last executing test programs: 2m37.783998034s ago: executing program 4 (id=2792): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = syz_io_uring_setup(0x498, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) r5 = add_key$fscrypt_v1(&(0x7f000001adc0), &(0x7f000001aa80)={'fscrypt:', @desc3}, &(0x7f000001acc0)={0x0, "9651a151252841d3f760e3537c3153c8e5c590e23c7f30c2e80a4c7d8f5e7d9e4e4b229a71fdf61b6856170eada937965300000000001000", 0x81c}, 0x48, 0x0) keyctl$setperm(0x5, r5, 0x1000) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000040), 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\t\t'}]}, 0xe) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x10, 0x1, 0x14c, &(0x7f0000000300)}) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) write$selinux_load(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578d4cb19be7c944edcf4e746e037d041599edf9e04af670b3c84b86690a89d113811e14bd427af9e7ff7d4c3453a2cb91809e9d18d6991c4adcdb111"], 0x4b) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="7a2b30f233016c38c765e3079f9015a07dd6eb2080afdeb2a403abbc820dc86f2f9461100b82505eb3ff4a686f945424d8c7da069681cdc89d7a829db827208a6c492057ddce78a47859d6b322bce5c9f6bec696b653385681eddffed76b1fbce5bf1a82251c2dbac841f9df265d981d2917245717371463412faa8041f820b0be6ad439b21914284b25a1b2", @ANYRES8=0x0, @ANYRES16, @ANYRESDEC=r3], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x4004041) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x8, 0x2000, @fd=r2, 0x4, 0x6, 0xe, 0x14, 0x0, {0x1}}) 2m36.779704062s ago: executing program 4 (id=2794): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x5) r2 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x4, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x1, 0x2}, {0x4, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000240)='|') ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x374b) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000540)='ocfs2\x00', 0x1) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f0000000140)={0x1, 0x1}) ioctl$DRM_IOCTL_GET_UNIQUE(r6, 0xc0106401, &(0x7f00000002c0)={0xfffffffffffffd84, 0x0}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r5) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) r7 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000000000000f00316414e4101020301090230936831c502321f2b934a2400ec000000000904b50202745a6e0009050402100000"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) 2m32.319990215s ago: executing program 4 (id=2804): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/uevent_helper', 0x7a9095e4ff480c4f, 0xba) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1f4}}}}]}]}, 0x84}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x0) fallocate(r4, 0x0, 0x0, 0x200401) fallocate(r4, 0x0, 0x0, 0x200401) r5 = timerfd_create(0x0, 0x0) readv(r5, &(0x7f00000001c0)=[{0x0}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r6) 2m31.764130856s ago: executing program 4 (id=2805): sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x30}}, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0xfffffffffffffffb, 0x20000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() setrlimit(0x8, &(0x7f0000000400)={0x2, 0x3d2}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x14, r6, 0x333, 0x0, 0x4}, 0x14}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x3) sendto$inet6(r7, 0x0, 0x0, 0x40000, 0x0, 0x0) 2m31.375700151s ago: executing program 1 (id=2806): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014002000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000001080)={0x101500, 0x4, 0xd}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001240)={'syztnl1\x00', &(0x7f00000011c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x4, 0xd392, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x8080, 0x7fffffff, 0x2}}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @sk_msg, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r3, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0xf, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r10, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r7, r9, 0x25, 0x4}, 0x14) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r11, r12, 0x4, r7}, 0x10) 2m30.444092872s ago: executing program 4 (id=2810): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x101041, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000300)=@hci, 0x80, &(0x7f0000000440)=[{&(0x7f0000000780)=""/91, 0x5b}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f00000005c0)=""/245, 0xf5}, {&(0x7f00000006c0)=""/158, 0x9e}, {&(0x7f0000000d80)=""/145, 0x91}], 0x5}, 0x6}, {{&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000900)=""/244, 0xf4}, {&(0x7f0000000a00)=""/104, 0x68}], 0x2, &(0x7f0000000ac0)=""/23, 0x17}, 0x100}, {{&(0x7f0000000b00)=@nfc, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b80)=""/204, 0xcc}], 0x1}, 0x3}], 0x3, 0x2020, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x9, 0x8001, 0x10000, 0xc, 0x0, 0xc0, 0xcf68, 0xffffffff}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) sched_getattr(0x0, &(0x7f0000000100)={0x38}, 0x38, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendto$inet6(r3, &(0x7f0000000180)="a3e79f156829564f10d25b129b8fc9264d9ee93da5ea670713a523ad6ead6c90a5f0e439e403b492c50693d5c3b9cd877bc6f4bb33707d32ed6ac28fcc369ae14996b4d80322a04088084d4ec359b9588782bb256302c6061e83868fc3a624bd2b4aefc37bb50e0b6fbf7309d41cdec89fe184c1c1de553031b0642a05e5c61398", 0xfffffffffffffc2c, 0x400c840, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_vhci(0x0, 0xf8) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000040) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001", @ANYBLOB="81c3b324a88899759bacc94b7f0d4bb17a6a67b1352a40f009e5c9d5bf510135406ce002cc"], 0x7c}}, 0x0) 2m28.801578551s ago: executing program 1 (id=2812): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a01080000000022bbcd0000000000000002080008400000000008000640ffffff0008000740000000310c00104000000000000000040c001040000000000000000240000000140a010800000020000000000a000001290008006762ccdad070ba9ee324100976be1ca0aa1d6cb518798900e5ce9dab4adf4418d7d018733f0000001400000011000100000000000000000005"], 0xac}, 0x1, 0x0, 0x0, 0x618b37b523276f6c}, 0x20000000) (async, rerun: 64) r1 = syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2) (rerun: 64) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x4000000b}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f907, 0x5}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfeae}) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 32) syz_fuse_handle_req(r0, &(0x7f0000004380)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0x40d, 0xffffffffffffffff, 0x102, 0x101, 0x804, 0x4, 0xc000, 0xfffffffc, r5, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x26, 0x4, 0xffffffffb3aada3c, 0xe00, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x101, 0x658}}, 0x50) (async) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) (async, rerun: 64) syz_fuse_handle_req(r0, &(0x7f0000002100)="44ea07862a07eefa4de37092cf4356f54454db90301c4d373d57166f794f169d63344840a37048638ffd5e30beade3fd768b18191001eb890277fad8bdfe3742686deeb34395963bcf7a870addd76c80aba9f771ebdf410c7d7542fc2b6ae9a458d79457755d94ba8a3248b01a2293d8a70e60815b90297002652966a6b836065bcae0b44f4b26be93dec3cd4cdcbbc84c5b916a1b0d8313340675d67fb0c785d0307f95e426546c9a4d0161a8f52b02b95f4da53ced705a658722091864d74ac0a3a5f3853a0ad71ddb29835680ca9ff30531f8df0f0ac66f7f1433c33d75fa8f0f022b175df093648a81af5ed701b2e7a14199c83b539e763dbe7228f2e184a02becd41bae305d3f34c72e8db93dd214ec203eee6e6dab26b41848c95fe1ece8ca157a90bb7a990dac5f3c64cf49c5c5aa8414b9153f82eca9df88d90a8d6c0e72eacd52f82939d46d41e0f5ccf708c03fccecea467f33f5a49888514787e42c0a12255bca89e82344ab01ac3b6c6158e3c1b34ad953eaf55f3a2c487efd9423a542e41dbd0058aa021cb6fdc5df88f807033edd31abaf5ff7e6a9578d2be6a2d925d98108fda2a7e56a0bbcdce0689fa9e2111b0be8f3e2807f7f3728489917a031f2187ad98a744f19851687adf59a4b4c328ad5c4f2eaa0d112041369319f6d3f928c22d05f9fd68b5c268da5e2f433d651bc602a65ee83752c0c92f7e29002faf9475fbb57788d725f6f8fd495a58d88d55ab8467a85d1f41db5964a19bdd45377c7c8c792de5e76e87da9296ff90e7fa9e57f09358d998c8779bb2348d651808e969e960763c5231c65a06ee16979f4d990dbe7e10b3a2392dfd6483bf2c7c5f6f3d941cc17663668cca83dcc38089b4342a801c74039b32550c2d9cf95a0236523933ce3e7538ff9da2b7b741f3cbf53e6084702d0a5dadab4350848f6e7ba46d4736c7a2ae702c480c30dd78f994a10b9c3157a17e9e29576a68139403300586eb0c673252a319aa1cb01efa777228d8242ebdbef9db5c03e4c8e09bf7a009b7eb19357d1ad6d1defc0dbb58c31d85b9f1035056615ad0b0ded12751273c8bb7810ccc5b2efe51d223894b141dda837e6b7ba21de9a978ac447d995394b800e1065906455af544b9d7f353d1eefcd3387d18e3611f3913926f3a4b87efb3a9707d6136dc00e49ea5e7a6d0bea17eb49cae93c0c4422374b0f46380e0d554e1087c1392716d368b04b1da85d271206b465608468802fae00c7ad9425974d822cffbc420e739f7617f59a879f791ab5dd7a6215298cc7dc6904679889e60a09114b0f421b6f1286d0a6ab3dc887c2d3a48d53a7611ec270530b07a83ae1a2bfa6da42ab38bec3eb8ed1e207d91c02e74a31c29abbd25f5779189f5f2494ea5c3f4b829b96de0c54b3851dd58610c2b9ddcc2960f34fb857c5ab1aa67e8eb10a59639db2ddebd0206ae7ee56b21ef484e3c66003af46326f1c456ad2ab5273d0c0b2bf412f71f820ae12723c74e1857e0ae3d5587a0427c1595e06b1d5ab5e815a5558302e0d9c50b8c6cbd599eb554df6f7323b01f1353b557c565dfe0de51032a88541b49ab682a7dbe4dccb9b952ba9c9ce3bbff80af01e47953666327b8acd7d2cf363c6f7172caa140c00000000000008f2cfa7ff26efd219e25ef0f9a84c7b116978eeafe3410972490203dbe49aec33f14d5592a466a6efe630904db9c77ece20bec7552b3dfb48d4e0427ce5024fdc0aec7271e93c51aab19d7a40670add6ea5820f625831a593137f60543e424892856b3bb9e608e88e65cc6dca098d5139a38ada517cd788b9f13618d9c2c31d7918cac6cd669710692797e61f4df3938dd429d977cc11e7465a7a23740052039d9b31cd26b95efba17bfcefe121fcbb762d29287145b11a3abb3e0683b9216a8b5d9744baa75da5d840e70cb310c507c4f7eef1d6535d8e11079edcb51df7ea63a7204e314147eeb57916171ca33c0f5932916e4d568d9e7dd3555500ae119f0c63045658303e1f4ea99c896eaeff3ebf76b2def0ea856a3f24cd76dc437236b71dad9a26fbf3882e81565851eb6c5b265a0721be43f0844f4d0e4296011e280236a0ed7656f2eb906e6b2ec4a8e5bf91eb7e8be889ded6d8492bb72f1de26cf3973249ebcb5c993d1dfa896a658a528aadf57dc28a8db32656ed8e416f96e1f89ac24d4ba587df31f3d2d8d7809d06c8b2d68eb15b377918424499cd6a7fb62e49a78831f0e4b1476bef657fb34bd59e34793d21da3f7bd0278bbea8beed261c697ce17f36f1cbc1b94aef11dd1dbf1c68496765258f4cfc8b5fdc9197d7260b733d2061f399c861bc5912ac76cfb62b9218196fe054b92a295a9b9526871167d436b830a7b4944f527fb4d75a036acf3a71a1a710f609f4e794f1d764a5317ac067e8194666dbc73e32b2870eecf8776bb7641dcdd6d764f91dec83fbb53a97e6531211dd8b86bbb57f8acd637f4b1b66fd9705a200e3081ea382262d54edb161927eb1d85cf7b9373a24607c99f3d66b85e22d2cd5cfe24020d56e0552bd43d803882128310cbf051ee7ae8b7a6401b662187888a0d0b311364fbddad07911b5244877eeace22ab5bd8501d748ed5cb05809e1639678c4c6cc43a3c2fcdd5b0970332429c3cde09d9556c8360f26caa744ce5e57bfaabcf7d124b2d4fa97d7e72f16cdfc35f87493717e2a852b64fa344db5ec72dbdf22dbdfcd12ff796d515d5f3fd3cddbfd3426183bbd92e2fd3e91fca8fee1c1ef4f8d59036df9c48fc7677f2c4905b6cf4adcf448029c6c6a2968b13e3b77d578e2661ae7d07ef84fa098bae9a564bc8c507a103990c00a0e6d2854a1689f7b095a100b7f38df028baf20bd56c843c24f8ca4a81130256b13636440836837429c1c86ae1668d3b250108406acdd21b40450399872c1da6178184bf9c2cc11ad80caa9997d3c6631f09ba2a4d96e6b74313f1e40fbf8a29962648f400dd256c4852c556deca2e3443b858efa43d53efcd496bf5037a82e14868b508632bdb2dde924ce2cd6c65f1708c18cf49073e536f09e8fcfa9a44fdbc349ae75e17205754d3bb82d3ee8a93c59aea1bd7ea6d124224b11405f815ed518a1cb9a80191249ac1cc0e5c1f9aab8fe67bb737cdfefac82a89a7d6ae08bb9e1f710cee451d851b35ba9b886dfd9c277dd67891331d43f36353c78c65e9f3524e1b9b229c9f91de7b5ab16a66017d171e2a4e185481d33cb5bd9c5e3d93c49d2c620c16467bf4db73621957f76d656e6d4cb4d59cacf1209da4e39352554cc2abcc8e82379b4f819fd6d261c6d7615f85f6c5d0b9f57976836493367e1bbb14c57983aa97c6e4e7c4fe2a166284c904ac4f70ef2e52e4e7dbd677ace683cd61aa60b702770aa0ddf14b694bf3cfaeb585f8fd8a85bee2f78400a0874dfb4c319be24a46d1914b6e902d5de8d8375c9ec786ef6eccf1ee7a003f83d2e163097980a06ab9fe23c4ae8e91755e4217d3c302111febfa9dce02a49b217aef709d183a5ab8ad1d39e9a697a79be303fdb2290c827279ce187d1c647cc28e20c0b3ebcab2b1c75850db46211150a8bc5d80d868141f885f7a5ef520ecee6d33842141003df4ce066090c8359b5dc32dd9ecb1039454d0b691d8f97932b69981be240804e860a88d1a047f46ff43609b41ea36dc276b28e87364049940ea7b6dc78848221b30dc6aa1b60f17942c96c46e347606d14ef02ed3ebddb20f7f4d28b9460f4af047b772927ca6a046b7de2a21b8ce79eadb74e4825af5e19ac2955999d7304a35851a4b9086ff922da8845da10a55fbb62fd13d98d45f60842d0d6301cd72e7cb97bc84393a414f671e5e0115a6c1c26054a80ddde10e0a83a4ffd123504c881a844bb7187c604f87588dd0d0f11930f9a3cfeb7098f38f84923637f1a9f6b3e3d0899a156d50d7e740b118c4865ec5e69aac247a930007452748bea9af0af511cc1129740510b13f48fe07ef1417ccc765b2cd0138cb51dd71fbdbe967fc321082a9ee4bbd1ea404cb24971de5a1ee7d7993b5d11d67d30e8ba94a9e943852675a07b88a51df6f4abb507cdaee96726023855e4dee6bccb3e26a2a88fb60d812e7856c13af5f4fcb6776ba8e27a35bffc5e46473b31a4b83ea1a3376f4549af87d03102413faccc3fc897ccae95d2700163f1fc5170a643554169018c5cfcf8f50c7981270995d8aaa9f923c0679b258aab60f79111627b71404e1ce8751228972cbb2bebbe25973cf98bf8fe8e63575950a0aaa1ff060f01e96791d128d0b7b40855126ef3910ed7d7a6d9490618da352ad7b889f7d905bca2214224e170f30a088cff91921917c937950926cb11c04fdc6bee776b9abd2aa286ea5074e72756482fcb6a7d072edc075f99e02747ea49a40b26b58118b6692fbe55b09b054a044d1f481173e8923a74806cb770c4c61ffa982077f82bc4db7fee4ae2beed4673e39f5ff0614072a771034174a0f052ce39e27450d18920664e924ee963c9bbc9852fe68f30a199ee4856c1dadc08c061165867438bd3bb73f5a50f5131b7867dc80e0c5d43eae80cc2874d48edc910e7f8f9b73e032a8ccd7c348e84b4179fa101d488c2fc16cdf953e269a9cf13c0dfe575e0da49d7d2c09293296c0232bca9fe0aa8199b21e19746c4783630e432b5c7e1e25864fcd4deae07c2b07782d155fe6e6b5d9eed4beb9db47bae4007753d8be56b10723b5467c64acb0eee4cb9050b4ef2b57b630f4608af96fbe484816454ff385aa3765051408779384c6585f2e24662fcc3008dc17abb07ba9cf96ff4c795c97811e73b06c65e1b5c66c2e1873191d972830b1f53bbfedf8b5e8a64a29fb3b3eca67f1791652f9ac037c2f87c6d1d9d453b12d5d2b0c070a8084aa15505e240bd0c61895383f23f0460027d60dd9efd8539807f717bc353f9b858b9bfd2acecf2190e280faf6a1603566ff8893dba33ad3300e10438241709ba7413fde84810b966b4556f9c8a51aef27f9b9010e7b6208715169a585e42bf3f7333209afb5b19c0de7722004850d53329d93e2e4909eced3da67dd7d2c82a4c9d0d7cb6f5ff7dbf195e8b39ba9cf0c1699ea1f8b6d1293509774ef3bf48597146a60aa5b6eff2bc8a64f9ae9a81becb9c398ab9676d2cecb14d28f819d08050269bb0ca9bcf59d5c9bd2fe2bcdfe82a8f037781c6275c9229b0729cd085e66e2712bdf22009440c4136c2daa54e547386e1acd16a1d30f3d55c1ef0fe10c108210b9d8894d31e5ef17b049106700bae524eef744ef4b3a69e9cfed4efa9b0c9262177f9fe16f5b1fe5bfe5fc6a611e6ffcb9c5f329d4e328cb69912f0dfb7f4a83d326cb20b053653663096870e7ad2753e992dced7405a00a39dc55ee1dad547e1b1e9782b42f443890c4067b07376c6f0fb2ea6589e04a8eb39a94d913d9f4410d238e6880c167a0a23b266577c41ec3e0f513eb7fc948c12b26ea2646c0481488417d9911a0107ca0ae11c2c4b8c2eefa5144ecf8b149d22abbd26d1b2a3fe51016b9bbfd229c090fc2fbbca4803217c991e36f86d4720b45ae45e6b20f09fcd8e5decd79997e79177bd67de7433282c1d0be5d585a71c873e7171a133d9f5ea35ac0ac5c1a643279ca66a365d278d14eee3ea90961eebb3f6c098c00d051d4716853ec7069be2a4625cef4c0f72abae5309d2709901d05217fc3e52049c4aa16b50121e43ce491d1bc9adb01679ec25ab5009f746170c2517f0072f16c574cb447c6d8ce4a2e45426900463c5303413bf4fe7fd64c273b404cf936068cb3085c3a81b9872ad2cb79aa4c051e7ad97cd4e8c6b94bb0df87e4347ca6f11f155ea265762f81eb0e9fbaf3dc05157eb9f12596ccdf9193018a2226824db6bbebf4e89a070688f698bbf23f30dfb04db7c3d804a7587ad0fd03e68cff7e516e5109e328e1eb3b887a6aced15804f2c898f41c5452e160ca30e35843705c150bad932d2d3fbd791100b1535d9f3306dcf127fa49c1a36b172f46b1fb676ea8783c23edf89b2446560dc1b95b39f80eb9d0994c8dcac9a5a304c554133e1d6ba368468a17312167cda37932cbd4b93c58b7ef772d56d4311182a680e19da6fb938848aad40242856379310b61d6113de6814644092712133823ee2281639b52cec52ab0dbd65ddae631e7113ca75a5476797cde5f5456acbfe63c6ca8b83774690eaca3a019771ca0e742815ca5645418730ee17f52fa2531e5487c10da3ee080acd50fbd19710ed5cb924e28a18985132afbb7d2ff90f6c3855c56970854b9a48ec4f7566d2829e271af3f0ce26742602241fef70461a484499591a9079ed53aed113589fd74918146e1917a063514d7eaa7f4720a386eb2f32b6d35baaa5d36c2013eb405cec607202f19bda80bfeda8005c5d1582208b861437fff41ec0708a6a98f2b4b4463141c1c312a8115509e363a274864898be996176049d5f7e6cba76b3a37c9b2ee9553fc70f79503797464d736d97d0bb4741ea8ad14fde6f18fbb02ae97e5a77bc1527a13f18624927d79aa5b4df2dffde7fb5356e521c7a419209031df8138838151c7e90783c9af133b6961b44f8de89d6348b191cfa6c0ab652746b8582134537727b18c670691f3c1e8ca0e3cefcd26111bef476eb816482b7726399c86cbc98f0f06929c26cf831163bdbe1fa8d8f96a65d3bbb3d37657cec4b77516864cb32404996dae1d0d9f3c12b7f2698f07930b791813b7ccf0f0dcd3320b78833f077ee55aae156af804fa9a15e60c709fb30b06ac092bf97a4fe4732ea7bc93aa73232024c80434b4900cc30de20cbc1ea407746fb186a610fe31635766f5edaa8c9ae974ff8cecc4e7e391a50bdb34ca1dec1567e866497bb59852cfc1fdb361b235c803d70cfc90c229078079619b4a8086a68d420ee1d7fac403b18c7f6aad91612e2f2b9e5e206bf897bd98a3b24a0637e2b986ae7f5d376bd63d63f6c4f151ce7eaa97a30d9d51f1a9207dca6b596831a9b92517b9d5571e72b4a06c07d5ff0d3256b205fba7beda108fde3fc503c7352c59c03bebc2891007fbe966a0441a7f4bc8320b901563ac8eadba643bdfc1636864d33549a1b9ad3ce01bec94b631ac6f46c453c57c62f2cf0f76d9f1e0731e266311624a138e607e699c91e37a33096117f418b4c92c66d96fa1b1324cfb569e3d558598ee65e69b8e0b9625d551af54a09db8082f2fa9da1386f92245aadaa13bfa3cf5c39fe455180bbb5e2427e4067bd2f5a5c755c31405477ba832dbbdd4af66acc7c11e576f700e24fb4c26160b4443b8c17805238519c7c732df774b92579e02a8da5e9a17e3c20e92afba7fab49000a7b83987ea48d5854a0411615462cabd245ab3f49ba375ef179c0a78059ffc14264177a6e45dc5f2fe6c957a313ba9889fef33b788933bb37a17943551db9cd08fd8d823fd0b35110ad589c3bb3af4f69bd1c7c7a3e726f933e4a0cb1209e75ff14910061c3750b9312de42c86838d5c35a681899c25220ea87aff02bf72fdd8745f5d751e6d62861496890c956143c08a222774974789bb46924b68a6e3138ce9dbca622e78c5aeed8215de4ee5c1f8312b6349a91ef1e210f18522b7a644700e90eff995e950c8eda05d0bb8e799ef32a7ddb8a87b4120a798a3f87cc78b6db0c7947b4786db1618c523203c097ef3d3dc0f4e1e87d0d597c4eaaac05a033a3fa91309c05cd8c14de649d7dd16d8ed81e5290950f66b66fd519a2a16fc6b3526f97aa1121b4fb52b30640122dfb50ff619fb5c88eb1c4e6ed7f6d09fd29e27b3375a1aad5b09f8175157018467f883ba385208fcd32a50a311b22f7951bd0e912d234364f8590e247dea604872f9bb847bb32b3906339f5698d6e7c0f2a3ed17b194239299091f5ee4ed51c75b76bc949cf05df5dd03cd8a553e7ec81881fdc1e15cef5e72eecd7843a981eff417682604769e302f378ff9519cdbd3ba2bfe50f85a903aa08b900118226889e9bc68124777f6e02fb26fff91d1f31d3828243cc46d4b4fa2965445774e0ddc521fe5fc9626fe3428403e746de0196a45d6acef57f662faf27294be80fed39778a7585b41178ea38f64893f9a46334af6425a4aa46e25e92b0d77750c6737b237dff19913fd9e69ed92c4b6671b4226776b34ae2468907c654bb0f619b2c9b55920fb99e97bf32212f852b615689f3cf4c03d51d1587455b5720692430fe2684522bfe6dae871aa2ff5f00045861ffcfc219888fef8320bec1307236a7a42dd4a691cb6cd4d8436f31a3f2d642b05946dbfee692aee0da31419f9b8bc0e1dcf89a8ffd7856b21b1180ebc8ad75308b1370b93d680e968bcde7d235f601760a5d181f7b55daf330a001ae1da86c130c76fbd956442b6c705889d665560f8b34663390592d85ddde790e0f4f1f0df09c1c6f95477f9d72dc0894b2efe2c3d162ad80f80cae03a06548014293a02f00d6386723d42ab09052f019a1d71d88a78db27afead58bc516be8d23893f007a17ff47b32777752a15648d0ececd345aee1f36c58abb7efaff5567100c0bfa54f172c862e15872abc9d96cead6688f02ea8466fe1134bd3756c6f0df8903fe7935dbe3e635da368f13a10e3018cfb5557d38f859a983a54d660a02bdb3dac2922e7a37651677bfc664d58df59ea625e8e63ee776bcc2937b921f5544924b75cba04bf3cd0df831938f9e9c79572e8492d884646244990920400192c63e15024e2e1239f41390bf7c0e18f852e23d514256ccb8ccb2726710401c4306657fd75eba94a353987780a6d6219012cfe80858060e37652a84ae89d07f5d651fe82a2a8d0e8568492156713b1f76e89e12f76a0254da7d526df51a089600f5b7559afdc63d4872fe8d6ce00a8d0c9b00db5ee676ae2545e74fb7b39f8345a67913b234cfb4f6e3b4e2b1e1f4f1c7fcce8c09cdeb6a1a21bd2370004e583ef62971aec24ce0c6c049b6a2e22081d36854956a362b6cbad48049d7d5f90134d3e77febf87bf4a32c07cdeb36c9cc56b2b3cc8c8b47879a32ff00f3b2e977cee0acb30fc424dbfe24c88d1a08d047925cd7d65a5834e56db2b3e7e0a23dbf948c799db5a48fd4a5fdea43913b2b2c149ae9a98f452b797b55abe1dd44b30232387f466856d6c38ca735dd6175b455363dbf228ef52e443da22a1ee3a158ee304d9ca63c110a3d19ca3bab6d1745affd81c480ff8bcf5f8f7c1ea6d08a7b3c3958c324d42732711170e19523bd209134674b184d4d442a774e04d6eb4ac89a6d018cf0bb68a73da87abce127e57428cf73a5a551c85ea8c376ae951cb8357506f037d17d163172dc5764682c753050f35c6802fb269d7490b196d57bb8a1ada55da7550f82357320e14cf573ed39860f02a11bdad917b2ba2de885c7ea8b30dd62bdad207dfe10e97c8b71abbc8c5661a4483bb6f9488ada0f5885c471cfc1271b60d54f903317cca28ce977f4444cefac5c2ff233dc872d4e809091f8452de9c774ab3bbebf62de92cd6aa7421a41f7d1dea42e4f94bd3a4869c958f3940a99c88835ed2f4021114b9a5bb17240f468887b213814956f9f5e6344cbae19d8753b97c7ce2e9d0954a30dde23dea2748e1c9514672bf4ea3ec3e348a563d9649899e7227708e2e77d0fc5847dc16b59ac3dea9449c176dea2d2ff6b6af764d28dee5ccfd0dfd6e3100d97040657d7ac5da4032e3b7f6b0cef2ec55a83350c3045abb10200c264e6e68e3e03b68546ae48a538063b86315bb8073103a812717f2d8816534fa98d0e956e0f9a67bcdc522cacefc77b0be71832a69ffb72fa15ca4d8b15f7fe03da0f4b24c5fb68e5f3a2297bb0cb0b7bfdeeec4deb64bf71f57820d62c47276e2780b4341b6bc65ac49be09c94013783455a95de92c11d91b9e921a484ed69532b92e202d684d2293a2666709ee38d2114add4c5337bfeef31d481e12530c5c7e83a6c8aa2f580f6da2d735ee5260cf9a7185eff84eb22d6e0d5ac0e63fe6a3def819274a144be5ab90fa157bb7517a54c208aa82da926d5b09ba649e326a654fe8fa9dd7e6d83b0a66253526e5b5aa03e665f2eb4678e8293110420c9d7556df07c7dd1c3e817a4c7409890c4ff5044ecdb34eb652a4d7e20b4b0d596f46ee3c3dad675e958e91c3b40f2d22e671bae51518443042c529c31e343647d6ddeac7ec370970fcc71a24a0826b58d111e9b776ac0e2fa40b3099298ffd0d1c04d41ee1dd039425f52f9f8057ac1f206203f20e1ae9cbae356518ba2fe9e49b47e36942ed7204f3d7da9e71b8d69df3ae7b2de05a13a879af6a1ea6241c645ed73c139e15060aeab6f423c2180dd101863a24f1688ec1a33edc624c3f5e80a20e4cc5c86ab2c692c2d3d17d8a68bb3924efffb29c9fc3df937526452d82a8ca9a558c75d6b2504df1b66c91823216a1c3b3bc39dee0d22491b9c891b9eea193c8af8a992096d0cd74630f7222e9a3530034a582f40601a694cf1085fda7fb33b07332c6aebfa70e2ebb8d7ccf19a69dfb5e4c166add5e153504eeec92f4ea2fe47f291625e1c470b832a488f884692b8ec49b96df235f193027ed38fb4d8b88ed382825df8ffe5b0c6fab8db3e38d60d467f9da725023deb72c378258e911442afae4db650be3621a033a3b84eee65c4c0664ec6d5771cc138937434a6a361de3dc1c12a2a6735f080e94314ddf291516971af252e3cc56e1c65ba5cf8ac2538878b22034ba458e08db26205608ae941a42a27f2643ded87bde626387c2b791ce57991dd2ba08010237279cac2760e19cab9059b229ea002ce4d3b4afa495230e424752f289003a240f5cafc7a83112636321107918d582fad2606a4319199a06ef2cbeaa3e1a4d8c30501aab796f5cbe15453b61218a396b79c547d15d5c11033b3746b432b426404f7b0421b9daafd9e8558f1901283d58e173c4db0511ee826ddc6363eb51e0837c9be6b2078d808d2c05db7495d29322ee6af68b0d52c45f00a59731c0e5b2608ae046af8bcf830f001ffd2f955ea89bed216e71ccb5b44713e2abf5ee5438d63829c9aea34b57f7ab52b820c24a7e9fa138243e4afb2df93588e805e719c1767146a351debb34678a86dd19f0587af31195460a3aa3e68773859fe13b47b6b31a501b4a25c6660cfc47f3318b33b77b10ed4ba91086482db039a56fbd1490f440a6fbb280b62b6d2333afe1c42c3f16865b9c0e484a4f6f393b8bc34fbba856cc5ffad2fe423e79f691b95e7e0dbdb2b2757d9d4443f9a23a8b1bfdb16f8bffd81b4789f80f1fc4bf751627965755d008d134e2c35da34f54718615e9deaca0685396ae7e58121327e0c0696591f6af93f2999ebd3b4e03cfe2a48b2b94015eb06b2a9031ab5e129b2700648fd62ab75f77734b89abb402282635eee41606eb306619e2dae84488e2aac1df54f78460b36115072a2c28801fc122482f1d46de4b2eec07bbbbcf85f30ffb3829c5d0fdbdf3af8c6322d62f4c55ebe8fd52728e2d5d1a24f096fffcec6ff2e752f7500", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa0, 0x0, 0x16, {{0x4, 0x0, 0x0, 0x9, 0xfffffffc, 0x6, {0x3, 0xa8, 0x6, 0x3, 0x3, 0x1, 0xfff, 0xffffff61, 0x1c, 0x8000, 0x0, r5, r6, 0xff7ffff9, 0x4}}, {0x0, 0x10}}}, 0x0, 0x0}) (rerun: 64) 2m27.940099841s ago: executing program 4 (id=2813): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(r1, 0x409, 0x9) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file5\x00', 0x3) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000300)) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[@ANYBLOB="02000000040000", @ANYBLOB="000000000000000018004a28e495d6e91be6fb1d9a20ff730e5fe4621b8768b5fa24cef6efd89d5718fc89b68d3ccbb4ca7dc7d615408663367bd98415", @ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB], 0x50) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x17}, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x5) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000340)={0x3, 0x900900, 0x3}) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x1a86f, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x8}, 0x1c) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) io_submit(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2m26.661545235s ago: executing program 1 (id=2817): r0 = fanotify_init(0x200, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r3, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000001c0)={0x40000000, 0x7, "90138c2670ff847064bbe6183c8e9b4ebf4a9d2f7e620354e268d8045b52ad65", 0x1f4, 0x12000000000000, 0x0, 0x52cc, 0x70d3, 0x9767, 0xd8b8, 0x4, [0x502, 0x7, 0xfffffffb, 0x7ff]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setrlimit(0xf, &(0x7f00000000c0)={0x31, 0x1}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000ec0)={0x44, &(0x7f0000001180)={0x0, 0x11, 0x4, "28172044"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x0, 0x8, 0x4, "b8fa3b67"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x39, 0x1a, r9, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r10, &(0x7f00000020c0)={0x2020}, 0x2020) 2m22.658265156s ago: executing program 1 (id=2826): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, 0xee00, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a030400000000000000000a0000010900010073797a31000000004c000480480001800b000100746172676574000038000280240003000739f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000800024000000000080001004c4f47000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@bridge_dellink={0x34, 0x13, 0x5, 0x2000, 0x25dfdbfd, {0x7, 0x0, 0x0, r9, 0x10400, 0x1952}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x18, 0x0, 0x0, 0x2259}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(r7, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x600, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x29}, &(0x7f0000000100)=""/102, 0x66, &(0x7f0000000180)=""/54, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) 2m21.567598404s ago: executing program 1 (id=2830): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 2m21.140129852s ago: executing program 1 (id=2831): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001480)='sys_enter\x00', r0}, 0x18) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) setsockopt$packet_int(r1, 0x107, 0xb08012642f9aac79, 0x0, 0x0) (async) setsockopt$packet_int(r1, 0x107, 0xb08012642f9aac79, 0x0, 0x0) ustat(0x5, &(0x7f0000000300)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x5cac3000) listen(0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002cbd7000fddbdf250800000008000400100000003c0001800600010002000000050002000d0000000500020008000000080006001400000008000700", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="08000200080000000800030007000000"], 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x2008801) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002cbd7000fddbdf250800000008000400100000003c0001800600010002000000050002000d0000000500020008000000080006001400000008000700", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="08000200080000000800030007000000"], 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x2008801) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x1}, 0x18) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x1}, 0x18) close(r3) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 2m12.656689999s ago: executing program 32 (id=2813): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(r1, 0x409, 0x9) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file5\x00', 0x3) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000300)) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[@ANYBLOB="02000000040000", @ANYBLOB="000000000000000018004a28e495d6e91be6fb1d9a20ff730e5fe4621b8768b5fa24cef6efd89d5718fc89b68d3ccbb4ca7dc7d615408663367bd98415", @ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB], 0x50) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) timer_create(0x0, &(0x7f0000000040)={0x0, 0x17}, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x5) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000340)={0x3, 0x900900, 0x3}) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x1a86f, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x8}, 