)='esdfs\x00', 0x208000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 2m9.087071193s ago: executing program 7 (id=4655): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="120000000800000004000000b47c000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000451c00009a0100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000000000"], 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x300, 0x0, 0x52}, 0x9c) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/unix\x00') bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000400)="66b93808000066b83b21b0a466ba000000000f30baf80c66b898e1d38166efbafc0cedbaf80c66b886d9768e66efbafc0cb84a00ef650f7857efbaf80c66b8d809358766efbafc0ced66b9800000c00f326635008000000f30dd92b25f673e660f38f5a10d00000066b90502000066b80080000066ba000000000f3066b90908000066b80050000066ba000000000f30", 0x90}], 0x1, 0x66, &(0x7f0000000100), 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 2m7.029472043s ago: executing program 7 (id=4659): munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a62000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ce3000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000cc8000/0xb000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00009e6000/0x3000)=nil, &(0x7f0000b79000/0x3000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000040)=0x4) fsmount(0xffffffffffffffff, 0x1, 0x4) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001780)={0x2020}, 0x2020) 2m6.10376773s ago: executing program 7 (id=4660): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) read$watch_queue(r0, &(0x7f00000000c0)=""/64, 0x40) 2m5.875627972s ago: executing program 7 (id=4663): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) 2m4.830774681s ago: executing program 7 (id=4665): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d0101400001020301090293000301000000090400000001"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0003de000000de03"]}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x198, 0x0, 0x5, 0xfffffffe}, &(0x7f0000000180)=0x10) 2m4.340260846s ago: executing program 7 (id=4666): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xffffffffffffffa3, 0x1, {0xfffffffe, 0xb, 0x2}}}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socket(0x13, 0x80000, 0x7) r6 = socket(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r6, &(0x7f00000000c0)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x100}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r6, &(0x7f0000000000)='\"', 0xfdef) 2m3.828462494s ago: executing program 49 (id=4666): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xffffffffffffffa3, 0x1, {0xfffffffe, 0xb, 0x2}}}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socket(0x13, 0x80000, 0x7) r6 = socket(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r6, &(0x7f00000000c0)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x100}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r6, &(0x7f0000000000)='\"', 0xfdef) 1m29.487068023s ago: executing program 4 (id=4733): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@bridge_dellink={0x34, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x7, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0xfffffffffffffe8c, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffebf}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f00000002c0)=@ready={0x0, 0x0, 0x8, "6ddb21ec", {0x1, 0x12, 0x6, 0xc, 0xbd}}) (async) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f00000002c0)=@ready={0x0, 0x0, 0x8, "6ddb21ec", {0x1, 0x12, 0x6, 0xc, 0xbd}}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f0000000d00)=@conn_svc_rsp={0x0, 0x0, 0xa, "c8f33be6", {0x3, 0x100, 0x0, 0x7, 0x9c, 0x24, 0x8}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xc, &(0x7f0000000380)=@generic={0x7, 0x0, 0x4, "f8d0cea9", "c56dc230"}) 1m26.395839851s ago: executing program 4 (id=4741): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="af418e05f400"], 0x48) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) fcntl$getflags(r2, 0xb) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0xa, 0x2}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000008000000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m26.213110354s ago: executing program 4 (id=4742): prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x4, 0x4, 0x4, 0x18004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r0, @void, @value=r0}, 0x50) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000003c0)={r1, &(0x7f0000000680), 0x20000000}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000f"], 0x20000078}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x103, 0x0, {}, {0x77359400}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "a8c7e9385559d457"}}, 0x48}}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e22}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x40010) r6 = syz_open_dev$MSR(0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000240)="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", 0x12d, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x50) 1m24.712744148s ago: executing program 4 (id=4751): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) 1m23.740906504s ago: executing program 5 (id=4754): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c480000", @ANYRES16=0x0, @ANYBLOB="010000000008000000001200000007"], 0x1c}}, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="8cff7cf9080381383110cdde80126a2ee1151de0ae23da85140a96a2da3861585e2228f5155345204c696e7578eeafc64afaf0d123d562fd3f2ce3d443f848d08388e77e1598c728de39f36fc7f62bce8670ac5ea12e3e345a7fe571a4fae35c93c5b81a95359c1037bcaf19c6c16df4cc32307e4523cdf85978b00592b80b0d2fe706000000b51b08814f222c82c53990311a1a8f62000056fca3c7f28d1403a8884122e0f141be0a6e1c50e69c08087279b69d31c233eb6ed6f4ede6447a954a6087c8cf443e3e57889d416af6edbb88d2909a265bf71f73aa08bfd4b4d97ad7e1b8ebb7231b0dcf3108b9520a63b1dc7cc0c78eb741e7ea4009b47ba07423e57f5a46244a3f7633ddf7c519468b195161eb40d713176cb13926c1674babb41e11b66de9eee77204000000000000009cffef89ef22622969bea445376206496532"], 0x2000) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) poll(&(0x7f00000000c0)=[{r4, 0xe7d4c009da6c1985}, {r4, 0x201}], 0x2, 0x4) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r7, 0x4018aee3, &(0x7f00000001c0)=@attr_pvtime_ipa={0x0, 0x1, 0x1, 0x100000000}) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1c) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r6, 0x4068aea3, &(0x7f0000000300)={0xdb, 0x0, 0x8c1}) 1m19.402896817s ago: executing program 5 (id=4764): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0x7b9, 0x800000000000000) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000040)={&(0x7f0000000240)=[0x5, 0xea, 0x5, 0xfffffff8, 0x8, 0x81, 0x38, 0xa6c2, 0x2, 0x2, 0xff, 0x8, 0xd, 0xd59, 0x6, 0x7, 0x6, 0x2, 0x7, 0x3, 0x8, 0x200, 0x20000000, 0xffff8001, 0x5, 0xc2c, 0xe, 0x200, 0x2, 0xd84, 0x9, 0x1, 0x1, 0xda, 0x30f02ed, 0xb5, 0xfffffff7, 0x1, 0x7f, 0x8, 0xf, 0x1ac, 0x4, 0x1, 0x40, 0x0, 0xd, 0x3, 0x0, 0x6, 0x6, 0xd, 0x8, 0x8dfb, 0x0, 0x3, 0x8, 0x7fffffff, 0xf892, 0x4cad, 0x4, 0x0, 0x8, 0x1, 0x40, 0x5, 0x6, 0x0, 0x40, 0x6, 0x2800000, 0x3, 0x3, 0x81, 0x3, 0x100, 0x1, 0x7fff, 0xfe1, 0x9, 0xf, 0x100, 0x4, 0x7, 0x2, 0x5, 0x6, 0xbf, 0x0, 0x5, 0x8, 0x0, 0x7, 0x9ad5, 0x401, 0x3, 0xc, 0x8, 0x7, 0x6, 0x6, 0x6, 0x2, 0x5, 0xa, 0x6, 0x8, 0x102, 0xfff, 0x5a5d, 0x313, 0x6, 0x1, 0xf4, 0x800, 0x200, 0xe211, 0x2, 0x8, 0x4, 0x1, 0x78000000, 0xfb3, 0x6, 0x8, 0x3, 0x3, 0xffff9379, 0x0, 0x9, 0x400, 0x8001, 0x7fff, 0xfffffff7, 0x4, 0x9, 0xfff, 0xffffffff, 0x2, 0x80, 0x6, 0x10, 0x400, 0x8, 0xc812, 0x2, 0xfffffffe, 0x1, 0x8001, 0x91f, 0x3, 0xffffffff, 0x3, 0x80000000, 0x800, 0x8, 0x3, 0x3, 0x8, 0x0, 0x10000, 0xb4f, 0x5, 0x7f, 0x8, 0x2, 0x4, 0x9, 0x7, 0x1, 0x5, 0x7, 0x4, 0x2, 0x5, 0x35b9, 0x5, 0x4e6, 0x5, 0x3, 0x5, 0x9, 0xffff, 0xda2, 0x3, 0x6, 0x4, 0x3, 0x61, 0x4eb9, 0x6, 0x3, 0x2ddf57aa, 0x3, 0x7c6c, 0x0, 0x100, 0xd, 0x9, 0x6, 0x0, 0x7, 0x9, 0x2, 0x9, 0x101, 0x8be, 0x9, 0xfffffff8, 0x6f0, 0x8, 0x7, 0x6, 0x5, 0x9, 0x4, 0x81, 0x5, 0xe7, 0x1, 0x6, 0x8, 0xffffffff, 0x1000, 0xc898, 0x3, 0xa, 0x9, 0xea, 0x4, 0x5, 0x3, 0x32900, 0x9, 0x1, 0x4, 0x71ef, 0x7, 0x1, 0x9, 0xfffffff7, 0x2, 0x3d, 0x171d9349, 0x5d, 0x3, 0x4, 0x3, 0x5d, 0x8, 0x4, 0x8, 0xf5, 0x4, 0x6, 0x4, 0x7, 0x9, 0x55, 0xe78, 0x3, 0x6, 0x78e, 0x0, 0xc, 0x6, 0x6, 0x7f, 0xd80, 0xd6, 0x8, 0xa, 0x8, 0x3, 0xd72, 0x9, 0x4, 0x80000001, 0x7, 0x5, 0x0, 0x13, 0x0, 0x8, 0x1d6, 0xfffffff8, 0xfffffffd, 0x0, 0xc8, 0x817, 0x81, 0x1, 0x1, 0xfff, 0xc, 0x1, 0x401, 0x8000, 0xb, 0x2, 0x8cc8, 0xffff, 0x66, 0x4, 0x9c1, 0x1000, 0x101, 0x7, 0x6, 0x101, 0xffffffc5, 0xffffd7af, 0xf78, 0x7, 0xd76, 0xd6a6, 0x0, 0xb, 0x4, 0x7, 0x8, 0x5, 0x2, 0x401, 0x6, 0x0, 0x5, 0xfffffffd, 0x4, 0x8, 0x6, 0x9, 0x5, 0x4, 0x7, 0xe, 0x5, 0xfffffffc, 0x8, 0x2, 0x0, 0x1, 0x3ff, 0x3, 0x0, 0x8001, 0xffffffff, 0x0, 0xfffffffb, 0xffffffff, 0x4, 0x2, 0x10, 0x14e9, 0x8001, 0x5, 0x0, 0x2, 0x3, 0x8, 0x16, 0x2, 0x0, 0x3, 0x3ff, 0x0, 0x3, 0xae, 0x6, 0x3, 0xfffffeff, 0x0, 0x6, 0x7, 0x8001, 0x6, 0x1, 0x5, 0x81, 0x7, 0x200, 0x7ff, 0x3, 0xfffffff8, 0x1683, 0x101, 0x69e3, 0x4, 0x5, 0x2, 0x9, 0x3, 0x4, 0x1000, 0x9, 0x5, 0x5, 0xe8e4, 0x1000, 0x6c79, 0x0, 0x7, 0x200, 0x101, 0x1, 0x4, 0x0, 0x16440, 0x0, 0x1, 0x7, 0x51, 0x1, 0xd2, 0x7fffffff, 0xfc, 0x7fff, 0xb92b, 0x2, 0x6, 0x401, 0x81, 0x8, 0x80000000, 0x8, 0x4, 0x7, 0x8, 0x9, 0x8, 0x3, 0xffff, 0x101, 0x9, 0x80, 0x0, 0x6, 0x1000, 0xbe, 0x9, 0x6, 0xb9, 0x100, 0xd, 0x3, 0x8, 0x80, 0xfffffffa, 0x9, 0x5, 0x81, 0x7, 0x9, 0x2, 0x5, 0x8, 0x0, 0x9, 0x96, 0x7fff, 0x1, 0xe1, 0x5, 0x2, 0x6, 0x25a, 0x5, 0x6, 0x7, 0x9, 0x2, 0x9, 0x0, 0x6, 0xc, 0x4e3, 0x7, 0x1000, 0xc72c, 0x3ff, 0xfff, 0x4, 0x7, 0x9, 0x4, 0x2, 0xf16, 0xfffff000, 0xfffff238, 0x9, 0x2, 0x3ff, 0x6, 0x2, 0x2dd, 0xfffffffa, 0x3, 0x1, 0x2, 0x10, 0x6, 0x1, 0xfffffffa, 0x7, 0x969, 0xe6, 0xfffffe01, 0x0, 0xfffffffa, 0x5, 0x4, 0x5, 0xffff0001, 0x27, 0x9, 0x2, 0x800, 0x3, 0x8, 0xd, 0x40000, 0x3, 0x6, 0x5, 0xb3b, 0x8, 0x9, 0xda3b, 0x32b9b4d7, 0x9, 0xe, 0x1, 0x0, 0x3, 0x3, 0x2b84, 0x101, 0x51c, 0x4e7659f6, 0x200, 0xb3, 0x2, 0xd, 0x0, 0x0, 0x6, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x3, 0xa1, 0x3, 0xb, 0xf, 0x1ba, 0x5, 0x493, 0x0, 0xffff764a, 0x8, 0xfffffff2, 0x4, 0xa, 0xb91, 0x5, 0x101, 0x3, 0xb7, 0x3, 0x5, 0x5, 0x4, 0x5, 0x3, 0xe21, 0x5, 0x1, 0xb35c, 0xd, 0x9ecc, 0x10001, 0x2, 0x10001, 0x64e7, 0x6, 0x40, 0x4, 0xffffffff, 0x7f, 0xe, 0x80000000, 0x5, 0xfffffffb, 0x6, 0x400, 0xfffffffc, 0x7, 0x7, 0x6, 0x7, 0x101, 0x8a, 0x7, 0x6, 0x4, 0xfffffff8, 0x4, 0x4, 0xffff8000, 0x4b49, 0x20000000, 0x5, 0x3, 0x8000, 0xa9, 0x1, 0x7, 0xfffffffe, 0xed1c, 0x7ff, 0x3a08, 0x5, 0x10, 0x5, 0x7ff, 0x10, 0x7fff, 0x100, 0x7, 0x9, 0x3cf, 0x3, 0x4, 0x2, 0x9, 0x6, 0x9, 0x10, 0x2, 0x9, 0x2, 0x6, 0x6, 0xce47, 0x10001, 0x8, 0x8, 0x5, 0x0, 0x9597, 0x6, 0x1, 0x5, 0x0, 0x80, 0x8001, 0x0, 0xb46, 0x1, 0x268, 0x1f, 0x4, 0x1, 0x3, 0x4, 0x4f45, 0xab, 0xff, 0x10001, 0x8, 0x5, 0x40, 0x2, 0x4, 0x8, 0x376f, 0x1, 0x9, 0x56, 0x0, 0x2, 0x4, 0x8, 0x6, 0x68fc, 0xb1f, 0x59, 0xe3, 0x70c, 0x4, 0x81, 0x2, 0xa, 0x6, 0xfffffff7, 0x8001, 0x0, 0x2, 0x0, 0x9, 0x8001, 0x2021, 0x8, 0xff, 0x3, 0x1000, 0x9c8d, 0xe, 0x4, 0x5, 0xc, 0x7ff, 0x3, 0x7, 0x2, 0x0, 0x8, 0x8, 0xffff, 0x1, 0x7fffffff, 0x1000, 0x0, 0x7, 0x8, 0x7, 0x80000000, 0x6, 0x2, 0x6, 0x1, 0x3, 0x6, 0x1, 0x2, 0x3, 0xc7, 0x1ff, 0x5, 0x1ff, 0x2, 0x0, 0x638e, 0x0, 0x9, 0x6, 0x0, 0x9, 0x3, 0x6, 0x3b12, 0x9, 0x0, 0x60, 0x9, 0x1, 0x5, 0x6, 0x400, 0x3, 0x80000000, 0x7fffffff, 0x2, 0x7, 0x2, 0x0, 0x2, 0x4, 0x7ebd, 0xbf, 0xd, 0x5, 0x5, 0x5, 0x8000000, 0x81, 0x8000, 0x8, 0xe, 0x5ef1eb22, 0x1ff, 0x2, 0x9, 0xffff, 0x7, 0x10, 0x9, 0x8000, 0xffffffff, 0xffffffff, 0x5, 0xffff, 0x10000, 0x8, 0x6, 0x4, 0x2, 0xffff, 0x0, 0x6, 0x9, 0x5, 0x4345, 0x1, 0x4, 0x10001, 0x3, 0x2, 0x8, 0x2, 0x5, 0x101, 0x1, 0x6, 0x2, 0xffff8000, 0x3, 0x7, 0x2, 0x26, 0x3, 0x2, 0x8000, 0xfffffffe, 0x4, 0x10, 0xfffffffd, 0xfffffff0, 0x80000001, 0x3, 0x401, 0x1, 0xff, 0x1, 0x3, 0x4, 0x5, 0x3c0, 0x5, 0xd9, 0x81, 0x6, 0x5, 0xfff, 0x6, 0x3, 0x3, 0x891d, 0xfff, 0x6, 0xffff, 0xffffff00, 0x4, 0xd, 0x4, 0x4, 0x9, 0x2, 0x64c, 0x4, 0x7, 0xb4, 0x2, 0x0, 0xffffffae, 0x4, 0x66f4119e, 0x218, 0x4, 0x6, 0x401, 0x9, 0xefd, 0x1, 0x3ff, 0x1, 0x7, 0xd0d, 0xffff, 0xfa0, 0x3, 0x3, 0xfffffff9, 0x3ff, 0x6, 0x7fe, 0x40, 0x8, 0x3, 0x9, 0x3, 0x2, 0x8001, 0xa000, 0x7, 0x6, 0x1, 0x4, 0xc, 0x9db, 0x8, 0x0, 0x38, 0x7f, 0x0, 0x7, 0x3, 0x6, 0x1, 0x40, 0x25, 0x7, 0x1, 0x6, 0x1, 0xfffffffd, 0x6, 0xea33, 0x0, 0x80, 0x2, 0x4, 0xf, 0x9, 0x0, 0x80, 0x400, 0x3, 0x18, 0x80000001, 0xee, 0x9, 0x0, 0xffffffff, 0xa, 0xffffffff, 0x1, 0x8, 0x3, 0x7, 0xe272, 0x7, 0x101, 0x4, 0xce, 0x80000000, 0x89, 0xac7, 0x6, 0x3, 0xc, 0xb60, 0xd3b, 0xe, 0x0, 0x3, 0xfffffffe, 0x8f, 0x2, 0x80000000, 0xa, 0xaca5, 0x1, 0x40e9, 0xe6, 0x5, 0x9, 0x8abd, 0xaf, 0xfffffff9, 0x7, 0x80000000, 0x4, 0x4, 0x40, 0xe0, 0x4, 0x7, 0x9, 0x3b29, 0xfffffffb, 0x5, 0x4e25c5d8, 0x52, 0x1, 0x8000, 0x0, 0x9, 0x5, 0x0, 0x6, 0x4, 0x44, 0x494a, 0xb969, 0x3ff, 0xa, 0x0, 0xfffffff8, 0x2, 0x37, 0x7, 0x101, 0x70a7285, 0x8, 0x9, 0x6, 0x7, 0x7, 0xfffffff7, 0x8, 0x40, 0x3, 0x1ff, 0x5, 0x50, 0x1, 0x101, 0x10001, 0x1, 0x7, 0x7f], 0x5, 0x400, 0x3}) setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000001240), &(0x7f0000001280)=@v2={0x2000000, [{0xfff, 0xc5}, {0x2, 0x9}]}, 0x14, 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shmget$private(0x0, 0x4000, 0x40, &(0x7f000095d000/0x4000)=nil) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') ioctl$SIOCAX25CTLCON(r0, 0x5411, &(0x7f00000001c0)={@default, @default, @default, 0x3, 0x7db, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 1m18.618813919s ago: executing program 4 (id=4766): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbd6f}}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000280)='skb_copy_datagram_iovec\x00', r4}, 0x18) r5 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@canfd={{0x0, 0x1, 0x1}, 0x1a, 0x1, 0x0, 0x0, "e22e8e5c56c166a3cc4df192a00fa1b6c7fa77320a6cc6c9afd4455950f78d33eeada3cb3a061b8ba96b7879b52d98bf941021d1dd3004caaa5f8c54be7d2067"}, 0x48}, 0x1, 0x0, 0x0, 0x8}, 0x1) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r8, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc000) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) ioctl$PTP_PIN_SETFUNC2(r9, 0x40603d10, &(0x7f00000004c0)={'\x00', 0x6, 0x2, 0xfffffa63}) read(0xffffffffffffffff, &(0x7f0000000000)=""/60, 0x3c) 1m18.454248237s ago: executing program 5 (id=4767): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r3, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) epoll_create(0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)={[&(0x7f0000000280)='\nc\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='*.\x00']}, &(0x7f00000003c0)={[&(0x7f0000000380)='syscall\x00']}) recvmsg(r0, 0x0, 0x40010122) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000680)=0x41) 1m18.272253465s ago: executing program 4 (id=4768): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110000000000030000000f00000008000300", @ANYRES32=r1, @ANYBLOB="0500380001000000"], 0x24}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r8 = dup(r6) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e23, 0x7, @empty, 0x2001}}, 0x6, 0x6}, 0x90) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x34, 0x40000000, 0x1b}, 0x9c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x304}, "040000000048bd00", "0dd12f0d004fcf0000e8bfff1a8600", "cf0f00", "8657e2b7e63b34e4"}, 0x28) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x20040, 0x0) write$binfmt_script(r9, &(0x7f0000000840)={'#! ', '', [{0x20, '}\xf9/-#+)@'}], 0xa, "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"/480}, 0x1ed) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f0000001380)) 1m17.78338212s ago: executing program 50 (id=4768): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110000000000030000000f00000008000300", @ANYRES32=r1, @ANYBLOB="0500380001000000"], 0x24}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r8 = dup(r6) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e23, 0x7, @empty, 0x2001}}, 0x6, 0x6}, 0x90) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x34, 0x40000000, 0x1b}, 0x9c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x304}, "040000000048bd00", "0dd12f0d004fcf0000e8bfff1a8600", "cf0f00", "8657e2b7e63b34e4"}, 0x28) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x20040, 0x0) write$binfmt_script(r9, &(0x7f0000000840)={'#! ', '', [{0x20, '}\xf9/-#+)@'}], 0xa, "dc5062e0b4a3af26bb07030000000000000060b3f9afaaf1d6899267a4a62b3a1d624b0802ff5aa0bf116b38b6c4c6b8e2367c0d056c18e42e4002149fbec201005fea5af4ead6c7dc6daaa6fdf532adc6b8890d1d97d53638db63c3391070323950fba446d65b4477982090d750d75e030a39c068de1f711a35f2fb7738574f9a7edcb399737f757c179fb7b2eb771b37593308d6143c387a10fe79109424c653633e158b54125e889cf323a4494bbd748fa8734433e233b7afde13da104a0dfbd01ecefc6cd205f2e3e591ea3d5890037968a8fb1aafcc64b10ef3137cba023de06d7890320b7f248fb0dd39959dceab3695bc2ec0c7a9d5e57f09763f6509457462f380cf9cf6354a22426ca91153b8911d2dc99cff5aa7a0b5d123d9c80abc6a20fcd68292959e9c378e449208a743cb1a065d5a65bea5311a2b8066a4faaa224979d241b7b1bce7ae2e6469aa84cbb3dc9010722c7ca9d5da23b73412b39a2209c04801ca7a51f3ceb9598d97066d1f2d83b0a56c6ec812dbaeb4fa8ec1483d9945a4d5d573904da9179e83b7558c92f3fee344c8c2ee7779cbc28847055986af0400fc0172d94b3869b998d670217da99513ebe69eabcc8846351b8b9579595223df4f35a8083cad73e2c9f8986e4b3400"/480}, 0x1ed) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f0000001380)) 1m17.761836732s ago: executing program 0 (id=4772): r0 = socket(0x2, 0x80805, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000001c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) accept$packet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x1400037e) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) 1m15.579497314s ago: executing program 0 (id=4774): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020}, 0x2020) write$vhost_msg_v2(r1, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x80, 0x0, 0x0, 0x2}}, 0x48) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioprio_set$uid(0x3, 0xee01, 0x817b07286a25783d) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r6, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="9242020000e4b1f8"], 0x0}, 0x0) socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) 1m14.77654415s ago: executing program 5 (id=4776): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) 1m13.130304502s ago: executing program 5 (id=4779): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x510}) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) socket$netlink(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000001640)=ANY=[@ANYBLOB="6b0ee0b3d41b1b", @ANYRES32]) sendmsg(r1, &(0x7f0000001880)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x2, @empty, 'veth1_virt_wifi\x00'}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000100)="fd58b03c3f9bf5bec7fda78c059560430c21405128621b9cfed7596746ef14cb73ae9ee5903bce11bec0619530f949fabd3845a3fca080064f2b64151a29c387aa9e36decd92e47c69f1358d571c9d8d8752525cdc925affc97af9316b0808fe3f83ca904d17210c3994d285ddce18885751088afabec4f512041654a5eb758c7997", 0x82}, {&(0x7f00000018c0)="dc4f9e3978a4a5669f288450b5318c69783e9ac0940348cbc8913e42ce6b3c8b1807cb5f8cad66fe23959bb9e044ccaf95dce031e08bdb1027c5714eb9399baf4de20da609b69384d6b3678a4f54553c18aa6a7dc79c462e3106312e781399ae594ad347d4d048ad34d46a8d05bcce3b660c3b145885b7596d71833be0deefab481c31623344b18660f4b875754ed2b5f5", 0x91}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="4c874afad5fe", 0x6}, {&(0x7f00000012c0)="d341dbf3a380a79dacb83c700dd7245cdd68a2f9524f289770ae1b69bfe1f7bae7ca860d7fa1c73b5f7b62eb3d5c566f5a49136bfde83e276147e38d2100c61e13bab639e3145ddbbee46eefc06e98c2394a8f37fa449a27aa70fabe94928cf3362aef8dc0f8e7ff107139633a", 0x6d}, {&(0x7f0000001340)}, {&(0x7f0000001380)="78abe3950d1eccdd04b347082e6cb53533c942eb0832a132b2edf178cd58a89540aff86794884d1d4b61baacda4a22415f8b9a74aba73beeed24c608453762c9766e", 0x42}, {&(0x7f0000001400)="36341724e85bda168b4e197f04aad26db2be104c392f2fc25a71cf76d466c176fce11b277f68ce24f64b270d6c3c7300ad0aaf9ec34df6a0c034197484ce15636fa625773a90de14fdb76bab22d870e7de2a0c33c459825fe30ef6ae8aa2d6655e1370aec20eba21685c637c75b1c29f7c33eb30beb7", 0x76}], 0x8, &(0x7f0000001500)=[{0x110, 0x109, 0x9, "cd5bebecc87d9e2aaecb6c1ecd7c8d588959397c23e4aea030ebd814e2fd664b5c868d8757df22323225abf0d74cd6a99b87532d36d83b416060ee15f6fe09829e02df1b290d452a2b455fbd3d4b1597ea17ff34c75ceaa3246994977afc4d8b211ab2fc4940f30116f1a6178917b2e2a5d8e39ac7fa1539dba15f35f810755af0e1319ea2e835712a79ac4f268cfa29c74de8702a5c40ac258d55f20e820f0bfdb7b7baf2d96e62c6e6cb87d78a342d99d85e4dcf4b051e477b081da3256f87f8a92c2c9e3eb981ff7addb540c10e32f048c56a4f304b0753233569233ca5ae28fae71e3f80bf98e2b27795f90c6e0cb44052d8ea5a4dc49f3805356432df"}, {0x60, 0x109, 0xcb, "fa7ac57f7c6257fecca750c0a243b19276c19a39d60633abe964bf811b84824e4361866740697d7f0e15015e48c1022729747160f5c0fa594f75730000000000f7ff000000000000000000"}, {0x100, 0x84, 0x3ff, "dd1d488213248738c770565f6b3d4b90b3753694d02afc5b8bcec2fa1271773764d6d1f2e9a2f9d3885e46694ad894a530aa87192aad1d0e0fb96ef36afedd0f5516dddf92747667785d24afb4c1f8ee3084129a6eaf12be4d600f25a7808f54853897f28c64a9e2f0b3c4de145cabbfb2726300082ff0717153eb75d8321b4b22dbf59d49cb0cfef5a31ce14df2e8582aaa78b050356d4973ee92db28958c1d0e77cf36825a31dcac06e36ee27e20a3d56ac30f6cf90505c9af6920eaf6b6e3e1b005698d1acceca1b997d024aa27b1802b8a5e5b6e2ce687f7d4d40be89867eecc52c023fe903544ed"}, {0xb8, 0x10c, 0x1, "94a542e763b4712d51abe722cc149dcf7b93325004acddb8fcf2670102f622430f604daa6dbcaac7c4d8170a5458c60250a74b631a99a4adf8ca659aaf0c344a03e7e97f5c50ece9db74c05ab8cc4356f37ccb4c05838a5515dc431c73c883b7de0afff35a723bd6dcaaeb7ac4069c85a0b8d6d777c2074d5872ef4c33ac2b67050818e9c43a39043edd5d555a987132a99dc097e0e59fa07f04bc4c3835496f5861f004252c"}, {0x28, 0x11, 0xa, "1b38d04a78c708c26dea6adec2d454c9d639f94f2b52"}, {0x20, 0x0, 0x5cdf, "707753db3e7c4d30e050"}], 0x370}, 0x40044) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x19) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00000d6000/0x4000)=nil, 0x4000}}) 1m12.732897575s ago: executing program 5 (id=4780): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r3, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) epoll_create(0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)={[&(0x7f0000000280)='\nc\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='*.