last executing test programs: 25m29.180600602s ago: executing program 32 (id=39): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r4 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r5, 0x2, &(0x7f0000000440)=[&(0x7f00000000c0)={0xffff0000, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468"], 0xa8}}, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r6, r7, 0x0, 0x20000023896) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xfffc, 0x4e21, 0x18, 0x2, 0x0, 0x20, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0xfffffffc}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000008c0), 0x0, 0x0) 25m20.962724714s ago: executing program 4 (id=59): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xee01, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0x20, 0x800}}], 0x1, 0x20040001) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000280)={0x0, r6, 0xd, {0x7, 0xa42}, 0x80}, 0x1) 25m18.760432144s ago: executing program 4 (id=65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r4 = dup(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000cc0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) socket(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000580)={'pcm3724\x00', [0x4f27, 0x5, 0x4010000, 0x5, 0x66, 0x1cc7, 0x532, 0x80009, 0x2, 0x100, 0x9, 0x2, 0xeffeffff, 0x9, 0x1, 0x80000101, 0x7, 0x1a449, 0x3, 0x40020003, 0x100208a, 0xf, 0xd27, 0xb1, 0x7fff, 0x8, 0x3c, 0x0, 0xb, 0x0, 0x2e7]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x2c93a000) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0xc, 0x4b, 0x0, 0x0, 0x2e}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000100)="660fc007baf80c66b8ac7a508c66efbafc0c66ed0f005a962698b80c008ed066b9620900000f32660f6823670c0066b858f900000f23d00f21f86635200000060f23f836673e0f01c5", 0x49}], 0x1, 0x19, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x40, 0x0, 0x0) 25m17.506240878s ago: executing program 4 (id=67): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10004, 0x5, r1}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000040)={0x1}) fcntl$lock(r4, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x5, r3}) sched_setscheduler(r3, 0x0, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00B'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r5}, 0x38) 25m15.792145706s ago: executing program 4 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=r2]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1/../file0/file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000abc0)="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", 0x2000, &(0x7f0000001480)={&(0x7f0000000480)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x441410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000003c0)='./file0/file0\x00', 0x10b402, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x8, 0x1, 0x1, "b56183088c6b83a5379f95af04b4adfeb7db9812e7bef4bd785589a9ee01eec2", 0x35315258}) syz_fuse_handle_req(r0, &(0x7f0000008840)="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", 0x2000, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x0, {0x4, 0x0, 0x7, 0x2, 0x0, 0x400000, {0x0, 0x0, 0x7, 0xa, 0x3, 0xfffffffffffffffb, 0x0, 0x80000000, 0x0, 0x4000, 0x3, 0x0, r1, 0x0, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000066c0)="e472d1bd70fb558d64de5dd41648b39b6bc8703d4af57c31fd3242fcad4bcf6c131b4551cf610090653cfa4313b17e010f60aa5e29ab12cb706c2e4c3349d4c804b092faf440340aad7ef8e87042d91378c7a42fba7055513716c595ea69b3cfe998391d937e785ea8c309103ff4254074c02d28ea563f73129443db839c73e062ec40910766c9685f61b491874faad03c8a9cb47817f11ea0c8a51182c505116bc175fb3f3dbf7a32794c0fbca30ae63e67fda028f2d4c94fabcad18d713428c96f977d4e9cee5c70f89584cc19405b5469b01c9d947720b3b1463c00bb6c6860fa837d8eb6d732cfd11b222ea20caeaa5d95dee51f95b6871829fdc60599887d22ef1a0101c24e4003d2753265afd5cffbab0c38223fe2112cc5873fc5c7d93b89282f02f54d8eb17dc173f38ca7e8a5f977528eba8487d73c440e3f08c42b6edac52cab3ec7f686a4be73089c2db376ffd8f75f32b4975fc3c9883011fa02003b4a551faa5d92f8da66ef7895411bd1224acfa4a72233793dc0c92de4dbc32d489e8b05db3122914320830ec2a437821355af94c9bf02c2546546363e083cc108a54f7d9e6e56a83d9e52a8357ed6a31aea8bd22f97db5d9f11b87e5d557ab94cdc64a866636287f2547c336f498df0d977d363ad223aab0a53918ea0c493dfc4aa44dd8fc75a547cd602f19c990823290a3f7dd98c164d69d654b88dc5b39ca4053a131a0451d4db92caa020004c3065e694a7bac984c70ca80535dbf829b2c33b81851c9d1201686a344d0ed63c10e9dbdb4d9c47f6283435a511a2fdcce58a043d08a1b460593353edc0957bca21ed6762733f8cfcc41f6e590145a8122648bc48f3b5bf1875bd97e0d0e3ac66cb7078944a9cdc5bc43ad7143a4702553616731a30a538886f7381d47bace5eb23d7a7c73618a7a18fc08f54cde38ba9e7140e4aefc9d46d81ba3cd58910528003663760c0d2efa66c6ed289bb5b05686edd377d094b8e3f9f67b050aca39eca3be674c7bbe8da75f6cbcdd819a74fac7a306b7f392d16829c609cdbe13871011e7c79235bcead6822f98e58c8f7ae04ca9924497c3d53be8f9a7893f8c273031a9a442d2de8e354fd9fac203cd549cabcc8e234319616397c5d91751e76364d9363dfd815fd3d51c348a56bf0b97636379366699124ce17c7435764481e51a72a7b68ea5d9e583c7883301af3591ef9ed10086963358ecd009794a1beb11b770dd254f46b3297d1443a44d7a598bde8eff4a07b89982a8dd886aecaa1e230a74fae6902d4b52c10c4b382c0dd3fd754c5e8045206fd0f2d464d3398f0fa9701a8c00c6e7ca36034304b436ce6841352bb4ebc570b1e65e781d25d4b1ffd77d68ab9addc242c7e087c6030de358867cb13d9717aa2ec0a6cb9174edc9abeded1c0cfdfff48f930d8d601a6d219e974320ac4ccf6c2ca2456a5c14c378d46cd521fb424f7791318b15ea152f7f04d3c2c50f7ffed93914b6b46511be08f866239a3339b46e254d0c143d0ef1f15e30a16123ea8bd67dd5791ce994b960889c29a6041d2e4431e3b1b819d980ff10dd1ee4c2fb57c0461ef2c170b4ed03bf3a54f5ed3a5b0232db956daa99cca7cb7dbce3b4953da110944993aaf6f91e57bd4cdd1cbcfed17d18e52c10e2bc06d9eae153153ec71a48915864318a14255580af8422d4a779293fad34cb5a635dd980cbd4a6509ff233cbcd6f1c82b135093eadec234e306f3e779292258e698932152aeedfdd3de825db5ee7bfd34ab8a1b748aa3baa1a792498d992c486b1bbf2567c6e6ce1acfc91d66b19312d730e36c6a789942248dc9b27091c5784a079393ae3c3057312e420853b7180ff2fe9b8e177713c5bebad56e07423614293487de32dd690fb2d573f9d66d21e0abd15786e529938b61048b15457a8b5df2138eb78e8c34858b4f2196ddcbb5f93090d26511ec88915de365e7b6edcbc32c8aa584be61174108d7463a6636b36b1ebb41b3046e311b2168d74e5a08e2df1b604b5cb20b6137346112e5e95696197273debe46d9909a3e490ffcc58d097432949b7351f7094a97aead2060fa6be15665e7f8101a909e5a7431bb0e001135a0d1ab0d7bdad363b06c9f1e7452afd023877bc3c9a15c5600a893af6d7aa2febe12eb62703972a80da7a4a177d4e660e15b1656270f86f23d9772295197fcd67fbeb4f6be26c655992fab2e99f16323c369050a6938f5dd33565ac110cf1848ed2786025a2a51843f61a6dfdac05984f0c4f266b0f2ad490ffbcfa3d2ad6ec8b3c5baccb9efee608123ceb06bea3bd794805a5b0aad41587d05623a473b6c08f021de0e9261e3877ef074b053fc3ee7a4bb1108bd6195b387ea2b17fbaa07a38b339f4cca17acd9d888452fdf29a22d7623ea0ef7134c341b777f4d016af32f286481afac9308461643abff28dc9958446d8841c3b0cbaffabadc67763ba308acd21cc2c64b63e3796b7d765548b081c7854d7fdb4da5a250c83e2d703660db9090262ad9fbf549c8a432a835b1924340136af55bb267bc209f3a9f75c4898d95bef3231471758ff161d32e00436028eacf529fd5815ba95c8d172458bc4a49bb568b57b85736c9bbb6b310af8ccd4cf47742fa8cfde5f22bd2ab34790609c5a0afea5a2c96c1c718d818365565c046f896312544533112ed4bd53f42306286de271308983a047286bf0db5f2604a5e068baff586a527a242545f7bf38911681c2c9a43e527714788fae402841d8ab274e3ba84765da20ede649d8aa96b86944104db799a2b99d8833d0e5c18b76324bffbca929b3524652a7b2b61ecf4a0c5e3eaf146a3daf1d38641f4439e2aa7c1c3ed862131f867854c50b9d87e3828cbe113e2008b3c85da0362ae27840750d34e6f4f6c036a963493d8a0f7363f25c5d8db87bced64fdfe6bcdc09b99e1a5dff27db7043da410cf04221de12f117800f995ddce79a8e40b16fcab8b76088d6dd1361a55f915ae36