0x1c) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) io_submit(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2m5.727878046s ago: executing program 33 (id=2831): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001480)='sys_enter\x00', r0}, 0x18) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) setsockopt$packet_int(r1, 0x107, 0xb08012642f9aac79, 0x0, 0x0) (async) setsockopt$packet_int(r1, 0x107, 0xb08012642f9aac79, 0x0, 0x0) ustat(0x5, &(0x7f0000000300)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x5cac3000) listen(0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002cbd7000fddbdf250800000008000400100000003c0001800600010002000000050002000d0000000500020008000000080006001400000008000700", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="08000200080000000800030007000000"], 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x2008801) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002cbd7000fddbdf250800000008000400100000003c0001800600010002000000050002000d0000000500020008000000080006001400000008000700", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="08000200080000000800030007000000"], 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x2008801) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x1}, 0x18) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x1}, 0x18) close(r3) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 1m45.453963742s ago: executing program 6 (id=2864): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0xcd08, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd0, &(0x7f0000000080)=0xa, 0x4) (async) unshare(0x22020600) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x10000002}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) process_madvise(r5, &(0x7f0000000080)=[{&(0x7f0000000000)="854b", 0x2}], 0x20, 0x14, 0x0) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000300)=0x100) 1m44.596219081s ago: executing program 6 (id=2908): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$I2C(0x0, 0x10001, 0x240000) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0xffffffffffffffff, &(0x7f00000021c0), 0x4003) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) mkdir(0x0, 0x136) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000002200)) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) close_range(r0, 0xffffffffffffffff, 0x0) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000003740), 0x8084, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r8, 0x40046104, &(0x7f00000037c0)) r9 = syz_open_procfs(0x0, &(0x7f0000000640)='net/mcfilter6\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) getresuid(&(0x7f0000002040), &(0x7f0000002080), &(0x7f00000020c0)=0x0) write$FUSE_CREATE_OPEN(r9, &(0x7f0000002100)={0xa0, 0x0, r10, {{0x2, 0x0, 0x8000000000000001, 0x0, 0x7342, 0x2, {0x6, 0x914, 0x6, 0x50a, 0xffffffff, 0x1000, 0xdb7, 0x8, 0x3, 0xa000, 0x8, r11, 0x0, 0x6, 0xa52f}}, {0x0, 0x1}}}, 0xa0) 1m43.916504255s ago: executing program 6 (id=2909): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x8090) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x22ed, 0x1010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0xf7, 0x5, 0x1, {0x22, 0x5ad}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0x72, 0x9}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0xbf, 0x7b, 0x9, 0xff, 0x4}, 0x10f, &(0x7f0000000280)={0x5, 0xf, 0x10f, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x21, "ff5b9d979075628e0e8e47c43ca93b0b"}, @generic={0xf6, 0x10, 0x5, "d5f12b562d5ce766fb300f527210823e9a8756e88d4fd79d38b9a5166c66d1237b9f11cfc6d6040aed3670e8e3f993ce7c6a300dc72dd67789009777c53ac40131e99e8e5c6b7f8506a72148aeafe500e439e1da630235f4c03bca2f175b7966ddc0d6ee1e7aa07236ce0a2c77b8642a9da3b0ae14054bac141732519e74cddf9a9d0ed4bb45286c7fffc2db66537c480acdd5f528e03e155dcb98f137883e0e1871a7d67db52d98e281d122dc1be48c689480ea037e7e2f83501d83f952369ccabaa07410214645b425378e9c438bdcde3af381b646765d9a3e9b3d9ea77205bde269a2547fca5b4d409644d9848aa3608bea"}]}, 0x4, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x3c, &(0x7f0000000400)=@string={0x3c, 0x3, "638f8bdfca8aa94e50cbfca64f253ac4c60266218fa724c97346d37d36044fe82f51a66e72e854462978166023267b4621f579b5fb512953f35c"}}, {0x74, &(0x7f0000000440)=@string={0x74, 0x3, "95623befc559239faf150f64274013370838406285c7f1773c141f16e54cb9d60c30fd9435325193024ebb7f8fcfcd3d61bbf72ec63a0d969522c077c300397d1cbbf709a0dae16368bda9f11b994c2431652c399d275d8bf5f1b4bcc296ada21724fe364aab00a7163fd3cb8f88ae975bdf"}}, {0xcc, &(0x7f00000004c0)=@string={0xcc, 0x3, "f3ef84150f1cbd46b368e381424b2384196db3469d1359f89a7af0103ea3508c8c63f55eb441fa64a9923a02373174b4cfaed5fb243b762f3ad11e96bca664d27b26ed7d12c4a545d416434fb00515ceab2e253954600cfc2ec0a45b6e2ec6549e993f42994114edba8c4f043369a7efb2851bbc011767e503ab86c6e21cd101f7e28deeb4c09c2e62c08438d32d54867e9b7565555de62ff67405dbcd4f8f90f742a5b56d9470051a14dd296cb9b224d9dd38452f69575c3b14a6b8547cc38228313b076195fb359e60"}}]}) r5 = syz_open_dev$sndpcmc(&(0x7f0000000640), 0x5, 0x10100) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f0000000680)=0x2) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r6, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0xd75}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000040) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r7, &(0x7f0000000800)="934ddab27657d75a5f", 0x9, 0x240000c0, &(0x7f0000000840)={0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg(r7, &(0x7f0000000e40)={&(0x7f00000008c0)=@qipcrtr={0x2a, 0x0, 0x100004000}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000940)="84bc777cbf565610044fb66405fd33b84d76768f2f8787eb813a08b7ceea56e5817c19dc4865c5d392ba71cff130127e22be4752c3a09192126141b18456560a6dc8e444e2f56866ddee6caf68269d162075119266d40f280cd2c4908d6f73e6123bd6ff2aa64e", 0x67}, {&(0x7f00000009c0)="ea8aa5ae9fb7b73d496505f0d252842d016a32b8d8301bc40a5a4d14dc47dd3818098429188b0c7a54290ee2c023f31f220001215089b0d0f4d923dbc9014c6fcc4a8f4101a6748c87eab399a2bb6c69ef9d3b0b4495ce6eefe0769f250f9456ec78b9cf42922a3f6e36fd55d11537cb", 0x70}, {&(0x7f0000000a40)="ce44a41f514f302ab573bf81eb78d21f8aa7e371ab73371ae54badf2ea135c080925232a4a7052cb314869f9c85cfa56415f1204b21f3801f82983648bcd51da6b52919e7c6ceb950a54d7", 0x4b}, {&(0x7f0000000ac0)="4b5c8458ea5587962dba72d17f86b6934f08365f7cd67ff95cf87cf50e55948a73ed8bb7ec06a36745213dff66f3ee010d", 0x31}, {&(0x7f0000000b00)="fcbc1b435d2b8cfb2591148b9f824bb1dcc8e64bfb6179721726d94efb863f85a428fed0ec6263d0e30032639c41ad56d4d8feeb0894edb7be1df77d7e2fd74a541f8326312f9615b1841befe882cb993e3b7e956eeeb1", 0x57}, {&(0x7f0000000b80)="e123c52d8462914dc16d7987ba71ce15c05bd4a9dc9e5909cddc38ca07ddb734af560181281e7633eb69cfb5d5256d1fca180b7ac1261cfe7e851abb88b156fe68855b1f8405cfc1c9230aa3a4dd00cde150237c626164d839a279bb3462ccdb", 0x60}], 0x6, &(0x7f0000000c80)=[{0x18, 0x104, 0xd09, "fdb063411e7ea7b1"}, {0x110, 0x108, 0x1a1, "e015a401517745febdcddf5ea4e07314f9c4e97dc464c245a3bc736c5ddc1d40f33ba87d1f279c784d04b6a952070a6578a47233ab73e4b3777d609acb598ad9313259e1c29461274d04d298a93f2b99bea8627050938df3f5e24441e4e7f398b7c39cbd43cefefc5494ad8aa6e5a5cced6bca31158c053ebe218448ac7d58f6b2ac7a117dc0143ddc404e4b6cc974cc3c1acf97277369590cf5fc162a8d8c820dba1d13282a4da74ebaef4cb8da2b9ab32bf1871477b276f9188d41cb1a2cca4ad7ecf258a9f6858afdc5cbb3159d212a795c49b3d7a34560496abd7e8b2fc0f830d3c71a1819e044f623c7c34c7f6db7f1971b5b697b2c2752f239c5fb"}, {0x78, 0x115, 0x1, "e646d72a85100400e151c017386b5c90acb0b7f2baace99837230f5acf90960aaf9c84cf66b31e7c52f7eec7b6211fc6fcb28f84fb2c725df71621df1e407d388af28f91e528dee2c486b9f00e7d0733a6d3bb65e7b1768b1694275ccc490f82014b77"}], 0x1a0}, 0x8040) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1000}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000010) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000f80), 0x21e980, 0x0) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x40890) write$nbd(r9, &(0x7f00000010c0)={0x67446698, 0x1, 0x1, 0x4, 0x4, "7ec5ea01697208f93b2d5b555a6d06878b269bc3db728dc7a1d2d56933117dcb1c814e0b47a704f2a7f3a2fcd71ab86d9812f7595370b59ee0b903c4a4bf82cce9acc6e0f9824498728397d34375833731b0364bb305acd71b8210623d2b949e09118c35531daa7487371526db4d8c6eb188c55e53f4df27c9d672f0789d8637b92688e825700a08308eb47527117f3f"}, 0xa0) r10 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r10, 0x891b, &(0x7f0000001180)={'netdevsim0\x00', {0x2, 0x0, @local}}) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_void(r11, 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000011c0)=0x9) getsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f0000001200)={@private1, 0x0}, &(0x7f0000001240)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001340)={'tunl0\x00', &(0x7f0000001280)={'tunl0\x00', r12, 0x80, 0x700, 0x10001, 0x8, {{0x20, 0x4, 0x0, 0x30, 0x80, 0x64, 0x0, 0x9, 0x4, 0x0, @multicast1, @remote, {[@rr={0x7, 0x23, 0xfe, [@dev={0xac, 0x14, 0x14, 0x5}, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x34}, @broadcast, @empty, @rand_addr=0x64010101, @multicast1]}, @rr={0x7, 0xf, 0x77, [@empty, @private=0xa010101, @private=0xa010100]}, @cipso={0x86, 0x6, 0xaa6e3fa19777b0b3}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0x58, [@multicast2, @dev={0xac, 0x14, 0x14, 0x14}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010100, @broadcast]}, @cipso={0x86, 0xf, 0x3, [{0x0, 0x9, "c937fb1311097a"}]}]}}}}}) sendmsg$tipc(r9, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001380)="b5f87265cfab7dc45d04502b33395aeed0271a0dab2b9ca19d87fe75a306c08f231c7bf10cf0112d6d425071ca38dcc4b060af24637931e203db8551debbd084294c1a05de5ae5c109da41d0bc288f620d50074c35080186be4e26a1328da6d2de39c14ea26db5ef3043f6d2f3cf67fdd6ee213ab6ed952343403d1a35a6f0773170", 0x82}], 0x1, &(0x7f0000001480)="984604fa4d3fad0721262019bcc7456e5aa311b80487ffd50f28efcb84a0ee129e55a668df", 0x25, 0x40000050}, 0x1) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000001500)=0x8000000000000001) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000001540)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x461, 0x4e72, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x15, {0x9, 0x21, 0x3, 0x2b, 0x1, {0x22, 0xb2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf, 0x2, 0x5}}}}}]}}]}}, &(0x7f0000001980)={0xa, &(0x7f0000001580)={0xa, 0x6, 0x200, 0x9, 0x1, 0x0, 0x20, 0x40}, 0x66, &(0x7f00000015c0)={0x5, 0xf, 0x66, 0x4, [@generic={0x2e, 0x10, 0xb, "bd35e47b28cbcc235321734b581704b5c9784ba2769b59ab79b201d23654affc4f3247ca82469638efefc8"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x0, 0x7}, @generic={0x21, 0x10, 0x2, "d64b6e75e63dbd63d92c04b26460ce8c58837aee6ee0691db451983ae7f6"}, @wireless={0xb, 0x10, 0x1, 0x46b376fd4ffbc17a, 0xd, 0x80, 0x0, 0x2, 0xb7}]}, 0x8, [{0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0xc01}}, {0xc, &(0x7f0000001700)=@string={0xc, 0x3, "82da3bcc799ffcdda71a"}}, {0x8, &(0x7f0000001740)=@string={0x8, 0x3, "af9fdac81b2a"}}, {0xb8, &(0x7f0000001780)=@string={0xb8, 0x3, "dc27d8be6e871425dedb38121f5c2f4704a53ef5dd1031a44d50e92b2e7142bbc4c5feded0d6df38d41a5e936b38fd8479fa5315d6bb1b9ee60510512954814c1b3a35a65c04261224488d590443a15666ff4a1819a11a3a9dce7cc34345c02abc74983b4c7e72fd9f507749b6f8428de319f4faf9057b57bd3dbb3684a9b7972ae5867f35f8dd67e49b75c11b45bee9977a2a5397ee745e36bd3b3d114e1f0de5958e0ddbc67da2d3089475e6204c0fe4e03a7fedbd"}}, {0xe7, &(0x7f0000001840)=@string={0xe7, 0x3, "7e35104994943d9dec4c76903d4bf81c87d8250884dac3d60f17c88e06ce5f5ee5fa351374837526c2c4904f709a0a2490d7c619a39e1eb060de05b5cbdc376fc327fa1a3a0590be57196d7e3c0f43bed46db58157241be00c50cfdd316ccdc0790f677d6322a291213d4fd2458b2fc084754d119edfad1d946a19caa649a51cc34c5adbe32888351512ff4c2a91a606b344ad742622f77db25040a0f325bc2f2b939c3df9bc25f6cc88f4b86e10b7f2748527ad9c4596c1d9a66962b4bf4f40fcda35e938d7224f052b153687f6a997643a0c66ed7ba50d514b594bfeda30f48dc5d00f36"}}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x1051}}]}) 1m40.184756106s ago: executing program 6 (id=2920): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000080), 0x4000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01215a74cde45ea892b749bc0228bd7000fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) madvise(&(0x7f0000069000/0x2000)=nil, 0x2000, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) fsopen(&(0x7f0000000180)='proc\x00', 0x1) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) pipe2(&(0x7f0000000080), 0x4000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) (async) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01215a74cde45ea892b749bc0228bd7000fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) (async) madvise(&(0x7f0000069000/0x2000)=nil, 0x2000, 0x8) (async) 1m38.852015489s ago: executing program 6 (id=2922): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) clock_gettime(0x0, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000048ceb9d9090000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)=0x2, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x10000, 0x8, 0x401, 0x1ff, 0x0, [{0x7, 0xf, 0xff, '\x00', 0x38}, {0x9, 0x1, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x6}, {0x9, 0x7f, 0x4, '\x00', 0x79}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x4, 0xd3, 0x1, '\x00', 0x5}, {0x52, 0x3, 0x3, '\x00', 0x9}, {0x0, 0x2, 0x73, '\x00', 0xff}, {0x1, 0xb6, 0x9, '\x00', 0x80}, {0x6, 0x8, 0x6, '\x00', 0x1}, {0x1, 0x1, 0x6, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x6}, {0x5, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x7, '\x00', 0x1}, {0x8, 0x2, 0xfa, '\x00', 0x2}, {0x6, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x1, 0x3, 0x6, '\x00', 0x6}, {0xf8, 0x4, 0xa, '\x00', 0xf8}, {0x8, 0x2, 0x1, '\x00', 0xf7}, {0x6, 0x6, 0x1, '\x00', 0xa}, {0x1, 0x0, 0x1, '\x00', 0x8}, {0x12, 0xe, 0x4, '\x00', 0x1}]}}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/address_bits', 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) read$msr(r1, &(0x7f0000004340)=""/102376, 0x18fe8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x8, 0x2, 0x70, @private2, @empty, 0x1, 0x700, 0x2, 0x3}}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x201, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x3c}}, 0x8000) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 1m37.364341995s ago: executing program 6 (id=2924): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000e200000000000000f3000000000000"], 0x48) syz_clone(0x144020080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004114}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300"], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x15, 0x80005, 0x0) getsockopt(r4, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 1m26.475946598s ago: executing program 3 (id=2910): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x5294) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x1a2) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x100}, 0x0, &(0x7f0000000280)) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, 0x0, 0xf000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, &(0x7f00000007c0)) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000100)) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/71, 0x47}], 0x1, &(0x7f0000000180)=""/36, 0x24}, 0x8}, {{&(0x7f0000000200)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/151, 0x97}, {0x0}], 0x2, &(0x7f0000000380)=""/22, 0x16}, 0x10001}], 0x2, 0x12021, &(0x7f0000000440)) 1m25.483689113s ago: executing program 3 (id=2944): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x80, 0x40, 0x59a, 0xffffffc0, {{0x21, 0x4, 0x0, 0xb, 0x84, 0x68, 0x0, 0x7f, 0x4, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2c}, {[@timestamp_addr={0x44, 0x54, 0x40, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}, {@loopback, 0x5}, {@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x10001}, {@private=0xa010102, 0x3}, {@local, 0x1}, {@private=0xa010100, 0xb}, {@broadcast, 0xd8}, {@remote, 0x9}, {@multicast2, 0x7}]}, @timestamp={0x44, 0x1c, 0xa2, 0x0, 0x0, [0xf5fc, 0x5f87fdf7, 0x7, 0xffff, 0x4, 0xa]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x80, 0x40, 0x59a, 0xffffffc0, {{0x21, 0x4, 0x0, 0xb, 0x84, 0x68, 0x0, 0x7f, 0x4, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2c}, {[@timestamp_addr={0x44, 0x54, 0x40, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}, {@loopback, 0x5}, {@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x10001}, {@private=0xa010102, 0x3}, {@local, 0x1}, {@private=0xa010100, 0xb}, {@broadcast, 0xd8}, {@remote, 0x9}, {@multicast2, 0x7}]}, @timestamp={0x44, 0x1c, 0xa2, 0x0, 0x0, [0xf5fc, 0x5f87fdf7, 0x7, 0xffff, 0x4, 0xa]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r3, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xc024}, 0x40) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f00000004c0)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x8c, r5, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2000}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_IE={0x3a, 0x2a, [@peer_mgmt={0x75, 0x6, {0x1, 0x0, @void, @val=0x27, @void}}, @mesh_id={0x72, 0x6}, @mic={0x8c, 0x18, {0x658, "65440dcba4b2", @long="39c54b72a2d211f7d480b3ac7ad753d4"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x40, 0x28}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x0, 0x0, 0x0, {0xf0, 0x8ce, 0x0, 0xc, 0x0, 0x1, 0x0, 0x2}, 0x300, 0x3, 0x7}}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000040}, 0x400) syz_open_dev$dri(&(0x7f0000000500), 0x8000000000000001, 0x80) (async) r7 = syz_open_dev$dri(&(0x7f0000000500), 0x8000000000000001, 0x80) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000880)={&(0x7f0000000700)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[{}, {}], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f0000000900)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}], r8, 0x0, '\x00', 0xa, 0x8}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000b80)={0x2, 0x0, &(0x7f0000000940)=""/95, &(0x7f00000009c0)=""/167, &(0x7f0000000a80)=""/230, 0xdddd1000}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0000}, 0x4000) (async) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0000}, 0x4000) r9 = syz_open_dev$vivid(&(0x7f0000000cc0), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r9, 0xc0305616, &(0x7f0000000d00)={0x0, {0xfffffbd7, 0xffffff81}}) (async) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r9, 0xc0305616, &(0x7f0000000d00)={0x0, {0xfffffbd7, 0xffffff81}}) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000d40), 0x102, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000dc0), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r10, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x2c, r11, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x2e}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) sendmsg$kcm(r10, &(0x7f0000001540)={&(0x7f0000000ec0)=@hci={0x1f, 0x2, 0x4}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000f40)="8464f3357d28adf0ffb67eca7406ee39191dd80af9f4bede29f71c29f3e33665666f793f119942a165f51ce5aad088ac62c2440011a86eb09e3b562d4e6259bc0aa19d39a1de3fd8d60c404262dd3d7bed73e52b6fe5fa857764ae8a5d82c43d40eb1d51a43f0162cbd9c5bca1ffdbbb1c3c8e02579c0b8ad8355ade525896cb91d46f838c60a3b7b31547750ab9a7c362", 0x91}, {&(0x7f0000001000)="eaae91dd7a4dc6741f00a9edc7cca62699049a5ca57dac8c9f735c4d0c458ccb2b5f48f6a2b104500d7541ab3561d09913777f2cca995f2b9acc4b5b38eed5480b27b470561b3df2342f61a3131d554fefcc47f0d112739632f467e230d3a4516d0bc8aca179bbd8eadc7070bd3f3fcb1436ee642e21f52445da74072226b44ca06b426d4393462de4943527f742a378a0fba5a4709a4e3c89f8e0f841ff1d3d6843495d1ec5327f0a4d84afa4bd96d9fb8e3ff61a53124c218b7b2b9c695138630fc55c4c514c2d57f6608eed4d1723d31ea9e0e2d2a6c247d993eda84dc1cc41ef5258d0dd76d37006f008a6f1e74c", 0xf0}, {&(0x7f0000001100)="d478d1bde97354648d028668821db22d8fa6053d5f", 0x15}, {&(0x7f0000001140)="489796", 0x3}, {&(0x7f0000001180)="c3ab1d38301ba7f1399bb75ff0d511d76e77075a8a6b425d0705287b3a82e36dd6558b8f84ecd2ed29aae682a93739f41a0c1e5f2ec925", 0x37}, {&(0x7f00000011c0)="86a4e001b6fc5d5ee68aff7128adbeb1daf3a90fa369db6653cf2d1a41e9ea2245310518ebc984894076618438d160bc3d87fb2587b480d841df48cc51dfe1427d14076fa7654fe0c3e051eaefa66f76f5536cb8e8bd4e49fedb9317408fe55d2d8d0b83dcfcba2d101fcbf14385923db5ded6df335cf69492d37190bc4e181dff8f8f9ecf6110ffc512ca1bc034462f7aacc657101791fd", 0x98}], 0x6, &(0x7f0000001300)=[{0xe8, 0x112, 0x3, "658390b74eedc220a3f8b253cbeaf2f9f5a082b40fcfff0c4ccc106f2ea0c009615d8b039be648a03ca58ef1bb7dc1b81431482281e7ba792ab576dca37d427a50d8d143e020470d4139c22164093cd98078612ec1e9623e2b83f43cbbf12cc39a98d1bf33a6a4d3ded9adfa336dd1ec648d3bd9345074912857ab79a79acfa9a803370cd17cbabab545372f8bbdd1444a117a2cf27bb191ae130cf19f589439ff33ada2db3f73671e2b3d7b6bea4f7bce19bf36df1d441f1f08128913a8bba8b4043f1a114f294a34f7c88e01315cf0e8c567"}, {0x60, 0x1, 0x54, "5bc3b3c896d597c31f3f2643dc3f3aa37e435858f700556a6d27bc503ef80cbd356e6d253b859386767ffa7b5ff517afe1af7d806ccd6e28a8561162c4ed8734979c08221b2097c7f8ac"}, {0xb0, 0x116, 0x40, "979c347c3ed3a095d7be122bf528a90252bea31f296449836aa231a22057f3b813324268124c556fab964dd9007ed3d6928f10f7c223744a76c82778c571060ce6e22245907b9c08af10ab730950f866cac40e0b697caca717200b91963dbe17c1ba6eb2690da13e1ba09d0ab0de4d9eba58f98e9bd69188540b510dd1a464a551b7b2e15b6ca04cd82d0049365145f1ddd0e20633224c25841a580e472c9113"}, {0x18, 0xa1317b57132b26c3, 0x58, "de2f0d1375"}], 0x210}, 0x40840) (async) sendmsg$kcm(r10, &(0x7f0000001540)={&(0x7f0000000ec0)=@hci={0x1f, 0x2, 0x4}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000f40)="8464f3357d28adf0ffb67eca7406ee39191dd80af9f4bede29f71c29f3e33665666f793f119942a165f51ce5aad088ac62c2440011a86eb09e3b562d4e6259bc0aa19d39a1de3fd8d60c404262dd3d7bed73e52b6fe5fa857764ae8a5d82c43d40eb1d51a43f0162cbd9c5bca1ffdbbb1c3c8e02579c0b8ad8355ade525896cb91d46f838c60a3b7b31547750ab9a7c362", 0x91}, {&(0x7f0000001000)="eaae91dd7a4dc6741f00a9edc7cca62699049a5ca57dac8c9f735c4d0c458ccb2b5f48f6a2b104500d7541ab3561d09913777f2cca995f2b9acc4b5b38eed5480b27b470561b3df2342f61a3131d554fefcc47f0d112739632f467e230d3a4516d0bc8aca179bbd8eadc7070bd3f3fcb1436ee642e21f52445da74072226b44ca06b426d4393462de4943527f742a378a0fba5a4709a4e3c89f8e0f841ff1d3d6843495d1ec5327f0a4d84afa4bd96d9fb8e3ff61a53124c218b7b2b9c695138630fc55c4c514c2d57f6608eed4d1723d31ea9e0e2d2a6c247d993eda84dc1cc41ef5258d0dd76d37006f008a6f1e74c", 0xf0}, {&(0x7f0000001100)="d478d1bde97354648d028668821db22d8fa6053d5f", 0x15}, {&(0x7f0000001140)="489796", 0x3}, {&(0x7f0000001180)="c3ab1d38301ba7f1399bb75ff0d511d76e77075a8a6b425d0705287b3a82e36dd6558b8f84ecd2ed29aae682a93739f41a0c1e5f2ec925", 0x37}, {&(0x7f00000011c0)="86a4e001b6fc5d5ee68aff7128adbeb1daf3a90fa369db6653cf2d1a41e9ea2245310518ebc984894076618438d160bc3d87fb2587b480d841df48cc51dfe1427d14076fa7654fe0c3e051eaefa66f76f5536cb8e8bd4e49fedb9317408fe55d2d8d0b83dcfcba2d101fcbf14385923db5ded6df335cf69492d37190bc4e181dff8f8f9ecf6110ffc512ca1bc034462f7aacc657101791fd", 0x98}], 0x6, &(0x7f0000001300)=[{0xe8, 0x112, 0x3, "658390b74eedc220a3f8b253cbeaf2f9f5a082b40fcfff0c4ccc106f2ea0c009615d8b039be648a03ca58ef1bb7dc1b81431482281e7ba792ab576dca37d427a50d8d143e020470d4139c22164093cd98078612ec1e9623e2b83f43cbbf12cc39a98d1bf33a6a4d3ded9adfa336dd1ec648d3bd9345074912857ab79a79acfa9a803370cd17cbabab545372f8bbdd1444a117a2cf27bb191ae130cf19f589439ff33ada2db3f73671e2b3d7b6bea4f7bce19bf36df1d441f1f08128913a8bba8b4043f1a114f294a34f7c88e01315cf0e8c567"}, {0x60, 0x1, 0x54, "5bc3b3c896d597c31f3f2643dc3f3aa37e435858f700556a6d27bc503ef80cbd356e6d253b859386767ffa7b5ff517afe1af7d806ccd6e28a8561162c4ed8734979c08221b2097c7f8ac"}, {0xb0, 0x116, 0x40, "979c347c3ed3a095d7be122bf528a90252bea31f296449836aa231a22057f3b813324268124c556fab964dd9007ed3d6928f10f7c223744a76c82778c571060ce6e22245907b9c08af10ab730950f866cac40e0b697caca717200b91963dbe17c1ba6eb2690da13e1ba09d0ab0de4d9eba58f98e9bd69188540b510dd1a464a551b7b2e15b6ca04cd82d0049365145f1ddd0e20633224c25841a580e472c9113"}, {0x18, 0xa1317b57132b26c3, 0x58, "de2f0d1375"}], 0x210}, 0x40840) syz_open_dev$MSR(&(0x7f0000001580), 0x6, 0x0) (async) syz_open_dev$MSR(&(0x7f0000001580), 0x6, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000016c0)={&(0x7f00000015c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@restrict={0xa}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x2}, @const={0x1, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x20, 0x30, 0x5f, 0x61, 0x0, 0x2e, 0x30, 0x30]}}, &(0x7f0000001640)=""/74, 0x46, 0x4a, 0x0, 0xccaf, 0x10000, @value=r10}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000016c0)={&(0x7f00000015c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@restrict={0xa}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x2}, @const={0x1, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x20, 0x30, 0x5f, 0x61, 0x0, 0x2e, 0x30, 0x30]}}, &(0x7f0000001640)=""/74, 0x46, 0x4a, 0x0, 0xccaf, 0x10000, @value=r10}, 0x28) ioctl$sock_qrtr_TIOCOUTQ(r10, 0x5411, &(0x7f0000001700)) (async) ioctl$sock_qrtr_TIOCOUTQ(r10, 0x5411, &(0x7f0000001700)) bind$inet6(r1, &(0x7f0000001740)={0xa, 0x4e20, 0x7f, @loopback, 0x800}, 0x1c) ioctl$FS_IOC_MEASURE_VERITY(r10, 0xc0046686, &(0x7f0000001780)={0x2, 0x2a, "8b02e646596c86c8b8655e6737f09df859e19fc18949ced2e18954a48a22e566797fe739a1f555ac1f96"}) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001800), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x30, r12, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xa}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x20000004) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000001900)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x543, 0xe621, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x68, 0x2a, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0x7dd}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x8, 0x2}}}}}]}}]}}, &(0x7f0000001a40)={0xa, &(0x7f0000001940)={0xa, 0x6, 0x200, 0x4, 0x4, 0x8, 0xff, 0x10}, 0x40, &(0x7f0000001980)={0x5, 0xf, 0x40, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x7, 0x5, 0x2, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "45a54511f1866c38e0ca13158349697d"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x7, 0x9, 0x2, 0x29}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x0, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0x10, 0x2}]}, 0x1, [{0x69, &(0x7f00000019c0)=@string={0x69, 0x3, "365cf9311a68bb3c4625b7a240f4655c26c00462ffcf67e78c5307723ddb04c9ba12c00bfd9e07fc35d3fa800794959e700048b1e2d44eb62defd3091d5ffe492acd791fff9bb2496b2cdd9ada96bd7c5bf5d733ee61f420a208af37593242a033ce7c61e42d82"}}]}) (async) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000001900)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x543, 0xe621, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x68, 0x2a, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0x7dd}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x8, 0x2}}}}}]}}]}}, &(0x7f0000001a40)={0xa, &(0x7f0000001940)={0xa, 0x6, 0x200, 0x4, 0x4, 0x8, 0xff, 0x10}, 0x40, &(0x7f0000001980)={0x5, 0xf, 0x40, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x7, 0x5, 0x2, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "45a54511f1866c38e0ca13158349697d"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x7, 0x9, 0x2, 0x29}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x0, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0x10, 0x2}]}, 0x1, [{0x69, &(0x7f00000019c0)=@string={0x69, 0x3, "365cf9311a68bb3c4625b7a240f4655c26c00462ffcf67e78c5307723ddb04c9ba12c00bfd9e07fc35d3fa800794959e700048b1e2d44eb62defd3091d5ffe492acd791fff9bb2496b2cdd9ada96bd7c5bf5d733ee61f420a208af37593242a033ce7c61e42d82"}}]}) mount(&(0x7f0000001a80)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00)='pstore\x00', 0x80000, &(0x7f0000001b40)='#[\x00') ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000001b80)=0x3) 1m24.240836432s ago: executing program 3 (id=2949): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x400001, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000078000100ffff0000fdc9df250700000043"], 0x18}, 0x1, 0x5502000000000000}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x101201, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r8, 0xc010640b, &(0x7f00000002c0)) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x8000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1000100, 0x7, 0xfffffffc, 0x101, 0x9, 0x6}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x32, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xa47c}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x1}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x5f}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x30004061}, 0x4000000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r12 = dup(r11) fcntl$setstatus(r12, 0x4, 