\x00']}, &(0x7f00000003c0)={[&(0x7f0000000380)='syscall\x00']}) recvmsg(r0, 0x0, 0x40010122) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000680)=0x41) 1m12.559904917s ago: executing program 51 (id=4780): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r3, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) epoll_create(0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)={[&(0x7f0000000280)='\nc\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='*.\x00']}, &(0x7f00000003c0)={[&(0x7f0000000380)='syscall\x00']}) recvmsg(r0, 0x0, 0x40010122) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000680)=0x41) 1m12.43358316s ago: executing program 0 (id=4782): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2a100, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000af120000fffe07001100020000000000", @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x50) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000000c0)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, 0x0, 0x0, 0x4) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000340), &(0x7f0000000140)=0x80) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) ioctl$SNDCTL_DSP_POST(r4, 0x5008, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x10000}, 0x28) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000300)=ANY=[@ANYBLOB="a0808e0008e1debb2cd4867b4fac7d502d9e02110000eb0702110000006f12dbf22fb2950002000ac122008c18de0edee62e0c79cd2b897b"], 0x38) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c90010000c000500174008"], 0x15) 1m9.249689638s ago: executing program 0 (id=4788): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) 1m5.283624623s ago: executing program 0 (id=4795): mknodat(0xffffffffffffffff, 0x0, 0x22f6c0948578f7ce, 0xb1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x6, 0xff, 0x7, 0xfff}, {0x5, 0x7, 0x5, 0x2}]}) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x228000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r2, &(0x7f00000002c0)={{0x108, 0xff, 0x2, 0x46, 0xea, 0x4, 0x64, 0x8f}, "838b3c6a1176bd0bafefb1b5c3a2630404a5cbcebbc0a64369cda0a999f920fc243e9a6791c46e84bd96ee1efba587976abca102d0a25f9b48298b2e13e7a8317fa71928fc0f32c5809d1aa4412147e2b5a2f96724a6", ['\x00']}, 0x176) close_range(r0, 0xffffffffffffffff, 0x0) 1m4.260750046s ago: executing program 0 (id=4797): recvfrom(0xffffffffffffffff, 0x0, 0x12, 0x40002050, 0x0, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000050000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 1m2.893167881s ago: executing program 52 (id=4797): recvfrom(0xffffffffffffffff, 0x0, 0x12, 0x40002050, 0x0, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000050000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 21.066856876s ago: executing program 9 (id=4863): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) openat$sequencer(0xffffffffffffff9c, 0x0, 0x519b02, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x7, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="4b7b15fce97b21cb42b4d4d0037dba0e4610c6db097046c16b51aa0c3357a2491cafc5d60ad7df0ca4", 0x29}, {&(0x7f0000000200)="30abc4ba4ac261468acda6a56a3a25a73d3dbc69028dbe87889801cf59d196cd8ed1423cb7e2c2c07b623f580faf54d143d135e688960136006b1f2c5b2ff132fbc39126cc090b8c28999072d587bee399de535e630de75ef1c9f764f3c658797875df0f869790eda43a2d848257d38967289f702f195205e3e380519368e3bd11109d85038aa7b0fa5b3c4df079d4fe2b30e753e1e0ec09e42d9146dbd4b2780d6030fa5593403b660781261413ec052e5a59e53e6412bde935e8a0f64824733efa94f1eb2c88fb6a66f2c9b508e0eb4848", 0xd2}], 0x2}}], 0x1, 0x4008000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x0, 0x0) timerfd_create(0x8, 0x0) 15.699698583s ago: executing program 9 (id=4877): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 15.324212425s ago: executing program 9 (id=4879): mprotect(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7000000000000006111901900000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xdddd1000, 0xdddd0000, 0xe, 0xf0, 0x0, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0x9, 0x9, 0x8, 0x2, 0x9, 0xa, 0x5, 0xf, 0x3, 0x4a}, {0xeeee0000, 0x8000000, 0xb, 0x0, 0x40, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0xf000, 0xf, 0xfc, 0x3, 0x4f, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x2, 0x100000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6c, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0x9, 0x9d, 0x3, 0x0, 0x4, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x17, 0x4, 0x3, 0xff, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x8000000, 0x9}, 0x0, 0x0, 0xf000, 0x300, 0x5, 0x1000, 0xe6e70c00, [0xffffffffffffff47, 0x403, 0x5, 0x5]}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x400001, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000001a40)={0x2, 'erspan0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'geneve1\x00', 0x4}, 0x18) ioctl$KVM_CAP_X86_GUEST_MODE(r4, 0x4068aea3, &(0x7f0000000340)) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, &(0x7f0000000040)) r6 = socket(0x1e, 0x8000c, 0x200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r8 = epoll_create(0x10001) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="2c7766646e6f3d4cc275faf46d86866b81df0f0562900dc42d11eb65ad8b4b8a2ba15b6e89c8a598b98b8d97cce3cb1d02928e0984ff1c50e14e8f7a9ea26afb70d54700a3942f2434ed6f1865f022cd29bb3423ffa6efa28eabc0c18bd342c59d15e5803b75059c4228cd2559c5124fc9296b177c0810a508d3fd", @ANYRESHEX=r8, @ANYBLOB=',\x00']) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x7}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000015c0)={"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"}) 14.490840397s ago: executing program 9 (id=4881): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) 13.040199432s ago: executing program 8 (id=4886): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000000), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='veth0_virt_wifi\x00', 0x10) syz_emit_ethernet(0xda, &(0x7f0000000480)={@empty, @broadcast, @void, {@x25={0x805, {0x3, 0x6, 0x13, "2450afc6b287bf8d834a90d7be5fd23003fb85582aef8d88842008c80ca4edef5ee924af10f1942d7ae141a05ad4a01687efb8f1b46f5b6792f9eb4faa557015aaf457d73dc751b19bf86e803542780c174153033162f39373de541a6e8e9b77db54e6f8fa4965d6124473e96569c53eeee7b1810757999ddfeef1feaaeecef35bd173719b8372722f94f7f508fe4c66368a4586df3969d0a1cc005cab858c37b72a37143faa3522295ccf37bde4f9bced40bb26378d2abd3c5eb4420671a268d40b10dd59cde1a015"}}}}, &(0x7f0000000180)={0x0, 0x2, [0x81f, 0xa07, 0xfb, 0x3d5]}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_clone3(&(0x7f0000000840)={0x200000400, &(0x7f0000000580), &(0x7f00000005c0)=0x0, &(0x7f0000000600), {0x8}, &(0x7f0000000680)=""/125, 0x7d, &(0x7f0000000700)=""/236, &(0x7f0000000800)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4, {r2}}, 0x58) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x1, 0x5004) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x7, &(0x7f0000000280)=0x9, 0x4) connect$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400ffffef4037ed404f85c5af982cd0a20a37750d709c197dd5ca3c3f9cc58aeb4455b0f10a858068dca6958227ef2c12c4d73724b0f93051aacaff8bc64b63734b517c2bc5ed676078c7b76d9cb610f57b5767b23e1597ee3da71acb7b4a0a96b0a1ee09262443fe7a26269a967cca9eb3c753950292f0c89bc6e56d971f2af16b925c52d8c31e164cdb26e704372137d3942db5f0e449b3b1c432f147d3e81fdd51d48679ba43e95c0fcf6059e6208b9bb34c529682ccd726302ee54f46f871eb9968f73f616f839ce6237fa9e95b074e2f5612f5da566f79497d1f77c4a30779b64e", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fddbdf25340000000c009900020000005f000000cdfffe003b74b2f80a023a53ca8cf870ef3815fb0500200145000000050020014d000000"], 0x44}, 0x1, 0x0, 0x0, 0x20008055}, 0x20004002) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[], 0xd0}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="110000005a000d"], 0x1c}], 0x1}, 0x0) 11.948236491s ago: executing program 9 (id=4889): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x0, 0x4, 0x8d}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) 11.032250186s ago: executing program 9 (id=4892): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)={0x14, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x102}]}, 0x14}], 0x1}, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r1, 0x82, 0x5, &(0x7f0000002340)='hello') r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000180)={{{@in=@initdev, @in6=@loopback}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xfffffffffffffe0b) r3 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x10c41) syz_usb_connect(0x0, 0x4d, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f0130090904ab020002af27cf052406000005240008000d240f0106000000018002000d0904000a017e63abff0905", @ANYBLOB="c59a"], 0x0) ioctl$VIDIOC_S_AUDIO(r3, 0x40345622, &(0x7f00000000c0)={0x7, "51dd8a44a02f2b218387fda78cfc9b5019277b3c347bf29d1cb0f7f01d29b765", 0x2}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9100) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000100)={{0xffffffffffffffff, 0x3, 0x3, 0x1, 0xfffffc00}, 0x3, 0x2}) 10.272082723s ago: executing program 53 (id=4892): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)={0x14, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x102}]}, 0x14}], 0x1}, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r1, 0x82, 0x5, &(0x7f0000002340)='hello') r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000180)={{{@in=@initdev, @in6=@loopback}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xfffffffffffffe0b) r3 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x10c41) syz_usb_connect(0x0, 0x4d, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f0130090904ab020002af27cf052406000005240008000d240f0106000000018002000d0904000a017e63abff0905", @ANYBLOB="c59a"], 0x0) ioctl$VIDIOC_S_AUDIO(r3, 0x40345622, &(0x7f00000000c0)={0x7, "51dd8a44a02f2b218387fda78cfc9b5019277b3c347bf29d1cb0f7f01d29b765", 0x2}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9100) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000100)={{0xffffffffffffffff, 0x3, 0x3, 0x1, 0xfffffc00}, 0x3, 0x2}) 10.235285504s ago: executing program 1 (id=4894): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) 10.233778554s ago: executing program 3 (id=4895): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x38000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fcntl$setsig(r0, 0xa, 0x35) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r5, 0x4, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 9.939981253s ago: executing program 8 (id=4896): ioctl$SG_BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) io_uring_setup(0x4225, &(0x7f0000002080)={0x0, 0xdff, 0x100, 0x0, 0x16b}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000180)=0x28) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x5c}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'dh\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) 8.901938615s ago: executing program 8 (id=4897): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) openat$sequencer(0xffffffffffffff9c, 0x0, 0x519b02, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="4b7b15fce97b21cb42b4d4d0037dba0e4610c6db097046c16b51aa0c3357a2491cafc5d60ad7df0ca4", 0x29}, {&(0x7f0000000200)="30abc4ba4ac261468acda6a56a3a25a73d3dbc69028dbe87889801cf59d196cd8ed1423cb7e2c2c07b623f580faf54d143d135e688960136006b1f2c5b2ff132fbc39126cc090b8c28999072d587bee399de535e630de75ef1c9f764f3c658797875df0f869790eda43a2d848257d38967289f702f195205e3e380519368e3bd11109d85038aa7b0fa5b3c4df079d4fe2b30e753e1e0ec09e42d9146dbd4b2780d6030fa5593403b660781261413ec052e5a59e53e6412bde935e8a0f64824733efa94f1eb2c88fb6a66f2c9b508e0eb4848", 0xd2}], 0x2}}], 0x1, 0x4008000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x0, 0x0) timerfd_create(0x8, 0x0) 8.756548033s ago: executing program 1 (id=4898): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000080)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r6) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="07062bbd7000fedbdf252700000004c48c84359d89d60ca0b260e4b7bf0cf7c1b88baee042b812259b1b0a7f833ed746a24c5eb2790b7959925f01"], 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, 0x0, 0xa000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 8.495680417s ago: executing program 3 (id=4899): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x1}, 0x28) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r2, &(0x7f00000001c0)=@xdp, &(0x7f0000000240)=0x80) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r9, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x121503, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syncfs(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01012abd7000000008002b00000008000300", @ANYRES32=r10, @ANYBLOB="0c0099000000000050000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4804) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = dup(r11) ioctl$TCSETSF(r12, 0x5404, &(0x7f0000000040)={0x1856, 0x0, 0x0, 0xfffffff9, 0x8, "0e80706e6c06a79874342a0e0d13343972d01f"}) write$UHID_INPUT(r12, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r12, &(0x7f00000040c0)={0x2020}, 0x2020) 8.22101496s ago: executing program 2 (id=4900): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x3c, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abe725c86ec8ce9c3a8f66b00"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x3c}}, 0x0) 7.985246127s ago: executing program 2 (id=4901): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@abs={0x3, 0x0, 0x4e21}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102380, 0x18fec) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x240001, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000280)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setreuid(0xffffffffffffffff, 0xee00) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = syz_clone3(&(0x7f0000001880)={0x101000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r6, r6, 0x21) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 7.520540629s ago: executing program 2 (id=4902): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1214c2, 0x10) io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00100000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='i', 0x1, 0xfffffffe}]) 7.491780702s ago: executing program 3 (id=4903): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) mknod(0x0, 0x8001420, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000300), 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4001, 0x0, @empty, 0xd}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f00000003c0)) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000380)={0x0, 0xf, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r2, 0x101, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x2, 0x311, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_io_uring_setup(0x952, &(0x7f0000000480)={0x0, 0xb2f3, 0x10, 0x4, 0x109}, &(0x7f0000000080), &(0x7f0000000040)) process_madvise(0xffffffffffffffff, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000280), 0x1, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)}, 0x1e) 7.056194374s ago: executing program 2 (id=4904): pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_submit(0x0, 0xfffffffffffffcf9, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ppoll(0x0, 0x0, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x208002) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019380)=""/102400, 0x19000) mkdir(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc80100001805fd05a607f"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r6 = syz_io_uring_setup(0x4e1, &(0x7f0000000100)={0x0, 0x1ffffd, 0x10100, 0xfffffffe, 0x9}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000340)={0x2, {{0xa, 0x4e24, 0x4, @private1, 0x4}}, {{0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}}, 0x108) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000200)=0x3) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x468b, 0xfb96, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x110003) 6.752210386s ago: executing program 1 (id=4905): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000007600)=[{{&(0x7f00000000c0)=@caif, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/5, 0x5}, {&(0x7f0000000180)=""/26, 0x1a}, {&(0x7f0000000340)=""/136, 0x88}, {&(0x7f0000000400)=""/224, 0xe0}, {&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000005c0)=""/199, 0xc7}], 0x6, &(0x7f00000001c0)=""/56, 0x38}, 0x5}, {{&(0x7f0000000740)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000940)=[{&(0x7f00000007c0)=""/92, 0x5c}, {&(0x7f0000000840)=""/48, 0x30}, {&(0x7f0000000880)=""/115, 0x73}, {&(0x7f0000000900)=""/53, 0x35}], 0x4, &(0x7f0000000980)=""/23, 0x17}, 0x9}, {{&(0x7f00000009c0)=@vsock, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000a40)=""/237, 0xed}, {&(0x7f0000000b40)=""/176, 0xb0}, {&(0x7f0000000c00)=""/169, 0xa9}, {&(0x7f0000000cc0)=""/241, 0xf1}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/137, 0x89}, {&(0x7f0000001e80)=""/26, 0x1a}, {&(0x7f0000001ec0)=""/250, 0xfa}], 0x8, &(0x7f0000002040)=""/170, 0xaa}, 0xc7}, {{&(0x7f0000002100)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002180)=""/75, 0x4b}], 0x1, &(0x7f0000002240)=""/127, 0x7f}, 0x6}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000022c0)=""/61, 0x3d}, {&(0x7f0000002300)=""/126, 0x7e}, {&(0x7f0000002380)=""/31, 0x1f}, {&(0x7f00000023c0)=""/74, 0x4a}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/129, 0x81}], 0x6, &(0x7f0000003580)=""/253, 0xfd}, 0xdf}, {{&(0x7f0000003680)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000003700)=""/211, 0xd3}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/212, 0xd4}, {&(0x7f0000004900)=""/186, 0xba}, {&(0x7f00000049c0)=""/191, 0xbf}, {&(0x7f0000004a80)=""/219, 0xdb}, {&(0x7f0000004b80)=""/191, 0xbf}], 0x7, &(0x7f0000004cc0)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000005cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000006d40)=[{&(0x7f0000005d40)=""/4081, 0xff1}], 0x1, &(0x7f0000007840)=""/236, 0xec}, 0xfe01}, {{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f0000006e80)=""/134, 0x86}, {&(0x7f0000006f40)=""/126, 0x7e}, {&(0x7f0000006fc0)=""/109, 0x6d}, {&(0x7f0000007040)=""/31, 0x1f}, {&(0x7f0000006d80)=""/236, 0xec}, {&(0x7f0000007180)=""/185, 0xb9}, {&(0x7f0000007240)=""/73, 0x49}, {&(0x7f00000072c0)=""/78, 0x4e}], 0x8}, 0xf}, {{&(0x7f00000073c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000074c0)=[{&(0x7f0000007440)=""/98, 0x62}], 0x1, &(0x7f0000007500)=""/229, 0xe5}, 0x7ff}], 