724f65218a518a8b5ee0d9b234fea5f299d07422095f66ea20b606126ab389ff5e8b026acd523c3f04ad8def4b0ba8cb4298796f30a55425f0e4317d418d1738c9e1801e850aa938868d8d0a20d8226704e934393c4c0e012d0f924b3692708042589eb6aff3e53d772faf737464be2431ac150975e5421b159b60e527db8416dde677569785bf54469e095df47fbca3569e2c7e5e2bdb4481f4f3afa8388d78beb158f0eda5ce32f5623a5038ded23f0d927f990221659eefcc21da13d871a15183b0af9278367938cf1efbff0cb1ac773ed7c8d4d0976a33601d4a6cb813f8b9473537d63de952b20f3f7e50a188893a8299732ae09240864715b81b1f4b35d4542a1bc2d7e31efdf761f350ef5e77daa4f79ad21d94ca9fc9d534659cbbfafffffffffffffffca914d91a84df437b6032ba02ad2e7a260f564c6271a6b5055859bdd22c7aef0f7c7b3cead47857d3ee7df12fab53579dafc9881a0706ca5539af1dad404512aeb11769bfe2f75989585b8ef31c6f39ded4a854f4c6a677ab6f07eb573ad86c214228a4f81f2b4e0bd5eb9c69b6e2e3c6e0f69490031b22fff7b5191f076f94f8711c37d8d6197f1673a2b3dc0d78584315afe6b0aedbecb0a4ab1d290488b6a7a2cb45bc05adb0f4de60dfc967f69cf6740262ba302471db28a2a0c4bd74967a5524a7c0255e8b9a39ad8ad3617efeac4038317177b726d4daf45b17ab52ac74546847a0f5a0f94f97827cae2312aa328d4c64645ee623f14f7b9b2ddaf8e26ca62686c399629a2693526f09ca8d72e079611817bf94ae489d7e13e913262e74bced24c60b55b2cb0104e534dab9e8c14696d035ff83aec922539f7c8035deb67d897cbd18adf86426aed2260da7303264b82ad3736bf6b8145ac55c4559af3e8c6198a0006f71b944e9761cfc8efd5c0574a5e586376418ec560a22735f1b6a546e00b4692d8326e82bef566c1571c10704676d6b4699c26f115963d0f3b6cf73c5235b146cff1d5db9b5920f47a4cb4203b06c988ac38eda55b6774e274be3947d60563aedc7c87a5520ffef98b9176e48d34ff8b3d64a4b929e787930b1f40f7a886a4f49f734675a8d5d3910f09c4076435b7866414bd248320f26598be202ac4864700f939a30274370fd716215cdc371f37bad5b546dc8894646b4df24efb9e068b9471ee8ca36f13ecaa666b4bbd2a640e5568b87202b20a80bbed7e6b8a78a21255dfa896d19ee729915007d7f53bee159d3728b399597bab9faa3da473ed2aeb2b6e657eace5c728ac080be95d9c30947b575ca1302bba297ec9e7ad8415e7a5ddd0b5395de86b575cafdca33dc8807bb3382bdd605d92f9b7ec322d970c34965c5cff21dfd0475d209d28b78c8baea018c176f254811ef6a7b68e6f4e6fbd098e795987a77bf6d5932ed2bd9280e63725cedbf7e9475286f84902a34a620a96977ca49ecff6eabf1d173c6a3f62a36463bfa9be0848392e6f0b7936786334808295b20abb1119905c34fffe564677988e2ebbc3dd0eb00e493ecb73a7484965107479402f89cebc444601f5d212a5720df1cf9dc254e9c90761abb1d03739be0dea622099dda43bab6f065331d0ce808484f49040947c86a7c82a7a406165844f4fa06dda89e62472bda1d3b6055924360ff84d6feb87098b8343cacba9fcf5ffa8077cef936965c7fade510a9775efd0ca62ea7345a07ea53807b54af9aa1b5b398a96ba82ce6d7ccb128db034437b55c7de34ce3594ace82485eec1068ba5973455c589c650e7e68d86e5b99cc8108fcff81ef849933cd759c4299d9dd7790f683d5eb6deae13ee045982e9b148cf0023a395b45623e9fa7a1e68cc7513fa345595755951693d98abbfa9618f2cbd2cbb83675622860c150a6e37d46bba16750aa65115ecfdb999eab5bff0ec37c4a27519326a070161c76396f9ae68c7aa1171483536a8388ad81125a31605eec02222a786b3bac009c4699f3117b817df89be37f704879453acc914f6b16f991069f4867ce67efe4172650cad71cc90ed96149c9bbc73c8216ff6cef0f52fa8525ea81a1a3eea142553465668d9aca9cbcf795144895a7f31cebd100ce1390f374273ed13e0363e6e17aa6f967adb1f6ee9bb468b2a955e30a4f41dd38b019b06fcf3d595e143ffcfa1cb0b0ba132a5f14509560753a0efdca40d01f22e198ab13b359dbc49d856002031e08f2e57a51c0f4573660bb3548713319af46b152cbbbb57ea06685800e4271afe192e88bb2686432ad35d08293af7c7f0b8ba92efe540f28f986873f5f2ac9df0120b82cf414713d93954b61e8903cdd65c51dd2b59bb2f507d7fd6a78651579e064a966155e42d52a7cd5b2c3eb457e5878f5095fe45820505c495ed92784ccc3efad4a994e344a606b53b4297746aeec0173e9eef65b25ef0a64cdf930ba8af282eddb64cc0d8b3e7d315cf9469998839983d3e50b419a1d8f5e116f9e927606e46bd5e86f2e1c7add66aa11bb98e259bc40f457ed208a666b19ee9c3e8bed98d77f79aaf0460c5395ab9b7ca702f35a271810360542f7caba7c25627e45947fb9c3964c44bc1f0208ab7452122bde224c2a9ad6cfa4413a90aa8ab790d01f2917000bc611170e1a057403e9e6b0cd49ad14f188b2ea53b747689df82ff11659e9033a248229fb96e468c51fa5c2f77b16ada92f2e4dcc83f6d4ea098977c9a4b704c0180ef2078a1d6ad6f4345fac91d3307c32cd95b83853dd960269cec3c5131a5d590949697f2037e3fc848284db876bf771eae15bebd0816f2a63e7e094787c14010379ae907292114e0b8becea516ef0fe8e4478c6eb7dcea29239aa1404167b6fc88bb1e297d599de01edfd8dff76717531d7fc846ac27dd162866ffe23cb1a56a0b7db51a3ed30ed092e9a3f925ca5632c91e9fbf4d800cfe20e8f8d24c4d508cc1a8a8d71ae9810347e14a810ad38be8a15fb2265ee8ceff80b928cd34318368a3756eb9074b5d9f86e08d043c870da036b762259026e20cb9760875dd77305d8474ac9f156666838ff10383b81af4ed7dc05c0336ac9c723c3cbea6090fe692486842c3e2c1d5c3ca2260f5509d07bcd8d936e109e791966e4403e7a5ee3e4970042ed08d670457fe9da4f6e4119b1693243f0065f970dc56484a593b35f0be32875f13632690067404da5b14a31b0b3f881858ddc0b7663856c5194b8834f40636ff59c9d41b9e81191230a0d755fc7e9db0e2cf5aec063ceb1ed3a490fbfa97c3768d71eecf518107271720cba10b1c5a6e6b570e661a893211c2d6ec17170b7d0662d51d146687a912811f8a9e149663719eb821e37a3aa85f913e596a7eca790d98910ff4887db654fccc89a0557149ec1057e10f465e606e04fbc73602010be0bcef47f1622bff188a06d0d7947cf12054516b8e4aecc7fc9fcd2cdf30af6df0d6ba8bcdbf201e61714fa66ce0d66c114d7c8e4ae2c5ccc3e1060cfe293dba799e2148860c9332dee536ce795ceebb78a56a6cea0369543c352a9659cdb64c82759cb7f3cd0bddf9a523ce38e59afab6cc5213cf37730e504aa726340a2bb839ef064d13fd60f163f8110ea51e4f99cc2d233a0ab88acd6a53e67677fa93168fc450ff23242e7a9385831bbfaa1056708ea47494fddf8a4ebed860dbe8960551978c7bef2ec957e738b1e6c4fb6e97ebbe4fbf46380138f953f8c67726cfb49ceee85612025a137856f855ac77ee92bfa9b06e161cff7d9881ae61e3abc326641af356c19220025993cf51f9ff1090cb3e4cec46124b14c164d7676da94d15d83b4de27ec63c2758f7634915808061945fbf898b4e7848db95b2d31f105645152898ca2dd1c342c0f06803ad34d09fe019b513454f72abb8ac5c771bfdd19b4a9e0bc0e06a046cd7e4401f73d78e024fc912293a2009ba83f2b51a60814dddbea98e37e79969d403a0e7bed30cd3629933d697d3723174e919e65f5815127e6a49843781f9462fb45e65818d0b2ed216f5bdd1cb897c68d3decb83d9e2217f69e3a5447b0902a9e56361f36c1b60ae5e2f6833e227759e7122b0e6dadb325df1b5925b4dc75123799a3b5ec2e5c480975c49d45c4eed68e72cf7f450444b652021988fcf97242684b95d5f6cf0063191cb1969615c8441d5208fe669057c2703904b5152ddcb5da5d0ef757bf40cbeb4906d316ca97e8bb89750cdc7eff99dfa255fb411f904dd35a81f5338805a42656d0998007c323157ccc79e05be40c15ccf51b675713e9b35bf8d341b98ff01ffac098a0bcd31f10c95012f5023458ed90a44efe86a3e6b3bd3a911fb36ed6f2b2b37c91aad562db519bde5d800c75cf0ca7c6c9476b5106a2fd85fbc46c09b13d4b67e3afb5d7254eee4cf4f4357a157a3bda19ec767661e07acf46964ecd83bcc07747bee1752f49c8995fd97d3aa9d647c8c315328e986823166051a64fe7b24efad03d894bb776000a35965fc4444f84b6d087ab980ee7a38a79e709acbe3c4a62d7d9f2162d56d2a393802f567d91e3708983ab2bb7a870744d1d7ad67d5534f81995416c4b1aea7669c3bb899adace67f33b6ccf6d2b0ed0d45b672b947ba9375c10176ad6ee40a030f0bb6ce5d58c3db3a307e8bd5271eb19d265f0c0f99bba7c8c0960ff00d16eadd58bec73d3d8e785047f48af87fee26afe084d9de9893c03e60a31a00eea6b832517c0287b3f5559aedf0271e2d2d6b2ab8a0a766b5ddc1ac17126dbcb696f45d9dd21b392f95a6d83f682566a50e58a6dd45a77a79dce7d19871eb68c3120d85b742ab71c9f3ef0dd5c22b03dc4b6ca2d10a7cde73fc4ffe62c812037ce1897b2798cf480f5c71a659f84909ece19dbe7848134a02ca16f674e38d5fa9fe1299bfe004af99091136803916d637509654a8b15397315219200dc923ee3b7de21004259f1d77be9d58ea87805efcfd7a5c50cc4ff5e77132be212fa413daa54d41812ba2ead03a531cf537fb66cc437703153d488966c225361e8253ac550d87c7094d529c4afb0e75842e3be0ef7292eeea177367aa6efb21dec3ad12493db606a97e8eff3e4cb5c9333de8b22041df489c93d16f915bf5d1cd2f47e3e5bb33296b89fd76c86c5332daa2582d49fab29d4c9fc1b732b9a1641a3064ca77c45e7bec5c2eb1bf59b5420ff3bdbf01e51d3463166dd6a9831e9c53f38734b1b2237d6a2dfb375ad090b6b3732231ebdc9dd04bc2aca3fe8d876cf3dc5d37eebc30d11629afc6f7b458de5ddaf184fcae678786982bc0b70d850f4dd32da36fdd5e3e38435ec803bd936c58f75fb62f