0xc00) write$FUSE_BMAP(r12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r13 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r13, 0xc01064b5, &(0x7f0000000180)={0x0}) 1m22.14144819s ago: executing program 34 (id=2924): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000e200000000000000f3000000000000"], 0x48) syz_clone(0x144020080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004114}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300"], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x15, 0x80005, 0x0) getsockopt(r4, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 1m20.57754046s ago: executing program 3 (id=2956): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/37, &(0x7f0000000040)=0x25) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080)=@routing={0x88, 0xa, 0x1, 0x0, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0, @ipv4={'\x00', '\xff\xff', @local}, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, 0x58) (async) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) (async) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card1/oss_mixer\x00', 0x450000, 0x0) (async) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x20}) (async) r3 = timerfd_create(0x5, 0x80000) (async) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) recvmmsg(r4, &(0x7f0000005880)=[{{&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/202, 0xca}, {&(0x7f0000000380)=""/158, 0x9e}, {&(0x7f0000000440)=""/79, 0x4f}], 0x3}, 0xfffffff9}, {{&(0x7f0000000500)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000600)=""/16, 0x10}, {&(0x7f0000000640)=""/239, 0xef}, {&(0x7f0000000740)=""/215, 0xd7}, {&(0x7f0000000840)=""/26, 0x1a}, {&(0x7f0000000880)=""/135, 0x87}, {&(0x7f0000000940)=""/108, 0x6c}, {&(0x7f00000009c0)=""/98, 0x62}, {&(0x7f0000000a40)=""/135, 0x87}], 0x9, &(0x7f0000000bc0)=""/98, 0x62}, 0x4}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c40)=""/66, 0x42}, {&(0x7f0000000cc0)=""/174, 0xae}, {&(0x7f0000000d80)=""/88, 0x58}, {&(0x7f0000000e00)=""/120, 0x78}], 0x4}, 0x2}, {{&(0x7f0000000ec0)=@pppol2tp, 0x80, &(0x7f0000001040)=[{&(0x7f0000000f40)=""/102, 0x66}, {&(0x7f0000000fc0)=""/104, 0x68}], 0x2, &(0x7f0000001080)=""/71, 0x47}, 0x3}, {{&(0x7f0000001100), 0x80, &(0x7f0000001540)=[{&(0x7f0000001180)=""/142, 0x8e}, {&(0x7f0000001240)=""/47, 0x2f}, {&(0x7f0000001280)=""/121, 0x79}, {&(0x7f0000001300)=""/99, 0x63}, {&(0x7f0000001380)=""/11, 0xb}, {&(0x7f00000013c0)=""/98, 0x62}, {&(0x7f0000001440)=""/252, 0xfc}], 0x7, &(0x7f00000015c0)=""/4096, 0x1000}, 0xf384}, {{&(0x7f00000025c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002680)=[{&(0x7f0000002640)=""/49, 0x31}], 0x1, &(0x7f00000026c0)=""/4096, 0x1000}, 0x8}, {{&(0x7f00000036c0)=@nl=@proc, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003740)=""/211, 0xd3}, {&(0x7f0000003840)=""/128, 0x80}, {&(0x7f00000038c0)=""/48, 0x30}, {&(0x7f0000003900)=""/90, 0x5a}, {&(0x7f0000003980)=""/179, 0xb3}], 0x5, &(0x7f0000003ac0)=""/187, 0xbb}, 0x8}, {{&(0x7f0000003b80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003c00)=""/224, 0xe0}, {&(0x7f0000003d00)=""/191, 0xbf}, {&(0x7f0000003dc0)=""/192, 0xc0}, {&(0x7f0000003e80)=""/12, 0xc}, {&(0x7f0000003ec0)=""/118, 0x76}, {&(0x7f0000003f40)=""/34, 0x22}, {&(0x7f0000003f80)=""/70, 0x46}, {&(0x7f0000004000)=""/130, 0x82}], 0x8}, 0x800}, {{&(0x7f0000004140)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000005700)=[{&(0x7f00000041c0)=""/138, 0x8a}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000005280)=""/40, 0x28}, {&(0x7f00000052c0)=""/152, 0x98}, {&(0x7f0000005380)=""/144, 0x90}, {&(0x7f0000005440)=""/209, 0xd1}, {&(0x7f0000005540)=""/232, 0xe8}, {&(0x7f0000005640)=""/144, 0x90}], 0x8, &(0x7f0000005780)=""/251, 0xfb}, 0x5}], 0x9, 0x1061, &(0x7f0000005ac0)={0x77359400}) r7 = dup2(r1, r3) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000005b00)={0x5}, 0x4) ppoll(&(0x7f0000005b40)=[{r5, 0xe715}, {r4, 0x4000}, {r2, 0x200}, {r6, 0x1}], 0x4, &(0x7f0000005b80)={0x0, 0x3938700}, &(0x7f0000005bc0)={[0xf]}, 0x8) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000005c00), 0x2, 0x0) (async) read$FUSE(r4, &(0x7f0000005c40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r8, &(0x7f0000007c80)={0x18, 0x0, r9, {0x1}}, 0x18) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x0, &(0x7f0000007cc0)) (async) syz_open_dev$vim2m(&(0x7f0000007d00), 0x3, 0x2) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000007d40)={0x0, 'netdevsim0\x00', {0x1}, 0x3}) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000007d80)=0x5589, 0x4) (async) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000007dc0), &(0x7f0000007e00)=0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000007e40)='./file0\x00', 0x12) ftruncate(r8, 0xfff) (async) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000007e80)={0x1, 0x5, 0x0, 0x9}, 0x10) (async) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000007ec0)={0x0, 0x5, 0x0, 0x5, 0x81, 0x3, 0xfff9, 0x800, {0x0, @in={{0x2, 0x4e20, @private=0xa010100}}, 0x7f9f8383, 0x3, 0x80, 0x1, 0xf}}, &(0x7f0000007f80)=0xb0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000007fc0)={r11, @in6={{0xa, 0x4e23, 0x6, @loopback, 0x4}}, 0x6, 0x1ff, 0x3, 0x6, 0xc1, 0x0, 0xe7}, 0x9c) (async) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f0000008080)={0xb, 0x8, [{0x57, 0x0, 0x9c}, {0x8, 0x0, 0xb1f}, {0x401, 0x0, 0x4}, {0x0, 0x0, 0x100000000}, {0xd18, 0x0, 0x7}, {0xb, 0x0, 0x6}, {0x1, 0x0, 0x3}, {0x2, 0x0, 0x401}, {0x7f, 0x0, 0x3}, {0x9, 0x0, 0xfffffffffffffffa}, {0xc27}, {0x7, 0x0, 0x1ff}, {0xe, 0x0, 0x80000001}, {0xc, 0x0, 0x1}, {0xff, 0x0, 0x2}, {0x92bb, 0x0, 0x8}]}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000008280), r5) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000008380)={&(0x7f0000008240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000008340)={&(0x7f0000008300)={0x3c, r12, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x2f483bb9f80aa2ed) 1m20.387956001s ago: executing program 3 (id=2957): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c052f0400000000000109022400010000100009040000c4030002000921011000012207000905810300000d0140f31420c38197187d8e9c9874679b3cc28ea87158051e2fcc74cf134feec39f3852fdd023ce12c9cd2b"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) rseq(0xfffffffffffffffe, 0xfffffffffffffecd, 0x0, 0x0) getitimer(0x1, 0x0) 1m17.788549014s ago: executing program 3 (id=2964): syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000100)={0xb9d1, 0xfffffffffffffffe}, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x89c2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) r5 = fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000140)=0xffffffffffffff70) close(r5) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000080)=0xa) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) eventfd(0x80000001) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) syz_clone(0x44200400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m5.453174217s ago: executing program 7 (id=2993): r0 = socket(0x1e, 0x4, 0x0) eventfd2(0x9, 0x80801) (async) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x0, 0x40000335}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @llc={0x1a, 0x33a, 0x9, 0x4, 0x1, 0x6f, @broadcast}, @isdn={0x22, 0x1, 0xa, 0x80, 0x4}, @l2tp={0x2, 0x0, @remote, 0x4}, 0x2, 0x0, 0x0, 0x0, 0xcf, &(0x7f0000000040)='veth0\x00', 0x5, 0xffffffffffffffff, 0x200}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffffffff, 0x0, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket(0xa, 0x3, 0x3a) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) (async) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r4, &(0x7f0000000000)=0x2b00, 0x12) (async, rerun: 32) r5 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async, rerun: 32) sendmmsg$inet(r5, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) (async, rerun: 32) recvfrom$l2tp(r0, &(0x7f0000000240)=""/229, 0xe5, 0x1, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80, 0x106) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r6, 0x4068aea3, &(0x7f0000000380)={0xed, 0x0, 0x7fff}) (async) r7 = syz_io_uring_setup(0x8245, &(0x7f0000000180)={0x0, 0x4662, 0x80, 0x8001006, 0x1e}, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}) 1m4.880304471s ago: executing program 7 (id=2995): r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0xff, 0xfffffffffffffffa}}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000800000000000000200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a6683f5aeb4edbb57a5025ccca9e00360db398262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3c93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4000050) 1m3.087763448s ago: executing program 7 (id=2997): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r2, r1) sendmmsg(r1, &(0x7f00000003c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @loopback}, 0x2, 0x0, 0x1, 0x3}}, 0x80, 0x0}, 0x5b4}, {{&(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80, 0x0}}], 0x2, 0x850) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r5], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)={@fallback, 0xffffffffffffffff, 0x18}, 0x20) fsmount(r6, 0x0, 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="4eff3d20000014e2ff022b00"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000a0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000780)={0x0, 0xf0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x33, 0x1, 0x70bd2b, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x5, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) 1m2.166378981s ago: executing program 35 (id=2964): syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000100)={0xb9d1, 0xfffffffffffffffe}, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x89c2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) r5 = fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000140)=0xffffffffffffff70) close(r5) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000080)=0xa) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) eventfd(0x80000001) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) syz_clone(0x44200400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m1.935848917s ago: executing program 7 (id=2999): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000280)={[0xfffffffffffffffc, 0x40003, 0x80, 0x401, 0x7, 0x9, 0x0, 0x0, 0x120000000207, 0xc, 0x7fffffff, 0x5, 0x7, 0x4dbd, 0x0, 0xfffffdfffffffffd], 0x4000, 0x887cc}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x4800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b"], 0x0) 58.706100091s ago: executing program 7 (id=3003): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x6, 0x4}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xa}, 0x18) writev(r1, &(0x7f0000000240), 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = socket(0x27, 0xa, 0x38) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000133000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000b19000/0x4000)=nil, &(0x7f0000366000/0x3000)=nil, &(0x7f000035a000/0x4000)=nil, &(0x7f000098a000/0x4000)=nil, &(0x7f00002e5000/0x4000)=nil, &(0x7f0000bbc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000df5000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)="ada7add567670a893303eaca99ec08a42110bab48f38e5c0369a48607dd74355876dd0e61df947f3145c8a894ad3daedd22306b5bafd8ca6f504be890ae4d155872984bc3bce634b66d1833aa47691208b3806bbb89d60389ba39c63ba6ca1a75f2ccd711f09da1a348252cc49da3a3d5d0d5a2e857c0cf1676c65ebd21fcb27d1dbf133ec9a3964088dd5e3d0e1bcff875a618059bd875f605c9b7889fce9a99d42f00a77baf16740aa889bbfb2b2fac4639af50b691b3fa97561291dee2a0baabbc5f8930b29ae429ad642fb9a02bb3e7bbba2878123ce52680dae62036449461c2660fd213f7bda03d709c2d370e96ce6", 0xf2, r3}, 0x64) r6 = syz_open_dev$video(&(0x7f0000000140), 0x13, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, 0x0) r7 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x0, {0x9, @pix_mp={0x12, 0x5be7, 0x9509040d, 0x6, 0x4, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0x100, 0x7}], 0x1, 0xc, 0x6, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYRES16=r5], 0x2c}}, 0x0) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r9, 0x0) recvmmsg(r9, &(0x7f000000c880)=[{{&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/251, 0xfb}, {&(0x7f0000000640)=""/194, 0xc2}, {&(0x7f0000000740)=""/206, 0xce}], 0x3, &(0x7f00000016c0)=""/4096, 0x1000}, 0xc7}, {{&(0x7f0000000840)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000300)=[{&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/242, 0xf2}], 0x2, &(0x7f00000036c0)=""/4096, 0x1000}, 0xe}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/104, 0x68}, {&(0x7f0000000a40)=""/20, 0x14}, {&(0x7f0000000b40)=""/193, 0xc1}], 0x3, &(0x7f0000000c40)=""/193, 0xc1}, 0x5}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000d40)=""/195, 0xc3}, {&(0x7f0000000e40)=""/162, 0xa2}, {&(0x7f0000000ac0)}, {&(0x7f0000000f00)=""/111, 0x6f}, {&(0x7f0000000f80)=""/56, 0x38}, {&(0x7f0000000fc0)=""/208, 0xd0}, {&(0x7f000000cac0)=""/4110, 0x100e}, {&(0x7f00000010c0)=""/90, 0x5a}, {&(0x7f0000001140)=""/95, 0x5f}], 0x9, &(0x7f00000056c0)=""/4096, 0x1000}, 0xffffe33d}, {{&(0x7f0000001280)=@isdn, 0x80, &(0x7f00000077c0)=[{&(0x7f00000066c0)=""/4096, 0x1000}, {&(0x7f0000001300)=""/231, 0xe7}, {&(0x7f0000001400)=""/125, 0x7d}, {&(0x7f0000001480)=""/240, 0xf0}, {&(0x7f0000001580)=""/64, 0x40}, {&(0x7f00000015c0)=""/100, 0x64}, {&(0x7f0000001640)=""/7, 0x7}, {&(0x7f00000076c0)=""/240, 0xf0}], 0x8, &(0x7f0000007840)=""/124, 0x7c}}, {{&(0x7f00000078c0)=@caif=@dgm, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007940)=""/197, 0xc5}], 0x1, &(0x7f0000007a80)=""/74, 0x4a}, 0x101}, {{0x0, 0x0, &(0x7f000000adc0)=[{&(0x7f0000007b00)=""/226, 0xe2}, {&(0x7f0000007c00)=""/4096, 0x1000}, {&(0x7f0000008c00)=""/101, 0x65}, {&(0x7f0000008c80)=""/4096, 0x1000}, {&(0x7f0000009c80)=""/4096, 0x1000}, {&(0x7f000000ac80)=""/29, 0x1d}, {&(0x7f000000acc0)=""/194, 0xc2}], 0x7, &(0x7f000000ae40)=""/118, 0x76}, 0x8001}, {{&(0x7f000000aec0)=@sco, 0x80, &(0x7f000000c2c0)=[{&(0x7f000000af40)=""/4096, 0x1000}, {&(0x7f000000bf40)=""/42, 0x2a}, {&(0x7f000000bf80)=""/99, 0x63}, {&(0x7f000000c000)=""/219, 0xdb}, {&(0x7f000000c100)=""/114, 0x72}, {&(0x7f000000c180)=""/105, 0x69}, {&(0x7f000000c200)=""/183, 0xb7}], 0x7, &(0x7f000000c340)=""/236, 0xec}, 0x2}, {{0x0, 0x0, &(0x7f000000c7c0)=[{&(0x7f000000c440)=""/221, 0xdd}, {&(0x7f000000c540)=""/81, 0x51}, {&(0x7f000000c5c0)=""/244, 0xf4}, {&(0x7f000000c6c0)=""/195, 0xc3}], 0x4, &(0x7f000000c800)=""/119, 0x77}, 0xfffffff7}], 0x9, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYRESOCT=r2], 0x3c}}, 0x20024090) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x3]}, 0x8) syz_genetlink_get_family_id$tipc2(0x0, r3) 57.692119595s ago: executing program 7 (id=3005): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8000d4e7) execveat(0xffffffffffffffff, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x800) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x22000, &(0x7f00000001c0)='grpquota') creat(0x0, 0x188) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x80000000}, 0x18) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/173) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x46040000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x180020, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 41.329043862s ago: executing program 36 (id=3005): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8000d4e7) execveat(0xffffffffffffffff, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x800) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x22000, &(0x7f00000001c0)='grpquota') creat(0x0, 0x188) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x80000000}, 0x18) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/173) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x46040000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x180020, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 23.203312544s ago: executing program 9 (id=3078): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x94) syz_clone3(&(0x7f0000000300)={0x40000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x39}, &(0x7f00000001c0)=""/125, 0x7d, &(0x7f0000000240)=""/38, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x610040, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, 0x0) syz_io_uring_setup(0x44ec, &(0x7f0000000080)={0x0, 0x3119, 0x100, 0x3, 0x316}, &(0x7f0000000100), &(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000180100002020702500000000000000000000000080000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e6", 0xa1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000018001000000000000000000002000000fc000009000000000600150002009d7d736a1680100008800c000180060001000001000076c9501926e8b897ac7bb396c0b7e70d92dc390e981b600eaf923d9790b82812ed2261484bb787baf65ca261a99d3f52ec30a4e9bfd71ee7d86eb38d1fa34b2eaa75e76d026909c6f26c0d85a6b93abfa5dfd57847e50e406c6f408227ecf214dd1209d6b638fdd02b54ace2d2f9df090c8eb3d86e89a444fa5ba221fa6d63285ecdbbb538fde5afcd8ec3e916fb22d5f2ea2c60d61065d2c545a8a0977b1ca3d93a4370293dbc794ef992c42ef59fe679c9e8a1018e14ae981efe2dcfbb8f5f3d80d7f32cd3de9afdf4afda5e1d2a1a2a92ac00e0cbf73c5979f78586"], 0x38}}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 22.089509826s ago: executing program 8 (id=3083): brk(0x55d55ede6004) r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b80)={0x2c, &(0x7f0000000840)={0x0, 0x7, 0x46, {0x46, 0x8, "393e0a80f4809cbf763b1dc3a215a71c5bfee2d22d7c1cc5e2936c6c71999f81ae710bf0404772529a2532dc38e0ea31cbba78ecec4012fc862ed01383e5e7bca88f8532"}}, &(0x7f00000008c0)={0x0, 0x3, 0xe2, @string={0xe2, 0x3, "2ba753974fb240249f8cc680b3818fb6828e0ddb1582bdb41fb94eede27c753787773c07626af6520d8b6959097857edb23262f0537a968476919ffbf9540b5d99e2e630b1dd6359e275773f08b5fec563a7e0c7ef5e8f48eb54e31d1ef545863b75973e28191c4e6979b7d6428fb1043903d7e302628a8a478a99db32a7118f51a2c0eb7220fd0431d206bbe1476ee579aa0b00ad9607f786a8e6d6bc59b0f1bcc4433854325a3f74631991465e3367aad32460eb425d1ba59805f68239071918c192ac3485198a5d9eedf6e89b47d1b1f97a47e0f1287ec61083b0dc812002"}}, &(0x7f00000009c0)={0x0, 0xf, 0x122, {0x5, 0xf, 0x122, 0x6, [@generic={0x6a, 0x10, 0x2, "f0363cc49ad021b13fc7e9efc6ec8f241dde2c4ad3c59d6796d8ee0235a8329a016c4b5492b6b1248ca0cd266e6a86a04cbe275f0da2fa7fe8d7db278ecf163040dfb4561e2e6ee2e3183628de991a2d759bc7e764b125132d26bf287527ea75cd6be5f01ffcd1"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "4aaeb5ac65b121aa162aa1c1f9359fb4"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xb, 0xca, 0x4}, @generic={0x6e, 0x10, 0xb, "ac605089b7152cefa3a616280655af09cae98ce6c994cc3a1ac321060df399e7d863301df96052e237168013ce94b4525988d73c2442c617aa7e68037c5f1c0e88cc03f17276542f0d8d68ebe50bec16620ac9247aed3b932937122aa24dfd042c8f8119822eb4d7bb8c10"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x4, 0x7fff}, @ssp_cap={0x20, 0x10, 0xa, 0xf2, 0x5, 0x8, 0xf, 0x2, [0x3f00, 0x30, 0x0, 0xff81c0, 0xffc000]}]}}, &(0x7f0000000b00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x18, 0xff, 0xf, "eccb6137", "b0b8f240"}}, &(0x7f0000000b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x2, 0x5, 0x2, 0x3, 0xa518}}}, &(0x7f0000001140)={0x84, &(0x7f0000000bc0)={0x20, 0xe, 0xd1, "1f54837982e8ca2749d39f8aac2c3cac020921b14ef9487c04f65876a435d6e92160309d61370e6c289b1888405e469efaade0f28ec3e9b6e9ba731480c319151a80ad65ef16ddf3d14451380af4974694d7cd192128f6e3dae8e8320b3ff3f8100fbf6a95fb3ba5fd0af8e862f5c1212f04eb4e3305a05671d721a3f53d79c14e6c30dbe79911a0a9771c50dd7cc84dbca7937068497dd00aaa4afbf0128f5f453b2f38aca549ca3dad4cecd713f5a01204b4c95483be2fe5460081890afa181085144324049fae89b281b0110e702fc5"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x33}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000e40)={0x20, 0x0, 0x8, {0x100, 0x1a, [0xf000]}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000ec0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000f00)={0x40, 0xb, 0x2, 'WC'}, &(0x7f0000000f40)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, &(0x7f0000001000)={0x40, 0x19, 0x2, "8712"}, &(0x7f0000001040)={0x40, 0x1a, 0x2}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000010c0)={0x40, 0x1e, 0x1, 0xf7}, &(0x7f0000019600)={0x40, 0x21, 0x1, 0x95}}) syz_usb_control_io(r0, &(0x7f0000000700)={0x4c, &(0x7f0000000140)={0x60, 0xb, 0xf0, {0xf0, 0x10, "1f550572e9ef67f33273809a852e7dba7b115d387910e9653788880ca7000000000000cfe7d1ed6180558ae85524c13d963af9669cff13cd069adc807e1dab55ad21ebf917e464e4b91195b9c292810469bdbf9123103d2c00cc7d7b27cefe84c169571c2498b0dd42c78d8f227b7b83891732c1e7e0d8ee3fca907de8f309030b5fdb1e4ae169db5706e67dbd086d786978f55976c0d89e9dfac8c44a6e9b35a9db2b358e588b79e07059e7b0eaa0992e4264b55e65ab18918491d9c01ab202b0f821b399934adc10ac3a9b27bb25df7cc3ded49101e4b640c608c68335f06669b6e036220fd666d14dbe142e03"}}, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, &(0x7f0000000d40)={0x84, &(0x7f0000000340)={0x20, 0x15, 0x7, "d2829d65f98f2f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000540)={0x14, &(0x7f0000000380)={0x20, 0x30, 0xdc, {0xdc, 0x9, "ba4448bc0b74fcbf5d95106b5e9dd78e960689de4992b1f738a4fc1dcc6610d22cc0e082f9077ea66fef746941bdef78eb249bc53618b547d48fce4042f84c206b0e73f478762b0782720d88987342e00420193385d52626414dd1e0a5021d2a9ba89a04a11e7dd93dacd5846698a04ddeb4bab6913187f52832994ddcf4ccb4b4a92380f7b384d734ec3557a10b526f4b693edc2aa764712e1d235fe375f31bab113abd5c833ddb80616a11a0deaf04043dee5ae272d71422ce20d8e545fc7c277e878c0ceab00fdcbbc36aa5f13f0ac1c91639c5c56b1c4dec"}}, &(0x7f0000000480)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "f5e13f44f9e44d35d7bb2a6200bff7a6ac8b1343fd5ac9ff110b1161108690c774a2b8365a6cdc2fc574a2c720e9316eddeb5a3760fac4cfd5fb9066fe3ccce9f6cbf073abb9600a8f90bfcc67383e6d5cfc23e5b382c1f90ad60f6cb7e1d5d7458fdc491a08e4d0c18e31072fb2059ca96a76577c57ba39ee6525415e22c6745610049d9d00e52ab5e558abd8f8e3d1058225e6c070b8205877eba260"}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="40310d00000007183a010168efb40c6e386e3b"], &(0x7f00000005c0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000640)={0x20, 0x81, 0x1, "bc"}, &(0x7f0000000680)={0x20, 0x82, 0x3, "7f3e1c"}, &(0x7f00000006c0)={0x20, 0x83, 0x1, "0e"}, &(0x7f0000000740)=ANY=[@ANYBLOB="209402000080310d"], &(0x7f0000000780)={0x20, 0x85, 0x3, "7aa97e"}}) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) futex(&(0x7f0000000080), 0x88, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019640)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2710, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r7, 0x560a, &(0x7f0000000080)={0x0, 0x5, 0x95bb}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) futex(&(0x7f0000000080)=0x1, 0x7, 0x0, 0x0, 0x0, 0x2) openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000040)=0x3, 0x1) 16.396261465s ago: executing program 8 (id=3097): dup(0xffffffffffffffff) (async) socket$alg(0x26, 0x5, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) syz_usb_connect(0x0, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c36e8240ac051c92fb9d000000010902360001000000000904000004034100000905", @ANYRES64], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000380)='{:\'@-\x00', &(0x7f0000000140)='\x00k\x00\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000b80)='fuseblk\x00', 0x0) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r6, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 13.987587607s ago: executing program 8 (id=3103): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = geteuid() quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, r3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) syz_io_uring_setup(0x3a, 0x0, 0x0, &(0x7f0000000500)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4864}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="740000001000010000000000000000000000000a4c"], 0x74}}, 0x0) 13.896190106s ago: executing program 5 (id=3104): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1ec86cfcc17f9bec, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) ioctl$sock_netdev_private(r0, 0x8943, &(0x7f0000000000)) 13.725494627s ago: executing program 5 (id=3105): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x12b900, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES16, @ANYRESDEC=r0], 0x0, 0x9b, 0x0, 0xffffffff}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0x0, 0x0}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x10a, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000000)='./file1\x00', 0x56000129) (async) inotify_add_watch(r7, &(0x7f0000000000)='./file1\x00', 0x56000129) fallocate(r6, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x2000000) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x2000000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r3, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x3, 0x3}, 0x18, 0x0) (async) r9 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r9, 0x2) landlock_create_ruleset(&(0x7f00000000c0)={0x4, 0x0, 0x2}, 0x18, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) listen(r10, 0x0) 12.958814585s ago: executing program 9 (id=3108): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r2, r1) sendmmsg(r1, &(0x7f00000003c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @loopback}, 0x2, 0x0, 0x1, 0x3}}, 0x80, 0x0}, 0x5b4}, {{&(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80, 0x0}}], 0x2, 0x850) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r5], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)={@fallback, 0xffffffffffffffff, 0x18}, 0x20) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000400)=@md0, 0x0, &(0x7f0000000480)) fsmount(r6, 0x0, 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="4eff3d20000014e2ff022b00"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000a0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000780)={0x0, 0xf0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x33, 0x1, 0x70bd2b, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x5, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) 12.919060599s ago: executing program 8 (id=3109): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = syz_io_uring_setup(0x498, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) r5 = add_key$fscrypt_v1(&(0x7f000001adc0), &(0x7f000001aa80)={'fscrypt:', @desc3}, &(0x7f000001acc0)={0x0, "9651a151252841d3f760e3537c3153c8e5c590e23c7f30c2e80a4c7d8f5e7d9e4e4b229a71fdf61b6856170eada937965300000000001000", 0x81c}, 0x48, 0x0) keyctl$setperm(0x5, r5, 0x1000) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000040), 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\t\t'}]}, 0xe) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x10, 0x1, 0x14c, &(0x7f0000000300)}) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) write$selinux_load(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578d4cb19be7c944edcf4e746e037d041599edf9e04af670b3c84b86690a89d113811e14bd427af9e7ff7d4c3453a2cb91809e9d18d6991c4adcdb111"], 0x4b) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="7a2b30f233016c38c765e3079f9015a07dd6eb2080afdeb2a403abbc820dc86f2f9461100b82505eb3ff4a686f945424d8c7da069681cdc89d7a829db827208a6c492057ddce78a47859d6b322bce5c9f6bec696b653385681eddffed76b1fbce5bf1a82251c2dbac841f9df265d981d2917245717371463412faa8041f820b0be6ad439b21914284b25a1", @ANYRESDEC, @ANYRES8=0x0, @ANYRES16, @ANYRESDEC=r3], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x4004041) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x8, 0x2000, @fd=r2, 0x4, 0x6, 0xe, 0x14, 0x0, {0x1}}) 12.874994099s ago: executing program 0 (id=3110): timer_create(0x3, &(0x7f0000000100)={0x0, 0x24, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) landlock_create_ruleset(0x0, 0x0, 0x3) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) pidfd_getfd(r2, r2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) 12.644092335s ago: executing program 5 (id=3111): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f00000000c0)='0', 0x1) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) mremap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r2, 0x3b87, &(0x7f0000000140)={0x18, 0x1, 0x0, 0x0, r3, 0x1}) r7 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0x9058, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11.64851042s ago: executing program 9 (id=3112): io_setup(0x7, &(0x7f0000000280)=0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757811"], 0x65) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000000000000a00000000000005ff02000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000ac0)={0x1, @pix_mp={0x7, 0x4, 0x32314142, 0x7, 0xb, [{0x9, 0xd9}, {0x2, 