0x9, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) r7 = socket$kcm(0x10, 0x2, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700004e2000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 6.336804989s ago: executing program 1 (id=4906): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@udp6=r2, 0x1}, 0x20) bind$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001680)=[{{&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0}}], 0x1, 0x4000) recvmmsg(r2, &(0x7f0000000500)=[{{&(0x7f0000000180)=@generic, 0x80, 0x0, 0x0, &(0x7f0000000900)=""/114, 0x72}, 0x3}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000980)=""/177, 0xb1}, {&(0x7f0000000a40)=""/209, 0xd1}, {&(0x7f0000000cc0)=""/253, 0xfd}, {0x0}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/168, 0xa8}], 0x6}, 0xd0000}, {{&(0x7f0000000f80)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000001000)=""/185, 0xb9}, {&(0x7f00000010c0)=""/233, 0xe9}, {&(0x7f00000011c0)=""/191, 0xbf}], 0x3, &(0x7f0000001280)=""/210, 0xd2}, 0x7}, {{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000240)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/86, 0x56}], 0x2, &(0x7f0000001540)=""/16, 0x10}, 0x170}], 0x4, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) close(r6) sched_setscheduler(0x0, 0x0, &(0x7f0000000400)=0x6) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sync_file_range(r0, 0xffffffffffffa525, 0x7, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x33, 0x3, 0x40000001) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d003507000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 4.438188454s ago: executing program 8 (id=4907): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) 4.370874978s ago: executing program 1 (id=4908): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x800}}}, 0xd) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220f0000000b574e69392bf85eda"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) 4.236334879s ago: executing program 8 (id=4909): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000000)={0x9, 0xff}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.982770542s ago: executing program 3 (id=4910): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f", 0x1}, {&(0x7f0000002300)='U', 0x1}], 0x2, 0x0, 0x0, 0x200000d4}], 0x1, 0x4000080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xf8}}, 0x0) r6 = syz_io_uring_setup(0x10ce, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x2, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x22, 0x0, @fd_index=0x4}) io_uring_enter(r6, 0x45bc, 0x0, 0x0, 0x0, 0x0) alarm(0x8000000000000001) alarm(0x10001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000005000000000000020000000000303061300000000000000000000000000000009e0953dff54336798f2c95238512992e036ab2f7e5a67169dd33f4f278edb146d0c5118acfc6fe31e787fd1a6f36a8f70b1b4f40dbbda209fb861378a2a217b1a69e1ca7ec0f2e777d002fece8c8638b4030ec0044c41bcb0886dc940800396a8ebb5379e46b9db950ef0a9b000000000000000000"], 0x0, 0x2a, 0x0, 0x1, 0xd}, 0x28) 3.866998429s ago: executing program 2 (id=4911): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$cont(0x20, r0, 0x7fffffff, 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xb4, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r9 = socket(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r9, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xf}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x0, 0x31a, 0x3, 0x88a, 0x0, 0x8e, 0x1f, 0x5, 0xff, {0x6696, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 3.793842292s ago: executing program 1 (id=4912): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') unshare(0x6a040000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000000210", @ANYBLOB="8770368b9161d85a40444b31e11f7190fb3e7550ac7e2e874a00142e6840769a2a4c"], 0x18}, 0x1, 0x0, 0xf00000000000000}, 0x0) 3.748354086s ago: executing program 8 (id=4913): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x84, @multicast1, 0x0, 0x0, 'lblc\x00'}, 0xfffffffffffffd71) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) getpid() ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x2000, 0x25dfdbff, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x8, 0x10000000, 0x20001, 0xa}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xa}]}, {0xfffffffffffffd8e}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x4}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) getpid() setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x20001000, 0x957e, 0x1000, 0x3a}, 0x1c) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) 775.538463ms ago: executing program 2 (id=4914): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) close(r1) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x6}}) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000006c0)=@newtaction={0x48, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x21}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000070000000000242065580000000000000021000086dd080088be4305400f100000"], 0x0) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000280)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 621.701088ms ago: executing program 3 (id=4915): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000580)={[{@index_off}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'macsec0\x00', 0x14bb0d2821801972}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@ipv6_newnexthop={0x2bc, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_OIF={0x8, 0x5, r4}, @NHA_ENCAP={0x278, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x274, 0x1, {{0x0, {0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x6, [@private1={0xfc, 0x1, '\x00', 0x1}]}}, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x2f}, @private2, @empty, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @local, @ipv4={'\x00', '\xff\xff', @empty}, @empty, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x640100fc}, @mcast2, @remote, @empty, @dev={0xfe, 0x80, '\x00', 0x31}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty]}}}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r4}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x80}}]}, 0x2bc}}, 0x0) 0s ago: executing program 3 (id=4916): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/crash_elfcorehdr_size', 0x20000, 0x20) read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020) r1 = gettid() timer_create(0x1, &(0x7f0000000500)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xfc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000280)={0x3, 0x8, 0x0, 0x2, 0x4, 0x80000000, 0xc, 0x7540, r4}, 0x20) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/202, 0xca}], 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000004c0)={0x0, &(0x7f0000000880)=[@wrmsr={0x1e, 0x20, {0x278, 0x1}}, @wr_crn={0x46, 0x20, {0x2, 0x5}}, @code={0xa, 0x58, {"0f01cf65470f01c8429c2ef341ff89004800003e490fc79a47610000f30f090fc71bc4a1fe6f8d4800000048b8a7560000000000000f23d00f21f8350000000a0f23f8650f01f8"}}, @cpuid={0x14, 0x18, {0x1, 0x8}}, @wr_crn={0x46, 0x20, {0x2, 0x1}}, @cpuid={0x14, 0x18, {0xfffffffc, 0xffff}}, @cpuid={0x14, 0x18, {0x8, 0x9}}, @wrmsr={0x1e, 0x20, {0x9e6}}, @rdmsr={0x32, 0x18, {0x8b7}}, @wrmsr={0x1e, 0x20, {0x8ee, 0x4}}, @wr_crn={0x46, 0x20, {0x0, 0x9}}, @code={0xa, 0x6f, {"b9800000c00f3235004000000f3066b8a6008ee0c422a0f38f1e000000c4a225a72fc74424008f000000c744240202000000ff1c24c744240000000100c74424020d000000c7442406000000000f0114240f4eb5f900000040f50f300f08"}}, @uexit={0x0, 0x18}, @wr_crn={0x46, 0x20, {0x2, 0x7fffffff}}, @wr_crn={0x46, 0x20, {0x8, 0xa24}}, @wrmsr={0x1e, 0x20, {0x11, 0x6}}, @wrmsr={0x1e, 0x20, {0xb2f, 0x100000000}}, @cpuid={0x14, 0x18, {0x100, 0xc}}, @wrmsr={0x1e, 0x20, {0xbbc, 0x40}}, @cpuid={0x14, 0x18, {0x8, 0x3}}, @uexit={0x0, 0x18, 0x9}, @code={0xa, 0x61, {"4a0fc79aa5000000460f01c566410f3a0f18eec401dd5f619f660fc7750365650f0fe3bf0f20e035040000000f22e048b81c900000000000000f23d00f21f8353000000e0f23f80f218d66b8f1008ed0"}}, @rdmsr={0x32, 0x18, {0x19c}}, @wr_crn={0x46, 0x20, {0x0, 0x6b}}, @cpuid={0x14, 0x18, {0x2, 0x7fffffff}}, @wrmsr={0x1e, 0x20, {0x85c, 0xffffffff}}], 0x3b8}) ioctl$KVM_GET_SREGS(r8, 0x8138ae83, &(0x7f0000000640)) sendmsg$NFT_BATCH(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): adm_t tclass=xdp_socket permissive=1 [ 1190.109797][ T5930] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1190.118856][ T5930] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1190.137015][ T5930] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1190.144842][ T5930] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1190.164280][T13897] Bluetooth: hci2: command tx timeout [ 1190.179256][ T5930] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1190.193557][ T5930] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1190.208288][ T5930] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1190.220459][ T5930] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1190.254854][ T5930] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1190.267619][ T5930] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1190.318985][ T5915] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1190.346730][ T5930] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1190.417297][ T5930] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1190.467060][ T5930] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1190.476944][ T5930] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1190.493820][ T5915] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 1190.511275][ T5915] usb 7-1: config 0 has no interface number 0 [ 1190.517841][ T5930] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1190.524440][ T5915] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1190.544122][ T5930] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1190.556980][ T5915] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1190.561645][ T5930] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1190.579605][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.588444][ T5915] usb 7-1: Product: syz [ 1190.593717][ T5915] usb 7-1: Manufacturer: syz [ 1190.598717][ T5915] usb 7-1: SerialNumber: syz [ 1190.613001][ T5930] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1190.630219][ T5930] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1190.641598][ T5930] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1190.655291][ T5930] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1190.666171][ T5930] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1190.676786][ T5930] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1190.697068][ T5915] usb 7-1: config 0 descriptor?? [ 1190.723873][ T5915] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 1190.731756][ T5930] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1190.772135][ T5930] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1190.781646][ T5930] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1190.799240][ T5930] usb 1-1: Product: syz [ 1190.809114][ T5930] usb 1-1: Manufacturer: syz [ 1190.819757][ T5930] usb 1-1: SerialNumber: syz [ 1190.863418][ T5930] usb 1-1: config 0 descriptor?? [ 1190.881162][ T5930] yurex 1-1:0.0: USB YUREX device now attached to Yurex #1 [ 1191.153508][ T30] audit: type=1400 audit(2000000476.981:372462): avc: denied { write } for pid=23501 comm="syz.0.4616" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1191.199861][T22649] usb 1-1: USB disconnect, device number 33 [ 1191.211097][T22649] yurex 1-1:0.0: USB YUREX #1 now disconnected [ 1191.258129][ T30] audit: type=1400 audit(2000000476.981:372463): avc: denied { open } for pid=23501 comm="syz.0.4616" path="/11/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1191.377284][ C1] yurex 7-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 1191.621347][ T5930] usb 7-1: USB disconnect, device number 8 [ 1191.673614][ T5930] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 1191.863512][T17136] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1192.021898][T17136] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1192.055051][T17136] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1192.103741][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1192.110924][T17136] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1192.123160][T17136] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.133980][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1192.134570][T17136] usb 8-1: Product: syz [ 1192.148599][T17136] usb 8-1: Manufacturer: syz [ 1192.153875][T17136] usb 8-1: SerialNumber: syz [ 1192.169223][T17136] usb 8-1: config 0 descriptor?? [ 1192.172298][ T36] bond0 (unregistering): Released all slaves [ 1192.175133][T23531] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1192.188793][T23531] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1192.219340][T13897] Bluetooth: hci2: command tx timeout [ 1192.371971][T23494] chnl_net:caif_netlink_parms(): no params data found [ 1192.416728][T23531] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1192.436047][T23531] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1192.807947][T23558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1193.170421][ T36] hsr_slave_0: left promiscuous mode [ 1193.213481][ T36] hsr_slave_1: left promiscuous mode [ 1193.246082][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1193.279068][ T5915] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1193.613186][T17136] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 1193.616366][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1193.674690][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1193.682499][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1193.696927][ T5915] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1193.708873][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1193.718540][ T5915] usb 1-1: Product: syz [ 1193.729849][ T5915] usb 1-1: Manufacturer: syz [ 1193.734593][ T5915] usb 1-1: SerialNumber: syz [ 1193.756348][ T36] veth1_macvtap: left promiscuous mode [ 1193.886009][ T36] veth0_macvtap: left promiscuous mode [ 1193.989281][ T5915] usb 1-1: config 0 descriptor?? [ 1193.995629][ T36] veth1_vlan: left promiscuous mode [ 1194.006951][ T36] veth0_vlan: left promiscuous mode [ 1194.019091][ T5915] ch341 1-1:0.0: ch341-uart converter detected [ 1194.299182][T13897] Bluetooth: hci2: command tx timeout [ 1194.505156][ T30] audit: type=1400 audit(2000000480.331:372464): avc: denied { accept } for pid=23561 comm="syz.0.4623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1194.687915][T23571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1195.340021][ T5915] usb 1-1: failed to send control message: -110 [ 1195.369111][ T5915] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 1196.319497][T23610] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4626'. [ 1196.385713][T13897] Bluetooth: hci2: command tx timeout [ 1197.455463][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1197.560023][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1198.469720][ C0] vkms_vblank_simulate: vblank timer overrun [ 1198.876368][T23494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.884099][T23494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.896720][T23494] bridge_slave_0: entered allmulticast mode [ 1198.904596][T23494] bridge_slave_0: entered promiscuous mode [ 1198.939036][ T5915] usb 1-1: USB disconnect, device number 34 [ 1198.970265][ T5915] ch341 1-1:0.0: device disconnected [ 1198.978044][ T5930] usb 8-1: USB disconnect, device number 8 [ 1199.161396][T23494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.168682][T23494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.195271][T23494] bridge_slave_1: entered allmulticast mode [ 1199.211014][T23494] bridge_slave_1: entered promiscuous mode [ 1199.221103][T23667] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4631'. [ 1199.312950][T23667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23667 comm=syz.7.4631 [ 1199.480093][T23494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1199.572357][T23494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1200.062423][T23494] team0: Port device team_slave_0 added [ 1200.260217][T23494] team0: Port device team_slave_1 added [ 1200.695918][T23694] loop6: detected capacity change from 0 to 7 [ 1200.714683][T23494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1200.732637][T23694] Dev loop6: unable to read RDB block 7 [ 1200.738306][T23694] loop6: AHDI p3 p4 [ 1200.749056][T23694] loop6: partition table partially beyond EOD, truncated [ 1200.756655][T23694] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1200.763943][T23494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1200.976531][T23660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1201.132293][T23494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1201.246271][T23494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1201.253573][T23494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1201.284658][T23494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1201.285317][T17942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1201.342207][T17942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1201.376626][T17942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1201.421080][T17942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1201.429390][T17942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1201.603497][T23169] udevd[23169]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1202.489762][T23494] hsr_slave_0: entered promiscuous mode [ 1202.503083][T23494] hsr_slave_1: entered promiscuous mode [ 1202.535307][T23494] debugfs: 'hsr0' already exists in 'hsr' [ 1202.554320][T23494] Cannot create hsr debugfs directory [ 1202.619222][T23710] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4639'. [ 1202.686030][T23715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.710943][T23715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.878742][ T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.909170][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1203.119856][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1203.131859][ T9] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 1203.140385][ T9] usb 1-1: can't read configurations, error -22 [ 1203.212136][ T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.269074][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1203.673313][T17942] Bluetooth: hci3: command tx timeout [ 1203.730038][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1203.757213][ T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.780866][ T9] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 1203.789536][ T9] usb 1-1: can't read configurations, error -22 [ 1203.799165][ T9] usb usb1-port1: attempt power cycle [ 1203.824946][T23718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1204.052608][ T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.161744][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1204.203150][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1204.216308][ T9] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 1204.226032][ T9] usb 1-1: can't read configurations, error -22 [ 1204.369382][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1204.402450][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1204.414258][ T9] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 1204.423981][ T9] usb 1-1: can't read configurations, error -22 [ 1204.438158][ T9] usb usb1-port1: unable to enumerate USB device [ 1204.953553][T23700] chnl_net:caif_netlink_parms(): no params data found [ 1205.207025][T23752] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4643'. [ 1205.258078][T23752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23752 comm=syz.7.4643 [ 1205.303349][ T36] bridge_slave_1: left allmulticast mode [ 1205.311365][ T36] bridge_slave_1: left promiscuous mode [ 1205.327498][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.366680][ T36] bridge_slave_0: left allmulticast mode [ 1205.393911][ T36] bridge_slave_0: left promiscuous mode [ 1205.429269][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.759268][T17942] Bluetooth: hci3: command tx timeout [ 1205.796661][ T5915] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1205.951200][ T5915] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.966663][ T5915] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1205.985178][ T5915] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1206.015910][ T5915] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.030965][ T5915] usb 9-1: Product: syz [ 1206.035323][ T5915] usb 9-1: Manufacturer: syz [ 1206.054902][ T5915] usb 9-1: SerialNumber: syz [ 1206.190913][ T5930] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1206.374398][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.386005][ T5930] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 1206.395648][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.421032][ T5930] usb 1-1: config 0 descriptor?? [ 1206.482803][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1206.494378][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1206.506432][ T36] bond0 (unregistering): Released all slaves [ 1206.751958][T23700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.769552][T23700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.778512][T23700] bridge_slave_0: entered allmulticast mode [ 1206.801814][T23700] bridge_slave_0: entered promiscuous mode [ 1206.962205][T23700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.974129][T23700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.982958][T23700] bridge_slave_1: entered allmulticast mode [ 1206.991007][T23700] bridge_slave_1: entered promiscuous mode [ 1207.029671][ T5930] dragonrise 0003:0079:0006.0019: item fetching failed at offset 3/7 [ 1207.158935][ T5930] dragonrise 0003:0079:0006.0019: parse failed [ 1207.180596][ T5930] dragonrise 0003:0079:0006.0019: probe with driver dragonrise failed with error -22 [ 1207.498178][ T5930] usb 1-1: USB disconnect, device number 39 [ 1207.568150][T23700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1207.586142][T23700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1207.819457][T17942] Bluetooth: hci3: command tx timeout [ 1208.617470][ T5915] usb 9-1: USB disconnect, device number 2 [ 1209.005689][T23700] team0: Port device team_slave_0 added [ 1209.232029][ T36] hsr_slave_0: left promiscuous mode [ 1209.331546][ T36] hsr_slave_1: left promiscuous mode [ 1209.341512][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1209.352286][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1209.402651][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1209.420725][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1209.465485][ T36] veth1_macvtap: left promiscuous mode [ 1209.748739][ T36] veth0_macvtap: left promiscuous mode [ 1209.761234][ T36] veth1_vlan: left promiscuous mode [ 1209.766608][ T36] veth0_vlan: left promiscuous mode [ 1209.832877][T23816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1209.912880][T17942] Bluetooth: hci3: command tx timeout [ 1210.218751][T23838] netlink: 'syz.0.4652': attribute type 1 has an invalid length. [ 1210.235485][T23838] netlink: 9388 bytes leftover after parsing attributes in process `syz.0.4652'. [ 1211.246459][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1211.307476][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1211.983481][T23494] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1211.996322][T23700] team0: Port device team_slave_1 added [ 1212.126004][T23494] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1212.185766][T23494] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1212.274235][T23494] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1212.380115][T23700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1212.387642][T23700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1212.418170][T23700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1212.456197][T23700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1212.463507][T23700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1212.496327][T23700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1212.709326][ T5915] IPVS: starting estimator thread 0... [ 1213.090485][T23856] IPVS: using max 47 ests per chain, 112800 per kthread [ 1213.331350][T23700] hsr_slave_0: entered promiscuous mode [ 1213.337534][T23700] hsr_slave_1: entered promiscuous mode [ 1213.419780][T23865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4654'. [ 1213.533646][T23872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23872 comm=syz.0.4654 [ 1213.985420][T23494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.764199][T23494] 8021q: adding VLAN 0 to HW filter on device team0 [ 1214.954737][T23494] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1215.021162][T23494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1215.060244][ T30] audit: type=1400 audit(2000000500.891:372465): avc: denied { name_bind } for pid=23886 comm="syz.0.4657" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 1215.286223][ T6193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.293661][ T6193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.397418][ T6193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.404586][ T6193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1216.687276][T23494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1216.794847][T23700] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1216.829662][T23700] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1216.874160][ T30] audit: type=1326 audit(2000000502.701:372466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23914 comm="syz.0.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427918eb69 code=0x7ffc0000 [ 1216.898156][ T30] audit: type=1326 audit(2000000502.701:372467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23914 comm="syz.0.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427918eb69 code=0x7ffc0000 [ 1216.932513][ T30] audit: type=1326 audit(2000000502.701:372468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23914 comm="syz.0.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f427918eb69 code=0x7ffc0000 [ 1216.934989][T23700] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1217.004522][ T43] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1217.023000][ T30] audit: type=1326 audit(2000000502.701:372469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23914 comm="syz.0.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427918eb69 code=0x7ffc0000 [ 1217.053053][T23700] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1217.091433][ T30] audit: type=1326 audit(2000000502.701:372470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23914 comm="syz.0.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427918eb69 code=0x7ffc0000 [ 1217.092511][T23494] veth0_vlan: entered promiscuous mode [ 1217.147297][ T30] audit: type=1326 audit(2000000502.701:372471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23914 comm="syz.0.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f427918eb69 code=0x7ffc0000 [ 1217.195755][T23494] veth1_vlan: entered promiscuous mode [ 1217.205189][ T30] audit: type=1326 audit(2000000502.701:372472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23914 comm="syz.0.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427918eb69 code=0x7ffc0000 [ 1217.232046][ T30] audit: type=1326 audit(2000000502.701:372473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23914 comm="syz.0.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427918eb69 code=0x7ffc0000 [ 1217.258284][ T30] audit: type=1326 audit(2000000502.711:372474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23914 comm="syz.0.4661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f427918eb69 code=0x7ffc0000 [ 1217.262879][ T43] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1217.345261][T23494] veth0_macvtap: entered promiscuous mode [ 1217.353089][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1217.356045][T23494] veth1_macvtap: entered promiscuous mode [ 1217.388964][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1217.410977][ T43] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1217.434911][ T43] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1217.449464][T23700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1217.494535][ T43] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1217.510836][T23494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1217.524387][ T43] usb 9-1: Manufacturer: syz [ 1217.564797][T23494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1217.619867][ T43] usb 9-1: config 0 descriptor?? [ 1217.622260][ T6193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.679369][ T6193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.717521][T23941] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8 [ 1217.723635][ T6193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.755959][T23700] 8021q: adding VLAN 0 to HW filter on device team0 [ 1217.802641][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.810079][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.838002][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.926247][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.934146][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1218.035578][ T43] hid_parser_main: 7 callbacks suppressed [ 1218.035609][ T43] appleir 0003:05AC:8243.001A: unknown main item tag 0x0 [ 1218.093904][ T43] appleir 0003:05AC:8243.001A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 1218.291385][T23919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.329788][T23919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.386579][T23956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.401846][ T36] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.428072][T23956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.470840][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.499589][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.564049][ T43] usb 9-1: USB disconnect, device number 3 [ 1218.687800][ T36] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.771963][T23968] FAULT_INJECTION: forcing a failure. [ 1218.771963][T23968] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1218.786962][T23968] CPU: 0 UID: 0 PID: 23968 Comm: syz.8.4668 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 1218.787001][T23968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1218.787014][T23968] Call Trace: [ 1218.787022][T23968] [ 1218.787032][T23968] dump_stack_lvl+0x16c/0x1f0 [ 1218.787079][T23968] should_fail_ex+0x512/0x640 [ 1218.787113][T23968] should_fail_alloc_page+0xe7/0x130 [ 1218.787137][T23968] prepare_alloc_pages+0x3c2/0x610 [ 1218.787160][T23968] ? rcu_is_watching+0x12/0xc0 [ 1218.787184][T23968] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1218.787210][T23968] ? __pfx_stack_trace_save+0x10/0x10 [ 1218.787235][T23968] ? stack_depot_save_flags+0x28/0xa40 [ 1218.787264][T23968] ? avc_has_extended_perms+0x47c/0x1090 [ 1218.787294][T23968] ? mon_bin_ioctl+0x470/0xcd0 [ 1218.787320][T23968] ? kasan_save_stack+0x42/0x60 [ 1218.787336][T23968] ? kasan_save_stack+0x33/0x60 [ 1218.787351][T23968] ? kasan_save_track+0x14/0x30 [ 1218.787366][T23968] ? __kasan_kmalloc+0xaa/0xb0 [ 1218.787383][T23968] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1218.787400][T23968] ? do_syscall_64+0xcd/0x4c0 [ 1218.787443][T23968] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1218.787467][T23968] ? policy_nodemask+0xea/0x4e0 [ 1218.787491][T23968] alloc_pages_mpol+0x1fb/0x550 [ 1218.787512][T23968] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1218.787542][T23968] alloc_pages_noprof+0x131/0x390 [ 1218.787564][T23968] get_zeroed_page_noprof+0x18/0xb0 [ 1218.787587][T23968] mon_alloc_buff+0xce/0x1b0 [ 1218.787613][T23968] mon_bin_ioctl+0x48e/0xcd0 [ 1218.787638][T23968] ? hook_file_ioctl_common+0x145/0x410 [ 1218.787675][T23968] ? __pfx_mon_bin_ioctl+0x10/0x10 [ 1218.787703][T23968] ? selinux_file_ioctl+0x180/0x270 [ 1218.787726][T23968] ? selinux_file_ioctl+0xb4/0x270 [ 1218.787748][T23968] ? __pfx_mon_bin_ioctl+0x10/0x10 [ 1218.787775][T23968] __x64_sys_ioctl+0x18b/0x210 [ 1218.787807][T23968] do_syscall_64+0xcd/0x4c0 [ 1218.787837][T23968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.787861][T23968] RIP: 0033:0x7fb102d8eb69 [ 1218.787879][T23968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1218.787895][T23968] RSP: 002b:00007fb103bc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1218.787917][T23968] RAX: ffffffffffffffda RBX: 00007fb102fb6080 RCX: 00007fb102d8eb69 [ 1218.787930][T23968] RDX: 00000000000096fa RSI: 0000000000009204 RDI: 0000000000000005 [ 1218.787941][T23968] RBP: 00007fb103bc2090 R08: 0000000000000000 R09: 0000000000000000 [ 1218.787952][T23968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.787963][T23968] R13: 0000000000000000 R14: 00007fb102fb6080 R15: 00007ffe84be4b28 [ 1218.787988][T23968] [ 1219.055575][ C0] vkms_vblank_simulate: vblank timer overrun [ 1219.369996][T16537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.479718][T16537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.784301][T13897] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1219.801907][T13897] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1219.812756][T13897] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1219.841115][T13897] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1219.861352][T13897] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1219.892858][ T36] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.074249][ T36] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.212043][T23700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1220.613900][T24002] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4673'. [ 1221.001764][T24002] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1221.017285][T24002] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1221.046606][T24002] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1221.067415][T24002] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1221.115110][ T36] bridge_slave_1: left allmulticast mode [ 1221.163305][ T36] bridge_slave_1: left promiscuous mode [ 1221.226262][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.323581][ T36] bridge_slave_0: left allmulticast mode [ 1221.367929][ T36] bridge_slave_0: left promiscuous mode [ 1221.386822][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.739232][T24021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1221.979231][T17942] Bluetooth: hci0: command tx timeout [ 1224.117913][T17942] Bluetooth: hci0: command tx timeout [ 1225.562299][T17136] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1225.635418][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1225.649615][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1225.660878][ T36] bond0 (unregistering): Released all slaves [ 1226.020128][T17136] usb 9-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1226.030878][T17136] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.055799][T17136] usb 9-1: Product: syz [ 1226.061654][T17136] usb 9-1: Manufacturer: syz [ 1226.082316][T17136] usb 9-1: SerialNumber: syz [ 1226.090805][T17136] usb 9-1: config 0 descriptor?? [ 1226.153844][T17942] Bluetooth: hci0: command tx timeout [ 1226.196686][T17136] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1226.970229][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1226.970248][ T30] audit: type=1326 audit(2000000512.801:372494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.1.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1227.048985][ T30] audit: type=1326 audit(2000000512.801:372495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.1.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1227.063512][T23980] chnl_net:caif_netlink_parms(): no params data found [ 1227.073152][ T30] audit: type=1326 audit(2000000512.831:372496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.1.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1227.335573][ T30] audit: type=1326 audit(2000000512.831:372497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.1.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1227.359271][T17136] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1227.359356][T17136] sq905c 9-1:0.0: probe with driver sq905c failed with error -110 [ 1227.381030][ T36] hsr_slave_0: left promiscuous mode [ 1227.391355][ T36] hsr_slave_1: left promiscuous mode [ 1227.402580][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1227.433918][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1227.451927][ T30] audit: type=1326 audit(2000000512.831:372498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.1.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1227.476610][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1227.512260][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1227.553762][ T36] veth1_macvtap: left promiscuous mode [ 1227.565496][ T30] audit: type=1326 audit(2000000512.831:372499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.1.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1227.568631][ T36] veth0_macvtap: left promiscuous mode [ 1227.630621][ T36] veth1_vlan: left promiscuous mode [ 1227.651795][ T36] veth0_vlan: left promiscuous mode [ 1227.658459][ T30] audit: type=1326 audit(2000000512.831:372500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.1.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1227.692201][ T30] audit: type=1326 audit(2000000512.831:372501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.1.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1227.719615][ T30] audit: type=1326 audit(2000000512.831:372502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.1.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1227.814825][ T30] audit: type=1326 audit(2000000512.831:372503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.1.