9172fc74f2a0b40d14c275fda5fee06fa056e048a50138315479bd77a20e1e5c8243bdec4d0f6780fdb7e24e680d6881057b8a087d0666b07f5a6fe8da0cdab399df5f747122b5ebdc84628c48efea88461ecea783b5104e1992b1eed5a65e0f46837c8952b63982a41dc73fd0acdccc2350daff5af13a236c96265058f46ef2a748597877898722602523c8ea92554424d80b4c13dd0f45ab09e9689528e4b89e743ef0c62ab7458f8815f52a049c55ca177eb0659e21cc0f2dfc9c7b11a4522cdcdc2e1194a1151c8ca7d9113fe8d8d02a2ba256fbcc399555c6c51943024647530e26bd941993df85f1503943c4a70a242eca2209e5c4960b6ad168d709eedc703f38a521c2c443bbf6346afadc97b91c9a85443ab0007ecb1c6e46bfebd20d5ecf286bef1402584afe910501b81c7f1c03ade0fca870a224382b553e44c9275a243b6c1447c8d99f68290cc8384895b9d375039eaa6489357eea1ca7dce802927f8ae779ac9170d7c3d182f971034c9814982c3d9663e5c102ff3b3769104326661837d4580c5892a4a8a405496c8a6e51a6db03d47220e5b94204cb81d7d713b212bf7b776e30dce8bd05a772226ea52dbd7fb569040b58cb53edec24ee3502a41291d53f7db1d0eb1bd46f076f854648661b985d0d685f674a213e79e38b6d76cb741e2e75db096ff739e3bad694b34f6a556f5373592195f51df845a9c44e974537f8b378d3326f6e58ad98cc0259ea6d33dc7ca3550a6f7966acd6a93589585d31e8393d97dbbef8cb7eae9802de74e8c822d6d86b36a8d9929a0e6683f6a29bd9b1a3a5f5a1720b58f8ae22176592678a2417f55c45e86f88b2e7c9cb922ed625b79bcf26ff2324e90d177d3ee2eb249c2fbaf11b2e4f65efa155f3470a7451a793ce842bc80f6b0ca3c87e9bcd2ee31eae94c756c88b7ea57eb8e34bd9d2d2d980ffb10693620221ef53d7f695bb45d7dfc99100e2bbbe5363a6c8a5eb2e7063b9480d11c2989c00bab8483f0001ff03dc089c03e82134104351aea7eebebfefa2babd328c1841ec8672aebb96b99a987353d98fb46205202e9c595ad3b405951cb4e30b7f16cff9aa4e1fb1330f0ce359b4b296dfceea700d0fc598ee780bf1e4f1993ffcd380b95f75b6d3513bbf590e21ce936ea0d83bcdb4e5fb1105228ce1c6b65e5c86d21d5731088aa2b0c4a5cf7649b16072dae252e77a9256ae37995ce86bb1427a535a555a90d666277310d5c80a8a436d79d4c4df14dc0e1b5703b022034c09cf546797cdc51f4ab8655e400460b863e354a9416cefc8c0088af766676e66cef18846edc75e9d1f5ee66183e588f6858d8eba0ec7566a6620a2cf74713a68c4b44eb7d476f350ba735abdfa2d2dce14b1d3d379dafb7e951849d36bd8613eb890c53959bfec0d099589c3c414eba2fbde2d0d6e5e49c27db979160fe194a6787177ac92410afe788133cafe10c03bc6c304ac1e887322654590e212d7768381fba349876c950bd15483944ee259e8974704bf233301244a2cafcd7783fcd80355eabbf6a459993a7b5a91d0651fd7f45194da6301054721f7f8cd5948597c10cedb887b1ef9d48cb3d21406003d6620cbe0f030fe801a3ec3596b4a036fe6393c28e8736ce1f340f6e389ea826d39f4e361ee760e51bbc1e6922701e60a122a6f4c5d476384555b2792bf0f5bb3a45f2e7a4b2eb782e0cbe574adfd431c8819aa668bc18c0649558accd27a759c68b82aa3f00dd7cdfdd51c2aee8c8e48f5dd8fbe779be876c8ad7836e868332f29ba373643f23cfbb5efdc7f1ac3752b7f150e000c613654ef8db38158dfa0e2776236c4eb535ae6f62cf8f4ed030b2282d462d3cf5466c7832454496ceaaeeb5eb4c60bf6ab2ac692c5951fe88b7c24e600e9238b31d1fea7ede4b523214103b14a087609584fff3d5d30007756b3608efeb44b4f1872c238462edb42821bef293afb4ed88830b7d84c98a5b7059f403a49a1853075f7d1e155fe1c578d1896ce970167f6ad5967f2f87373c54090e6e9c0d6f0b92f7e89047c868c51ad4ba76a9505519f34c205daf392c0ff977b1d062ea288df95bf8de9084f065a6607dd5fe5837f3b6ad6580454bc9e8d048dc1a6380c923bbdd2f718b64a7a6af2ed46ace922290fd48bb136d1386f9d4fc699fe1b427e240b40da1b14c64df2f04c6ba0fc93b80ed3b7a0bb102072f5ca1a09a73ba0eea95256aba17977a6ff1a30d94744a8464d9a5fe55c9b6e37b5354bed93ef7a0f55a687232e195455084b3abf10b42de681e98b946c5156fac504b5f78c22c1b5085a634e67ce90fb0e8816ef3751f35069d79ba5278de700ee19f8af6124ee34c6451d4c993cc03cf4a96f87e7714e60b873772c2c0df5bb83db89e09a1471cd6e9b06f2927e5315443a5078eb3b65a153ca24c5bafc6553e599f6b7b829609dccbe2e96928ec5a6c70fc4d13dd21f92c9ce25d9ccac61aa405dc5ee069c1e7be2a84cc9a8fb3836891591c7b68999eb083a0f8eb8ff48617c50fd0f711c257f707358d11c6e63e77ef8f37af91c959d9cdb8e31960099644b461cd4855b632f798ae9f10645ecf2fd6b6682c1d1dfa0fc81205480cd9456338d5336a6d7031fd226111882d4d2469fe86465a7cb25be0192a24d12fa886f187d76b9c41eb43a47c83e6b122fd2afda65e73d59b2f7ad086331596b50b37e0e09baa9b3aa25b2b4d09f1ec98bd753fb9cf557543720d4efec5991172a60f68c00ce4588c094d9928a721f0a00b328dcd4ef3b3aa29a8b15ae9a345fd28eca6bf7aadf679f86b4c9d68c5d1be9c7b7d601892ff2b36849160d6606e33b347cbc66400f2aef575008b1a0072fbab8c92768f49485180415194c004fc22c6f0d772a0c8b988d7a530a86c3040b4f8baa0eb7f86794867db4b4428923c4af2f637eea0609a99ba565335c697749d506e3da43136cca18caae8a5fe2ee55b2e479f78b2d0cbace741b6ecf78390acb37ff5920c4001fd8f012f46dd757f9bb446f9666826280ea4949b9526cbd51e9488b6f54e927b657d6b31e0f68f98b42a2d879e47f9e690aa1a10f5f1ee2c2e307b2884ed301ee6be0635d04b5fbba27b38c99477a9936ce46767b670f77aa6b7f7941c6bfeef9a6b726c31e2eee70610b782d92dc7b6dfc57a2d588ecf1f2e0dd8d5282e6e2216afff09c557bb3eb02fab5d1dea0ea44d0f82e8e335a0f33b36839200", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 25m15.607357189s ago: executing program 4 (id=71): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$media(&(0x7f00000004c0), 0x80000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) socket$kcm(0x29, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000054) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000014) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) 25m15.229125945s ago: executing program 4 (id=73): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$media(&(0x7f00000004c0), 0x80000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) r1 = socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000054) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000014) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r4, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040c91) 25m14.613808044s ago: executing program 33 (id=73): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$media(&(0x7f00000004c0), 0x80000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) r1 = socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000054) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000014) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r4, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040c91) 11m43.685962137s ago: executing program 6 (id=2974): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010500000000fbdbdf2500000000", @ANYRES32, @ANYBLOB="01600000000000001c0012800900010069706970000000000c00028008000100", @ANYRES32], 0x3c}}, 0x84000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400000000fedbdf2500000000", @ANYRES32, @ANYBLOB="13ff010001a001001c0012800900010069706970000000000c00028008000100"], 0x3c}}, 0x20004000) 11m43.513791427s ago: executing program 6 (id=2975): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) write$sndseq(r1, &(0x7f0000000380)=[{0x6, 0x0, 0xe, 0x40, @time={0xd209, 0xf}, {0x9, 0xff}, {0x9, 0x5}, @raw32={[0x3, 0x3, 0x7fffffff]}}, {0x1, 0x9, 0x0, 0x6, @tick=0x1ff, {0xca, 0x6}, {0xd, 0xb3}, @queue={0x2, {0xe, 0x482e}}}, {0x3, 0x8, 0xe, 0x7, @time={0x10040000, 0x9}, {0x4, 0x3}, {0x2, 0x4}, @raw32={[0x9, 0x857d, 0x5]}}, {0x4, 0x1, 0x40, 0x7, @time={0x9, 0x9}, {0x8, 0x6e}, {0x8, 0x40}, @result={0x2}}, {0x9, 0x80, 0x4, 0xe, @tick=0x8c0a, {0x6d, 0x1}, {0x9, 0xd}, @time=@tick=0x74}, {0x2, 0x8, 0x6, 0x6, @tick=0xaacf, {0x8, 0x5}, {0x5, 0xf9}, @note={0x3, 0x6, 0x1, 0x0, 0x1}}, {0x0, 0x9, 0x0, 0x8, @tick=0x1, {}, {0x9, 0x10}, @raw32={[0x6, 0x531, 0x6]}}, {0x2, 0xe2, 0x3c, 0x7, @tick=0x2, {0x80, 0x2}, {0x81, 0x3}, @time=@tick=0x8}], 0xe0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYRES8=r1], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "2edbe9ae"}]}}, 0x0}, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x68, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x14}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000009) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000000)) 11m40.418653975s ago: executing program 6 (id=2982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) r7 = fsmount(r3, 0x1, 0x0) fchmodat(r7, &(0x7f0000000000)='.