0x3}, {0x7}, {0x9f5, 0x81}, {0x1, 0x6}, {0x1}, {0x7cf, 0xdc1}, {0x2, 0xb}], 0x2, 0xa, 0x8, 0x2, 0x6}}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) (async) syz_emit_ethernet(0x3e, &(0x7f0000000900)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) io_pgetevents(r0, 0x4, 0x4, &(0x7f0000000200)=[{}, {}, {}, {}], &(0x7f0000000180), &(0x7f0000000380)={&(0x7f00000003c0)={[0x7]}, 0x8}) 11.605563635s ago: executing program 8 (id=3113): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_le_read_def_data_len={{0xb3}, {0x0, 0x4, 0x8}}}}, 0xb) sendmmsg$unix(r3, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x811}, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x18}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000900)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000380)={0x510, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd, 0x6f}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x800}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88e5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x20f6}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8809}, @NL80211_ATTR_FRAME={0x4ba, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_b, @device_a, @random="041cb11810d3", {0x9, 0x8}, @device_b, @void, @value=@ver_80211n={0x0, 0x7, 0x3, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0x50, "d21149591a82fa9ae538a65baf3d922927f1902ef40185d9dd204817f9e8aa79e4c0ed4c2c5f4d6593213c6457d211e0383adaa5abc4ba264d167dd24e6e5b307818ca3b45a50b3807bcea64e201efe4"}, {@broadcast, @device_b, 0x93, "0b2abdac38955e582dc446b342cdbbb81b6e6c9010f3790994676ab9c59ee2a4585e54858a8d6acad4bb3ff3c237523a4546d4e560ce38c961ceec03d55f1239e69297c92a361ef5f0c979944d17edf20ae81a7f0b3bf9b63f1cb43d7acdfd21246dcc185858c24f85e39a332c91ff9f3b969fff7efd1c2fa3aaf5dbcbab86efccc5cdb6929c9e10a7f61fa5acce0341745f84"}, {@device_a, @broadcast, 0xd4, "1aeead09c79417ec318b2fdc897fd1fe23d25ba662544f844f103b26e9d8ed7b73bbb1e19a5eb6579cc9cbc3a36bd780aa056c598a699c821f33289f0fb0a68bdbd418fd6b27ac8b5aca52068e664b6b6db7d08fec5c313428c9d6194c797bdf7a89307d477302b4f568753d2236ec91dda392c04e924127c75111190d0f5ad48baa52a5204077a37f5857a967fd821c865292825dd00539b6b5f1a28ee83baba8851aa78eb3a1db38de451dd00bb8130f83ad26cc26c38d2bd4a194725b3f063fef96f320284b49609b3e4829eca573842b754b"}, {@device_b, @device_b, 0x49, "35b0e4865101f39761dc4268c08c90aab39501fc8661ea9850735ea6d0aa37c42452a372500daff2133b89f775ceed11b8cf7a9d0019b2a9ba1ab8be0afd2b645c2c1510a40d1ecd0a"}, {@broadcast, @device_b, 0x6d, "c3af7aa1f31e65ef8caddfc79aadd407ef17c24de531acce275b838edbf458a7735c8addaca84af8e9f49ea83d907f3490f08f767c6a17628d53acc990f05c986d33674f9fc60731ecdd73cb5b41c7a18d84ae8f4eaee47de52a2407cb83507d8742ada02e31612508427e048f"}, {@device_b, @device_a, 0x6d, "d7f1e5ec78e6cc55542e678bcc5c037ccaf4dc0208206037aa07d9fd3272c9f947e671e5020735eeba02f3b9cc0c98b9ceb8e980d929d0b36dcb86a2d8c1dce067b8cc2b4f3ca2f639daefe53ae96fede8a789366e14bccbc753a0cf05a013c7d5f0877a62cabe2b4c663c7733"}, {@device_a, @device_b, 0x1d, "56bb1ccda86f03a0bc8dcfd70f62c1f7fad24e86d9f9d0f1c56e58338c"}, {@broadcast, @device_b, 0x29, "446e69675da4b0a40f9657860cff4519a0721b821e3057d4a265595af6bbdd8f0478cd4adecf52a233"}, {@device_a, @broadcast, 0xe8, "bb0f4ae604d5cd04e24bb104249621c17cbf5305eae860b126076ff244ab1dbd43a276899ff4ac609824acf6a07ef82a4e7a53f119bcfe902f916155ededffa776d5403ee207b1e3179701fa3b40f9c7a143ec7adf3237c20cfef677298e38a494caf64f829b3fb133375645a5747deeaf5caf0838f4c6cb5e94b4085f4dc08120c9038ee884a43e171e2cc319397f5fc00f76934dbebf7d8b6d71420aefa9a49d992cc4574f68744d6d485db841ee00b436a54b6d83d13bcf1362445aca700ff1f84f8e29e876428f5381f0ff5bac2292381b78737e6d551d3ab9e57c1b505300b6b0966f5dfebe"}]}}]}, 0x510}, 0x1, 0x0, 0x0, 0x4028811}, 0x80) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0xf) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) lseek(r4, 0x0, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000036c0)=ANY=[@ANYBLOB], 0xb8}}], 0x2, 0x1) 11.541074055s ago: executing program 0 (id=3114): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000773604202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_ep_read(r0, 0x7, 0xb1, &(0x7f00000001c0)=""/177) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = fcntl$dupfd(r3, 0x406, r3) getsockopt$inet_udp_int(r4, 0x11, 0xa, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x14, 0x14, 0x609, 0x0, 0x0, {0x1e}}, 0x14}}, 0x8040) (async) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'dummy0\x00', 0x800}) (async) dup(r1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x20}) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='7'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1, 0x1}) (async) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) (async) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x7f, 0xa4, 0x4, 0x20000000}]}, 0x48}}, 0x0) 11.204066102s ago: executing program 9 (id=3116): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r5, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001806005abeef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000100)="37a8a6c51ef711513a5554633f6ecf2512425a", 0x13}, {&(0x7f0000000200)="4d0ff6044df96744927dc21a1af29aecbac549f3", 0x14}], 0x4) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) r8 = accept(r7, 0x0, 0x0) r9 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r9, 0xc040565e, &(0x7f0000000340)={0x1, 0x102, 0x0, {0x8, 0x800, 0x7, 0x212}}) sendmmsg$alg(r8, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000780)="aa612d", 0x3}, {&(0x7f00000007c0)}, {&(0x7f0000000100)="76cc04c60bd2dc9aa0b1e1", 0xb}], 0x4, &(0x7f00000008c0)=[@assoc={0x18, 0x117, 0x4, 0xf9d3}], 0x18, 0x404c050}, {0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000940)}, {&(0x7f0000000a40)="8fdb", 0x2}, {&(0x7f0000000a80)}, {&(0x7f0000000740)}], 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="c8000000000000001701000002000000b2000000adbffde32c9b0cce62ddb09306c4d607545820303bf119e2db84405742dbd29fdca52fc75f8d6102ce516c7167c159fbf1f4e15fa685af17e2a24e9387af7c09a2c9740e45918d44d3212e49434dcb0f0da128213507f88698"], 0xe0, 0x24000000}], 0x2, 0x0) recvmsg(r8, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 9.062720935s ago: executing program 5 (id=3118): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, 0x0, 0x0) (async) connect$inet6(r0, &(0x7f0000002e40)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) (async) r1 = fcntl$dupfd(r0, 0x406, r0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) sendmsg$802154_dgram(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14, &(0x7f0000000280)={&(0x7f0000000300)="50b875ea34c811b10ed20b7e8e345f54904f5197d87c8095fe6d5207b38f165098f38aed5e1036e8f2b0a89b6f3d87085535027c519ae38e132190b0ec6c7804de47e358ab0632e35deeb8681989beda6b3ace85874ef9622a452bec0371a29253ad569c1a6ef3a8c730ad26d0fb9431c158ae9890e28eeb8ba381f9339fca45d09086808480b6ece601ef3ea96e9d384f1e", 0x92}, 0x1, 0x0, 0x0, 0x4000001}, 0x90) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x0, [0xa, 0xffff133a, 0x80000001], [{0x20, 0x0, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x8}, {}, {}, {0x0, 0x2}, {}, {}, {0x6}, {0x101}], 0xc}) (async) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00220f000000808ac1a12b17a80fa5925600369c54"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) landlock_restrict_self(r7, 0x0) (async) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) read$eventfd(r5, &(0x7f0000000080), 0x8) (async) connect$inet6(r5, &(0x7f0000000400)={0xa, 0x4e20, 0xd, @loopback, 0x2}, 0x1c) (async) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f00000004c0)={0x3, 0x200, 0x5, 0x7, 0x7, 0x200}) (async) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/xfrm_stat\x00') read$FUSE(r8, &(0x7f0000000640)={0x2020}, 0x2020) write$cgroup_pid(r1, &(0x7f0000000240), 0xfdef) (async) read$FUSE(r1, &(0x7f0000000c00)={0x2020}, 0x2020) mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) (async) removexattr(&(0x7f00000001c0)='./bus\x00', &(0x7f00000000c0)=@known='user.incfs.size\x00') 8.880143897s ago: executing program 9 (id=3119): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x20000000) (async) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x20000000) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000009000010429bd700000000000000000006fd7c664f9dbd384ffd70e420831ec0fcd908f61e1a70d479cf701d66b1d68ff989613779a37cd69261c9445df36da32eefddb08f090c7391bdaae951ff4238c184ff23b4ce2e3c44e41ba2f3cff4caab89063ce3dd14e4f052cec3abfacbd213541bb453ad86af2cba439e3", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800900010069706970000000001400028008000300000000000500040000000000"], 0x44}, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r2, r2, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='1', &(0x7f0000000200)='\x00\x00\x00\x00', 0x0) r3 = socket$inet(0x2, 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x48010) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 7.24016218s ago: executing program 8 (id=3121): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) bind$pptp(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x404c4701, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x2) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000000)=ANY=[@ANYBLOB="12015001000000106b1d010140000102030109029a00030100e0000904000000010100000a24010000000201020c240200000000000e0000000524050000082404030f8bf8ae0c240701050000c80975f9070d24070101000005cf1f0000050924030000000001000904010000010200000904010101010200000905010900000100000725010001000009040200000102000009040201", @ANYRES16], 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r6 = syz_io_uring_setup(0x88f, &(0x7f00000000c0)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0x80, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f6, 0x0, 0x4, 0x0, 0x0) 7.044191629s ago: executing program 2 (id=3122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() clock_gettime(0x4, &(0x7f0000000980)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'vlan0\x00', {}, 0x101}) renameat2(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 6.036555606s ago: executing program 2 (id=3123): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000b40)={@broadcast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @multicast, @empty, @remote, @rand_addr=0x4}}}}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x5, 0x0, 0x0, {}, {0x0, 0x20}, {0x0, 0xfffffffd}, {}, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth0_to_team\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010102}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r3 = getuid() quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, r3, &(0x7f0000000140)) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x3f46137792f68265) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 5.854451184s ago: executing program 5 (id=3124): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 4.845181902s ago: executing program 5 (id=3125): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) ptrace$peek(0x1, r0, &(0x7f0000000040)) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x16440, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000001700)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x8}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x25, 0x800, 0x9) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x30100) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hfs\x00', 0x8000, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200, 0x8000) ioctl$VIDIOC_ENUM_DV_TIMINGS(r7, 0xc0945662, &(0x7f0000000100)={0x3, 0x0, '\x00', {0x0, @bt={0x6, 0xfff, 0x0, 0x2, 0xed8, 0x8, 0x3, 0x3, 0x9, 0x6, 0x984, 0x3, 0x100, 0x9, 0x1, 0x2, {0x7ff, 0x6}, 0xd, 0x61}}}) 4.604128182s ago: executing program 2 (id=3126): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10d2, 0x0, &(0x7f00000000c0), &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc}) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x480840) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r6}}, 0x30) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000002010500000000f1ffff08000a000003"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000340)={0xffffffffffffff73, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000000)={0x18, r7, 0x1, 0x0, &(0x7f0000000100)=[{0x7ff, 0x1080}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r7, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9}) r8 = syz_open_dev$vim2m(&(0x7f0000000680), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x0, 0xfd}) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000280)=0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc}) 3.712842882s ago: executing program 2 (id=3127): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, 0xee00, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a030400000000000000000a0000010900010073797a31000000004c000480480001800b000100746172676574000038000280240003000739f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000800024000000000080001004c4f47000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@bridge_dellink={0x34, 0x13, 0x5, 0x2000, 0x25dfdbfd, {0x7, 0x0, 0x0, r9, 0x10400, 0x1952}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x18, 0x0, 0x0, 0x2259}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(r7, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x600, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x29}, &(0x7f0000000100)=""/102, 0x66, &(0x7f0000000180)=""/54, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) 3.672929897s ago: executing program 0 (id=3128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r0, 0x4, 0x0, &(0x7f0000000600)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100f285dd00ff000071000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) recvmmsg(r5, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/83, 0xad}, {&(0x7f00000000c0)}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/111, 0x6f}], 0x4, &(0x7f0000000540)=""/100, 0x64}, 0x9}, {{&(0x7f00000006c0)=@ax25={{0x3, @null}, [@netrom, @rose, @netrom, @null, @remote, @bcast, @default]}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000002c80)=""/94, 0x5e}], 0x1, &(0x7f0000000840)=""/60, 0x3c}, 0xcfeb5e57}, {{&(0x7f0000000880)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000940)=[{&(0x7f00000000c0)=""/12, 0xc}], 0x1, &(0x7f0000000980)=""/109, 0x6d}, 0x5}, {{&(0x7f0000000a00)=@tipc=@id, 0x80, &(0x7f0000001040)=[{&(0x7f0000000a80)=""/232, 0xe8}, {&(0x7f0000000b80)=""/185, 0xb9}, {&(0x7f0000000c40)=""/252, 0xfc}, {&(0x7f0000000d40)=""/18, 0x12}, {&(0x7f0000000d80)=""/211, 0xd3}, {&(0x7f0000000e80)=""/204, 0xcc}, {&(0x7f0000002e80)=""/185, 0xb9}], 0x7}, 0x401}, {{&(0x7f00000010c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000002680)=[{&(0x7f0000001140)=""/192, 0xc0}, {&(0x7f0000001200)=""/156, 0x9c}, {&(0x7f00000012c0)=""/168, 0xa8}, {&(0x7f00000024c0)=""/234, 0xea}, {&(0x7f00000025c0)=""/140, 0x8c}], 0x5, &(0x7f0000002700)=""/254, 0xfe}}, {{&(0x7f0000002800), 0x80, &(0x7f0000000740)=[{&(0x7f0000002880)=""/208, 0xd0}, {&(0x7f0000001380)=""/59, 0x3b}, {&(0x7f0000002980)=""/160, 0xa0}, {&(0x7f0000002a40)=""/121, 0x79}, {&(0x7f00000007c0)=""/7, 0x7}, {&(0x7f0000002b00)=""/211, 0xd3}, {&(0x7f0000002c00)=""/10, 0xa}, {&(0x7f0000002c40)=""/25, 0x19}], 0x8, &(0x7f0000002d00)=""/198, 0xc6}, 0xd}, {{&(0x7f0000002e00)=@tipc=@name, 0x80, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000030c0), 0x0, &(0x7f0000003100)=""/145, 0x91}, 0x1000380}], 0x8, 0x20, &(0x7f00000033c0)={0x0, 0x989680}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) 1.908320574s ago: executing program 0 (id=3129): bpf$MAP_CREATE(0x0, 0x0, 0x48) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7, @local, 0x9}, r0}}, 0x30) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="e16ef346dd3b98f51d08cad2abfa79ee6b2f87db4b9d9963e5033bb8dad5d704653c1ff79b4d8af0c8e4b34f4c15d57c702318f4e610494f0a0f62ecdb7bddacc8786ad9aac1f94a52e538393e21faf7b715e8522f3ee11575e55a2f1f9f0abcc6c7dc49e39ac793853265c52fbcc00e35a5eead463ae2ff550502d0a6be364a10d64c1bf1baa472f0efb4b46710e4f71d04b6a6797826f85fa588abd612"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r6, 0x0, 0x0, 0x1001f0) r7 = accept(r5, 0x0, 0x0) r8 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f0000000340)={0x1, 0x102, 0x0, {0x8, 0x800, 0x7, 0x212}}) sendmmsg$alg(r7, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000780)="aa612d", 0x3}, {&(0x7f00000007c0)}, {&(0x7f0000000100)="76cc04c60bd2dc9aa0b1e1", 0xb}], 0x4, &(0x7f00000008c0)=[@assoc={0x18, 0x117, 0x4, 0xf9d3}], 0x18, 0x404c050}, {0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000940)}, {&(0x7f0000000a40)="8fdb", 0x2}, {&(0x7f0000000a80)}, {&(0x7f0000000740)}], 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="c8000000000000001701000002000000b2000000adbffde32c9b0cce62ddb09306c4d607545820303bf119e2db84405742dbd29fdca52fc75f8d6102ce516c7167c159fbf1f4e15fa685af17e2a24e9387af7c09a2c9740e45918d44d3212e49434dcb0f0da128213507f88698"], 0xe0, 0x24000000}], 0x2, 0x0) recvmsg(r7, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 1.851778554s ago: executing program 2 (id=3130): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x12000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@ignoreqv}, {@cache_none}, {@cache_mmap}, {@msize={'msize', 0x3d, 0xbb}}, {@msize={'msize', 0x3d, 0x4}}, {@aname={'aname', 0x3d, '!}'}}, {@cachetag={'cachetag', 0x3d, '/dev/ttynull\x00'}}], [{@flag='silent'}, {@fowner_gt={'fowner>', r3}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/ttynull\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/ttynull\x00'}}, {@measure}, {@smackfsdef={'smackfsdef', 0x3d, '%+:\\\''}}]}}) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x44081, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f00000002c0)={{0x1f, 0x9}, {0x5, 0x6}, 0x2, 0x2, 0x7}) ftruncate(r4, 0x100000000) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r7 = geteuid() getresgid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r6, {r7, r8}}, './file1\x00'}) ioctl$DRM_IOCTL_AGP_ENABLE(r9, 0x40086432, &(0x7f00000004c0)=0x1) read$FUSE(r4, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r9, &(0x7f0000002540)={0x20, 0xffffffffffffffda, r10, {0xfffffff1, 0x4, 0x3, 0x2}}, 0x20) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000002580)={0x0, 0x1, 0x1, 0x0, 0xea}) sched_setaffinity(r11, 0x8, &(0x7f00000025c0)=0x5) ioctl$EXT4_IOC_MIGRATE(r9, 0x6609) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000002740)={&(0x7f0000002600), 0xc, &(0x7f0000002700)={&(0x7f0000002640)={0xb8, 0x15, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_USERDATA={0x59, 0x8, "f05e46a90980bb7e8741f250b78e4e0cc794edc67795ea0965787bed0c22ba739efce2012ad454d80a61444da2d5bae2becbbde1ad8f8416ad302c9e4d4bae237458b562e554cd109b0db0eb43c98352575393113b"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20004044}, 0x80) setxattr$trusted_overlay_origin(&(0x7f0000002780)='./file0\x00', &(0x7f00000027c0), &(0x7f0000002800), 0x2, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000002840)={0x0, @in6={{0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x26}}, [0x7, 0xd3a, 0x0, 0xfffffffffffffff9, 0xffff, 0x8, 0x5a55, 0x7, 0x0, 0x7fff, 0x3, 0x2, 0xd, 0x4, 0x7]}, &(0x7f0000002940)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000002980)={r12, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x6, 0x8}, &(0x7f0000002a40)=0x90) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f0000002a80)={0x0, 0x9, 0x3}) r13 = dup(r2) ioctl$FS_IOC_SETVERSION(r13, 0x40087602, &(0x7f0000002ac0)=0x1) ioctl$UI_BEGIN_FF_UPLOAD(r13, 0xc06855c8, &(0x7f0000002b00)={0xd, 0xc, {0x51, 0x3, 0x6, {0x4, 0x7}, {0x200, 0xccb}, @rumble={0x8, 0x3}}, {0x53, 0x7, 0x4, {0x4, 0xe}, {0x40, 0x3}, @cond=[{0xd, 0x3, 0x8, 0x401, 0x5, 0x591}, {0x1, 0x0, 0x5, 0x3, 0x0, 0x7aac}]}}) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000002b80)='cubic', 0x5) fallocate(r1, 0x0, 0x26c9, 0x5ec8) 1.56813095s ago: executing program 9 (id=3131): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) landlock_restrict_self(r2, 0x0) recvmmsg$unix(r1, &(0x7f00000051c0)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f00000001c0)=""/116, 0x74}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000300)=""/231, 0xe7}, {&(0x7f0000002500)=""/190, 0xbe}, {&(0x7f0000000240)=""/80, 0x50}, {&(0x7f0000000400)=""/127, 0x7f}, {&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f00000025c0)=""/24, 0x18}, {&(0x7f0000002600)=""/207, 0xcf}], 0xa, &(0x7f00000027c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}, {{&(0x7f0000002940)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f00000029c0)=""/124, 0x7c}], 0x1}}, {{&(0x7f0000002a80)=@abs, 0x6e, &(0x7f0000004cc0)=[{&(0x7f0000002b00)=""/4, 0x4}, {&(0x7f0000002b40)=""/80, 0x50}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/176, 0xb0}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/56, 0x38}], 0x6, &(0x7f0000004d40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000004d80), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000004e00)=""/93, 0x5d}, {&(0x7f0000004e80)=""/95, 0x5f}, {&(0x7f0000004f00)=""/133, 0x85}, {&(0x7f0000004fc0)=""/232, 0xe8}], 0x4, &(0x7f0000005100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}], 0x4, 0x20, &(0x7f00000052c0)={0x77359400}) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x2, 0x0}, @empty, 0x1}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) 313.31159ms ago: executing program 0 (id=3132): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2, 0x18, 0x0, 0x3, 0xc, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x40, 0x0, @in6={0xa, 0xff80, 0x0, @private0, 0x2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x60}, 0x1, 0x7}, 0x0) 191.234094ms ago: executing program 2 (id=3133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() clock_gettime(0x4, &(0x7f0000000980)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'vlan0\x00', {}, 0x101}) renameat2(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 0s ago: executing program 0 (id=3134): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x38}}}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="de11cdbbd2"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xdc}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5a}, @NL80211_ATTR_PMK={0x14, 0xfe, "b69708ede50c9fb8c0d3883681662610"}]}, 0x58}}, 0x20000058) r2 = syz_open_dev$hidraw(&(0x7f00000001c0), 0x6, 0x521802) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) recvmmsg(r3, &(0x7f0000003e80)=[{{&(0x7f0000000240)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/139, 0x8b}, {&(0x7f0000001380)=""/148, 0x94}, {&(0x7f0000001440)=""/123, 0x7b}, {&(0x7f00000014c0)=""/47, 0x2f}, {&(0x7f0000001500)=""/113, 0x71}, {&(0x7f0000001580)=""/19, 0x13}, {&(0x7f00000015c0)=""/84, 0x54}], 0x8, &(0x7f00000016c0)=""/67, 0x43}, 0x1}, {{&(0x7f0000001740)=@pppoe, 0x80, &(0x7f00000018c0)=[{&(0x7f00000017c0)=""/217, 0xd9}], 0x1, &(0x7f0000001900)=""/243, 0xf3}}, {{&(0x7f0000001a00)=@nl=@unspec, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001a80)=""/154, 0x9a}, {&(0x7f0000001b40)=""/157, 0x9d}, {&(0x7f0000001c00)=""/178, 0xb2}, {&(0x7f0000001cc0)=""/32, 0x20}, {&(0x7f0000001d00)=""/190, 0xbe}, {&(0x7f0000001dc0)=""/5, 0x5}, {&(0x7f0000001e00)=""/181, 0xb5}, {&(0x7f0000001ec0)=""/230, 0xe6}], 0x8, &(0x7f0000002040)=""/130, 0x82}, 0xb}, {{&(0x7f0000002100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002240)=[{&(0x7f0000002180)=""/190, 0xbe}], 0x1}, 0x8001}, {{&(0x7f0000002280)=@nl=@unspec, 0x80, &(0x7f0000002840)=[{&(0x7f0000002300)=""/217, 0xd9}, {&(0x7f0000002400)=""/142, 0x8e}, {&(0x7f00000024c0)=""/234, 0xea}, {&(0x7f00000025c0)=""/144, 0x90}, {&(0x7f0000002680)=""/255, 0xff}, {&(0x7f0000002780)=""/170, 0xaa}], 0x6}, 0x7f}, {{&(0x7f00000028c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000002940)=""/168, 0xa8}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/111, 0x6f}], 0x3, &(0x7f0000003ac0)=""/220, 0xdc}, 0x6}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000003bc0)=""/6, 0x6}, {&(0x7f0000003c00)=""/71, 0x47}, {&(0x7f0000003c80)=""/182, 0xb6}, {&(0x7f0000003d40)=""/218, 0xda}], 0x4}}], 0x7, 0x0, 0x0) (async) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000004440)={0x3, 0x0, 0x2, 0x1a, 0x18f, &(0x7f0000004040)}) (async) ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f0000004480)) (async) r5 = socket$inet_sctp(0x2, 0x0, 0x84) recvfrom$inet(r5, &(0x7f00000044c0)=""/204, 0xcc, 0x40000020, &(0x7f00000045c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000004600)=0x4, 0x4) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004680), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000046c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000004840)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004800)={&(0x7f0000004700)={0xdc, r6, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x95, 0xbe, "c2774a4f43258cabddd11b2bc497b662e280ae53272273c3f8bd9f105ee2b686335e3585b785032a68d5747ddb9296c300190070db400376609526e704a98fb818eccf170fd8662b99bc3b9e3af4d7b4a7e54d90f5e4b0843711ce47acda6bb538fe61f94f8f548a5971ab87203c08fb622ea6251200ed4b6c55796e0f55df73c5dec1245cfab7b55b7873d8629c606ffe"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x48}, {0x1d}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x4aa}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8800}, 0x1) (async) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000004880)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000048c0)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000004900)={0x2710, 0x7, 0xffffc000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000004940)={0x10201, 0x7, 0xeeee0000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000004980), 0x40, 0x0) (async) socket$alg(0x26, 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f00000049c0)={0x0, @reserved}) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000004a80)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0xc, 0x7, {"e4534a9cd94e49d427fecfeafb25504c"}, 0x100000000, 0x8e9b, 0x3000000000}}}, 0x90) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000004b80)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000004b40)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000004bc0)={0x7, 0x8, 0xfa00, {r8, 0x7}}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000004c00), 0x220000, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x8, &(0x7f0000004c40)=0x54f12aef, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004cc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000004d80)={&(0x7f0000004c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004d40)={&(0x7f0000004d00)={0x24, r10, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1a}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xe}]}, 0x24}}, 0x4040040) kernel console output (not intermixed with test programs): b 2-1: config 0 has no interface number 0 [ 1149.071576][ T5926] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1149.081418][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.090399][ T5926] usb 2-1: Product: syz [ 1149.095567][ T5926] usb 2-1: Manufacturer: syz [ 1149.100713][ T5926] usb 2-1: SerialNumber: syz [ 1149.145212][ T5926] usb 2-1: config 0 descriptor?? [ 1149.149080][ T5926] smsc95xx v2.0.0 [ 1149.159883][ T30] audit: type=1400 audit(2000000340.156:1434): avc: denied { setopt } for pid=17991 comm="syz.0.2821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1149.191697][ T30] audit: type=1400 audit(2000000340.176:1435): avc: denied { mount } for pid=17991 comm="syz.0.2821" name="/" dev="hugetlbfs" ino=64825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1149.215158][ T30] audit: type=1400 audit(2000000340.186:1436): avc: denied { execute } for pid=17991 comm="syz.0.2821" path="/bus" dev="hugetlbfs" ino=64827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1149.215585][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 1149.259003][ T5906] usb 3-1: config 0 has an invalid interface number: 203 but max is 0 [ 1149.259369][ T5906] usb 3-1: config 0 has no interface number 0 [ 1149.260161][ T5906] usb 3-1: config 0 interface 203 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1149.260476][ T5906] usb 3-1: New USB device found, idVendor=19d2, idProduct=1177, bcdDevice=32.af [ 1149.260603][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.292534][ T5906] usb 3-1: config 0 descriptor?? [ 1149.331930][ T5906] cdc_ether 3-1:0.203: skipping garbage [ 1149.331971][ T5906] usb 3-1: bad CDC descriptors [ 1149.604744][T17987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.615136][T17987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1149.632124][T17987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.641827][T17987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1149.658813][ T9] usb 3-1: USB disconnect, device number 124 [ 1150.198398][ T30] audit: type=1400 audit(2000000341.196:1437): avc: denied { watch_mount } for pid=17975 comm="syz.1.2817" path="/158" dev="tmpfs" ino=863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1150.401634][ T30] audit: type=1400 audit(2000000341.396:1438): avc: denied { getopt } for pid=18000 comm="syz.2.2823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1150.988623][ T30] audit: type=1400 audit(2000000341.986:1439): avc: denied { read } for pid=18007 comm="syz.2.2825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1151.326863][T18011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2825'. [ 1151.661755][ T5926] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 1151.730052][ T5926] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1152.498989][ T5926] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1152.527187][ T30] audit: type=1400 audit(2000000343.516:1440): avc: denied { ioctl } for pid=18016 comm="syz.3.2827" path="socket:[64151]" dev="sockfs" ino=64151 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1152.552678][ C1] vkms_vblank_simulate: vblank timer overrun [ 1152.559415][ T5926] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1152.572237][ T5926] usb 2-1: USB disconnect, device number 47 [ 1152.840123][ T30] audit: type=1400 audit(2000000343.796:1441): avc: denied { read } for pid=18016 comm="syz.3.2827" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1153.219333][T18033] mkiss: ax0: crc mode is auto. [ 1153.295087][ T30] audit: type=1400 audit(2000000344.296:1442): avc: denied { getattr } for pid=18038 comm="syz.1.2831" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1153.366749][T18040] vxcan1 speed is unknown, defaulting to 1000 [ 1154.325460][T18051] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 1156.901993][T18070] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 1157.547994][ T30] audit: type=1400 audit(2000000348.546:1443): avc: denied { write } for pid=18083 comm="syz.0.