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1228.265729][ T5959] usb 9-1: USB disconnect, device number 4 [ 1228.306441][T24109] fuse: Bad value for 'fd' [ 1228.382927][T13897] Bluetooth: hci0: command tx timeout [ 1228.486804][T24098] block nbd1: shutting down sockets [ 1229.526989][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1229.689835][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1231.058247][T24121] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4682'. [ 1231.067905][T24121] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4682'. [ 1231.077416][T24121] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4682'. [ 1231.177532][T23700] veth0_vlan: entered promiscuous mode [ 1231.404920][T23700] veth1_vlan: entered promiscuous mode [ 1232.077970][T23980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.112194][T23980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.178592][T23980] bridge_slave_0: entered allmulticast mode [ 1232.193721][T23980] bridge_slave_0: entered promiscuous mode [ 1232.241837][T23980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.274640][T23980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.328594][T23980] bridge_slave_1: entered allmulticast mode [ 1232.345389][T23980] bridge_slave_1: entered promiscuous mode [ 1232.511905][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1232.511924][ T30] audit: type=1400 audit(2000000518.331:372511): avc: denied { getopt } for pid=24182 comm="syz.0.4688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1232.598523][T24191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1232.674689][T23980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1232.693384][T23980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1232.919001][ T5959] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 1232.989132][T24198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1233.060932][T23980] team0: Port device team_slave_0 added [ 1233.095141][T23980] team0: Port device team_slave_1 added [ 1233.105610][ T5959] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1233.329322][ T5959] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1233.355700][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1233.432440][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1233.463967][ T5959] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1233.489745][T23700] veth0_macvtap: entered promiscuous mode [ 1233.497344][ T5959] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1233.500775][T23700] veth1_macvtap: entered promiscuous mode [ 1233.507909][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.518189][T23980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1233.543986][T23980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1233.578187][ T5959] usb 1-1: Product: syz [ 1233.587158][ T5959] usb 1-1: Manufacturer: syz [ 1233.623231][ T5959] usb 1-1: SerialNumber: syz [ 1233.640541][ T5959] usb 1-1: config 0 descriptor?? [ 1233.658625][T23980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1233.664091][ T5959] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input67 [ 1233.835631][T23700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1233.915980][T23980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1233.965035][T23980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1234.182791][T23980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1234.256996][T24211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.267821][T24211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.677130][T23700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1234.765417][T16537] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.818192][T16537] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.960948][T23980] hsr_slave_0: entered promiscuous mode [ 1234.968749][T23980] hsr_slave_1: entered promiscuous mode [ 1234.981951][T23980] debugfs: 'hsr0' already exists in 'hsr' [ 1234.987863][T23980] Cannot create hsr debugfs directory [ 1235.015364][T24215] fuse: Bad value for 'fd' [ 1235.022528][T16537] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.070027][T16537] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.312467][T16537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.334687][T16537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.439222][ T5915] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1235.477797][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.486932][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.613320][ T5915] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 1235.638666][ T5915] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.662950][T24233] SELinux: ebitmap start bit (2099205) is not a multiple of the map unit size (64) [ 1235.674988][ T5915] usb 9-1: config 0 descriptor?? [ 1235.707379][T24233] SELinux: failed to load policy [ 1235.764536][T21595] usb 1-1: USB disconnect, device number 40 [ 1235.829522][T24233] Invalid option length (30502) for dns_resolver key [ 1235.897056][ T5915] usb 9-1: string descriptor 0 read error: -71 [ 1235.939932][ T5915] usbhid 9-1:0.0: can't add hid device: -71 [ 1235.959027][ T5915] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1236.009135][ T5915] usb 9-1: USB disconnect, device number 5 [ 1237.803349][T23980] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1238.468650][T23980] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1238.488132][T23980] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1238.541885][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.548258][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.572159][T23980] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1238.589115][T12909] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1238.991095][T12909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1239.007413][T12909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1239.026709][T12909] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1239.036461][T12909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.126016][T12909] usb 5-1: config 0 descriptor?? [ 1239.199705][T24286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1239.806481][T23980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.938150][T24269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1239.947243][T24269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1240.095530][T24294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1240.178810][T23980] 8021q: adding VLAN 0 to HW filter on device team0 [ 1240.198495][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.205677][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.298920][ T6193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.306148][ T6193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.546024][T24298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1241.450553][T12909] usbhid 5-1:0.0: can't add hid device: -71 [ 1241.456761][T12909] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1241.522287][T12909] usb 5-1: USB disconnect, device number 69 [ 1242.532860][T23980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1242.669944][T24316] FAULT_INJECTION: forcing a failure. [ 1242.669944][T24316] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.684972][T24316] CPU: 1 UID: 0 PID: 24316 Comm: syz.8.4705 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 1242.685004][T24316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1242.685014][T24316] Call Trace: [ 1242.685021][T24316] [ 1242.685029][T24316] dump_stack_lvl+0x16c/0x1f0 [ 1242.685063][T24316] should_fail_ex+0x512/0x640 [ 1242.685092][T24316] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1242.685115][T24316] should_failslab+0xc2/0x120 [ 1242.685136][T24316] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1242.685155][T24316] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1242.685182][T24316] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1242.685209][T24316] idr_get_free+0x528/0xa30 [ 1242.685242][T24316] idr_alloc_u32+0x190/0x2f0 [ 1242.685267][T24316] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1242.685295][T24316] ? tcf_exts_init_ex+0x1bc/0x610 [ 1242.685322][T24316] cls_bpf_change+0x507/0x1f50 [ 1242.685344][T24316] ? find_held_lock+0x2b/0x80 [ 1242.685368][T24316] ? __pfx_cls_bpf_change+0x10/0x10 [ 1242.685389][T24316] ? __mutex_unlock_slowpath+0x163/0x800 [ 1242.685431][T24316] ? __pfx_cls_bpf_change+0x10/0x10 [ 1242.685448][T24316] tc_new_tfilter+0xa32/0x2340 [ 1242.685490][T24316] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1242.685527][T24316] ? __lock_acquire+0x62e/0x1ce0 [ 1242.685566][T24316] ? find_held_lock+0x2b/0x80 [ 1242.685586][T24316] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1242.685611][T24316] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1242.685638][T24316] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1242.685665][T24316] rtnetlink_rcv_msg+0x95e/0xe90 [ 1242.685692][T24316] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1242.685724][T24316] ? ref_tracker_free+0x37c/0x830 [ 1242.685745][T24316] netlink_rcv_skb+0x155/0x420 [ 1242.685770][T24316] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1242.685797][T24316] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1242.685831][T24316] ? netlink_deliver_tap+0x1ae/0xd30 [ 1242.685866][T24316] netlink_unicast+0x5aa/0x870 [ 1242.685895][T24316] ? __pfx_netlink_unicast+0x10/0x10 [ 1242.685924][T24316] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1242.685958][T24316] netlink_sendmsg+0x8d1/0xdd0 [ 1242.685989][T24316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1242.686026][T24316] ____sys_sendmsg+0xa98/0xc70 [ 1242.686046][T24316] ? copy_msghdr_from_user+0x10a/0x160 [ 1242.686070][T24316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1242.686102][T24316] ___sys_sendmsg+0x134/0x1d0 [ 1242.686129][T24316] ? __pfx____sys_sendmsg+0x10/0x10 [ 1242.686179][T24316] ? __mutex_unlock_slowpath+0x80/0x800 [ 1242.686211][T24316] __sys_sendmsg+0x16d/0x220 [ 1242.686233][T24316] ? __pfx___sys_sendmsg+0x10/0x10 [ 1242.686271][T24316] do_syscall_64+0xcd/0x4c0 [ 1242.686297][T24316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.686315][T24316] RIP: 0033:0x7fb102d8eb69 [ 1242.686332][T24316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1242.686348][T24316] RSP: 002b:00007fb103be3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1242.686366][T24316] RAX: ffffffffffffffda RBX: 00007fb102fb5fa0 RCX: 00007fb102d8eb69 [ 1242.686378][T24316] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000006 [ 1242.686389][T24316] RBP: 00007fb103be3090 R08: 0000000000000000 R09: 0000000000000000 [ 1242.686399][T24316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1242.686410][T24316] R13: 0000000000000000 R14: 00007fb102fb5fa0 R15: 00007ffe84be4b28 [ 1242.686434][T24316] [ 1243.631174][T24330] netlink: 'syz.0.4708': attribute type 2 has an invalid length. [ 1243.640116][T24330] netlink: 'syz.0.4708': attribute type 2 has an invalid length. [ 1244.259169][T12909] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1244.526304][T12909] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1244.587379][T12909] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1244.609044][T12909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 57250, setting to 1024 [ 1244.659030][T12909] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 1244.732732][T23980] veth0_vlan: entered promiscuous mode [ 1244.736936][T12909] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1244.752352][T12909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.765348][T12909] usb 5-1: Product: syz [ 1244.769863][T12909] usb 5-1: Manufacturer: syz [ 1244.774808][T12909] usb 5-1: SerialNumber: syz [ 1244.812959][T23980] veth1_vlan: entered promiscuous mode [ 1244.823872][T12909] usb 5-1: config 0 descriptor?? [ 1244.853787][T24336] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1244.862390][T24336] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1244.872142][T12909] usb 5-1: ucan: probing device on interface #0 [ 1244.985578][T23980] veth0_macvtap: entered promiscuous mode [ 1245.049235][T19195] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1245.383579][T23980] veth1_macvtap: entered promiscuous mode [ 1245.475033][T24345] Invalid source name [ 1245.480463][T24345] UBIFS error (pid: 24345): cannot open "usrquota", error -22 [ 1245.481912][T23980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1245.526499][T19195] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.547585][T19195] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1245.597013][T19195] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1245.610426][T23980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1245.630026][T19195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.658341][T19195] usb 2-1: Product: syz [ 1245.668725][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.688003][T19195] usb 2-1: Manufacturer: syz [ 1245.693969][T19195] usb 2-1: SerialNumber: syz [ 1245.733803][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.823427][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.912510][T12909] usb 5-1: ucan: could not read protocol version, ret=-110 [ 1245.962912][T12909] usb 5-1: ucan: probe failed; try to update the device firmware [ 1245.989696][T19195] usb 2-1: cannot find UAC_HEADER [ 1245.999774][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.200778][T19195] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1246.341158][T19195] usb 2-1: USB disconnect, device number 74 [ 1246.546387][T24047] udevd[24047]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1246.687176][T22228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.734658][T22228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1247.024919][ T24] usb 5-1: USB disconnect, device number 70 [ 1247.070143][T22228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1247.189090][T22228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1247.219125][ T5959] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1247.390701][ T30] audit: type=1326 audit(2000000533.161:372512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24373 comm="syz.4.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3896f8eb69 code=0x7ffc0000 [ 1247.418460][ T5959] usb 9-1: Using ep0 maxpacket: 16 [ 1247.443217][ T5959] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1247.472953][ T5959] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.566728][ T30] audit: type=1326 audit(2000000533.161:372513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24373 comm="syz.4.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3896f8eb69 code=0x7ffc0000 [ 1247.587039][T24383] SELinux: Context GH is not valid (left unmapped). [ 1247.601733][ T5959] usb 9-1: Product: syz [ 1247.627922][ T5959] usb 9-1: Manufacturer: syz [ 1247.639881][ T5959] usb 9-1: SerialNumber: syz [ 1247.661165][ T5959] usb 9-1: config 0 descriptor?? [ 1247.678094][ T30] audit: type=1326 audit(2000000533.161:372514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24373 comm="syz.4.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f3896f8eb69 code=0x7ffc0000 [ 1247.739557][ T5959] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 1247.892871][ T5959] usb 9-1: Detected FT232H [ 1247.914352][ T30] audit: type=1326 audit(2000000533.161:372515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24373 comm="syz.4.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3896f8eb69 code=0x7ffc0000 [ 1248.052204][T24391] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4667'. [ 1248.420193][ T30] audit: type=1326 audit(2000000533.161:372516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24373 comm="syz.4.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3896f8eb69 code=0x7ffc0000 [ 1248.444596][ T30] audit: type=1326 audit(2000000533.161:372517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24373 comm="syz.4.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3896f8eb69 code=0x7ffc0000 [ 1248.469376][ T5959] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1248.532599][ T30] audit: type=1326 audit(2000000533.161:372518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24373 comm="syz.4.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3896f8eb69 code=0x7ffc0000 [ 1248.860195][ T30] audit: type=1326 audit(2000000533.161:372519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24373 comm="syz.4.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3896f8eb69 code=0x7ffc0000 [ 1249.018002][ T5959] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1249.095997][T24372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.526857][ T30] audit: type=1326 audit(2000000533.161:372520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24373 comm="syz.4.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3896f8eb69 code=0x7ffc0000 [ 1249.551403][T24372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.616756][ T30] audit: type=1326 audit(2000000533.161:372521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24373 comm="syz.4.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3896f8eb69 code=0x7ffc0000 [ 1249.683654][ T5959] usb 9-1: USB disconnect, device number 6 [ 1249.703170][ T5959] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1249.735116][ T5959] ftdi_sio 9-1:0.0: device disconnected [ 1250.739438][ T5959] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1251.293624][ T5959] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.596242][ T5959] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1251.657220][ T5959] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1251.681171][ T5959] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.731005][ T5959] usb 9-1: Product: syz [ 1251.735330][ T5959] usb 9-1: Manufacturer: syz [ 1251.740956][ T5959] usb 9-1: SerialNumber: syz [ 1252.035792][ T5959] usb 9-1: cannot find UAC_HEADER [ 1252.077540][ T5959] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1252.137045][ T5959] usb 9-1: USB disconnect, device number 7 [ 1252.177435][T24047] udevd[24047]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1252.229561][T24449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4727'. [ 1252.279284][T24449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4727'. [ 1252.376094][T24449] netlink: 'syz.1.4727': attribute type 19 has an invalid length. [ 1252.549598][ T10] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1252.743054][ T10] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 1252.788126][ T10] usb 2-1: config 0 has no interface number 0 [ 1252.829378][ T10] usb 2-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1252.880142][ T10] usb 2-1: config 0 interface 136 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1252.920961][T24468] FAULT_INJECTION: forcing a failure. [ 1252.920961][T24468] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.939380][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1252.954007][T24468] CPU: 1 UID: 0 PID: 24468 Comm: syz.8.4732 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 1252.954034][T24468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1252.954044][T24468] Call Trace: [ 1252.954050][T24468] [ 1252.954057][T24468] dump_stack_lvl+0x16c/0x1f0 [ 1252.954090][T24468] should_fail_ex+0x512/0x640 [ 1252.954116][T24468] ? fs_reclaim_acquire+0xae/0x150 [ 1252.954139][T24468] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1252.954162][T24468] should_failslab+0xc2/0x120 [ 1252.954183][T24468] __kmalloc_noprof+0xd2/0x510 [ 1252.954204][T24468] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1252.954226][T24468] ? tomoyo_profile+0x47/0x60 [ 1252.954256][T24468] tomoyo_path_number_perm+0x245/0x580 [ 1252.954273][T24468] ? tomoyo_path_number_perm+0x237/0x580 [ 1252.954292][T24468] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1252.954318][T24468] ? find_held_lock+0x2b/0x80 [ 1252.954362][T24468] ? find_held_lock+0x2b/0x80 [ 1252.954381][T24468] ? hook_file_ioctl_common+0x145/0x410 [ 1252.954412][T24468] ? __fget_files+0x20e/0x3c0 [ 1252.954437][T24468] security_file_ioctl+0x9b/0x240 [ 1252.954462][T24468] __x64_sys_ioctl+0xb7/0x210 [ 1252.954490][T24468] do_syscall_64+0xcd/0x4c0 [ 1252.954517][T24468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.954535][T24468] RIP: 0033:0x7fb102d8eb69 [ 1252.954551][T24468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1252.954568][T24468] RSP: 002b:00007fb103be3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1252.954586][T24468] RAX: ffffffffffffffda RBX: 00007fb102fb5fa0 RCX: 00007fb102d8eb69 [ 1252.954598][T24468] RDX: 0000200000000300 RSI: 0000000000008942 RDI: 0000000000000003 [ 1252.954609][T24468] RBP: 00007fb103be3090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.954620][T24468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1252.954631][T24468] R13: 0000000000000000 R14: 00007fb102fb5fa0 R15: 00007ffe84be4b28 [ 1252.954661][T24468] [ 1252.954766][T24468] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1252.996442][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.181543][ T10] usb 2-1: config 0 descriptor?? [ 1253.233670][T24451] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1253.250463][ T10] keyspan 2-1:0.136: Keyspan 2 port adapter converter detected [ 1253.258305][ T10] keyspan 2-1:0.136: found no endpoint descriptor for endpoint 1 [ 1253.295854][ T10] keyspan 2-1:0.136: found no endpoint descriptor for endpoint 84 [ 1253.316211][ T10] keyspan 2-1:0.136: found no endpoint descriptor for endpoint 2 [ 1253.386181][ T10] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1253.420255][T22649] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1253.459387][ T10] keyspan 2-1:0.136: found no endpoint descriptor for endpoint 88 [ 1253.505916][ T10] keyspan 2-1:0.136: found no endpoint descriptor for endpoint 6 [ 1253.583809][T22649] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1253.593261][T22649] usb 5-1: can't read configurations, error -22 [ 1253.632445][ T10] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1253.723335][ T10] usb 2-1: USB disconnect, device number 75 [ 1253.763890][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1253.772230][T22649] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1253.836108][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1253.903616][ T10] keyspan 2-1:0.136: device disconnected [ 1254.002720][T22649] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1254.011007][T22649] usb 5-1: can't read configurations, error -22 [ 1254.030695][T22649] usb usb5-port1: attempt power cycle [ 1254.389122][T22649] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1254.426220][T22649] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1254.447937][T22649] usb 5-1: can't read configurations, error -22 [ 1254.679287][T22649] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1254.708679][T22649] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1255.182737][T22649] usb 5-1: can't read