\x00', 0xe0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000110001010200"/20, @ANYRES32], 0x20}}, 0x0) 11m37.955913371s ago: executing program 6 (id=2986): ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1846, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="5de30800000008093d9141870046"], 0x0, 0x0, 0x0, 0x0}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="664ad1c4d0e691244cfa036f8d38cf1cc377b8ad03000000dda351c92c", @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r2 = syz_pidfd_open(r0, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) open_tree(r3, &(0x7f0000000080)='./file0/file1\x00', 0x801) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 11m34.949545024s ago: executing program 6 (id=3003): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xe0000000, 0x28014010, 0x2, 0x2, 0x0, 0xd, 0x0, 0x0, 0x20, 0x9}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20c01, 0x0) dup3(r2, r4, 0x6700000000000000) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001500)={&(0x7f0000000200)={0x50, 0x0, 0x200006, {0x7, 0x2b, 0x81, 0x400202, 0x0, 0xfe, 0x88000, 0x8, 0x0, 0x0, 0x4, 0x40000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m31.439977209s ago: executing program 6 (id=3011): r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x48c0) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2000031, 0x0) open(0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002240)={0x10, 0xffffffffffffffda}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendfile(r5, r2, &(0x7f00000000c0)=0x58, 0x5) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x17, 0x0, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100022bd700036eb00000300000009000100730000000900030073797a300000000014000200766972745f77696669300000000000009bf07db15101f25434cea6e2cd245d7a1fd41046158059812de2a00a16bf8a19a72ee3dd783ce8f9ce486406bfd21071b614115601346f3c74ea3d50fa601cc3248c00000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000011}, 0x40001) 11m30.819929007s ago: executing program 34 (id=3011): r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x48c0) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2000031, 0x0) open(0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002240)={0x10, 0xffffffffffffffda}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendfile(r5, r2, &(0x7f00000000c0)=0x58, 0x5) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x17, 0x0, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100022bd700036eb00000300000009000100730000000900030073797a300000000014000200766972745f77696669300000000000009bf07db15101f25434cea6e2cd245d7a1fd41046158059812de2a00a16bf8a19a72ee3dd783ce8f9ce486406bfd21071b614115601346f3c74ea3d50fa601cc3248c00000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000011}, 0x40001) 10m54.078458666s ago: executing program 2 (id=3095): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0xffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6adb}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xb6c6cd315b241bca}, 0x8000) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000001c0)=0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0) 10m52.309345768s ago: executing program 2 (id=3101): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) clock_getres(0x5, &(0x7f0000000000)) ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) read(r0, 0x0, 0x20) syz_emit_ethernet(0x7e, &(0x7f0000000580)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@lsrr={0x83, 0x3}, @cipso={0x86, 0x3a, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x8, "f7d11634eea2"}, {0x0, 0x2}, {0x0, 0xd, "ccf0294e2a3bdb4aa40b24"}]}]}}}}}}}, 0x0) close(r0) open(&(0x7f0000000040)='./file0\x00', 0x40, 0xff0f) 10m51.539460826s ago: executing program 2 (id=3102): ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000080)={0x60, 0x0, 0x300, 0x320, 0x0, 0x6, 0x0, 0x1, {0xa, 0x8, 0x1}, {0x8000, 0x4}, {0x200, 0x5, 0x1}, {0x9, 0xff, 0x1}, 0x1, 0x80, 0x6, 0xa8000000, 0x0, 0x8, 0xfffff87e, 0x4, 0x47, 0x2, 0x7, 0x4, 0x36, 0x0, 0x3, 0xb}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x8001, 0x0, 0x0, 0x1}}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x6, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x60800, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) getdents(r9, 0x0, 0x0) 10m51.327631619s ago: executing program 2 (id=3105): ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1846, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="5de30800000008093d9141870046"], 0x0, 0x0, 0x0, 0x0}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="664ad1c4d0e691244cfa036f8d38cf1cc377b8ad03000000dda351c92c", @ANYRESHEX=0x0]) syz_pidfd_open(r0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0/file1\x00', 0x801) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 10m46.578512084s ago: executing program 2 (id=3114): ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000080)={0x60, 0x0, 0x300, 0x320, 0x0, 0x6, 0x0, 0x1, {0xa, 0x8, 0x1}, {0x8000, 0x4}, {0x200, 0x5, 0x1}, {0x9, 0xff, 0x1}, 0x1, 0x80, 0x6, 0xa8000000, 0x0, 0x8, 0xfffff87e, 0x4, 0x47, 0x2, 0x7, 0x4, 0x36, 0x0, 0x3, 0xb}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000002600181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x8001, 0x0, 0x0, 0x1}}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x6, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x60800, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) getdents(r9, 0x0, 0x0) 10m45.59464461s ago: executing program 2 (id=3115): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) connect$netlink(r4, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="14002c8008"], 0x30}, 0x1, 0x0, 0x0, 0x24004904}, 0xc0) 10m45.280070681s ago: executing program 35 (id=3115): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) connect$netlink(r4, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="14002c8008"], 0x30}, 0x1, 0x0, 0x0, 0x24004904}, 0xc0) 4m33.914761038s ago: executing program 1 (id=4110): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r5 = dup(r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000cc0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) socket(0xa, 0x2, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f0000000580)={'pcm3724\x00', [0x4f27, 0x5, 0x4010000, 0x5, 0x66, 0x1cc7, 0x532, 0x80009, 0x2, 0x100, 0x9, 0x2, 0xeffeffff, 0x9, 0x1, 0x80000101, 0x7, 0x1a449, 0x3, 0x40020003, 0x100208a, 0xf, 0xd27, 0xb1, 0x7fff, 0x8, 0x3c, 0x0, 0xb, 0x0, 0x2e7]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x2c93a000) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000100)="660fc007baf80c66b8ac7a508c66efbafc0c66ed0f005a962698b80c008ed066b9620900000f32660f6823670c0066b858f900000f23d00f21f86635200000060f23f836673e0f01c5", 0x49}], 0x1, 0x19, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x40, 0x0, 0x0) 4m32.569603075s ago: executing program 1 (id=4113): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000001140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000003180), 0x1, 0x0) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000031c0)=0x0) r6 = getegid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000003200)=0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r8, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r10 = syz_open_dev$vcsn(&(0x7f0000000200), 0x10001, 