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1157.568567][T18084] ieee802154 phy0 wpan0: encryption failed: -22 [ 1157.579000][T18085] ieee802154 phy0 wpan0: encryption failed: -22 [ 1160.432523][ T9745] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1160.451404][T18112] hugetlbfs: syz.2.2845 (18112): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1160.599795][ T9745] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1160.610484][ T9745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.620644][ T9745] usb 4-1: Product: syz [ 1160.626915][ T9745] usb 4-1: Manufacturer: syz [ 1160.631633][ T9745] usb 4-1: SerialNumber: syz [ 1162.374977][ T9745] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1162.387074][ T9] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1162.413729][ T9745] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1162.493117][T11313] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1162.508484][T11313] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1162.519258][T11313] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1162.531883][T11313] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1162.541752][T11313] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1162.554287][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1162.582543][ T30] audit: type=1400 audit(2000000353.576:1444): avc: denied { mounton } for pid=18127 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1162.591684][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1162.644038][ T9] usb 3-1: config 0 has no interface number 0 [ 1162.655085][T18127] vxcan1 speed is unknown, defaulting to 1000 [ 1162.664359][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1162.673784][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.693061][ T9] usb 3-1: Product: syz [ 1162.702545][ T9] usb 3-1: Manufacturer: syz [ 1162.712772][ T9] usb 3-1: SerialNumber: syz [ 1162.755961][ T9] usb 3-1: config 0 descriptor?? [ 1162.776725][ T9] smsc95xx v2.0.0 [ 1163.268638][T18127] chnl_net:caif_netlink_parms(): no params data found [ 1163.500250][T18127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.724045][T18127] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.730419][ T9745] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1163.743420][T18127] bridge_slave_0: entered allmulticast mode [ 1163.744980][T18127] bridge_slave_0: entered promiscuous mode [ 1163.757816][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1163.757850][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1163.762792][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1163.763016][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1163.768822][T18127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.768963][T18127] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.769106][T18127] bridge_slave_1: entered allmulticast mode [ 1163.770639][T18127] bridge_slave_1: entered promiscuous mode [ 1164.232577][ T9745] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1164.381142][ T9] usb 3-1: USB disconnect, device number 125 [ 1164.384911][ T9745] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1164.447608][ T9745] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1164.490054][ T9745] usb 4-1: USB disconnect, device number 73 [ 1164.538135][T18127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.602085][T18127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.649054][T11313] Bluetooth: hci5: command tx timeout [ 1165.244033][ T9745] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1165.457001][T18127] team0: Port device team_slave_0 added [ 1165.466094][T18127] team0: Port device team_slave_1 added [ 1165.498995][ T9745] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1165.513165][ T30] audit: type=1400 audit(2000000356.516:1445): avc: denied { read } for pid=18160 comm="syz.2.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1165.540892][ T9745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.564600][T18127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.599743][ T9745] usb 1-1: config 0 descriptor?? [ 1165.605870][T18127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1165.645470][T18127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1165.664520][T18127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.695594][T18171] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2858'. [ 1165.706532][T18127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1165.737603][T18127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.817882][T18127] hsr_slave_0: entered promiscuous mode [ 1165.825254][T18127] hsr_slave_1: entered promiscuous mode [ 1165.831569][T18127] debugfs: 'hsr0' already exists in 'hsr' [ 1165.838501][T18127] Cannot create hsr debugfs directory [ 1165.849922][ T9745] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0e [ 1165.865142][ T9745] hackrf 1-1:0.0: Could not detect board [ 1165.879696][ T9745] hackrf 1-1:0.0: probe with driver hackrf failed with error -71 [ 1165.907366][ T9745] usb 1-1: USB disconnect, device number 90 [ 1166.608624][T18127] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1166.627201][T18127] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1166.661200][T18127] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1166.796218][T11313] Bluetooth: hci5: command tx timeout [ 1166.806509][T18127] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1168.604596][T18193] syz_tun: entered allmulticast mode [ 1168.873904][T11313] Bluetooth: hci5: command tx timeout [ 1168.926523][T18127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1169.278712][T18127] 8021q: adding VLAN 0 to HW filter on device team0 [ 1169.335159][T15403] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.342323][T15403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1169.391847][T15403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.399007][T15403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.451575][ T30] audit: type=1400 audit(2000000360.446:1446): avc: denied { write } for pid=18202 comm="syz.3.2865" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1169.454623][T18127] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1169.475143][ C1] vkms_vblank_simulate: vblank timer overrun [ 1169.729925][T18127] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1170.107273][T16680] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1170.231108][T16680] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1170.240240][T16680] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1170.271482][T16680] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1170.279598][T16680] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1170.577368][T18216] binder: 18213:18216 ioctl c0306201 200000000040 returned -22 [ 1170.752163][T18210] vxcan1 speed is unknown, defaulting to 1000 [ 1170.847185][T18127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1170.975848][T11313] Bluetooth: hci5: command tx timeout [ 1171.116301][T18221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2868'. [ 1171.149795][ T30] audit: type=1400 audit(2000000362.146:1447): avc: denied { connect } for pid=18222 comm="syz.2.2869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1171.160762][T18223] netlink: 'syz.2.2869': attribute type 3 has an invalid length. [ 1171.178133][T18223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2869'. [ 1171.248388][ T30] audit: type=1400 audit(2000000362.186:1448): avc: denied { ioctl } for pid=18222 comm="syz.2.2869" path="socket:[65904]" dev="sockfs" ino=65904 ioctlcmd=0x9419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1171.273186][ C1] vkms_vblank_simulate: vblank timer overrun [ 1171.312669][ T30] audit: type=1400 audit(2000000362.186:1449): avc: denied { getopt } for pid=18222 comm="syz.2.2869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1171.390199][ T30] audit: type=1400 audit(2000000362.186:1450): avc: denied { write } for pid=18222 comm="syz.2.2869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1171.801405][T18234] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 1171.808522][T18234] PKCS7: Only support pkcs7_signedData type [ 1172.313049][T18240] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2871'. [ 1172.461332][T11313] Bluetooth: hci6: command tx timeout [ 1172.585016][ T30] audit: type=1400 audit(2000000363.226:1451): avc: denied { prog_load } for pid=18235 comm="syz.0.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1172.604429][T18127] veth0_vlan: entered promiscuous mode [ 1172.609905][T18127] veth1_vlan: entered promiscuous mode [ 1172.617228][ T30] audit: type=1400 audit(2000000363.226:1452): avc: denied { bpf } for pid=18235 comm="syz.0.2871" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1172.639212][ T30] audit: type=1400 audit(2000000363.226:1453): avc: denied { perfmon } for pid=18235 comm="syz.0.2871" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1172.771360][T18210] chnl_net:caif_netlink_parms(): no params data found [ 1172.817677][T18244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2872'. [ 1172.832924][ T30] audit: type=1400 audit(2000000363.236:1454): avc: denied { prog_run } for pid=18235 comm="syz.0.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1172.931398][ T30] audit: type=1400 audit(2000000363.286:1455): avc: denied { create } for pid=18235 comm="syz.0.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1172.935047][T18244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2872'. [ 1173.055305][T18248] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2872'. [ 1173.204396][T18250] hub 9-0:1.0: USB hub found [ 1173.210567][T18250] hub 9-0:1.0: 1 port detected [ 1173.329231][T18127] veth0_macvtap: entered promiscuous mode [ 1173.331363][T18127] veth1_macvtap: entered promiscuous mode [ 1173.341527][T18127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.512923][T18127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.577561][ T3545] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.577628][ T3545] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.663327][ T3545] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.664759][ T3545] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.881052][T18210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.881104][T18210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.881253][T18210] bridge_slave_0: entered allmulticast mode [ 1173.893871][T18210] bridge_slave_0: entered promiscuous mode [ 1173.898776][T18210] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.900168][T18210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.900280][T18210] bridge_slave_1: entered allmulticast mode [ 1173.901136][T18210] bridge_slave_1: entered promiscuous mode [ 1174.553139][T11313] Bluetooth: hci6: command tx timeout [ 1174.782235][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1174.782251][ T30] audit: type=1400 audit(2000000365.776:1473): avc: denied { read append } for pid=18260 comm="syz.3.2875" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1174.782553][ T30] audit: type=1400 audit(2000000365.776:1474): avc: denied { open } for pid=18260 comm="syz.3.2875" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1174.789293][ T30] audit: type=1400 audit(2000000365.786:1475): avc: denied { ioctl } for pid=18260 comm="syz.3.2875" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1174.791277][ T30] audit: type=1400 audit(2000000365.786:1476): avc: denied { read write } for pid=18260 comm="syz.3.2875" name="udmabuf" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1175.204065][T18210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1175.244279][T18264] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 1175.244382][ T30] audit: type=1400 audit(2000000365.936:1477): avc: denied { open } for pid=18260 comm="syz.3.2875" path="/dev/udmabuf" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1175.336340][T18264] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 1175.396179][T18210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1175.550780][ T30] audit: type=1400 audit(2000000365.946:1478): avc: denied { map } for pid=18246 comm="syz.0.2873" path="socket:[65534]" dev="sockfs" ino=65534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1175.573935][ C0] vkms_vblank_simulate: vblank timer overrun [ 1175.873258][T12909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.881176][T12909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.017543][T18272] comedi comedi0: Minor 3 specified more than once! [ 1176.218687][ T30] audit: type=1400 audit(2000000365.946:1479): avc: denied { read accept } for pid=18246 comm="syz.0.2873" path="socket:[65534]" dev="sockfs" ino=65534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1176.245195][ C0] vkms_vblank_simulate: vblank timer overrun [ 1176.267647][ T30] audit: type=1400 audit(2000000365.946:1480): avc: denied { create } for pid=18246 comm="syz.0.2873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1176.502559][ T30] audit: type=1400 audit(2000000365.966:1481): avc: denied { read write } for pid=18262 comm="syz.2.2876" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1176.578872][ T30] audit: type=1400 audit(2000000365.966:1482): avc: denied { open } for pid=18262 comm="syz.2.2876" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1176.610537][T18210] team0: Port device team_slave_0 added [ 1176.636361][T11313] Bluetooth: hci6: command tx timeout [ 1176.678157][T18210] team0: Port device team_slave_1 added [ 1176.948477][T18210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1176.972593][T15359] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1176.983477][T18210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1177.009381][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.118605][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.125534][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.128819][T15359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1177.133770][ T1299] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1177.162937][T18210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1177.181253][T18210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1177.189075][T18210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1177.214959][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.231649][T15359] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1177.244332][T15359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.254781][T15359] usb 3-1: Product: syz [ 1177.259128][T15359] usb 3-1: Manufacturer: syz [ 1177.265840][T15359] usb 3-1: SerialNumber: syz [ 1177.277426][T15359] usb 3-1: config 0 descriptor?? [ 1177.282472][T18210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1177.296319][T15403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1177.307234][T15403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.531795][T18210] hsr_slave_0: entered promiscuous mode [ 1177.548774][T18210] hsr_slave_1: entered promiscuous mode [ 1177.592765][T18210] debugfs: 'hsr0' already exists in 'hsr' [ 1177.621649][T18210] Cannot create hsr debugfs directory [ 1178.001225][T18289] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2880'. [ 1178.048341][T18288] ubi: mtd0 is already attached to ubi31 [ 1178.817976][T11313] Bluetooth: hci6: command tx timeout [ 1179.732965][T18303] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2883'. [ 1180.601722][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1180.601738][ T30] audit: type=1400 audit(2000000371.596:1541): avc: denied { create } for pid=18305 comm="syz.5.2884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1180.692069][T18210] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1180.701040][T13402] usb 3-1: USB disconnect, device number 126 [ 1180.740499][T18210] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1180.761531][ T30] audit: type=1400 audit(2000000371.666:1542): avc: denied { ioctl } for pid=18305 comm="syz.5.2884" path="pid:[4026532912]" dev="nsfs" ino=4026532912 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1180.909948][T18210] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1181.460966][T18210] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1181.472775][ T30] audit: type=1400 audit(2000000372.036:1543): avc: denied { execute } for pid=18308 comm="syz.3.2885" name="file0" dev="tmpfs" ino=3207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1181.524444][ T30] audit: type=1400 audit(2000000372.036:1544): avc: denied { execute_no_trans } for pid=18308 comm="syz.3.2885" path="/596/file0" dev="tmpfs" ino=3207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1181.619923][T18321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2886'. [ 1181.698783][ T30] audit: type=1400 audit(2000000372.556:1545): avc: denied { read } for pid=18305 comm="syz.5.2884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1181.734105][T18210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.741882][ T30] audit: type=1400 audit(2000000372.666:1546): avc: denied { write } for pid=18305 comm="syz.5.2884" name="kcm" dev="proc" ino=4026534207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1181.905736][T18210] 8021q: adding VLAN 0 to HW filter on device team0 [ 1181.922004][T18321] vlan2: entered allmulticast mode [ 1181.929751][T18321] bridge0: entered allmulticast mode [ 1181.941062][T18321] bridge0: port 1(vlan2) entered blocking state [ 1181.949687][T18321] bridge0: port 1(vlan2) entered disabled state [ 1182.064640][T18329] comedi comedi0: Minor 3 specified more than once! [ 1182.449058][ T8692] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.456182][ T8692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.506579][ T8692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.513911][ T8692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1182.616220][ T30] audit: type=1400 audit(2000000373.616:1547): avc: denied { create } for pid=18333 comm="syz.0.2889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1183.116531][T18210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1183.386133][ T30] audit: type=1400 audit(2000000374.366:1548): avc: denied { unlink } for pid=18356 comm="syz.3.2893" name="#40" dev="tmpfs" ino=3231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1183.408593][ C0] vkms_vblank_simulate: vblank timer overrun [ 1183.538010][T18364] vxcan1 speed is unknown, defaulting to 1000 [ 1183.995233][ T30] audit: type=1400 audit(2000000374.366:1549): avc: denied { mount } for pid=18356 comm="syz.3.2893" name="/" dev="overlay" ino=3226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1184.026262][ T30] audit: type=1400 audit(2000000374.566:1550): avc: denied { ioctl } for pid=18358 comm="syz.2.2894" path="socket:[67805]" dev="sockfs" ino=67805 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1186.072632][ T30] audit: type=1400 audit(2000000376.746:1551): avc: denied { mounton } for pid=18382 comm="syz.2.2897" path="/562/file0" dev="tmpfs" ino=3000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1186.110007][T18391] netlink: 'syz.2.2897': attribute type 14 has an invalid length. [ 1186.189190][T18210] veth0_vlan: entered promiscuous mode [ 1186.284410][ T30] audit: type=1400 audit(2000000377.286:1552): avc: denied { unmount } for pid=5853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1186.297961][T18210] veth1_vlan: entered promiscuous mode [ 1186.429647][ T30] audit: type=1400 audit(2000000377.426:1553): avc: denied { name_bind } for pid=18395 comm="syz.2.2900" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1186.471853][T18210] veth0_macvtap: entered promiscuous mode [ 1186.606076][T18210] veth1_macvtap: entered promiscuous mode [ 1186.620070][ T30] audit: type=1400 audit(2000000377.426:1554): avc: denied { node_bind } for pid=18395 comm="syz.2.2900" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1187.104671][ T30] audit: type=1400 audit(2000000377.456:1555): avc: denied { create } for pid=18395 comm="syz.2.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1187.128261][T18210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1187.154758][ T30] audit: type=1400 audit(2000000378.106:1556): avc: denied { setopt } for pid=18395 comm="syz.2.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1187.187630][T18210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1187.208402][T15410] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.283442][T15410] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.293334][T15410] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.421239][T18404] ubi: mtd0 is already attached to ubi31 [ 1187.821699][T15410] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.951726][ T30] audit: type=1400 audit(2000000378.946:1557): avc: denied { create } for pid=18411 comm="syz.2.2903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1188.414435][ T30] audit: type=1400 audit(2000000379.346:1558): avc: denied { create } for pid=18411 comm="syz.2.2903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1188.457806][ T30] audit: type=1400 audit(2000000379.356:1559): avc: denied { write } for pid=18406 comm="syz.3.2901" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1188.471620][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.528193][ T30] audit: type=1400 audit(2000000379.396:1560): avc: denied { create } for pid=18411 comm="syz.2.2903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1188.533630][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.616851][T18413] netlink: 'syz.2.2903': attribute type 10 has an invalid length. [ 1188.695472][T18416] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 1188.704644][T15405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.724140][T15405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.268768][T18430] tipc: Started in network mode [ 1189.296451][T18430] tipc: Node identity 52e885414c23, cluster identity 4711 [ 1189.395635][T18430] tipc: Enabled bearer , priority 0 [ 1189.556647][T18436] IPVS: set_ctl: invalid protocol: 448 0.32.0.0:59392 [ 1190.245400][T18438] syzkaller0: entered promiscuous mode [ 1190.251220][T18438] syzkaller0: entered allmulticast mode [ 1190.456601][T15359] tipc: Node number set to 516654401 [ 1191.180949][T18419] tipc: Resetting bearer [ 1192.024833][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1192.024859][ T30] audit: type=1400 audit(2000000382.966:1573): avc: denied { read write } for pid=18459 comm="syz.0.2914" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1192.238447][ T30] audit: type=1400 audit(2000000382.966:1574): avc: denied { open } for pid=18459 comm="syz.0.2914" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1192.328469][T18419] tipc: Disabling bearer [ 1192.668606][T16680] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1192.679444][T16680] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1192.689817][T16680] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1192.697709][T16680] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1192.706858][T16680] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1192.790569][T18472] netlink: 'syz.2.2917': attribute type 21 has an invalid length. [ 1192.798958][T18472] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2917'. [ 1192.808567][T18472] netlink: 'syz.2.2917': attribute type 6 has an invalid length. [ 1192.816593][T18472] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2917'. [ 1193.853376][ T30] audit: type=1400 audit(2000000383.656:1575): avc: denied { create } for pid=18470 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1193.875441][ T30] audit: type=1400 audit(2000000384.856:1576): avc: denied { ioctl } for pid=18470 comm="syz-executor" path="socket:[68256]" dev="sockfs" ino=68256 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1194.032978][ T30] audit: type=1400 audit(2000000385.026:1577): avc: denied { mounton } for pid=18470 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1194.151509][T18470] vxcan1 speed is unknown, defaulting to 1000 [ 1195.590879][T18488] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun! [ 1196.080180][T16680] Bluetooth: hci1: command tx timeout [ 1197.332765][ T30] audit: type=1400 audit(2000000388.326:1578): avc: denied { getopt } for pid=18506 comm="syz.6.2924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1197.440030][T18507] vxcan1 speed is unknown, defaulting to 1000 [ 1197.713008][ T30] audit: type=1400 audit(2000000388.676:1579): avc: denied { accept } for pid=18514 comm="syz.0.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1197.733102][ C1] vkms_vblank_simulate: vblank timer overrun [ 1197.942697][ T5913] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 1198.061131][ T30] audit: type=1400 audit(2000000388.686:1580): avc: denied { create } for pid=18514 comm="syz.0.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1198.152501][T16680] Bluetooth: hci1: command tx timeout [ 1198.172014][ T30] audit: type=1400 audit(2000000388.686:1581): avc: denied { connect } for pid=18514 comm="syz.0.