configurations, error -22 [ 1255.209338][T22649] usb usb5-port1: unable to enumerate USB device [ 1255.257046][T24512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4738'. [ 1256.299103][ T9] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 1256.481236][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.497161][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1256.518265][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1256.541255][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.579126][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1256.579147][ T30] audit: type=1400 audit(2000000542.381:372540): avc: denied { listen } for pid=24528 comm="syz.5.4743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1256.608784][ T9] usb 2-1: Product: syz [ 1256.619252][ T9] usb 2-1: Manufacturer: syz [ 1256.649012][ T9] usb 2-1: SerialNumber: syz [ 1256.663537][T24535] macsec1: entered promiscuous mode [ 1256.690703][T24535] macsec1: entered allmulticast mode [ 1256.795438][T24543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1256.889205][ T9] usb 2-1: cannot find UAC_HEADER [ 1256.916743][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1256.934062][T24545] binder: 24544:24545 ioctl c0306201 200000000240 returned -11 [ 1256.951677][ T9] usb 2-1: USB disconnect, device number 76 [ 1256.998098][T24047] udevd[24047]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1257.233091][T24552] FAULT_INJECTION: forcing a failure. [ 1257.233091][T24552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1257.246279][T24552] CPU: 1 UID: 0 PID: 24552 Comm: syz.8.4747 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 1257.246301][T24552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1257.246308][T24552] Call Trace: [ 1257.246313][T24552] [ 1257.246318][T24552] dump_stack_lvl+0x16c/0x1f0 [ 1257.246342][T24552] should_fail_ex+0x512/0x640 [ 1257.246364][T24552] _copy_from_user+0x2e/0xd0 [ 1257.246377][T24552] snd_seq_oss_write+0x397/0x7d0 [ 1257.246396][T24552] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1257.246413][T24552] ? bpf_lsm_file_permission+0x9/0x10 [ 1257.246431][T24552] ? __pfx_odev_write+0x10/0x10 [ 1257.246442][T24552] odev_write+0x51/0xa0 [ 1257.246452][T24552] vfs_write+0x29d/0x1150 [ 1257.246468][T24552] ? __pfx_vfs_write+0x10/0x10 [ 1257.246478][T24552] ? find_held_lock+0x2b/0x80 [ 1257.246494][T24552] ? __fget_files+0x204/0x3c0 [ 1257.246509][T24552] ? __fget_files+0x20e/0x3c0 [ 1257.246526][T24552] ksys_write+0x12a/0x250 [ 1257.246538][T24552] ? __pfx_ksys_write+0x10/0x10 [ 1257.246554][T24552] do_syscall_64+0xcd/0x4c0 [ 1257.246574][T24552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.246587][T24552] RIP: 0033:0x7fb102d8eb69 [ 1257.246598][T24552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1257.246611][T24552] RSP: 002b:00007fb103be3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1257.246623][T24552] RAX: ffffffffffffffda RBX: 00007fb102fb5fa0 RCX: 00007fb102d8eb69 [ 1257.246631][T24552] RDX: 0000000000000232 RSI: 0000200000000740 RDI: 0000000000000008 [ 1257.246638][T24552] RBP: 00007fb103be3090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.246645][T24552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1257.246652][T24552] R13: 0000000000000000 R14: 00007fb102fb5fa0 R15: 00007ffe84be4b28 [ 1257.246666][T24552] [ 1259.445893][T24591] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1259.666539][T24591] bond1: entered promiscuous mode [ 1259.672331][T24591] bond1: entered allmulticast mode [ 1259.684218][T24591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1260.248287][T24589] SELinux: policydb string length 947979016 does not match expected length 8 [ 1260.310192][T24589] SELinux: failed to load policy [ 1262.581513][T24631] netlink: 'syz.1.4762': attribute type 3 has an invalid length. [ 1262.812144][T22649] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 1263.235074][T22649] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.245448][T22649] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1263.256946][T22649] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1263.267180][T22649] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.275385][T22649] usb 1-1: Product: syz [ 1263.786975][T22649] usb 1-1: Manufacturer: syz [ 1263.802373][T22649] usb 1-1: SerialNumber: syz [ 1264.047533][T22649] usb 1-1: cannot find UAC_HEADER [ 1264.159370][T22649] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1264.217506][T22649] usb 1-1: USB disconnect, device number 41 [ 1264.248027][T24047] udevd[24047]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1264.777749][ T30] audit: type=1326 audit(2000000550.601:372541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24663 comm="syz.1.4771" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x0 [ 1266.225743][T17942] Bluetooth: hci4: command 0x0406 tx timeout [ 1267.375276][T17942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1267.395197][T17942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1267.409942][T17942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1267.418531][T17942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1267.433184][T17942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1267.819058][ T5908] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 1267.959773][T24685] chnl_net:caif_netlink_parms(): no params data found [ 1268.068960][ T30] audit: type=1326 audit(2000000553.881:372542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24702 comm="syz.1.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1268.113328][ T30] audit: type=1326 audit(2000000553.881:372543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24702 comm="syz.1.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1268.138743][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1268.167950][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1268.179829][ T30] audit: type=1326 audit(2000000553.881:372544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24702 comm="syz.1.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1268.252556][ T30] audit: type=1326 audit(2000000553.881:372545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24702 comm="syz.1.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1268.259615][ T5908] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1268.325417][ T30] audit: type=1326 audit(2000000553.881:372546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24702 comm="syz.1.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1268.356825][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.367748][ T5908] usb 1-1: config 0 descriptor?? [ 1268.373097][ T30] audit: type=1326 audit(2000000553.881:372547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24702 comm="syz.1.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1268.420814][ T30] audit: type=1326 audit(2000000553.881:372548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24702 comm="syz.1.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1268.448712][ T30] audit: type=1326 audit(2000000553.881:372549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24702 comm="syz.1.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1268.479812][ T30] audit: type=1326 audit(2000000553.881:372550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24702 comm="syz.1.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1268.538144][T24685] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.563293][T24685] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.600954][T24685] bridge_slave_0: entered allmulticast mode [ 1268.638331][T24685] bridge_slave_0: entered promiscuous mode [ 1268.674778][T24685] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.691311][T24685] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.698806][T24685] bridge_slave_1: entered allmulticast mode [ 1268.716813][T24685] bridge_slave_1: entered promiscuous mode [ 1268.942842][T24685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1268.993575][T24685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1269.150636][T24685] team0: Port device team_slave_0 added [ 1269.179915][T24685] team0: Port device team_slave_1 added [ 1269.279947][ T5908] usbhid 1-1:0.0: can't add hid device: -71 [ 1269.291633][ T5908] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1269.303148][T24685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1269.329349][T24685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1269.331827][ T5908] usb 1-1: USB disconnect, device number 42 [ 1269.356030][T24685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1269.373882][T19195] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1269.383929][T24685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1269.407048][T24685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1269.434038][T24685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1269.501854][T17942] Bluetooth: hci3: command tx timeout [ 1269.546062][T24685] hsr_slave_0: entered promiscuous mode [ 1269.553349][T24685] hsr_slave_1: entered promiscuous mode [ 1269.559686][T24685] debugfs: 'hsr0' already exists in 'hsr' [ 1269.565539][T24685] Cannot create hsr debugfs directory [ 1269.586907][T19195] usb 2-1: config 128 has an invalid interface number: 3 but max is 0 [ 1269.598581][T19195] usb 2-1: config 128 has no interface number 0 [ 1269.616671][T19195] usb 2-1: config 128 interface 3 altsetting 2 bulk endpoint 0xD has invalid maxpacket 16 [ 1269.630426][T19195] usb 2-1: config 128 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1269.641787][T19195] usb 2-1: config 128 interface 3 altsetting 2 endpoint 0xC has an invalid bInterval 181, changing to 7 [ 1269.659049][T19195] usb 2-1: config 128 interface 3 altsetting 2 endpoint 0xA has invalid maxpacket 1056, setting to 1024 [ 1269.674589][T19195] usb 2-1: config 128 interface 3 altsetting 2 has an endpoint descriptor with address 0x19, changing to 0x9 [ 1269.706169][T19195] usb 2-1: config 128 interface 3 altsetting 2 endpoint 0x9 has an invalid bInterval 183, changing to 11 [ 1269.726673][T19195] usb 2-1: config 128 interface 3 altsetting 2 endpoint 0x9 has invalid maxpacket 42192, setting to 1024 [ 1269.793220][T19195] usb 2-1: config 128 interface 3 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 1269.805525][T19195] usb 2-1: config 128 interface 3 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 1269.816954][T19195] usb 2-1: config 128 interface 3 altsetting 2 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1269.836341][ T6203] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.849321][T19195] usb 2-1: config 128 interface 3 altsetting 2 endpoint 0x3 has invalid maxpacket 511, setting to 64 [ 1269.870259][T19195] usb 2-1: config 128 interface 3 altsetting 2 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 1269.892021][T19195] usb 2-1: config 128 interface 3 has no altsetting 0 [ 1269.905015][T19195] usb 2-1: New USB device found, idVendor=0b05, idProduct=1776, bcdDevice=cb.55 [ 1269.929420][T19195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.938346][T19195] usb 2-1: Product: syz [ 1269.943224][T19195] usb 2-1: Manufacturer: 㠊 [ 1269.948543][T19195] usb 2-1: SerialNumber: syz [ 1270.046694][T24722] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1270.058662][T24722] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1270.070169][T24722] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1270.127739][ T6203] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.321285][T19195] usb 2-1: USB disconnect, device number 77 [ 1270.407104][T24729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1270.502527][T23019] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1270.532346][ T6203] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.556363][T23019] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1270.581569][T23019] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1270.612583][T23019] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1270.631047][T23019] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1271.142567][ T6203] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.343521][T23019] Bluetooth: hci1: command 0x0406 tx timeout [ 1271.579217][T13897] Bluetooth: hci3: command tx timeout [ 1272.710153][T13897] Bluetooth: hci0: command tx timeout [ 1274.184604][T13897] Bluetooth: hci3: command tx timeout [ 1274.555615][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1274.555666][ T30] audit: type=1400 audit(2000000560.111:372561): avc: denied { read } for pid=24773 comm="syz.1.4787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1275.380187][T13897] Bluetooth: hci0: command tx timeout [ 1275.730007][ T6203] bridge_slave_1: left allmulticast mode [ 1275.735865][ T6203] bridge_slave_1: left promiscuous mode [ 1275.781528][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.850513][ T6203] bridge_slave_0: left allmulticast mode [ 1275.856272][ T6203] bridge_slave_0: left promiscuous mode [ 1275.923239][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.301299][ T30] audit: type=1326 audit(2000000562.081:372562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24796 comm="syz.8.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1276.301871][T13897] Bluetooth: hci3: command tx timeout [ 1276.409504][ T30] audit: type=1326 audit(2000000562.081:372563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24796 comm="syz.8.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1276.503045][ T30] audit: type=1326 audit(2000000562.081:372564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24796 comm="syz.8.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1276.527492][ C0] vkms_vblank_simulate: vblank timer overrun [ 1276.593981][ T30] audit: type=1326 audit(2000000562.081:372565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24796 comm="syz.8.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1276.665793][ T30] audit: type=1326 audit(2000000562.081:372566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24796 comm="syz.8.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1276.757055][ T30] audit: type=1326 audit(2000000562.081:372567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24796 comm="syz.8.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1276.780729][ C0] vkms_vblank_simulate: vblank timer overrun [ 1276.877430][ T30] audit: type=1326 audit(2000000562.081:372568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24796 comm="syz.8.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1276.896126][T24817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4792'. [ 1276.917938][ T30] audit: type=1326 audit(2000000562.081:372569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24796 comm="syz.8.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1276.995512][ T30] audit: type=1326 audit(2000000562.081:372570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24796 comm="syz.8.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1277.078059][ T24] IPVS: starting estimator thread 0... [ 1277.179078][T24822] IPVS: using max 49 ests per chain, 117600 per kthread [ 1277.426131][T13897] Bluetooth: hci0: command tx timeout [ 1277.750620][ T6203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1277.762179][ T6203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1277.772475][ T6203] bond0 (unregistering): Released all slaves [ 1277.806006][T24730] chnl_net:caif_netlink_parms(): no params data found [ 1277.945243][ C0] vkms_vblank_simulate: vblank timer overrun [ 1278.984454][T24835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4796'. [ 1279.502676][T13897] Bluetooth: hci0: command tx timeout [ 1280.263337][ T6203] hsr_slave_0: left promiscuous mode [ 1280.290766][ T6203] hsr_slave_1: left promiscuous mode [ 1280.315296][ T6203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1280.335408][ T6203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1280.353241][ T6203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1280.372579][ T6203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1280.500117][ T6203] veth1_macvtap: left promiscuous mode [ 1280.505703][ T6203] veth0_macvtap: left promiscuous mode [ 1280.522077][ T6203] veth1_vlan: left promiscuous mode [ 1280.535915][ T6203] veth0_vlan: left promiscuous mode [ 1280.546962][T23019] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1280.569053][T23019] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1280.583068][T23019] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1280.595250][T23019] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1280.606319][T23019] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1281.118012][T24869] /dev/nullb0: Can't lookup blockdev [ 1281.171311][T24869] input: syz0 as /devices/virtual/input/input69 [ 1282.795760][T23019] Bluetooth: hci1: command tx timeout [ 1283.475833][T24885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4803'. [ 1284.011977][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1284.011997][ T30] audit: type=1326 audit(2000000569.841:372580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24889 comm="syz.8.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1284.052479][ T30] audit: type=1326 audit(2000000569.841:372581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24889 comm="syz.8.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1284.077568][ T30] audit: type=1326 audit(2000000569.841:372582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24889 comm="syz.8.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1284.136962][ T30] audit: type=1326 audit(2000000569.961:372583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24889 comm="syz.8.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1284.174702][ T30] audit: type=1326 audit(2000000569.961:372584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24889 comm="syz.8.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1284.749569][ T6203] team0 (unregistering): Port device team_slave_1 removed [ 1284.861762][T23019] Bluetooth: hci1: command tx timeout [ 1284.928606][ T6203] team0 (unregistering): Port device team_slave_0 removed [ 1285.623019][T24730] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.630572][T24730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.637827][T24730] bridge_slave_0: entered allmulticast mode [ 1285.647066][T24730] bridge_slave_0: entered promiscuous mode [ 1285.660521][T24730] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.668655][T24730] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.677076][T24730] bridge_slave_1: entered allmulticast mode [ 1285.684175][T24730] bridge_slave_1: entered promiscuous mode [ 1285.728220][T24730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1285.759864][T24685] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1285.800660][T24918] FAULT_INJECTION: forcing a failure. [ 1285.800660][T24918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1285.806853][T24685] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1285.822895][T24918] CPU: 1 UID: 0 PID: 24918 Comm: syz.1.4806 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 1285.822925][T24918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1285.822936][T24918] Call Trace: [ 1285.822943][T24918] [ 1285.822951][T24918] dump_stack_lvl+0x16c/0x1f0 [ 1285.822986][T24918] should_fail_ex+0x512/0x640 [ 1285.823020][T24918] _copy_from_user+0x2e/0xd0 [ 1285.823042][T24918] memdup_user+0x6b/0xe0 [ 1285.823066][T24918] strndup_user+0x78/0xe0 [ 1285.823085][T24918] __x64_sys_mount+0x180/0x310 [ 1285.823113][T24918] ? __pfx___x64_sys_mount+0x10/0x10 [ 1285.823143][T24918] do_syscall_64+0xcd/0x4c0 [ 1285.823173][T24918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.823193][T24918] RIP: 0033:0x7f99db38eb69 [ 1285.823208][T24918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1285.823225][T24918] RSP: 002b:00007f99dc295038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1285.823243][T24918] RAX: ffffffffffffffda RBX: 00007f99db5b5fa0 RCX: 00007f99db38eb69 [ 1285.823255][T24918] RDX: 0000200000000080 RSI: 0000200000000100 RDI: 0000200000000280 [ 1285.823266][T24918] RBP: 00007f99dc295090 R08: 0000000000000000 R09: 0000000000000000 [ 1285.823277][T24918] R10: 0000000000410040 R11: 0000000000000246 R12: 0000000000000001 [ 1285.823288][T24918] R13: 0000000000000000 R14: 00007f99db5b5fa0 R15: 00007fff735bb2b8 [ 1285.823313][T24918] [ 1286.052826][T24685] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1286.121986][T24730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1286.159585][T24685] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1286.321327][T24730] team0: Port device team_slave_0 added [ 1286.355420][T24730] team0: Port device team_slave_1 added [ 1286.430069][T24925] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4808'. [ 1286.431440][ T30] audit: type=1400 audit(2000000572.251:372585): avc: denied { map } for pid=24924 comm="syz.1.4808" path="socket:[98437]" dev="sockfs" ino=98437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1286.487915][ T30] audit: type=1400 audit(2000000572.251:372586): avc: denied { read } for pid=24924 comm="syz.1.4808" path="socket:[98437]" dev="sockfs" ino=98437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1286.608819][T24730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1286.621154][T24730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1286.655135][T24730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1286.707781][T24730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1286.753333][T24730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1286.798984][T24730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1286.879134][T24950] binder: 24949:24950 ioctl 40046205 0 returned -22 [ 1286.942058][T23019] Bluetooth: hci1: command tx timeout [ 1288.095490][ T6203] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.481832][T24730] hsr_slave_0: entered promiscuous mode [ 1288.495185][T24730] hsr_slave_1: entered promiscuous mode [ 1288.509400][T24730] debugfs: 'hsr0' already exists in 'hsr' [ 1288.515224][T24730] Cannot create hsr debugfs directory [ 1288.529384][T24854] chnl_net:caif_netlink_parms(): no params data found [ 1288.623207][T24964] tipc: Started in network mode [ 1288.630153][T24964] tipc: Node identity 4, cluster identity 4711 [ 1288.650059][T24964] tipc: Node number set to 4 [ 1288.701974][ T6203] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.932257][ T30] audit: type=1326 audit(2000000574.761:372587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24966 comm="syz.8.