0x7b1180) sendmsg$NFT_MSG_GETGEN(r10, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x10) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x158, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x2f, 0x0, r9}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd29, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x67, 0x3, {{'deflate\x00'}, 0xf8, "6f85bf85a2fc88fd5132a7226878830e7135efbf027ac5cab808d6a4b3ab2c"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8801}, 0x0) quotactl_fd$Q_SETINFO(r10, 0xffffffff80000601, r9, &(0x7f0000000040)={0x6, 0xc, 0x1, 0x1}) getgroups(0x3, &(0x7f0000003240)=[0xee00, 0xee00, 0xee01]) r13 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000003280), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000032c0)={0x2, 0xff, {0xffffffffffffffff}, {0xee00}, 0x7, 0x7fff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003300)={0x0, 0x0}, &(0x7f0000003340)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000003380)='./file0\x00', &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) sendmmsg$unix(r1, &(0x7f0000003540)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1000}], 0x1, &(0x7f0000003440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r2}}}, @rights={{0x1c, 0x1, 0x1, [r3, r0, r1]}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, r12}}}, @rights={{0x14, 0x1, 0x1, [r13]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}], 0xd8, 0x800}}], 0x1, 0x2400c080) close(0x3) 4m31.943639518s ago: executing program 1 (id=4115): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010500000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01600000000000001c0012800900010069706970000000000c00028008000100", @ANYRES32=r2], 0x3c}}, 0x84000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="13ff010001a001001c0012800900010069706970000000000c0002"], 0x3c}}, 0x20004000) 4m31.665628959s ago: executing program 1 (id=4116): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x2) mount$bind(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x136899, 0x0) unshare(0x26020600) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2001080, 0x0) 4m31.460413766s ago: executing program 1 (id=4117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0xe0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000110001010200"/20, @ANYRES32=r8], 0x20}}, 0x0) 4m28.20880847s ago: executing program 1 (id=4126): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010500000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01600000000000001c0012800900010069706970000000000c00028008000100", @ANYRES32=r2], 0x3c}}, 0x84000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="13ff010001a001001c0012800900010069706970000000000c0002"], 0x3c}}, 0x20004000) 4m27.610321814s ago: executing program 36 (id=4126): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010500000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01600000000000001c0012800900010069706970000000000c00028008000100", @ANYRES32=r2], 0x3c}}, 0x84000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="13ff010001a001001c0012800900010069706970000000000c0002"], 0x3c}}, 0x20004000) 3m16.784035135s ago: executing program 7 (id=4319): r0 = socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x2d}) 3m15.240824494s ago: executing program 7 (id=4327): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0)=0x9d, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r6, &(0x7f0000000600)=[{&(0x7f0000000380)=""/116, 0x74}], 0x1, 0x82000001, 0xff) sendmsg$SMC_PNETID_ADD(r6, 0x0, 0x4000) openat(r6, &(0x7f0000000100)='./file0\x00', 0x40000, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x4002, &(0x7f0000000500)={[{@uuid_off}, {@redirect_dir_nofollow}], [{@uid_eq={'uid', 0x3d, r7}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x18, 0x30, 0x34, 0x61, 0x33, 0x30, 0x30], 0x2d, [0x0, 0x39, 0x65], 0x2d, [0x65, 0x64, 0x37, 0x33], 0x2d, [0x36, 0x66, 0x36, 0x66], 0x2d, [0x62, 0x64, 0x33, 0x33, 0x38, 0x37, 0x63, 0x31]}}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, 0x0, 0x0) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04221f2d"], 0x12) 3m13.252157423s ago: executing program 7 (id=4329): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000210a03"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x20000004) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000000040)={0x0, 0xe, ""/14}) 3m13.155099101s ago: executing program 7 (id=4331): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) (async) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) (async) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffe, 0x22, 0x6, 0x1101, 0x1}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x164) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) 3m11.850640423s ago: executing program 7 (id=4336): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x9, 0x8b}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000002c0)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x10001, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000040)=ANY=[], 0x18c) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONNECTINFO(r5, 0x40085511, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, r7], 0x5, 0x80000}) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) copy_file_range(r8, 0x0, r8, &(0x7f0000000080)=0xfffffffffffffff9, 0x1, 0x0) 3m7.087765457s ago: executing program 7 (id=4346): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) socket(0x2, 0x3, 0xff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200888e4}, 0x20048000) syz_usb_connect(0x2, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0x4, 0xcc, 0x3, 0x8, 0x9fb, 0x602e, 0xa99d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0xc0, 0x0, 0x8, [{{0x9, 0x4, 0x2, 0x5, 0x0, 0x81, 0xc7, 0x28, 0xd1}}]}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r8, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) 3m6.334080806s ago: executing program 37 (id=4346): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) socket(0x2, 0x3, 0xff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200888e4}, 0x20048000) syz_usb_connect(0x2, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0x4, 0xcc, 0x3, 0x8, 0x9fb, 0x602e, 0xa99d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0xc0, 0x0, 0x8, [{{0x9, 0x4, 0x2, 0x5, 0x0, 0x81, 0xc7, 0x28, 0xd1}}]}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r8, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) 12.860397705s ago: executing program 5 (id=4844): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x1000000000002) r2 = socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x2, 0x80009) setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x57) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) kcmp(0x0, 0x0, 0x4, r0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) unshare(0x10000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0xc52db000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) io_uring_setup(0x748d, &(0x7f0000000180)={0x0, 0x2c3f, 0x40, 0x21, 0xab}) socket(0x28, 0x5, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x49) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) 11.646409438s ago: executing program 5 (id=4847): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x6) sendto$inet(r4, 0x0, 0x0, 0x8000, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) sendto$inet(r4, &(0x7f0000000200)="690300", 0x3, 0x20000800, &(0x7f0000000500)={0x2, 0x4e22, @empty}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$FBIOBLANK(r5, 0x4611, 0x3) ioctl$FBIOGET_FSCREENINFO(r5, 