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1198.224324][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1198.248211][ T30] audit: type=1400 audit(2000000389.246:1582): avc: denied { create } for pid=18528 comm="syz.5.2929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1198.274132][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1198.288337][ T30] audit: type=1400 audit(2000000389.276:1583): avc: denied { read } for pid=18528 comm="syz.5.2929" path="socket:[68490]" dev="sockfs" ino=68490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1198.322756][ T5913] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1198.362553][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.406568][T18532] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2929'. [ 1198.422490][T15359] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1198.430191][ T30] audit: type=1400 audit(2000000389.396:1584): avc: denied { read } for pid=18528 comm="syz.5.2929" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1198.465290][T18470] chnl_net:caif_netlink_parms(): no params data found [ 1198.489829][ T30] audit: type=1400 audit(2000000389.396:1585): avc: denied { open } for pid=18528 comm="syz.5.2929" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1198.523229][ T5913] usb 1-1: config 0 descriptor?? [ 1198.633250][T15359] usb 3-1: Using ep0 maxpacket: 8 [ 1198.754630][T15359] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1198.775506][T15359] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1198.775515][ T30] audit: type=1400 audit(2000000389.516:1586): avc: denied { bind } for pid=18528 comm="syz.5.2929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1198.800511][ T30] audit: type=1400 audit(2000000389.516:1587): avc: denied { write } for pid=18528 comm="syz.5.2929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1198.853196][T13402] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1198.952855][T15359] usb 3-1: Product: syz [ 1198.957434][T15359] usb 3-1: Manufacturer: syz [ 1198.962455][T15359] usb 3-1: SerialNumber: syz [ 1198.989366][T15359] usb 3-1: config 0 descriptor?? [ 1199.002307][T15359] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1199.050162][T13402] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1199.070941][T13402] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1199.118508][T13402] usb 6-1: config 1 has no interface number 0 [ 1199.128433][T13402] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1199.169070][T13402] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1199.203759][T13402] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 247, using maximum allowed: 30 [ 1199.334029][T13402] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 1199.359525][T13402] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1199.375792][T13402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.386799][T13402] usb 6-1: Product: syz [ 1199.391043][T13402] usb 6-1: Manufacturer: syz [ 1199.408882][T13402] usb 6-1: SerialNumber: syz [ 1199.491894][T18470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.500114][T18470] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.513237][T18470] bridge_slave_0: entered allmulticast mode [ 1199.527886][T18470] bridge_slave_0: entered promiscuous mode [ 1199.537450][T18470] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.548991][T18470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.557479][T18470] bridge_slave_1: entered allmulticast mode [ 1199.565940][T18470] bridge_slave_1: entered promiscuous mode [ 1199.605855][T15359] input: gspca_zc3xx as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29 [ 1199.639966][T18470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1199.745505][T18470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1199.895621][T18470] team0: Port device team_slave_0 added [ 1199.910908][T18470] team0: Port device team_slave_1 added [ 1200.010407][T18470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1200.032850][T18470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1200.060784][T18470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1200.075280][T18470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.083624][T18470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1200.115588][T18470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1200.187415][T18470] hsr_slave_0: entered promiscuous mode [ 1200.194242][T18470] hsr_slave_1: entered promiscuous mode [ 1200.200706][T18470] debugfs: 'hsr0' already exists in 'hsr' [ 1200.206960][T18470] Cannot create hsr debugfs directory [ 1200.232822][T16680] Bluetooth: hci1: command tx timeout [ 1200.472965][ T5913] usbhid 1-1:0.0: can't add hid device: -71 [ 1200.479817][ T5913] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1200.494977][ T5913] usb 1-1: USB disconnect, device number 91 [ 1200.541021][T18470] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.650703][T18470] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.717180][T18470] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.790494][T18470] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.952924][ T9] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 1200.975069][T18470] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1200.988385][T18470] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1201.016880][T18470] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1201.033485][ T5913] usb 3-1: USB disconnect, device number 127 [ 1201.049137][T18470] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1201.117705][ T9] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 1201.138681][ T9] usb 1-1: can't read configurations, error -22 [ 1201.912604][ T9] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 1201.927444][T13402] cdc_ncm 6-1:1.1: bind() failure [ 1201.954140][T13402] usb 6-1: USB disconnect, device number 2 [ 1201.964594][T18470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1202.046390][T18470] 8021q: adding VLAN 0 to HW filter on device team0 [ 1202.089436][ T9] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 1202.108018][T15408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.115162][T15408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1202.138055][ T9] usb 1-1: can't read configurations, error -22 [ 1202.148327][ T9] usb usb1-port1: attempt power cycle [ 1202.158854][T15408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.166009][T15408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1202.342658][T16680] Bluetooth: hci1: command tx timeout [ 1202.542793][T18565] comedi comedi0: Minor 3 specified more than once! [ 1203.352986][ T9] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 1203.377585][T18470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1203.771656][ T9] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 1203.805096][ T9] usb 1-1: can't read configurations, error -22 [ 1203.856877][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1203.856893][ T30] audit: type=1400 audit(2000000394.856:1594): avc: denied { read write } for pid=18578 comm="syz.2.2936" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1203.886284][ C1] vkms_vblank_simulate: vblank timer overrun [ 1203.986881][ T30] audit: type=1400 audit(2000000394.896:1595): avc: denied { open } for pid=18578 comm="syz.2.2936" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1204.097501][ T30] audit: type=1400 audit(2000000394.926:1596): avc: denied { ioctl } for pid=18578 comm="syz.2.2936" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1204.130422][ T30] audit: type=1400 audit(2000000394.926:1597): avc: denied { set_context_mgr } for pid=18578 comm="syz.2.2936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1204.164586][ T9] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 1204.272244][ T9] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 1204.675025][ T9] usb 1-1: can't read configurations, error -22 [ 1204.708482][ T9] usb usb1-port1: unable to enumerate USB device [ 1204.904569][T18593] siw: device registration error -23 [ 1204.910148][ T30] audit: type=1400 audit(2000000395.906:1598): avc: denied { create } for pid=18592 comm="syz.5.2937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1204.918846][T18470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1204.943065][ T30] audit: type=1400 audit(2000000395.906:1599): avc: denied { write } for pid=18592 comm="syz.5.2937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1205.170341][ T30] audit: type=1400 audit(2000000396.006:1600): avc: denied { write } for pid=18595 comm="syz.0.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1205.216239][T18470] veth0_vlan: entered promiscuous mode [ 1205.228647][T18470] veth1_vlan: entered promiscuous mode [ 1205.542741][T18470] veth0_macvtap: entered promiscuous mode [ 1205.739099][T18470] veth1_macvtap: entered promiscuous mode [ 1205.781266][T18470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1205.799542][ T30] audit: type=1400 audit(2000000396.796:1601): avc: denied { create } for pid=18599 comm="syz.5.2939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1205.820327][ C1] vkms_vblank_simulate: vblank timer overrun [ 1205.868509][T18470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1206.027445][ T30] audit: type=1400 audit(2000000396.936:1602): avc: denied { create } for pid=18599 comm="syz.5.2939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1206.068622][T15405] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.141828][T15405] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.214983][T15405] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.233652][T15405] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.413264][ T30] audit: type=1400 audit(2000000397.306:1603): avc: denied { map } for pid=18578 comm="syz.2.2936" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1206.488153][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2941'. [ 1206.538103][T18607] netlink: 'syz.0.2941': attribute type 21 has an invalid length. [ 1206.564463][T13402] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1206.702528][T13402] usb 3-1: device descriptor read/64, error -71 [ 1206.787062][T12909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.870949][T12909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.953295][T13402] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1207.038367][ T5984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.097651][ T5984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.108256][T18613] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2942'. [ 1207.263511][T13402] usb 3-1: device descriptor read/64, error -71 [ 1207.802321][T13402] usb usb3-port1: attempt power cycle [ 1209.252813][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1209.252828][ T30] audit: type=1400 audit(2000000400.256:1607): avc: denied { write } for pid=18623 comm="syz.3.2944" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1209.304736][ T30] audit: type=1400 audit(2000000400.256:1608): avc: denied { open } for pid=18623 comm="syz.3.2944" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1209.395398][ T30] audit: type=1400 audit(2000000400.256:1609): avc: denied { ioctl } for pid=18623 comm="syz.3.2944" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1209.556567][ T30] audit: type=1400 audit(2000000400.286:1610): avc: denied { ioctl } for pid=18623 comm="syz.3.2944" path="/dev/video5" dev="devtmpfs" ino=939 ioctlcmd=0x5616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1209.583361][ T30] audit: type=1400 audit(2000000400.396:1611): avc: denied { write } for pid=18626 comm="syz.0.2946" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1209.627640][ T30] audit: type=1400 audit(2000000400.426:1612): avc: denied { ioctl } for pid=18626 comm="syz.0.2946" path="/dev/sg0" dev="devtmpfs" ino=761 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1210.093965][ T30] audit: type=1400 audit(2000000000.660:1613): avc: denied { create } for pid=18638 comm="syz.0.2947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1210.385879][ T30] audit: type=1400 audit(2000000000.840:1614): avc: denied { connect } for pid=18638 comm="syz.0.2947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1210.706673][ T30] audit: type=1400 audit(2000000001.220:1615): avc: denied { write } for pid=18638 comm="syz.0.2947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1210.972467][ T9745] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1211.143470][T15984] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1211.166579][ T9745] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1211.181933][ T9745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.195514][ T9745] usb 4-1: Product: syz [ 1211.199686][ T9745] usb 4-1: Manufacturer: syz [ 1211.205343][ T9745] usb 4-1: SerialNumber: syz [ 1211.213922][ T9745] usb 4-1: config 0 descriptor?? [ 1211.390606][ T9745] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1211.397277][T15984] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1211.405759][T15984] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.424104][T15984] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1211.441607][T15984] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1211.461539][T15984] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1211.491872][T15984] usb 3-1: Manufacturer: syz [ 1211.507681][T15984] usb 3-1: config 0 descriptor?? [ 1211.777927][ T30] audit: type=1400 audit(2000000002.300:1616): avc: denied { connect } for pid=18643 comm="syz.5.2948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1211.864292][T15984] igorplugusb 3-1:0.0: incorrect number of endpoints [ 1211.919782][T15984] usb 3-1: USB disconnect, device number 5 [ 1212.109904][T18646] tipc: Started in network mode [ 1212.126199][T18646] tipc: Node identity 527a14077cf3, cluster identity 4711 [ 1212.145885][T18646] tipc: Enabled bearer , priority 0 [ 1212.230643][T18646] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2949'. [ 1212.303783][ T9745] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1212.341630][ T9745] sq905c 4-1:0.0: probe with driver sq905c failed with error -110 [ 1212.362926][T18646] tipc: Resetting bearer [ 1212.393400][T18645] tipc: Disabling bearer [ 1212.632775][ T9745] usb 4-1: USB disconnect, device number 74 [ 1212.894529][T18664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2953'. [ 1212.903787][T18664] bridge_slave_1: left allmulticast mode [ 1212.909461][T18664] bridge_slave_1: left promiscuous mode [ 1212.915710][T18664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.762913][T18674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2954'. [ 1213.823384][T18664] : left allmulticast mode [ 1213.827893][T18664] : left promiscuous mode [ 1213.839191][T18664] bridge0: port 1() entered disabled state [ 1213.938205][T11313] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1213.949597][T11313] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1213.958988][T11313] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1213.968694][T11313] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1213.976442][T11313] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1214.164915][T18678] vxcan1 speed is unknown, defaulting to 1000 [ 1214.312703][ T5926] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1214.392669][ T5913] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 1214.489556][ T5926] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1214.502726][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1214.518429][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1214.541122][ T5926] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1214.552674][ T9745] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1214.561469][ T5913] usb 1-1: config 130 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.642718][ T5913] usb 1-1: config 130 has 0 interfaces, different from the descriptor's value: 1 [ 1214.752616][ T9745] usb 3-1: Using ep0 maxpacket: 8 [ 1214.768582][ T9745] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 1214.778549][ T9745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.786596][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.803180][ T5913] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 1214.812225][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.830951][ T5926] usb 4-1: config 0 descriptor?? [ 1214.836095][ T5913] usb 1-1: Product: syz [ 1214.836474][ T9745] usb 3-1: Product: syz [ 1214.836494][ T9745] usb 3-1: Manufacturer: syz [ 1214.840632][ T5913] usb 1-1: Manufacturer: syz [ 1214.840657][ T5913] usb 1-1: SerialNumber: syz [ 1214.991371][ T9745] usb 3-1: SerialNumber: syz [ 1215.017583][ T9745] usb 3-1: config 0 descriptor?? [ 1215.105078][T18678] chnl_net:caif_netlink_parms(): no params data found [ 1215.155646][ T5913] usb 1-1: USB disconnect, device number 96 [ 1215.276360][ T9745] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1215.359587][ T5926] usbhid 4-1:0.0: can't add hid device: -71 [ 1215.365957][ T5926] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1215.411938][ T5926] usb 4-1: USB disconnect, device number 75 [ 1215.432707][T18678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.513704][T18678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.817091][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1215.817148][ T30] audit: type=1400 audit(2000000006.380:1621): avc: denied { watch } for pid=18692 comm="syz.2.2959" path="/580" dev="tmpfs" ino=3091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1215.853491][ T9745] gspca_sunplus: reg_w_riv err -110 [ 1215.948272][T18715] overlay: ./bus is not a directory [ 1216.072546][T16680] Bluetooth: hci7: command tx timeout [ 1216.081232][ T9745] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 1216.103597][T18678] bridge_slave_0: entered allmulticast mode [ 1216.136535][T18678] bridge_slave_0: entered promiscuous mode [ 1216.139095][ T5913] usb 3-1: USB disconnect, device number 6 [ 1216.146279][T18678] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.167101][T18678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.177391][T18678] bridge_slave_1: entered allmulticast mode [ 1216.201358][T18678] bridge_slave_1: entered promiscuous mode [ 1216.276626][T18678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1216.286036][ T30] audit: type=1400 audit(2000000006.850:1622): avc: denied { block_suspend } for pid=18718 comm="syz.5.2962" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1216.300759][T18678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1216.321521][T18719] netlink: 'syz.5.2962': attribute type 10 has an invalid length. [ 1216.379739][T18678] team0: Port device team_slave_0 added [ 1216.395465][T18678] team0: Port device team_slave_1 added [ 1216.438855][ T30] audit: type=1400 audit(2000000006.880:1623): avc: denied { ioctl } for pid=18718 comm="syz.5.2962" path="socket:[70250]" dev="sockfs" ino=70250 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1216.470785][T18719] team0: Device hsr_slave_0 failed to register rx_handler [ 1216.704397][T18678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1216.718465][T18678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1217.233211][ T30] audit: type=1400 audit(2000000007.380:1624): avc: denied { bind } for pid=18721 comm="syz.0.2963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1217.262879][T18678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1217.275865][T18678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1217.283160][T18678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1217.338874][T18678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1217.755809][T18732] ubi: mtd0 is already attached to ubi31 [ 1217.986405][T18739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2966'. [ 1218.231805][T16680] Bluetooth: hci7: command tx timeout [ 1218.368161][ T30] audit: type=1400 audit(2000000008.930:1625): avc: denied { unmount } for pid=5853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1218.502585][ T30] audit: type=1400 audit(2000000009.010:1626): avc: denied { getopt } for pid=18723 comm="syz.3.2964" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1218.553212][T18678] hsr_slave_0: entered promiscuous mode [ 1218.608083][T18678] hsr_slave_1: entered promiscuous mode [ 1218.636161][T18678] debugfs: 'hsr0' already exists in 'hsr' [ 1218.641924][T18678] Cannot create hsr debugfs directory [ 1218.677476][T18728] vxcan1 speed is unknown, defaulting to 1000 [ 1218.809541][ T30] audit: type=1400 audit(2000000009.370:1627): avc: denied { ioctl } for pid=18752 comm="syz.2.2970" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=69474 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1218.924949][ T30] audit: type=1400 audit(2000000009.490:1628): avc: denied { ioctl } for pid=18754 comm="syz.0.2971" path="socket:[70314]" dev="sockfs" ino=70314 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1219.131805][T18753] netlink: 'syz.2.2970': attribute type 12 has an invalid length. [ 1219.332707][ T5913] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1219.494747][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.525851][ T5913] usb 3-1: config 0 has no interfaces? [ 1219.531482][ T5913] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1219.557420][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.586400][ T5913] usb 3-1: config 0 descriptor?? [ 1219.829290][T18678] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1220.224568][T18678] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1220.284177][T18678] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1220.303547][T18678] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1220.312837][T16680] Bluetooth: hci7: command tx timeout [ 1220.343184][ T5913] usb 3-1: string descriptor 0 read error: -71 [ 1220.376521][ T5913] usb 3-1: USB disconnect, device number 7 [ 1220.588488][T18678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.639407][T18678] 8021q: adding VLAN 0 to HW filter on device team0 [ 1220.666341][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.673516][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1220.688769][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.696004][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1221.034307][T18784] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2975'. [ 1221.749015][T18678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1221.802686][T15359] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1221.948581][T15359] usb 3-1: device descriptor read/64, error -71 [ 1222.030729][T18806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2978'. [ 1222.407100][T16680] Bluetooth: hci7: command tx timeout [ 1222.540181][T18678] veth0_vlan: entered promiscuous mode [ 1222.548632][T15359] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1222.590648][T18678] veth1_vlan: entered promiscuous mode [ 1222.654488][T18678] veth0_macvtap: entered promiscuous mode [ 1222.675255][T18678] veth1_macvtap: entered promiscuous mode [ 1222.809147][T15359] usb 3-1: device descriptor read/64, error -71 [ 1222.811219][ T30] audit: type=1400 audit(2000000013.340:1629): avc: denied { create } for pid=18810 comm="syz.5.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1222.858082][T18678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1222.914639][T18678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1222.942923][T15359] usb usb3-port1: attempt power cycle [ 1222.966490][T15410] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.977325][T15410] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.987666][T15410] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.005225][T15410] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.125140][ T5984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.133566][ T5984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.184769][T15410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.196660][T15410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.268338][ T30] audit: type=1400 audit(2000000013.830:1630): avc: denied { bind } for pid=18818 comm="syz.5.2981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1223.272614][T18819] sctp: [Deprecated]: syz.5.2981 (pid 18819) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1223.272614][T18819] Use struct sctp_sack_info instead [ 1223.306450][T15359] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 1223.332602][ T30] audit: type=1400 audit(2000000013.830:1631): avc: denied { accept } for pid=18818 comm="syz.5.2981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1223.334896][T15359] usb 3-1: device descriptor read/8, error -71 [ 1223.386979][ T30] audit: type=1400 audit(2000000013.830:1632): avc: denied { ioctl } for pid=18818 comm="syz.5.2981" path="socket:[71768]" dev="sockfs" ino=71768 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1223.427219][ T30] audit: type=1400 audit(2000000013.830:1633): avc: denied { getopt } for pid=18818 comm="syz.5.2981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1223.457725][ T30] audit: type=1400 audit(2000000013.990:1634): avc: denied { setopt } for pid=18818 comm="syz.5.2981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1223.684295][T15359] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1223.781043][T15359] usb 3-1: device descriptor read/8, error -71 [ 1223.941647][T15359] usb usb3-port1: unable to enumerate USB device [ 1224.281828][T18830] macvtap1: entered promiscuous mode [ 1224.288219][T18830] vlan1: entered promiscuous mode [ 1224.470098][T18830] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2983'. [ 1225.030305][T18832] netlink: 'syz.2.2985': attribute type 1 has an invalid length. [ 1225.229803][T18832] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1225.747604][T11313] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1225.768217][ T50] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1225.776448][ T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1225.785260][ T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1225.792791][ T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1225.989452][T13011] syz_tun (unregistering): left allmulticast mode [ 1226.037924][T18841] vxcan1 speed is unknown, defaulting to 1000 [ 1226.509801][T18841] chnl_net:caif_netlink_parms(): no params data found [ 1226.645970][T18841] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.655202][T18841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.662979][T18841] bridge_slave_0: entered allmulticast mode [ 1226.695733][T18841] bridge_slave_0: entered promiscuous mode [ 1226.727007][T18841] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.736655][T18841] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.748100][T18841] bridge_slave_1: entered allmulticast mode [ 1226.755417][T18841] bridge_slave_1: entered promiscuous mode [ 1226.820752][T18841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1226.842064][T18841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1226.920358][T18841] team0: Port device team_slave_0 added [ 1226.939800][T18841] team0: Port device team_slave_1 added [ 1227.044308][T18841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1227.060065][T18841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.087136][T18841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1227.120584][T18841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1227.128027][T18841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.156489][T18841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1227.744198][T18841] hsr_slave_0: entered promiscuous mode [ 1227.759019][T18841] hsr_slave_1: entered promiscuous mode [ 1227.776080][T18841] debugfs: 'hsr0' already exists in 'hsr' [ 1227.786552][T18841] Cannot create hsr debugfs directory [ 1227.843606][T16680] Bluetooth: hci8: command tx timeout [ 1228.165046][T18863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18863 comm=syz.2.2989 [ 1228.183779][T18863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2989'. [ 1228.310868][ T30] audit: type=1400 audit(2000000018.870:1635): avc: denied { write } for pid=18871 comm="syz.5.2991" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1228.378047][ T30] audit: type=1400 audit(2000000018.870:1636): avc: denied { open } for pid=18871 comm="syz.5.2991" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1228.560647][T18876] siw: device registration error -23 [ 1228.806157][ T30] audit: type=1400 audit(2000000019.370:1637): avc: denied { create } for pid=18871 comm="syz.5.2991" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1228.855014][T18877] : Can't lookup blockdev [ 1228.881804][T18841] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.930861][T18875] tc_dump_action: action bad kind [ 1229.074005][T18841] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.097466][ T30] audit: type=1400 audit(2000000019.660:1638): avc: denied { ioctl } for pid=18878 comm="syz.7.2993" path="socket:[71215]" dev="sockfs" ino=71215 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1229.375516][ T30] audit: type=1400 audit(2000000019.780:1639): avc: denied { watch_mount watch_reads } for pid=18879 comm="syz.2.2994" path="/587" dev="tmpfs" ino=3130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1229.418574][T18841] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.639918][T18841] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.856409][T18890] netlink: 'syz.7.2995': attribute type 21 has an invalid length. [ 1229.864366][T18890] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2995'. [ 1229.873782][T18890] netlink: 'syz.7.2995': attribute type 6 has an invalid length. [ 1229.881763][T18890] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2995'. [ 