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1288.941106][T24685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1289.136188][T23019] Bluetooth: hci1: command tx timeout [ 1289.288021][ T30] audit: type=1326 audit(2000000574.791:372588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24966 comm="syz.8.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1289.758064][ T30] audit: type=1326 audit(2000000574.791:372589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24966 comm="syz.8.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1289.807464][ T30] audit: type=1326 audit(2000000574.791:372590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24966 comm="syz.8.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1289.979033][ T30] audit: type=1326 audit(2000000574.791:372591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24966 comm="syz.8.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1290.003716][ T30] audit: type=1326 audit(2000000574.801:372592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24966 comm="syz.8.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1290.029440][ T30] audit: type=1326 audit(2000000574.801:372593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24966 comm="syz.8.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1290.063240][ T30] audit: type=1326 audit(2000000574.801:372594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24966 comm="syz.8.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1290.109036][ T30] audit: type=1326 audit(2000000574.801:372595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24966 comm="syz.8.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1290.186847][ T6203] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.217447][T24685] 8021q: adding VLAN 0 to HW filter on device team0 [ 1290.237108][T24854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.250250][T24854] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.263015][T24854] bridge_slave_0: entered allmulticast mode [ 1290.268084][ T30] audit: type=1326 audit(2000000574.801:372596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24966 comm="syz.8.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1290.275024][T24854] bridge_slave_0: entered promiscuous mode [ 1290.508808][ T30] audit: type=1326 audit(2000000574.801:372597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24966 comm="syz.8.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1290.582490][ T6203] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.648779][T22228] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.655987][T22228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.730709][T24854] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.748410][T24854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.932926][T24854] bridge_slave_1: entered allmulticast mode [ 1290.942637][T24854] bridge_slave_1: entered promiscuous mode [ 1291.823253][T24982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1292.240577][T22228] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.247678][T22228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1292.354443][T12909] hid-generic 0005:10CF:0009.001B: unknown main item tag 0x0 [ 1292.420768][T12909] hid-generic 0005:10CF:0009.001B: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1292.443686][T24854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.463229][T25011] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4817'. [ 1292.526327][T24685] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1292.526357][T24685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1292.785949][T24854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.227025][T24854] team0: Port device team_slave_0 added [ 1293.308950][T17136] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1293.490264][T24854] team0: Port device team_slave_1 added [ 1293.493007][T17136] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1293.520942][T17136] usb 9-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1293.535504][T17136] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.583407][T17136] usb 9-1: config 0 descriptor?? [ 1293.602779][T17136] hdpvr 9-1:0.0: Could not find bulk-in endpoint [ 1293.610715][T17136] hdpvr 9-1:0.0: probe with driver hdpvr failed with error -12 [ 1293.647588][T24854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.678228][T24854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.736360][T24854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.771531][ T6203] bridge_slave_1: left allmulticast mode [ 1293.777524][ T6203] bridge_slave_1: left promiscuous mode [ 1293.795103][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.829022][ T6203] bridge_slave_0: left allmulticast mode [ 1293.834728][ T6203] bridge_slave_0: left promiscuous mode [ 1293.863860][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.258255][ C0] vkms_vblank_simulate: vblank timer overrun [ 1294.723385][ T6203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1294.741676][ T6203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1294.754003][ T6203] bond0 (unregistering): Released all slaves [ 1295.005909][ T6203] bond1 (unregistering): Released all slaves [ 1295.087113][T24854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1295.114288][T24854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1295.159717][T24854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1295.261652][ T10] usb 9-1: USB disconnect, device number 8 [ 1295.538512][T24685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1295.736026][T24854] hsr_slave_0: entered promiscuous mode [ 1295.759576][T24854] hsr_slave_1: entered promiscuous mode [ 1295.801055][T24854] debugfs: 'hsr0' already exists in 'hsr' [ 1295.828330][T24854] Cannot create hsr debugfs directory [ 1295.878892][ T6203] hsr_slave_0: left promiscuous mode [ 1295.914403][ T6203] hsr_slave_1: left promiscuous mode [ 1295.922660][ T6203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1295.932840][ T6203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1295.942123][ T6203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1295.951085][ T6203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1296.052939][ T6203] veth1_macvtap: left promiscuous mode [ 1296.067018][ T6203] veth0_macvtap: left promiscuous mode [ 1296.072977][ T6203] veth1_vlan: left promiscuous mode [ 1296.078330][ T6203] veth0_vlan: left promiscuous mode [ 1296.353170][T25058] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4822'. [ 1297.379039][T25062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1297.488915][ T6203] team0 (unregistering): Port device team_slave_1 removed [ 1297.572522][ T6203] team0 (unregistering): Port device team_slave_0 removed [ 1298.693366][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1298.693390][ T30] audit: type=1400 audit(2000000584.511:372632): avc: denied { mount } for pid=25076 comm="syz.8.4824" name="/" dev="rpc_pipefs" ino=98976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1298.800089][ T30] audit: type=1400 audit(2000000584.521:372633): avc: denied { mounton } for pid=25076 comm="syz.8.4824" path="/65/file0" dev="rpc_pipefs" ino=98976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 1298.878260][T24730] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1298.930607][T24730] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1298.965110][T24730] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1299.054302][T24730] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1299.373149][ T30] audit: type=1400 audit(2000000585.181:372634): avc: denied { unmount } for pid=22991 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1299.602859][ T6203] IPVS: stop unused estimator thread 0... [ 1299.643890][T25105] netlink: 'syz.8.4828': attribute type 1 has an invalid length. [ 1299.996095][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.014019][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.020651][T19195] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1300.218880][T19195] usb 9-1: Using ep0 maxpacket: 32 [ 1300.257254][T19195] usb 9-1: config 32 has an invalid interface number: 40 but max is 0 [ 1300.266301][T19195] usb 9-1: config 32 has no interface number 0 [ 1300.273013][T19195] usb 9-1: config 32 interface 40 has no altsetting 0 [ 1300.282427][T19195] usb 9-1: New USB device found, idVendor=050d, idProduct=1203, bcdDevice=60.3f [ 1300.304557][T19195] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.326286][T19195] usb 9-1: Product: syz [ 1300.330613][T19195] usb 9-1: Manufacturer: syz [ 1300.343000][T19195] usb 9-1: SerialNumber: syz [ 1300.388479][T19195] belkin_sa 9-1:32.40: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 1300.410720][T19195] usb 9-1: bcdDevice: 603f, bfc: 0 [ 1300.469327][T19195] usb 9-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 1300.692973][T25110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.702145][T25110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.727568][ T30] audit: type=1400 audit(2000000586.541:372635): avc: denied { append } for pid=25103 comm="syz.8.4828" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1303.256745][T25105] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1303.267678][T25108] veth3: entered promiscuous mode [ 1303.347535][T25115] SELinux: policydb string length 947979016 does not match expected length 8 [ 1303.361539][T25115] SELinux: failed to load policy [ 1303.364532][T19195] usb 9-1: USB disconnect, device number 9 [ 1303.376363][T19195] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 1303.396782][T19195] belkin_sa 9-1:32.40: device disconnected [ 1303.491638][T24685] veth0_vlan: entered promiscuous mode [ 1303.499901][ T30] audit: type=1400 audit(2000000589.321:372636): avc: denied { listen } for pid=25116 comm="syz.8.4830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1305.013222][T24685] veth1_vlan: entered promiscuous mode [ 1305.528242][T24685] veth0_macvtap: entered promiscuous mode [ 1305.698462][T24685] veth1_macvtap: entered promiscuous mode [ 1306.186682][T24730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1306.320127][T24685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1306.440741][T24685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1306.582864][ T6193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.623678][ T6193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.633039][T25135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1306.648388][T24730] 8021q: adding VLAN 0 to HW filter on device team0 [ 1306.663408][T24854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1306.675532][T24854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1306.693424][ T6193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.703773][ T6193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.752303][T24854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1306.773096][T24854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1306.795486][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.802665][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1306.813132][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.820276][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1306.839041][ T10] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1306.915013][T24730] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1306.947784][T24730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1307.013220][ T10] usb 9-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 1307.049005][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.072186][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1307.100299][ T10] usb 9-1: config 0 descriptor?? [ 1307.120866][ T10] pwc: Creative Labs Webcam 5 detected. [ 1307.138421][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1307.436104][ T6196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1307.489741][ T6196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1307.526003][T24854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1307.772330][T24854] 8021q: adding VLAN 0 to HW filter on device team0 [ 1308.317524][T24730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1308.343515][T21210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.350760][T21210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.363782][T21210] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.371421][T21210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1309.218438][T24730] veth0_vlan: entered promiscuous mode [ 1309.256060][T24730] veth1_vlan: entered promiscuous mode [ 1309.386968][T24854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1309.449989][T24730] veth0_macvtap: entered promiscuous mode [ 1309.485568][T24730] veth1_macvtap: entered promiscuous mode [ 1309.676974][ T10] pwc: Failed to set LED on/off time (-71) [ 1309.692854][ T10] pwc: send_video_command error -71 [ 1309.699795][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1309.707403][ T10] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 1309.795317][T24730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1309.858959][ T30] audit: type=1326 audit(2000000595.656:372637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25197 comm="syz.8.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1309.887277][T24854] veth0_vlan: entered promiscuous mode [ 1309.895736][ T10] usb 9-1: USB disconnect, device number 10 [ 1310.020715][T24730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1310.056484][T24854] veth1_vlan: entered promiscuous mode [ 1310.068919][ T30] audit: type=1326 audit(2000000595.656:372638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25197 comm="syz.8.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1310.096934][T22228] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.361915][T22228] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.365831][ T30] audit: type=1326 audit(2000000595.656:372639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25197 comm="syz.8.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1310.510989][T22228] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.528529][ T30] audit: type=1326 audit(2000000595.656:372640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25197 comm="syz.8.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1310.791234][T22228] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.541609][ T30] audit: type=1326 audit(2000000595.656:372641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25197 comm="syz.8.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1311.612020][ T30] audit: type=1326 audit(2000000595.656:372642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25197 comm="syz.8.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1311.641050][ T30] audit: type=1326 audit(2000000595.666:372643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25197 comm="syz.8.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1311.671907][ T30] audit: type=1326 audit(2000000595.666:372644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25197 comm="syz.8.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1311.757311][ T30] audit: type=1326 audit(2000000595.666:372645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25197 comm="syz.8.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1311.796413][ T30] audit: type=1326 audit(2000000595.666:372646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25197 comm="syz.8.4839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb102d8eb69 code=0x7ffc0000 [ 1312.035351][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.054300][T24854] veth0_macvtap: entered promiscuous mode [ 1312.056314][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.121633][T24854] veth1_macvtap: entered promiscuous mode [ 1312.205582][T24854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1312.235054][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.257104][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.268720][T24854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1312.299048][T13897] Bluetooth: hci2: command 0x0406 tx timeout [ 1312.325855][T21210] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.429045][ T9] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 1312.450581][T21210] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.480959][ T6193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.537540][ T6193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.620223][T25212] fuse: Bad value for 'fd' [ 1312.630401][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.645499][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.656491][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.657912][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1312.685448][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1312.701172][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.722162][ T9] usb 2-1: Product: syz [ 1312.726380][ T9] usb 2-1: Manufacturer: syz [ 1312.741412][T22228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.751837][ T9] usb 2-1: SerialNumber: syz [ 1312.757141][T22228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.879100][T17136] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1313.039475][T17136] usb 9-1: Using ep0 maxpacket: 32 [ 1313.055307][T17136] usb 9-1: too many configurations: 244, using maximum allowed: 8 [ 1313.084150][T17136] usb 9-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 1313.104452][T17136] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.129135][T17136] usb 9-1: Product: syz [ 1313.143190][T17136] usb 9-1: Manufacturer: syz [ 1313.168392][T17136] usb 9-1: SerialNumber: syz [ 1313.326128][ T9] usb 2-1: cannot find UAC_HEADER [ 1313.450020][T17136] usb 9-1: config 0 descriptor?? [ 1313.468452][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1313.587222][ T9] usb 2-1: USB disconnect, device number 78 [ 1313.624689][T24047] udevd[24047]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1313.825866][T17136] mdc800 9-1:0.0: probe fails -> wrong Number of Configuration [ 1313.857543][T17136] usb 9-1: USB disconnect, device number 11 [ 1314.542734][T25212] Process accounting resumed [ 1315.685501][T25252] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=770 sclass=netlink_xfrm_socket pid=25252 comm=syz.1.4849 [ 1315.935413][T25252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4849'. [ 1316.570598][T25256] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=25256 comm=syz.1.4849 [ 1316.859160][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1317.009282][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 1317.021089][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.043020][ T9] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1317.073861][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1317.088760][ T9] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1317.352732][ T9] usb 9-1: Manufacturer: syz [ 1317.370128][ T9] usb 9-1: config 0 descriptor?? [ 1317.783661][T25280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4855'. [ 1319.636942][T22649] usb 9-1: USB disconnect, device number 12 [ 1319.732673][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1319.732706][ T30] audit: type=1326 audit(2000000605.496:372657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25313 comm="syz.1.