0x4602, &(0x7f0000000540)) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000001030101000000000a000000000000000c0002000000000000000069"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x14) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776050203010902240001000000000904310002ff0107ff09058a02100000fa000905ff"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 10.7269371s ago: executing program 3 (id=4851): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], &(0x7f00000000c0)='GPL\x00', 0x40, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000016"], 0x34c}}, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x7b1faca3e37d207a, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, 0xe, 0x1) 10.555703284s ago: executing program 0 (id=4853): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='F', 0x1}, {0x0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r6}}], 0x20, 0x2400e044}, 0x0) getresuid(0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) 8.433713392s ago: executing program 5 (id=4859): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xd) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001f0000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) ioctl$int_in(r3, 0x5421, 0x0) sendto$inet6(r3, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_page_scan_type={{0xc2}, {0x5, 0xe}}}}, 0x8) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='ext4\x00', 0x8000, 0x0) 8.23966658s ago: executing program 3 (id=4860): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff7ffc}]}) unshare(0x6020400) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fcdbdf253f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900040000001d0000002c005e8008000200ffffffff080005005e000000080005003e00000008000600ffffff07000000000000000068005e80080002000000000008000200010000000c00010005000000070000000800070069050000080006000500000008000700a305000008000600ff030000080003001208000008000700f706000018000100070000002e0000000100000006000000000001001c005e800800060097000000080003000a000000080003009074d426"], 0xd8}}, 0x20040090) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) connect$netlink(r4, &(0x7f00000000c0)=@unspec, 0xc) r5 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r6, 0x18, 0x3, 0x1) 7.225026031s ago: executing program 3 (id=4862): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket(0x24, 0x3, 0x9) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x49800, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000000)={0x0, "a91e6ea721c2ff68b535a71d993e1fcccccb4250168a696068573cef1de373338eaabefb9fd5aad9b6871ea9ddea93bf4e877acbf733de76755414c2cdeeaa7e", {0x0, 0x701}}) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0xd, 0xfffff801, 0x4, 0x21, 0x1000]}, &(0x7f0000000180)=0x54) ioctl$FBIOBLANK(r1, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x4c0, 0xffffffff, 0x0, 0x320, 0x100, 0xffffffff, 0xffffffff, 0x3f0, 0x3f0, 0x3f0, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ipv6={@local, @private0, [0xffffffff, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff000000], 'macvtap0\x00', 'vlan1\x00', {}, {0xff}, 0x0, 0x3, 0x4, 0x45}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d5], 0x7, 0x6b}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x5, 0x5}}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff000000], 'bond_slave_0\x00', 'caif0\x00', {0xff}, {0xff}, 0x0, 0x5, 0x8, 0x10}, 0x0, 0x1e0, 0x220, 0x0, {}, [@common=@rt={{0x138}, {0x100, [0x401, 0x7], 0x2, 0x4, 0x5, [@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @empty, @local, @mcast2, @dev={0xfe, 0x80, '\x00', 0x22}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @remote, @mcast2, @local, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @private1], 0x3}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0xca, 0x10, 0x8, 0x4, 0x2, 0x9, 0x8]}}}, {{@ipv6={@private2, @mcast1, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xff000000, 0xff000000, 0xff], 'veth1_to_hsr\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x87, 0x8, 0x1, 0x60}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x1, 0x1}, {0x4, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 7.131069948s ago: executing program 8 (id=4863): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x8008743f, &(0x7f0000000180)) 6.979599612s ago: executing program 8 (id=4865): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xd) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0x7, 0xe1, 0x8, 0x6, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x8, 0x40, 0x1, 0x5}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001f0000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) ioctl$int_in(r3, 0x5421, 0x0) sendto$inet6(r3, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_page_scan_type={{0xc2}, {0x5, 0xe}}}}, 0x8) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='ext4\x00', 0x8000, 0x0) 6.936039516s ago: executing program 5 (id=4866): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80, 0xfe}, 'port0\x00', 0xeb, 0x1b1c07, 0x4, 0xff, 0xffffffff, 0x1, 0x2, 0x0, 0xb, 0x2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fff}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmmsg(r0, &(0x7f0000002e00)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2005, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f00000000c0)="d11113fc49d10a491884ba76c1b13b987afeed21d31677bb89776c20365b1b9975904a78c89cf8553e7809a5df16bcf8888da458e317b019518140bc9ab85289a8ec2fda4a48b380852c21b75d4e67c43e753245f0daefcd57cfa59afa4cfb7147197a222d81158679b1651cc0a59f95fb0e93ac276fff33de3313155a0f76205c8f8d807bbd4772e9b78c5a06dac7c5ad1ba9dbe999509eb7863482b2db2c9c882f38612a88ff621c0f5a38119eefe7f8ded1f26e2f7705917ed734830b6f99bed1234ec8f817704452439b93a4d5088fbd6005b25ea9e4", 0xd8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000050) 6.650393438s ago: executing program 0 (id=4867): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_delrule={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x3}}, 0x1c}}, 0x20000000) 6.563844553s ago: executing program 5 (id=4868): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000c40)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x90000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x1ff, 0x5, 0x3acaa292, 0x2}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24040054}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1c, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.440607019s ago: executing program 0 (id=4869): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x1000000000002) r2 = socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) kcmp(0x0, 0x0, 0x4, r0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) unshare(0x10000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0xc52db000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) io_uring_setup(0x748d, &(0x7f0000000180)={0x0, 0x2c3f, 0x40, 0x21, 0xab}) socket(0x28, 0x5, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x49) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) 6.298056919s ago: executing program 0 (id=4870): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x6) sendto$inet(r4, 0x0, 0x0, 0x8000, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) sendto$inet(r4, &(0x7f0000000200)="690300", 0x3, 0x20000800, &(0x7f0000000500)={0x2, 0x4e22, @empty}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767030090a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$FBIOBLANK(r5, 0x4611, 0x3) ioctl$FBIOGET_FSCREENINFO(r5, 0x4602, &(0x7f0000000540)) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000001030101000000000a000000000000000c0002000000000000000069"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x14) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776050203010902240001000000000904310002ff0107ff09058a02100000fa000905ff"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 6.240606989s ago: executing program 8 (id=4871): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbe"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x2800, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_script(r4, &(0x7f0000002880)={'#! ', './file0', [{0x20, '/dev/dri/renderD128\x00'}, {0x20, 'mounts\x00'}, {0x20, '\\-t!