1229.937444][T16680] Bluetooth: hci8: command tx timeout [ 1231.180452][T18841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1231.273834][T18841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1231.362686][T18841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1231.461148][T18894] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1231.642673][T18841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1231.992793][T16680] Bluetooth: hci8: command tx timeout [ 1232.378832][T18841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1232.552866][T18841] 8021q: adding VLAN 0 to HW filter on device team0 [ 1233.272893][T15405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.280031][T15405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.454415][T15405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.461564][T15405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.550974][ T30] audit: type=1400 audit(2000000024.100:1640): avc: denied { unlink } for pid=18127 comm="syz-executor" name="file0" dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1233.825730][T18913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3000'. [ 1234.080261][T16680] Bluetooth: hci8: command tx timeout [ 1234.504599][T18841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1234.524758][T18841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1234.630286][T18913] bridge_slave_1: left allmulticast mode [ 1234.647111][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1234.653529][T18913] bridge_slave_1: left promiscuous mode [ 1234.664140][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1234.673706][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1234.684628][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1234.692302][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1234.700756][T18913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.745209][T18913] bridge_slave_0: left allmulticast mode [ 1234.775728][T18913] bridge_slave_0: left promiscuous mode [ 1234.791570][T18913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.992774][T18916] vxcan1 speed is unknown, defaulting to 1000 [ 1235.105102][ T30] audit: type=1400 audit(2000000025.670:1641): avc: denied { setopt } for pid=18924 comm="syz.5.3002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1235.112199][T18841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1235.152494][ T30] audit: type=1400 audit(2000000025.700:1642): avc: denied { bind } for pid=18924 comm="syz.5.3002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1235.238432][ T30] audit: type=1400 audit(2000000025.720:1643): avc: denied { map } for pid=18924 comm="syz.5.3002" path="socket:[72255]" dev="sockfs" ino=72255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1235.281946][T18841] veth0_vlan: entered promiscuous mode [ 1235.304230][T18926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18926 comm=syz.5.3002 [ 1235.330875][ T30] audit: type=1400 audit(2000000025.720:1644): avc: denied { read accept } for pid=18924 comm="syz.5.3002" path="socket:[72255]" dev="sockfs" ino=72255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1235.331149][T18841] veth1_vlan: entered promiscuous mode [ 1235.463442][T18841] veth0_macvtap: entered promiscuous mode [ 1235.485184][T18841] veth1_macvtap: entered promiscuous mode [ 1235.570051][T18841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1235.675681][T18841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1235.731806][T12909] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.757037][ T30] audit: type=1400 audit(2000000026.320:1645): avc: denied { bind } for pid=18928 comm="syz.7.3003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1235.784361][T12909] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.788384][ T30] audit: type=1400 audit(2000000026.320:1646): avc: denied { node_bind } for pid=18928 comm="syz.7.3003" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1235.825913][ T30] audit: type=1400 audit(2000000026.320:1647): avc: denied { connect } for pid=18928 comm="syz.7.3003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1235.851914][ T30] audit: type=1400 audit(2000000026.320:1648): avc: denied { create } for pid=18928 comm="syz.7.3003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1235.857334][T12909] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.981751][T12909] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.221176][T15403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.249573][T15403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.306646][T18916] chnl_net:caif_netlink_parms(): no params data found [ 1236.352510][ T5943] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1236.398144][T12909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.410148][T12909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.503570][ T5943] usb 6-1: Using ep0 maxpacket: 32 [ 1236.509994][T18916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.521647][T18916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.521772][ T5943] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1236.536868][T18916] bridge_slave_0: entered allmulticast mode [ 1236.545130][ T5943] usb 6-1: New USB device found, idVendor=16d0, idProduct=fe01, bcdDevice=de.8e [ 1236.555440][T18916] bridge_slave_0: entered promiscuous mode [ 1236.564551][T18916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.572519][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.580673][ T5943] usb 6-1: Product: syz [ 1236.585453][T18916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.592749][ T5943] usb 6-1: Manufacturer: syz [ 1236.597830][ T5943] usb 6-1: SerialNumber: syz [ 1236.606403][T18916] bridge_slave_1: entered allmulticast mode [ 1236.619423][ T5943] usb 6-1: config 0 descriptor?? [ 1236.637415][T18916] bridge_slave_1: entered promiscuous mode [ 1236.692460][ T30] audit: type=1400 audit(2000000027.230:1649): avc: denied { create } for pid=18939 comm="syz.0.2984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1236.795198][ T50] Bluetooth: hci4: command tx timeout [ 1236.890782][T18916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.905460][ T5962] usb 6-1: USB disconnect, device number 3 [ 1237.027688][T18916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.232632][T18945] vxcan1 speed is unknown, defaulting to 1000 [ 1237.276576][ T5962] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1237.319103][T18916] team0: Port device team_slave_0 added [ 1237.378956][T18916] team0: Port device team_slave_1 added [ 1237.412575][ T5962] usb 6-1: device descriptor read/64, error -71 [ 1237.542706][T18916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.578420][T18916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1237.615064][T18916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1237.656160][T18916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1237.672676][ T5962] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1237.681382][T18916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1237.728449][T18916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1237.803628][ T5962] usb 6-1: device descriptor read/64, error -71 [ 1237.923426][ T5962] usb usb6-port1: attempt power cycle [ 1237.942350][T18916] hsr_slave_0: entered promiscuous mode [ 1237.970121][T18916] hsr_slave_1: entered promiscuous mode [ 1237.977738][T18916] debugfs: 'hsr0' already exists in 'hsr' [ 1237.983891][T18916] Cannot create hsr debugfs directory [ 1238.303265][ T5962] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1238.340602][ T5962] usb 6-1: device descriptor read/8, error -71 [ 1238.387998][T18916] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1238.409166][T18916] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1238.435605][T18916] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1238.452119][T18916] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1238.556576][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.565500][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.576280][ T1299] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1238.872650][ T50] Bluetooth: hci4: command tx timeout [ 1239.103058][ T5962] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1239.123205][ T5962] usb 6-1: device descriptor read/8, error -71 [ 1239.209660][T18916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.237737][ T5962] usb usb6-port1: unable to enumerate USB device [ 1239.271927][T18916] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.388619][T15405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.395738][T15405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.573268][T15405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.580468][T15405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.671463][T18975] netlink: 'syz.2.3010': attribute type 1 has an invalid length. [ 1240.189774][T18976] gretap1: entered promiscuous mode [ 1240.523164][ T5962] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1240.705436][T18985] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3012'. [ 1240.831836][ T5962] usb 1-1: Using ep0 maxpacket: 32 [ 1240.839257][ T5962] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.902726][ T5962] usb 1-1: config 0 has no interfaces? [ 1240.940956][ T5962] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1240.952655][ T50] Bluetooth: hci4: command tx timeout [ 1240.968348][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.015883][ T5962] usb 1-1: Product: syz [ 1241.020169][ T5962] usb 1-1: Manufacturer: syz [ 1241.040400][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1241.040417][ T30] audit: type=1400 audit(2000000031.600:1653): avc: denied { read } for pid=18989 comm="syz.5.3013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1241.076121][ T5962] usb 1-1: SerialNumber: syz [ 1241.076327][ T30] audit: type=1400 audit(2000000031.630:1654): avc: denied { write } for pid=18989 comm="syz.5.3013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1241.102297][T18993] syzkaller0: entered promiscuous mode [ 1241.113096][T18993] syzkaller0: entered allmulticast mode [ 1241.142644][ T5962] usb 1-1: config 0 descriptor?? [ 1241.195384][T18916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1241.350184][ T30] audit: type=1400 audit(2000000031.910:1655): avc: denied { read write } for pid=19000 comm="syz.2.3015" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1241.439129][ T30] audit: type=1400 audit(2000000031.910:1656): avc: denied { open } for pid=19000 comm="syz.2.3015" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1241.554585][ T30] audit: type=1400 audit(2000000031.980:1657): avc: denied { connect } for pid=19000 comm="syz.2.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1241.603194][ T30] audit: type=1400 audit(2000000031.980:1658): avc: denied { setopt } for pid=19000 comm="syz.2.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1242.130387][T18916] veth0_vlan: entered promiscuous mode [ 1242.147311][T18916] veth1_vlan: entered promiscuous mode [ 1242.689977][T18916] veth0_macvtap: entered promiscuous mode [ 1242.705949][T18916] veth1_macvtap: entered promiscuous mode [ 1242.739523][T18916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1242.786525][T18916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1242.998498][T15408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1243.057141][ T50] Bluetooth: hci4: command tx timeout [ 1243.550041][ T5962] usb 1-1: USB disconnect, device number 97 [ 1243.578794][T15408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1243.617338][ T179] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.633256][ T179] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.759527][ T3557] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.813771][ T3557] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.888743][ T179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1243.921650][ T179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.362473][ T5962] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1244.377985][T19047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3024'. [ 1244.387439][T19047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3024'. [ 1244.398260][T19047] netlink: 'syz.2.3024': attribute type 7 has an invalid length. [ 1244.492972][ T5962] usb 9-1: device descriptor read/64, error -71 [ 1244.759356][T19049] siw: device registration error -23 [ 1244.799944][ T5962] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1245.001986][T19057] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 1245.014236][ T5962] usb 9-1: device descriptor read/64, error -71 [ 1245.145516][ T5962] usb usb9-port1: attempt power cycle [ 1246.445303][T19064] ubi: mtd0 is already attached to ubi31 [ 1246.877364][ T5962] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1247.454857][ T5962] usb 9-1: device descriptor read/8, error -71 [ 1247.763696][ T30] audit: type=1400 audit(2000000038.300:1659): avc: denied { create } for pid=19082 comm="syz.0.3032" name="#4b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1247.816984][ T30] audit: type=1400 audit(2000000038.300:1660): avc: denied { link } for pid=19082 comm="syz.0.3032" name="#4b" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1247.842153][ T30] audit: type=1400 audit(2000000038.300:1661): avc: denied { rename } for pid=19082 comm="syz.0.3032" name="#4c" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1249.065490][T19098] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3036'. [ 1249.279064][ T30] audit: type=1400 audit(2000000039.840:1662): avc: denied { ioctl } for pid=19092 comm="syz.5.3036" path="socket:[74242]" dev="sockfs" ino=74242 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1250.087682][T16680] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1250.103571][T16680] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1250.121995][T16680] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1250.146395][T16680] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1250.159652][T16680] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1250.253400][ T5906] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1250.295633][T19111] vxcan1 speed is unknown, defaulting to 1000 [ 1250.392490][ T5962] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1250.437808][ T5906] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.484506][ T5906] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1250.522319][ T5906] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.547979][ T5906] usb 9-1: Product: syz [ 1250.560663][ T5906] usb 9-1: Manufacturer: syz [ 1250.560772][ T5962] usb 6-1: Using ep0 maxpacket: 16 [ 1250.586080][ T5906] usb 9-1: SerialNumber: syz [ 1250.596717][ T5962] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1250.611447][ T5962] usb 6-1: config 0 has no interface number 0 [ 1250.651141][ T5962] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1250.670762][ T5962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.701454][ T5962] usb 6-1: Product: syz [ 1250.708611][ T5962] usb 6-1: Manufacturer: syz [ 1250.732830][ T5962] usb 6-1: SerialNumber: syz [ 1250.756662][ T5962] usb 6-1: config 0 descriptor?? [ 1250.779544][ T5962] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1251.046218][T19111] chnl_net:caif_netlink_parms(): no params data found [ 1251.216539][T19111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.226775][T19111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.234678][T19111] bridge_slave_0: entered allmulticast mode [ 1251.243290][T19111] bridge_slave_0: entered promiscuous mode [ 1251.269263][T19111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.277518][T19111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.302105][T19111] bridge_slave_1: entered allmulticast mode [ 1251.325051][T19111] bridge_slave_1: entered promiscuous mode [ 1251.417253][T19111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1251.430969][T19111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1251.486144][T19111] team0: Port device team_slave_0 added [ 1251.494883][ T5906] cdc_ncm 9-1:1.0: bind() failure [ 1251.504252][T19111] team0: Port device team_slave_1 added [ 1251.518610][ T5906] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1251.542484][ T5906] cdc_ncm 9-1:1.1: bind() failure [ 1251.583919][T19111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1251.591208][T19111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1251.618490][T19111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1251.632940][T19111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1251.640086][T19111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1251.670157][T19111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.695737][ T5906] usb 9-1: USB disconnect, device number 6 [ 1252.122872][ T5962] gspca_spca1528: reg_w err -110 [ 1252.128820][ T5962] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 1252.267700][T16680] Bluetooth: hci9: command tx timeout [ 1252.993679][ T9] usb 6-1: USB disconnect, device number 8 [ 1253.129159][T19111] hsr_slave_0: entered promiscuous mode [ 1253.163581][T19111] hsr_slave_1: entered promiscuous mode [ 1253.169916][T19111] debugfs: 'hsr0' already exists in 'hsr' [ 1253.202963][T19111] Cannot create hsr debugfs directory [ 1253.906405][T19136] fuse: Bad value for 'user_id' [ 1253.911406][T19136] fuse: Bad value for 'user_id' [ 1254.312586][T16680] Bluetooth: hci9: command tx timeout [ 1254.520757][T19111] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.049627][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1255.060628][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1255.070024][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1255.082735][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1255.154599][T19147] ubi: mtd0 is already attached to ubi31 [ 1255.292638][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1255.621146][T19111] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.678838][T19141] vxcan1 speed is unknown, defaulting to 1000 [ 1255.848774][T19111] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.009496][T19152] netlink: 324 bytes leftover after parsing attributes in process `syz.8.3048'. [ 1256.020957][T19152] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3048'. [ 1256.035510][T19111] bond0: (slave netdevsim0): Releasing backup interface [ 1256.045722][T19111] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.254387][T15359] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1256.369843][T19111] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1256.395424][ T50] Bluetooth: hci9: command tx timeout [ 1256.398752][T19111] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1256.416404][T19141] chnl_net:caif_netlink_parms(): no params data found [ 1256.437984][T15359] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1256.455256][T15359] usb 1-1: can't read configurations, error -61 [ 1256.461595][T19111] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1256.500413][ T30] audit: type=1400 audit(2000000047.060:1663): avc: denied { read } for pid=19151 comm="syz.8.3048" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1256.542698][T19111] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1256.590632][ T30] audit: type=1400 audit(2000000047.060:1664): avc: denied { open } for pid=19151 comm="syz.8.3048" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1256.622907][T15359] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1256.700951][T19141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.711808][T19141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.721751][T19141] bridge_slave_0: entered allmulticast mode [ 1256.739094][T19141] bridge_slave_0: entered promiscuous mode [ 1256.769534][T19141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.782209][T19141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.797393][T19141] bridge_slave_1: entered allmulticast mode [ 1256.807998][T19141] bridge_slave_1: entered promiscuous mode [ 1256.824652][T15359] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1256.839532][T15359] usb 1-1: can't read configurations, error -61 [ 1256.858832][T15359] usb usb1-port1: attempt power cycle [ 1256.922294][T19141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1256.945577][T19141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1257.045188][T19141] team0: Port device team_slave_0 added [ 1257.069654][T19141] team0: Port device team_slave_1 added [ 1257.129246][T19141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1257.138555][T19141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1257.170781][T19141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1257.199675][T19111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1257.210524][T19141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1257.218637][T19141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1257.247621][T19141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.252712][T15359] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1257.276231][T19111] 8021q: adding VLAN 0 to HW filter on device team0 [ 1257.353753][T19141] hsr_slave_0: entered promiscuous mode [ 1257.360903][T19141] hsr_slave_1: entered promiscuous mode [ 1257.362284][T15359] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1257.368865][T19141] debugfs: 'hsr0' already exists in 'hsr' [ 1257.380212][T19141] Cannot create hsr debugfs directory [ 1257.388799][ T6226] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.395931][ T6226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1257.407174][T15359] usb 1-1: can't read configurations, error -61 [ 1257.433390][ T50] Bluetooth: hci3: command tx timeout [ 1257.528780][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.535905][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1257.642690][T15359] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1257.724561][T15359] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1257.756143][T15359] usb 1-1: can't read configurations, error -61 [ 1257.789968][T15359] usb usb1-port1: unable to enumerate USB device [ 1258.492220][ T50] Bluetooth: hci9: command tx timeout [ 1258.950361][ T30] audit: type=1400 audit(2000000049.510:1665): avc: denied { name_bind } for pid=19171 comm="syz.0.3050" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1259.512693][ T50] Bluetooth: hci3: command tx timeout [ 1259.981016][T19141] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1260.056779][ T30] audit: type=1400 audit(2000000050.620:1666): avc: denied { getopt } for pid=19187 comm="syz.0.3054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1260.060297][T19189] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1260.081734][T19141] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1260.082737][T19189] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1260.083562][T19189] vhci_hcd vhci_hcd.0: Device attached [ 1260.252606][T19141] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1260.291728][T19141] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1260.309901][T19111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1260.352519][ T5913] usb 33-1: new high-speed USB device number 4 using vhci_hcd [ 1260.493438][T19204] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3056'. [ 1260.544847][ T30] audit: type=1400 audit(2000000051.110:1667): avc: denied { name_bind } for pid=19203 comm="syz.5.3056" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1260.626779][T19111] veth0_vlan: entered promiscuous mode [ 1260.647277][ T30] audit: type=1400 audit(2000000051.130:1668): avc: denied { setattr } for pid=19203 comm="syz.5.3056" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1260.693383][T19111] veth1_vlan: entered promiscuous mode [ 1261.013841][T19190] vhci_hcd: connection reset by peer [ 1261.045447][ T30] audit: type=1400 audit(2000000051.130:1669): avc: denied { write } for pid=19203 comm="syz.5.3056" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1261.094875][ T12] vhci_hcd: stop threads [ 1261.102473][ T12] vhci_hcd: release socket [ 1261.108020][ T12] vhci_hcd: disconnect device [ 1261.114453][ T30] audit: type=1400 audit(2000000051.140:1670): avc: denied { open } for pid=19203 comm="syz.5.3056" path="/50/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1261.154045][T19111] veth0_macvtap: entered promiscuous mode [ 1261.174977][T19206] fuse: Unknown parameter '' [ 1261.222447][ T30] audit: type=1400 audit(2000000051.740:1671): avc: denied { mounton } for pid=19203 comm="syz.5.3056" path="/50/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1261.234444][T19141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1261.331579][T19111] veth1_macvtap: entered promiscuous mode [ 1261.445610][T19111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1261.461075][T19111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1261.544383][T19212] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3057'. [ 1261.609783][ T50] Bluetooth: hci3: command tx timeout [ 1262.265073][ T30] audit: type=1400 audit(2000000052.100:1672): avc: denied { bind } for pid=19210 comm="syz.8.3057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1262.546236][ T30] audit: type=1400 audit(2000000053.040:1673): avc: denied { unmount } for pid=18127 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1262.606465][T19141] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.753903][T15408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.761060][T15408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.772821][T15408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.779919][T15408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1263.279215][ T3519] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.294337][ T3519] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.353313][ T3519] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.383530][ T3519] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.716354][ T30] audit: type=1326 audit(2000000054.130:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df7d8eec9 code=0x7ffc0000 [ 1263.723886][ T50] Bluetooth: hci3: command tx timeout [ 1263.831470][ T30] audit: type=1326 audit(2000000054.130:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df7d8eec9 code=0x7ffc0000 [ 1263.875905][ T5962] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1263.909970][T19233] ISOFS: Unable to identify CD-ROM format. [ 1263.922107][ T6226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1263.983290][ T30] audit: type=1326 audit(2000000054.130:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6df7d8eec9 code=0x7ffc0000 [ 1264.002414][ T6226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1264.066039][ T30] audit: type=1326 audit(2000000054.130:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df7d8eec9 code=0x7ffc0000 [ 1264.091466][T19075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1264.141173][ T30] audit: type=1326 audit(2000000054.130:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6df7d8eec9 code=0x7ffc0000 [ 1264.178370][T19075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1264.244432][ T30] audit: type=1326 audit(2000000054.130:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df7d8eec9 code=0x7ffc0000 [ 1264.304283][ T30] audit: type=1326 audit(2000000054.140:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6df7d8eec9 code=0x7ffc0000 [ 1264.398758][ T30] audit: type=1326 audit(2000000054.140:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19220 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df7d8eec9 code=0x7ffc0000 [ 1264.906307][T19244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3034'. [ 1264.963643][T19141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1265.522701][ T5913] vhci_hcd: vhci_device speed not set [ 1265.822289][T19141] veth0_vlan: entered promiscuous mode [ 1265.849646][T19141] veth1_vlan: entered promiscuous mode [ 1265.921820][T19141] veth0_macvtap: entered promiscuous mode [ 1266.010562][T19141] veth1_macvtap: entered promiscuous mode [ 1266.154966][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054f3ac00: rx timeout, send abort [ 1266.164740][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888054f3ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1266.344786][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880407b9c00: rx timeout, send abort [ 