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1319.967147][ T30] audit: type=1326 audit(2000000605.496:372658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25313 comm="syz.1.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1320.312650][ T30] audit: type=1326 audit(2000000605.496:372659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25313 comm="syz.1.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1320.556730][ T30] audit: type=1326 audit(2000000605.496:372660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25313 comm="syz.1.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1320.649248][T25327] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1320.779301][ T30] audit: type=1326 audit(2000000605.496:372661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25313 comm="syz.1.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1321.090598][ T30] audit: type=1326 audit(2000000605.496:372662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25313 comm="syz.1.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1321.149229][ T30] audit: type=1326 audit(2000000605.496:372663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25313 comm="syz.1.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1321.229036][ T9] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1321.319537][ T30] audit: type=1326 audit(2000000605.496:372664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25313 comm="syz.1.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1321.399043][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 1321.429648][ T30] audit: type=1326 audit(2000000605.496:372665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25313 comm="syz.1.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1321.779509][ T30] audit: type=1326 audit(2000000605.496:372666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25313 comm="syz.1.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1321.824245][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.839128][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1321.882763][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1321.914102][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1321.944632][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1322.012104][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1322.021749][ T9] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1322.045868][ T9] usb 9-1: Manufacturer: syz [ 1322.071547][ T9] usb 9-1: config 0 descriptor?? [ 1322.479135][ T9] rc_core: IR keymap rc-hauppauge not found [ 1322.495408][ T9] Registered IR keymap rc-empty [ 1322.541304][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1322.601510][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1322.650788][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1322.713951][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input70 [ 1322.764169][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1322.800303][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1322.859440][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1323.073323][T25328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.470850][T25328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.503483][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1323.549685][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1323.718461][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1325.405400][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1325.470185][T25377] fuse: Bad value for 'fd' [ 1325.568947][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1325.588957][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1325.626445][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1325.770643][ T9] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1325.802923][ T9] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1325.858930][ T10] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 1326.080296][ T9] usb 9-1: USB disconnect, device number 13 [ 1326.228679][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.279019][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1326.312625][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1326.334018][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.398950][ T10] usb 2-1: Product: syz [ 1326.403173][ T10] usb 2-1: Manufacturer: syz [ 1326.455008][ T10] usb 2-1: SerialNumber: syz [ 1326.916880][ T10] usb 2-1: cannot find UAC_HEADER [ 1327.104799][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1327.354287][ T10] usb 2-1: USB disconnect, device number 79 [ 1327.398142][T25420] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 1327.411691][T25417] IPVS: stopping backup sync thread 25420 ... [ 1327.425296][T24047] udevd[24047]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1327.526866][T25418] 9pnet_fd: Insufficient options for proto=fd [ 1327.845641][T25398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1328.060153][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1328.060175][ T30] audit: type=1326 audit(2000000613.809:372674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25423 comm="syz.1.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1328.176219][ T30] audit: type=1326 audit(2000000613.809:372675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25423 comm="syz.1.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1328.232295][ T30] audit: type=1326 audit(2000000613.809:372676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25423 comm="syz.1.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1328.317907][ T30] audit: type=1326 audit(2000000613.809:372677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25423 comm="syz.1.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1328.442260][ T30] audit: type=1326 audit(2000000613.809:372678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25423 comm="syz.1.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1328.599255][ T30] audit: type=1326 audit(2000000613.809:372679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25423 comm="syz.1.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1328.856946][ T30] audit: type=1326 audit(2000000613.809:372680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25423 comm="syz.1.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1328.929050][ T30] audit: type=1326 audit(2000000613.809:372681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25423 comm="syz.1.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1328.983363][ T30] audit: type=1326 audit(2000000613.809:372682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25423 comm="syz.1.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1329.107777][ T30] audit: type=1326 audit(2000000613.809:372683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25423 comm="syz.1.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99db38eb69 code=0x7ffc0000 [ 1329.145041][T25442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1329.271368][T25452] Bluetooth: MGMT ver 1.23 [ 1329.769165][ T24] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1329.928871][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 1329.996205][ T24] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1330.048159][ T24] usb 9-1: config 0 has no interface number 0 [ 1330.098947][ T24] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1330.121494][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.181776][ T24] usb 9-1: Product: syz [ 1330.196427][ T24] usb 9-1: Manufacturer: syz [ 1330.214971][ T24] usb 9-1: SerialNumber: syz [ 1330.295832][ T24] usb 9-1: config 0 descriptor?? [ 1330.354648][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1331.477222][ T24] gspca_spca1528: reg_w err -71 [ 1331.491745][ T24] spca1528 9-1:0.1: probe with driver spca1528 failed with error -71 [ 1331.608397][ T24] usb 9-1: USB disconnect, device number 14 [ 1331.720208][T25488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1331.932084][ T1105] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.156277][ T1105] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.295878][ T24] IPVS: starting estimator thread 0... [ 1333.531600][T25505] IPVS: using max 36 ests per chain, 86400 per kthread [ 1333.611569][T13897] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1333.644166][T13897] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1333.659516][T13897] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1333.676110][T13897] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1333.688448][T13897] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1333.838536][ T1105] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.273813][ T1105] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.748048][T25527] mmap: syz.2.4901 (25527): VmData 37523456 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 1335.471076][ T1105] bridge_slave_1: left allmulticast mode [ 1335.476757][ T1105] bridge_slave_1: left promiscuous mode [ 1335.523635][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.635082][ T1105] bridge_slave_0: left allmulticast mode [ 1335.650375][ T1105] bridge_slave_0: left promiscuous mode [ 1335.797249][T13897] Bluetooth: hci0: command tx timeout [ 1335.805080][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.857777][T25556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4904'. [ 1337.902796][T13897] Bluetooth: hci0: command tx timeout [ 1338.304579][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1338.337303][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1338.348505][ T1105] bond0 (unregistering): Released all slaves [ 1338.365866][T25507] chnl_net:caif_netlink_parms(): no params data found [ 1339.072685][T25595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25595 comm=syz.2.4911 [ 1340.023661][T13897] Bluetooth: hci0: command tx timeout [ 1341.547285][T25594] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1341.665073][T25598] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4913'. [ 1341.704332][T25598] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4913'. [ 1342.070404][T13897] Bluetooth: hci0: command tx timeout [ 1342.152807][T25617] overlayfs: missing 'lowerdir' [ 1342.214138][T25617] veth1_macvtap: left promiscuous mode [ 1342.249612][T25617] macsec0: entered promiscuous mode [ 1342.425578][T25507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.452185][T25507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.485620][T25507] bridge_slave_0: entered allmulticast mode [ 1342.517023][T25507] bridge_slave_0: entered promiscuous mode [ 1342.539231][T25624] ================================================================== [ 1342.547337][T25624] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1fed/0x43c0 [ 1342.555952][T25624] Write of size 720 at addr ffffc900030e6e00 by task vivid-000-vid-c/25624 [ 1342.564542][T25624] [ 1342.566881][T25624] CPU: 0 UID: 0 PID: 25624 Comm: vivid-000-vid-c Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 1342.566907][T25624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1342.566920][T25624] Call Trace: [ 1342.566928][T25624] [ 1342.566936][T25624] dump_stack_lvl+0x116/0x1f0 [ 1342.566975][T25624] print_report+0xcd/0x630 [ 1342.566999][T25624] ? __virt_addr_valid+0x81/0x610 [ 1342.567026][T25624] ? tpg_fill_plane_buffer+0x1fed/0x43c0 [ 1342.567055][T25624] kasan_report+0xe0/0x110 [ 1342.567075][T25624] ? tpg_fill_plane_buffer+0x1fed/0x43c0 [ 1342.567104][T25624] kasan_check_range+0x100/0x1b0 [ 1342.567127][T25624] __asan_memcpy+0x3c/0x60 [ 1342.567153][T25624] tpg_fill_plane_buffer+0x1fed/0x43c0 [ 1342.567193][T25624] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 1342.567224][T25624] vivid_fillbuff+0x8d2/0x4250 [ 1342.567260][T25624] ? __pfx_vivid_fillbuff+0x10/0x10 [ 1342.567292][T25624] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 1342.567314][T25624] ? lockdep_hardirqs_on+0x7c/0x110 [ 1342.567341][T25624] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 1342.567365][T25624] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 1342.567393][T25624] vivid_thread_vid_cap+0x454/0xda0 [ 1342.567421][T25624] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1342.567446][T25624] ? do_raw_spin_lock+0x12c/0x2b0 [ 1342.567469][T25624] ? find_held_lock+0x2b/0x80 [ 1342.567491][T25624] ? rcu_is_watching+0x12/0xc0 [ 1342.567515][T25624] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1342.567544][T25624] ? lockdep_hardirqs_on+0x7c/0x110 [ 1342.567567][T25624] ? __kthread_parkme+0x19e/0x250 [ 1342.567595][T25624] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1342.567618][T25624] kthread+0x3c5/0x780 [ 1342.567637][T25624] ? __pfx_kthread+0x10/0x10 [ 1342.567655][T25624] ? rcu_is_watching+0x12/0xc0 [ 1342.567675][T25624] ? __pfx_kthread+0x10/0x10 [ 1342.567693][T25624] ret_from_fork+0x5d7/0x6f0 [ 1342.567710][T25624] ? __pfx_kthread+0x10/0x10 [ 1342.567735][T25624] ret_from_fork_asm+0x1a/0x30 [ 1342.567764][T25624] [ 1342.567772][T25624] [ 1342.762422][T25624] The buggy address belongs to a 1-page vmalloc region starting at 0xffffc900030e6000 allocated at vb2_vmalloc_alloc+0x135/0x3f0 [ 1342.775706][T25624] The buggy address belongs to the physical page: [ 1342.782099][T25624] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffffffff00000000 pfn:0x280a9 [ 1342.792155][T25624] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1342.799272][T25624] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1342.807939][T25624] raw: ffffffff00000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1342.816555][T25624] page dumped because: kasan: bad access detected [ 1342.823036][T25624] page_owner tracks the page as allocated [ 1342.828724][T25624] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 25623, tgid 25622 (syz.3.4916), ts 1342535096566, free_ts 1342535065761 [ 1342.848238][T25624] post_alloc_hook+0x1c0/0x230 [ 1342.853001][T25624] get_page_from_freelist+0x132b/0x38e0 [ 1342.858543][T25624] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1342.864462][T25624] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1342.870027][T25624] alloc_pages_bulk_mempolicy_noprof+0x244/0x1280 [ 1342.876441][T25624] __vmalloc_node_range_noprof+0x526/0x14b0 [ 1342.882354][T25624] vmalloc_user_noprof+0x9e/0xe0 [ 1342.887304][T25624] vb2_vmalloc_alloc+0x135/0x3f0 [ 1342.892250][T25624] __vb2_queue_alloc+0x8c6/0x1280 [ 1342.897258][T25624] vb2_core_reqbufs+0xa90/0xfe0 [ 1342.902110][T25624] __vb2_init_fileio+0x3f1/0x1100 [ 1342.907166][T25624] __vb2_perform_fileio+0x9c2/0x1660 [ 1342.912436][T25624] vb2_fop_read+0x215/0x3e0 [ 1342.916940][T25624] v4l2_read+0x226/0x360 [ 1342.921178][T25624] vfs_readv+0x5c1/0x8b0 [ 1342.925404][T25624] do_readv+0x132/0x340 [ 1342.929547][T25624] page last free pid 25623 tgid 25622 stack trace: [ 1342.936025][T25624] __free_frozen_pages+0x7d5/0x10f0 [ 1342.941228][T25624] kasan_populate_vmalloc+0x13d/0x1f0 [ 1342.946615][T25624] alloc_vmap_area+0x959/0x29c0 [ 1342.951453][T25624] __get_vm_area_node+0x1ca/0x330 [ 1342.956465][T25624] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1342.962437][T25624] vmalloc_user_noprof+0x9e/0xe0 [ 1342.967373][T25624] vb2_vmalloc_alloc+0x135/0x3f0 [ 1342.972417][T25624] __vb2_queue_alloc+0x8c6/0x1280 [ 1342.977467][T25624] vb2_core_reqbufs+0xa90/0xfe0 [ 1342.982305][T25624] __vb2_init_fileio+0x3f1/0x1100 [ 1342.987308][T25624] __vb2_perform_fileio+0x9c2/0x1660 [ 1342.992574][T25624] vb2_fop_read+0x215/0x3e0 [ 1342.997057][T25624] v4l2_read+0x226/0x360 [ 1343.001287][T25624] vfs_readv+0x5c1/0x8b0 [ 1343.005517][T25624] do_readv+0x132/0x340 [ 1343.009661][T25624] do_syscall_64+0xcd/0x4c0 [ 1343.014172][T25624] [ 1343.016477][T25624] Memory state around the buggy address: [ 1343.022100][T25624] ffffc900030e6f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1343.030170][T25624] ffffc900030e6f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1343.038229][T25624] >ffffc900030e7000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1343.046281][T25624] ^ [ 1343.050348][T25624] ffffc900030e7080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1343.058390][T25624] ffffc900030e7100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1343.066442][T25624] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1343.129262][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1343.129294][ T30] audit: type=1400 audit(2000000628.939:372713): avc: denied { write } for pid=5829 comm="syz-executor" path="pipe:[4391]" dev="pipefs" ino=4391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1343.234086][T25624] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1343.241340][T25624] CPU: 0 UID: 0 PID: 25624 Comm: vivid-000-vid-c Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 1343.253477][T25624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1343.263515][T25624] Call Trace: [ 1343.266782][T25624] [ 1343.269694][T25624] dump_stack_lvl+0x3d/0x1f0 [ 1343.274285][T25624] vpanic+0x6a3/0x780 [ 1343.278255][T25624] ? __pfx_vpanic+0x10/0x10 [ 1343.282839][T25624] ? tpg_fill_plane_buffer+0x1fed/0x43c0 [ 1343.288461][T25624] panic+0xca/0xd0 [ 1343.292170][T25624] ? __pfx_panic+0x10/0x10 [ 1343.296577][T25624] ? tpg_fill_plane_buffer+0x1fed/0x43c0 [ 1343.302202][T25624] ? preempt_schedule_common+0x44/0xc0 [ 1343.307655][T25624] ? preempt_schedule_thunk+0x16/0x30 [ 1343.313020][T25624] ? check_panic_on_warn+0x1f/0xb0 [ 1343.318125][T25624] check_panic_on_warn+0xab/0xb0 [ 1343.323066][T25624] end_report+0x107/0x170 [ 1343.327391][T25624] kasan_report+0xee/0x110 [ 1343.331791][T25624] ? tpg_fill_plane_buffer+0x1fed/0x43c0 [ 1343.337428][T25624] kasan_check_range+0x100/0x1b0 [ 1343.342358][T25624] __asan_memcpy+0x3c/0x60 [ 1343.346767][T25624] tpg_fill_plane_buffer+0x1fed/0x43c0 [ 1343.352227][T25624] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 1343.358031][T25624] vivid_fillbuff+0x8d2/0x4250 [ 1343.362827][T25624] ? __pfx_vivid_fillbuff+0x10/0x10 [ 1343.368194][T25624] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 1343.373866][T25624] ? lockdep_hardirqs_on+0x7c/0x110 [ 1343.379102][T25624] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 1343.384994][T25624] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 1343.390729][T25624] vivid_thread_vid_cap+0x454/0xda0 [ 1343.395930][T25624] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1343.401675][T25624] ? do_raw_spin_lock+0x12c/0x2b0 [ 1343.406696][T25624] ? find_held_lock+0x2b/0x80 [ 1343.411370][T25624] ? rcu_is_watching+0x12/0xc0 [ 1343.416153][T25624] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1343.421981][T25624] ? lockdep_hardirqs_on+0x7c/0x110 [ 1343.427189][T25624] ? __kthread_parkme+0x19e/0x250 [ 1343.432224][T25624] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1343.437988][T25624] kthread+0x3c5/0x780 [ 1343.442094][T25624] ? __pfx_kthread+0x10/0x10 [ 1343.446678][T25624] ? rcu_is_watching+0x12/0xc0 [ 1343.451461][T25624] ? __pfx_kthread+0x10/0x10 [ 1343.456077][T25624] ret_from_fork+0x5d7/0x6f0 [ 1343.460671][T25624] ? __pfx_kthread+0x10/0x10 [ 1343.465249][T25624] ret_from_fork_asm+0x1a/0x30 [ 1343.470026][T25624] [ 1343.473443][T25624] Kernel Offset: disabled [ 1343.477760][T25624] Rebooting in 86400 seconds..