\x14[\xf9\xf2\xfdd\x01@\x9fD\xe6\x88)\xfd\x17\xeb\xb7q|\xc0T\xdb+zr\x81\\\xaa\xd1\x01\xfb\x1d\xf7\xc2\xbf\xaa\xee1\xe5\xb3\x10\xcb\xac8\xfa=~\xfb\xc8\xe4\x03k\xca~\xbe\xdd\xd6\xcet\\\x95\xed\xeb\xdd\n\xbcA\xb0\x06\x9aF\xc9\xbc\x81+\x16\xc8\xefz\xeb\xbf\xa7\xb6\xc0\x9ch\x04\xffD\x03\xc9\xa4\xe6J\x80\xbb\x90\xe2\xf3K3\x9d\xcc\xf2\x94\xae\xae\xf61\xd8G\xa1E\x00;\x04\xce\x91F\xa6\xf3(w\x9d\xe1\x0e\x9f\x97\x8a\x82E\xdbR\xadXA9\xf0\x05\xa7\x01\x00\x00\x00\xd6\xa5\x16\xe1\xa77e@i>\xa9\xc0+\xb7R\xf6F\xb7\r\xe6ES\x01\xa3\xbfD\x9a#M\xda\x85U\x937\xe1\x8b\x89\xb7nR{)#v\xac\xdf@\xa7\x02\xbf\xe9sW\xc1D\xa9$\xfb\xa9\x15\xbbY\x93Dz\xb9n\xb4\xde\x8e\xc3\xe4\xe3\x9c]oo\xf8\x94\xab\xa8 \x8c\x19\x12\x85\x06Z)8\xd5\x17:\xcb\xc841X\x8f\f\xb6\xdfQv\t\x0f\x92\xf8Q,N\x1e\xe5#\xa6\xc2\xf5\x85\xc7^\xbe\xe8f\x85\x99\x9a'}, {0x20, 'mounts\x00'}, {}], 0xa, "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"}, 0x1144) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x2, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001100010025bd7000fedbdf25ffffffff0000000000000000000000000009000000003c0014000d00ffffffff000000000010000000000000", @ANYRESOCT=r4, @ANYBLOB="806cbd7a548ac24a7324fde657f6e3957fbc96edf2950277e6a143cbc06947"], 0x3c}, 0x1, 0x0, 0x0, 0x24044821}, 0xc000) setreuid(0xee01, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r6, &(0x7f0000000840)={0x2020}, 0x2020) syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000180)={0x0, 0x0, 0x9, 0x9, 0x10, 0x7fff, 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r7, 0xc01064c2, &(0x7f00000001c0)) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 6.123914279s ago: executing program 5 (id=4872): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff7ffc}]}) unshare(0x6020400) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fcdbdf253f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900040000001d0000002c005e8008000200ffffffff080005005e000000080005003e00000008000600ffffff07000000000000000068005e80080002000000000008000200010000000c00010005000000070000000800070069050000080006000500000008000700a305000008000600ff030000080003001208000008000700f706000018000100070000002e0000000100000006000000000001001c005e800800060097000000080003000a000000080003009074d426"], 0xd8}}, 0x20040090) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) connect$netlink(r4, &(0x7f00000000c0)=@unspec, 0xc) r5 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r6, 0x18, 0x3, 0x1) 5.058461045s ago: executing program 38 (id=4872): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff7ffc}]}) unshare(0x6020400) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fcdbdf253f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900040000001d0000002c005e8008000200ffffffff080005005e000000080005003e00000008000600ffffff07000000000000000068005e80080002000000000008000200010000000c00010005000000070000000800070069050000080006000500000008000700a305000008000600ff030000080003001208000008000700f706000018000100070000002e0000000100000006000000000001001c005e800800060097000000080003000a000000080003009074d426"], 0xd8}}, 0x20040090) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) connect$netlink(r4, &(0x7f00000000c0)=@unspec, 0xc) r5 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r6, 0x18, 0x3, 0x1) 5.045986135s ago: executing program 8 (id=4875): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x1000000000002) r2 = socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x2, 0x80009) setsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, 0x0) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x57) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) kcmp(0x0, 0x0, 0x4, r0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) unshare(0x10000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0xc52db000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) io_uring_setup(0x748d, &(0x7f0000000180)={0x0, 0x2c3f, 0x40, 0x21, 0xab}) socket(0x28, 0x5, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) unlink(&(0x7f00000001c0)='./file0\x00') open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) socket(0x28, 0x5, 0x0) 5.045667257s ago: executing program 3 (id=4876): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x8008743f, 0x0) 4.751629341s ago: executing program 3 (id=4877): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x8c, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x7ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'erspan0\x00', r2, 0x0, 0x8, 0x0, 0x1000, {{0x9, 0x4, 0x1, 0x39, 0x24, 0x64, 0x0, 0x8, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@generic={0xb, 0x5, "c2b6aa"}, @ssrr={0x89, 0xb, 0xe4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x11c, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000801}, 0x20000010) 4.351318271s ago: executing program 9 (id=4878): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 4.107696196s ago: executing program 9 (id=4879): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={0x0, 0x1, 0x0, 0x80}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = epoll_create(0x7f) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0xc}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r4 = syz_open_dev$rtc(&(0x7f0000000280), 0x6, 0x400c0) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f00000002c0)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') fsopen(&(0x7f0000000240)='cgroup\x00', 0x1) preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x3}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = dup(r2) write$cgroup_pid(r6, 0x0, 0x0) 3.340246387s ago: executing program 9 (id=4880): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0200000001"], 0x48) 3.219734613s ago: executing program 9 (id=4881): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8060}, 0x4000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x7, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) r3 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x1, 0x0) r4 = add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000040)=0x9c, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r5 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd697a262d00383afefe8000000000000000000000000000aaff02000000000000000000000000000102009078000004fe620811313f6fff00fc020000000000000000000000000000ff0100000000000000000000010000012b0000000000000045e5e7fa3d2228a2f4c96dbc5f2f1de6d5d741dae6fcc7d2e45220c40f146a79acc463026a5a38d93bb4f24d0b52f756aed0b877d3dd1eab4b4fc4042a19262e4b19660cde22f5fa745a4c00122dd55777af798096"], 0x0) recvfrom$inet(r5, 0x0, 0x0, 0x2100, &(0x7f0000000180)={0x2, 0x4e20, @private=0xa010100}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) keyctl$revoke(0x3, r4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000d80)={{0x8, 0x4, 0x72a8, 0x4, 'syz0\x00', 0xfffff801}, 0x0, [0xffff, 0xd, 0x2, 0x10003, 0x88c08, 0x400000000009, 0x10000, 0x202, 0x3, 0xffff, 0x87, 0x4, 0x6c27, 