1266.353705][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880407b9c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1266.401451][T19141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1266.428001][T19141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1266.520638][ T3519] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.546572][ T3519] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.587890][ T3519] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.604263][T19261] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3065'. [ 1266.648154][ T3519] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.788907][T19272] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3064'. [ 1266.862439][T19271] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3066'. [ 1266.902744][T19275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1266.931897][T19275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1267.063819][T19275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1267.071229][T19275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1267.849952][ T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.873049][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1267.873063][ T30] audit: type=1400 audit(2000000058.430:1716): avc: denied { read write } for pid=19280 comm="syz.8.3068" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1267.911181][ T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.960277][T19077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.975972][T19077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.988176][ T30] audit: type=1400 audit(2000000058.430:1717): avc: denied { open } for pid=19280 comm="syz.8.3068" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1268.467573][ T30] audit: type=1400 audit(2000000059.020:1718): avc: denied { sqpoll } for pid=19293 comm="syz.8.3070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1268.613880][ T5962] usb 1-1: new low-speed USB device number 103 using dummy_hcd [ 1268.772445][ T5962] usb 1-1: Invalid ep0 maxpacket: 64 [ 1269.472478][ T5962] usb 1-1: new low-speed USB device number 104 using dummy_hcd [ 1269.633388][ T5962] usb 1-1: Invalid ep0 maxpacket: 64 [ 1269.840319][ T5962] usb usb1-port1: attempt power cycle [ 1270.272834][ T5962] usb 1-1: new low-speed USB device number 105 using dummy_hcd [ 1270.332907][ T5962] usb 1-1: Invalid ep0 maxpacket: 64 [ 1270.522524][ T5962] usb 1-1: new low-speed USB device number 106 using dummy_hcd [ 1270.660435][ T5962] usb 1-1: Invalid ep0 maxpacket: 64 [ 1270.697605][ T5962] usb usb1-port1: unable to enumerate USB device [ 1270.896964][ T30] audit: type=1400 audit(2000000061.453:1719): avc: denied { read } for pid=5516 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1270.918097][ C0] vkms_vblank_simulate: vblank timer overrun [ 1270.990751][ T30] audit: type=1400 audit(2000000061.513:1720): avc: denied { search } for pid=5516 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1271.030500][ T30] audit: type=1400 audit(2000000061.513:1721): avc: denied { search } for pid=5516 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1271.052048][ C0] vkms_vblank_simulate: vblank timer overrun [ 1271.108024][ T30] audit: type=1400 audit(2000000061.513:1722): avc: denied { search } for pid=5516 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1271.216262][ T30] audit: type=1400 audit(2000000061.513:1723): avc: denied { read } for pid=5516 comm="dhcpcd" name="n125" dev="tmpfs" ino=11957 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1271.472725][ T30] audit: type=1400 audit(2000000061.513:1724): avc: denied { open } for pid=5516 comm="dhcpcd" path="/run/udev/data/n125" dev="tmpfs" ino=11957 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1271.620835][ T30] audit: type=1400 audit(2000000061.513:1725): avc: denied { getattr } for pid=5516 comm="dhcpcd" path="/run/udev/data/n125" dev="tmpfs" ino=11957 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1272.692618][ T5943] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1272.755509][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3086'. [ 1272.772462][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3086'. [ 1272.792472][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3086'. [ 1272.821141][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3086'. [ 1273.216408][ T5943] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.264861][T19374] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 1273.368828][ T5943] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.454482][T19374] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 1273.477348][ T5943] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1273.477455][ T5943] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.585128][ T5943] usb 9-1: config 0 descriptor?? [ 1274.340061][ T5943] hid-led 0003:27B8:01ED.0024: item fetching failed at offset 3/5 [ 1274.357857][T19391] vlan2: entered allmulticast mode [ 1274.364648][ T5943] hid-led 0003:27B8:01ED.0024: probe with driver hid-led failed with error -22 [ 1274.429810][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1274.429827][ T30] audit: type=1400 audit(2000000064.993:1733): avc: denied { remove_name } for pid=19380 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=11972 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1274.503495][ T5906] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1274.571975][ T30] audit: type=1400 audit(2000000065.003:1734): avc: denied { unlink } for pid=19380 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=11972 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1274.691131][ T5906] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 1274.720637][ T5906] usb 1-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 1274.742510][ T5906] usb 1-1: Product: syz [ 1274.746701][ T5906] usb 1-1: Manufacturer: syz [ 1274.767353][ T5906] usb 1-1: SerialNumber: syz [ 1274.848612][T19398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3091'. [ 1274.862233][T19398] bridge_slave_1: left allmulticast mode [ 1274.869252][T19398] bridge_slave_1: left promiscuous mode [ 1274.875738][T19398] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.947531][T19398] bridge_slave_0: left promiscuous mode [ 1274.954852][T19398] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.040087][ T5906] usb 1-1: config 0 descriptor?? [ 1276.047610][ T5906] ch341 1-1:0.0: ch341-uart converter detected [ 1276.093991][T19406] overlayfs: workdir and upperdir must reside under the same mount [ 1276.185394][ T30] audit: type=1400 audit(2000000066.743:1735): avc: denied { unmount } for pid=18127 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1276.536866][T19417] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 1276.875503][ T5906] ch341-uart ttyUSB0: break control not supported, using simulated break [ 1276.933898][ T5906] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 1277.117078][ T5943] usb 9-1: USB disconnect, device number 7 [ 1277.754438][ T5906] usb 1-1: USB disconnect, device number 107 [ 1277.805779][ T5906] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 1277.917881][ T5906] ch341 1-1:0.0: device disconnected [ 1278.036978][ T30] audit: type=1400 audit(2000000068.583:1736): avc: denied { mount } for pid=19426 comm="syz.5.3096" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1278.313055][ T5962] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1278.323092][ T30] audit: type=1400 audit(2000000068.883:1737): avc: denied { append } for pid=19433 comm="syz.0.3098" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1278.382695][ T5913] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1278.502444][ T30] audit: type=1400 audit(2000000069.053:1738): avc: denied { ioctl } for pid=19433 comm="syz.0.3098" path="socket:[76692]" dev="sockfs" ino=76692 ioctlcmd=0x9435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1278.533619][ T5962] usb 3-1: config 0 has an invalid interface number: 185 but max is 0 [ 1278.550271][ T5962] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.575635][ T5913] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1278.612479][ T5913] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1278.646880][ T5962] usb 3-1: config 0 has no interface number 0 [ 1278.675927][ T5913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1278.697994][ T5962] usb 3-1: too many endpoints for config 0 interface 185 altsetting 94: 120, using maximum allowed: 30 [ 1278.726710][ T5913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1278.822141][ T5962] usb 3-1: config 0 interface 185 altsetting 94 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 1278.842977][ T5913] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1278.906305][ T5962] usb 3-1: config 0 interface 185 has no altsetting 0 [ 1278.922496][ T5913] usb 9-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 1278.972873][ T5962] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1278.997691][ T5913] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.042890][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.070139][ T30] audit: type=1400 audit(2000000069.623:1739): avc: denied { accept } for pid=19438 comm="syz.0.3100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1279.105412][ T5913] usb 9-1: config 0 descriptor?? [ 1279.106967][ T5962] usb 3-1: config 0 descriptor?? [ 1279.169221][T19431] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1279.684726][ T5913] appledisplay 9-1:0.0: Error while getting initial brightness: -110 [ 1279.703092][ T5913] appledisplay 9-1:0.0: probe with driver appledisplay failed with error -110 [ 1279.724727][T19429] netlink: 'syz.2.3095': attribute type 1 has an invalid length. [ 1279.826722][T19449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1280.141124][ T5913] usb 9-1: USB disconnect, device number 8 [ 1280.353297][T19453] fuse: Bad value for 'user_id' [ 1280.372632][T19453] fuse: Bad value for 'user_id' [ 1280.801225][T19465] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3103'. [ 1281.250447][ T5962] usb 3-1: string descriptor 0 read error: -71 [ 1281.262230][ T5962] usb 3-1: USB disconnect, device number 12 [ 1281.305340][ T30] audit: type=1400 audit(2000000071.873:1740): avc: denied { read } for pid=19466 comm="syz.5.3105" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1281.434006][ T30] audit: type=1400 audit(2000000071.873:1741): avc: denied { open } for pid=19466 comm="syz.5.3105" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1281.483016][ T30] audit: type=1400 audit(2000000071.913:1742): avc: denied { bind } for pid=19468 comm="syz.2.3106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1281.650234][ T30] audit: type=1400 audit(2000000071.913:1743): avc: denied { listen } for pid=19468 comm="syz.2.3106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1282.661238][T19483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3107'. [ 1282.778421][T19492] SELinux: security policydb version 17 (MLS) not backwards compatible [ 1282.790321][ T30] audit: type=1400 audit(2000000073.343:1744): avc: denied { load_policy } for pid=19491 comm="syz.9.3112" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1282.843275][T19492] SELinux: failed to load policy [ 1283.100055][T19501] netlink: 'syz.8.3113': attribute type 1 has an invalid length. [ 1283.247296][ T5913] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1283.423263][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 1283.457379][ T5913] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1284.162796][ T5913] usb 1-1: config 0 has no interface number 0 [ 1284.173972][ T5913] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1284.184673][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.195282][ T5913] usb 1-1: Product: syz [ 1284.199449][ T5913] usb 1-1: Manufacturer: syz [ 1284.204432][ T5913] usb 1-1: SerialNumber: syz [ 1284.303820][ T5913] usb 1-1: config 0 descriptor?? [ 1285.262500][ T30] audit: type=1400 audit(2000000075.093:1745): avc: denied { read write } for pid=19498 comm="syz.8.3113" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1285.352556][ T30] audit: type=1400 audit(2000000075.813:1746): avc: denied { open } for pid=19498 comm="syz.8.3113" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1285.381853][ T5913] smsc95xx v2.0.0 [ 1285.648611][ T30] audit: type=1400 audit(2000000075.823:1747): avc: denied { ioctl } for pid=19498 comm="syz.8.3113" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1285.952936][ T5962] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1286.715804][T16680] Bluetooth: hci5: command 0x0406 tx timeout [ 1286.854317][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1287.033416][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1287.075994][ T30] audit: type=1400 audit(2000000077.633:1748): avc: denied { ioctl } for pid=19523 comm="syz.2.3120" path="socket:[76885]" dev="sockfs" ino=76885 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1287.102561][ T5962] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1287.108254][ T30] audit: type=1400 audit(2000000077.633:1749): avc: denied { write } for pid=19523 comm="syz.2.3120" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1287.159770][ T5962] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1287.207621][ T5962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.241350][ T5962] usb 6-1: config 0 descriptor?? [ 1288.154352][ T5962] plantronics 0003:047F:FFFF.0025: ignoring exceeding usage max [ 1288.247094][ T5962] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1288.333269][ T5943] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1288.402556][ T30] audit: type=1400 audit(2000000078.963:1750): avc: denied { read } for pid=19517 comm="syz.5.3118" path="socket:[77882]" dev="sockfs" ino=77882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1288.523836][ T9745] usb 6-1: USB disconnect, device number 9 [ 1288.628777][ T30] audit: type=1400 audit(2000000079.193:1751): avc: denied { write } for pid=19533 comm="syz.2.3123" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1288.664586][T19536] netlink: 'syz.2.3123': attribute type 10 has an invalid length. [ 1288.674810][T19536] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3123'. [ 1288.694461][ T5943] usb 9-1: Using ep0 maxpacket: 16 [ 1288.720824][T19536] dummy0: entered promiscuous mode [ 1288.799444][T19536] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1289.555744][ T30] audit: type=1400 audit(2000000079.193:1752): avc: denied { ioctl } for pid=19533 comm="syz.2.3123" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1289.585529][ T5943] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1289.594521][ T5943] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.623398][ T5943] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1289.633286][ T5943] usb 9-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 1289.686775][ T5943] usb 9-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1289.830390][T19540] fido_id[19540]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1289.846200][ T5943] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1289.855619][ T5943] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.042435][T19547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3126'. [ 1290.068810][T19547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1290.397455][ T5913] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -110 [ 1290.491467][ T5943] usb 9-1: Product: syz [ 1290.677725][ T5943] usb 9-1: Manufacturer: syz [ 1290.785173][ T30] audit: type=1400 audit(2000000081.273:1753): avc: denied { create } for pid=19542 comm="syz.5.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1290.823951][ T5913] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -110 [ 1290.982260][ T5943] usb 9-1: SerialNumber: syz [ 1292.001416][T19542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1292.018085][T19558] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3128'. [ 1292.532534][ T5913] usb 1-1: USB disconnect, device number 108 [ 1294.080079][ T30] audit: type=1400 audit(2000000084.513:1754): avc: denied { read } for pid=19562 comm="syz.2.3130" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1294.430788][ T5943] usb 9-1: can't set config #1, error -71 [ 1295.052446][ T31] INFO: task syz.4.2813:17961 blocked for more than 143 seconds. [ 1295.060399][ T5943] usb 9-1: USB disconnect, device number 9 [ 1295.076848][ T31] Not tainted syzkaller #0 [ 1295.083061][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1295.092229][ T31] task:syz.4.2813 state:D stack:24328 pid:17961 tgid:17956 ppid:5851 task_flags:0x400140 flags:0x00004006 [ 1295.122482][ T31] Call Trace: [ 1295.130229][ T31] [ 1295.140958][ T31] __schedule+0x1190/0x5de0 [ 1295.156415][ T31] ? __pfx___schedule+0x10/0x10 [ 1295.167519][ T31] ? find_held_lock+0x2b/0x80 [ 1295.172252][ T31] ? schedule+0x2d7/0x3a0 [ 1295.177142][ T31] schedule+0xe7/0x3a0 [ 1295.182312][ T31] schedule_timeout+0x257/0x290 [ 1295.216968][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1295.255958][ T31] ? mark_held_locks+0x49/0x80 [ 1295.363763][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1295.390585][ T31] __wait_for_common+0x2ff/0x4e0 [ 1295.440815][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1295.450321][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1295.456517][ T31] ? ib_cq_pool_cleanup+0x220/0x360 [ 1295.461763][ T31] disable_device+0x16f/0x280 [ 1295.489751][ T31] ? __pfx_disable_device+0x10/0x10 [ 1295.498362][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1295.505545][ T31] __ib_unregister_device+0x2b4/0x480 [ 1295.511059][ T31] ib_unregister_device_and_put+0x5a/0x80 [ 1295.526654][ T31] nldev_dellink+0x21f/0x320 [ 1295.532904][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 1295.538212][ T31] ? cap_capable+0xb3/0x250 [ 1295.545911][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1295.550759][ T31] ? security_capable+0x7e/0x260 [ 1295.558075][ T31] ? ns_capable+0xd7/0x110 [ 1295.564521][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 1295.569791][ T31] rdma_nl_rcv_msg+0x38a/0x6e0 [ 1295.575050][ T31] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1295.580495][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 1295.633662][ T31] ? irqentry_exit+0x3b/0x90 [ 1295.651862][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1295.659180][ T31] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 1295.685932][ T31] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1295.693103][ T31] ? rcu_is_watching+0x12/0xc0 [ 1295.701101][ T31] netlink_unicast+0x5aa/0x870 [ 1295.744365][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1295.750323][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 1295.755499][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1295.762102][ T31] ? security_socket_sendmsg+0x18/0x240 [ 1295.767959][ T31] ____sys_sendmsg+0xa98/0xc70 [ 1295.777925][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1295.785032][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1295.790384][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 1295.801104][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1295.805861][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1295.811159][ T31] __sys_sendmsg+0x16d/0x220 [ 1295.820294][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1295.825930][ T31] ? __pfx___schedule+0x10/0x10 [ 1295.830957][ T31] do_syscall_64+0xcd/0x4e0 [ 1295.839842][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.845873][ T31] RIP: 0033:0x7ff38b58eec9 [ 1295.857279][ T31] RSP: 002b:00007ff3897f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1295.866829][ T31] RAX: ffffffffffffffda RBX: 00007ff38b7e6180 RCX: 00007ff38b58eec9 [ 1295.875252][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000a [ 1295.883355][ T31] RBP: 00007ff38b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1295.891370][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.899650][ T31] R13: 00007ff38b7e6218 R14: 00007ff38b7e6180 R15: 00007fff1bc70bf8 [ 1295.908201][ T31] [ 1295.914083][ T31] [ 1295.914083][ T31] Showing all locks held in the system: [ 1295.921890][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 1295.944654][ T31] 1 lock held by khungtaskd/31: [ 1295.949530][ T31] #0: ffffffff8e5c16a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1295.967950][ T31] 3 locks held by kworker/u9:0/50: [ 1295.974036][ T31] #0: ffff888035819948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1296.027329][ T31] #1: ffffc90000ba7d10 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1296.040562][ T31] #2: ffff88804a3ecdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 1296.050579][ T31] 2 locks held by getty/5616: [ 1296.056607][ T31] #0: ffff8880363640a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1296.078855][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1296.089106][ T31] 4 locks held by kworker/u8:14/8692: [ 1296.095272][ T31] #0: ffff88801c6f4148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1296.111020][ T31] #1: ffffc9001b387d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1296.121040][ T31] #2: ffffffff9036f310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 1296.132332][ T31] #3: ffff88807631c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 1296.149327][ T31] 2 locks held by syz.4.2813/17961: [ 1296.185607][ T31] #0: ffffffff9b1a5ad8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x169/0x6e0 [ 1296.204431][ T31] #1: ffff88807631c700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480 [ 1296.217893][ T31] 2 locks held by syz.1.2831/18040: [ 1296.223276][ T31] #0: ffffffff9036f310 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 1296.233474][ T31] #1: ffff88807631c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 1296.245486][ T31] 2 locks held by syz.6.2924/18507: [ 1296.250773][ T31] #0: ffffffff9036f310 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 1296.261452][ T31] #1: ffff88807631c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 1296.273931][ T31] 2 locks held by syz.3.2964/18728: [ 1296.279132][ T31] #0: ffffffff9036f310 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 1296.288603][ T31] #1: ffff88807631c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 1296.299954][ T31] 2 locks held by syz.7.3005/18945: [ 1296.309723][ T31] #0: ffffffff9036f310 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 1296.319896][ T31] #1: ffff88807631c700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 1296.331316][ T31] [ 1296.334571][ T31] ============================================= [ 1296.334571][ T31] [ 1296.347924][ T31] NMI backtrace for cpu 1 [ 1296.347943][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1296.347968][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1296.347979][ T31] Call Trace: [ 1296.347987][ T31] [ 1296.347996][ T31] dump_stack_lvl+0x116/0x1f0 [ 1296.348028][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1296.348051][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1296.348084][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1296.348109][ T31] watchdog+0xf0e/0x1260 [ 1296.348138][ T31] ? __pfx_watchdog+0x10/0x10 [ 1296.348159][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1296.348187][ T31] ? __kthread_parkme+0x19e/0x250 [ 1296.348218][ T31] ? __pfx_watchdog+0x10/0x10 [ 1296.348242][ T31] kthread+0x3c2/0x780 [ 1296.348263][ T31] ? __pfx_kthread+0x10/0x10 [ 1296.348286][ T31] ? rcu_is_watching+0x12/0xc0 [ 1296.348312][ T31] ? __pfx_kthread+0x10/0x10 [ 1296.348334][ T31] ret_from_fork+0x56a/0x730 [ 1296.348353][ T31] ? __pfx_kthread+0x10/0x10 [ 1296.348374][ T31] ret_from_fork_asm+0x1a/0x30 [ 1296.348429][ T31] [ 1296.348436][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1296.466892][ C0] NMI backtrace for cpu 0 [ 1296.466908][ C0] CPU: 0 UID: 0 PID: 3557 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 1296.466930][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1296.466943][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1296.466973][ C0] RIP: 0010:__lock_acquire+0x2a8/0x1ce0 [ 1296.467003][ C0] Code: 01 0f 88 03 0e 00 00 49 63 c6 48 8d 04 80 48 8d 04 c3 eb 12 41 83 ee 01 48 83 e8 28 41 83 fe ff 0f 84 9c 04 00 00 0f b6 50 21 <31> ca 83 e2 60 74 e3 41 83 c6 01 65 8b 05 ee 7a 3f 12 85 c0 0f 84 [ 1296.467021][ C0] RSP: 0018:ffffc9000cc074e0 EFLAGS: 00000013 [ 1296.467035][ C0] RAX: ffff888032d9d370 RBX: ffff888032d9d370 RCX: 0000000000000000 [ 1296.467047][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888032d9d410 [ 1296.467059][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1296.467070][ C0] R10: 00000000000000a0 R11: 0000000000000001 R12: ffff888032d9d410 [ 1296.467082][ C0] R13: ffff888032d9c880 R14: 0000000000000000 R15: 0000000000000001 [ 1296.467093][ C0] FS: 0000000000000000(0000) GS:ffff8881246b1000(0000) knlGS:0000000000000000 [ 1296.467111][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1296.467124][ C0] CR2: 00002000003ae030 CR3: 0000000073cf0000 CR4: 00000000003526f0 [ 1296.467136][ C0] Call Trace: [ 1296.467142][ C0] [ 1296.467156][ C0] lock_acquire+0x179/0x350 [ 1296.467172][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 1296.467198][ C0] unwind_next_frame+0xd1/0x20a0 [ 1296.467217][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 1296.467237][ C0] ? __unwind_start+0x574/0x7f0 [ 1296.467256][ C0] ? get_stack_info_noinstr+0x18/0x120 [ 1296.467277][ C0] __unwind_start+0x45f/0x7f0 [ 1296.467298][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1296.467325][ C0] arch_stack_walk+0x73/0x100 [ 1296.467348][ C0] ? __unwind_start+0x574/0x7f0 [ 1296.467370][ C0] stack_trace_save+0x8e/0xc0 [ 1296.467393][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1296.467421][ C0] kasan_save_stack+0x33/0x60 [ 1296.467461][ C0] kasan_save_track+0x14/0x30 [ 1296.467478][ C0] __kasan_slab_alloc+0x89/0x90 [ 1296.467499][ C0] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 1296.467519][ C0] ? __alloc_skb+0x2b2/0x380 [ 1296.467540][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1296.467564][ C0] __alloc_skb+0x2b2/0x380 [ 1296.467584][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 1296.467603][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1296.467623][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1296.467643][ C0] ? __pfx___might_resched+0x10/0x10 [ 1296.467670][ C0] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 1296.467705][ C0] process_one_work+0x9cc/0x1b70 [ 1296.467729][ C0] ? __pfx_bond_mii_monitor+0x10/0x10 [ 1296.467752][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1296.467776][ C0] ? assign_work+0x1a0/0x250 [ 1296.467795][ C0] worker_thread+0x6c8/0xf10 [ 1296.467820][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1296.467841][ C0] kthread+0x3c2/0x780 [ 1296.467859][ C0] ? __pfx_kthread+0x10/0x10 [ 1296.467878][ C0] ? rcu_is_watching+0x12/0xc0 [ 1296.467901][ C0] ? __pfx_kthread+0x10/0x10 [ 1296.467919][ C0] ret_from_fork+0x56a/0x730 [ 1296.467936][ C0] ? __pfx_kthread+0x10/0x10 [ 1296.467954][ C0] ret_from_fork_asm+0x1a/0x30 [ 1296.467983][ C0] [ 1296.487463][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1296.487484][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1296.487508][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1296.487521][ T31] Call Trace: [ 1296.487528][ T31] [ 1296.487538][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1296.487569][ T31] vpanic+0x6e8/0x7a0 [ 1296.487589][ T31] ? __pfx_vpanic+0x10/0x10 [ 1296.487609][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1296.487646][ T31] panic+0xca/0xd0 [ 1296.487664][ T31] ? __pfx_panic+0x10/0x10 [ 1296.487683][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1296.487718][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1296.487741][ T31] ? watchdog+0xd78/0x1260 [ 1296.487764][ T31] ? watchdog+0xd6b/0x1260 [ 1296.487788][ T31] watchdog+0xd89/0x1260 [ 1296.487815][ T31] ? __pfx_watchdog+0x10/0x10 [ 1296.487837][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1296.487864][ T31] ? __kthread_parkme+0x19e/0x250 [ 1296.487894][ T31] ? __pfx_watchdog+0x10/0x10 [ 1296.487917][ T31] kthread+0x3c2/0x780 [ 1296.487938][ T31] ? __pfx_kthread+0x10/0x10 [ 1296.487961][ T31] ? rcu_is_watching+0x12/0xc0 [ 1296.487986][ T31] ? __pfx_kthread+0x10/0x10 [ 1296.488008][ T31] ret_from_fork+0x56a/0x730 [ 1296.488028][ T31] ? __pfx_kthread+0x10/0x10 [ 1296.488049][ T31] ret_from_fork_asm+0x1a/0x30 [ 1296.488086][ T31] [ 1296.925285][ T31] Kernel Offset: disabled [ 1296.929585][ T31] Rebooting in 86400 seconds..