0xfffffffffffffffe, 0x98f2, 0x4b05, 0x3ff, 0x400040004, 0x6, 0x8000000000000000, 0x1, 0x8, 0x109, 0x1ff, 0x1, 0x8, 0x6, 0x8, 0x6, 0x5, 0x1, 0xfff, 0x3, 0x4, 0x7, 0x8000000000000000, 0x3, 0x4000000000000000, 0x2, 0x1ff, 0x2, 0x0, 0xdb4, 0x5, 0x16, 0x9, 0xe, 0x5, 0xc, 0x6, 0x2, 0x3b7, 0x5, 0x0, 0xfffffffffffffff9, 0x2, 0x7fd, 0x5, 0x0, 0x8000, 0x5, 0x34b, 0x7, 0x7, 0x4, 0x15af, 0xb79, 0x8, 0xf, 0x81, 0x6, 0x83, 0x7, 0x7, 0x400, 0x6, 0x3, 0xffff, 0x80, 0x0, 0xd, 0x8, 0xb, 0x8000000000000001, 0x12, 0x4, 0x2, 0x7, 0x7fffffff, 0x1, 0x4, 0x8010000, 0xe74, 0x10000000000003ff, 0x7, 0xc08b, 0x410, 0x80000001, 0x40, 0x1, 0x200000100000000, 0x100000001, 0x42, 0x3, 0x9, 0x5, 0x0, 0x2, 0x3, 0x33, 0x2f6f, 0x7, 0x5a73, 0xfffffffffffffff9, 0x4, 0x8, 0xa, 0x4, 0x7, 0x6, 0x800000004, 0xfffffffffffffffe, 0x2, 0x105ba938, 0x4000000000004, 0x7, 0xfffffffffffffff7, 0x6]}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES32, @ANYRES8=r0, @ANYRES64=r0], 0x50) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_open_dev$rtc(&(0x7f0000000000), 0x8000, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) 3.079809136s ago: executing program 9 (id=4882): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xd) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001f0000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) ioctl$int_in(r3, 0x5421, 0x0) sendto$inet6(r3, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_page_scan_type={{0xc2}, {0x5, 0xe}}}}, 0x8) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='ext4\x00', 0x8000, 0x0) 2.980405703s ago: executing program 0 (id=4883): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000047c0)=r1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000011040)=@newtaction={0x18, 0x30, 0x216822a75a8bd32d, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x48010) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r5, 0x0, 0xf, 0x0, &(0x7f0000000080)) write$dsp(0xffffffffffffffff, &(0x7f00000000c0)="b561a651404099ffd39ed6d59df082dab160e30f1e98a8672bb04a2fcd97eb3e70c48794e8c2a155f37fff6a2f1102071e14c351fac3faf436b5bd2597b422a13c39723af447eb9ec3", 0x49) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) 2.336867331s ago: executing program 8 (id=4884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x30000) 2.119554679s ago: executing program 8 (id=4885): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x8000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x75) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xc0) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x8080, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2ce6067766646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',\x00']) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x88901, 0x0) socket(0x18, 0xa, 0x7fffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)='cpu.weight.nice\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000000000000000000000e700850000006d00000095fcd6329afdff41ed14dfce8cd98528744d95ce821e1c289a629f829cdbf1bcefed61ad93216faf516b91facad5eaed9c85960b86ee05c5453eeb091296db56f7fdeb86603200"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x2, 0x2) r6 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, 0x0, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x4) shmctl$SHM_STAT(0x0, 0xd, 0x0) 104.145108ms ago: executing program 0 (id=4886): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = mq_open(0x0, 0x8c2, 0x30, &(0x7f0000000080)={0x0, 0x100000001, 0xfffffffffffffffe, 0x7fffffff}) mq_timedreceive(r2, &(0x7f0000000140)=""/154, 0x9a, 0x0, &(0x7f0000000040)={0x77359400}) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETA(r3, 0x8925, &(0x7f0000000100)={0x2, 0x0, 0x1, 0x0, 0x13, "31f40000f7ece2f4"}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xac, 0x2, {{0x2, 0x80000000, 0x994, 0x1, 0x3}, 0x2, 0x0, 0x66a4, 0x6, 0x6, 0x10, 0x1f, 0x1e, 0x6, 0x8, {0x7, 0x6, 0x0, 0xae29, 0x9, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000740)={0x11, @multicast2, 0x4e24, 0x4, 'wrr\x00', 0x39, 0x7ff, 0x22}, 0x2c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/custom1\x00', 0x800, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x7ff, 0x0) write$UHID_CREATE2(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) 68.922334ms ago: executing program 3 (id=4887): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getrlimit(0x2, &(0x7f00000002c0)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x97}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) lstat(&(0x7f0000000180)='./file2\x00', &(0x7f0000000300)) syz_open_dev$vbi(0x0, 0x0, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9, 0xfc}}}, 0x7) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xfffffffffffffd88}, @l2cap_cid_le_signaling={{}, @l2cap_ecred_conn_rsp={{0x18, 0x1}, {0x5952, 0x7f, 0x421, 0x6, [0x2, 0xff, 0x6, 0x3ff, 0x553d, 0x7fff]}}}}, 0x2b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c64d2, &(0x7f0000000180)={r7}) close_range(r6, 0xffffffffffffffff, 0x0) 0s ago: executing program 9 (id=4888): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @empty, 0x5}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xffffffa4}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) kernel console output (not intermixed with test programs): 1317.350036][T19726] usb 1-1: USB disconnect, device number 54 [ 1317.361862][T22736] fuse: Unknown parameter 'user_id00000000000000000000' [ 1317.397243][T19726] xr_serial 1-1:127.171: device disconnected [ 1318.927037][T22773] netlink: 'syz.0.4041': attribute type 1 has an invalid length. [ 1318.981834][T22775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4041'. [ 1321.129276][T22773] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1321.427622][T22786] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4042'. [ 1322.346113][T22806] fuse: Bad value for 'fd' [ 1322.463430][T17968] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1322.653715][T17968] usb 9-1: Using ep0 maxpacket: 16 [ 1322.661368][T17968] usb 9-1: config 0 has an invalid interface number: 49 but max is 0 [ 1322.669765][T17968] usb 9-1: config 0 has no interface number 0 [ 1322.680101][T17968] usb 9-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1322.788054][T17968] usb 9-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1323.166788][T17968] usb 9-1: config 0 interface 49 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1323.244436][T17968] usb 9-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1323.253542][T17370] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1323.328894][T17968] usb 9-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 1323.337067][T17968] usb 9-1: Product: syz [ 1323.341305][T17968] usb 9-1: Manufacturer: syz [ 1323.349386][T17968] usb 9-1: SerialNumber: syz [ 1323.360963][T17968] usb 9-1: config 0 descriptor?? [ 1323.426783][T17370] usb 1-1: Using ep0 maxpacket: 32 [ 1323.437164][T22804] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1323.445770][T17370] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1323.480920][T17370] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1323.536098][T17370] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1323.562905][T17370] usb 1-1: config 1 has no interface number 0 [ 1323.582606][T17370] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1323.620431][T17370] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1323.667995][T17370] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1323.691827][T17370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.757048][T17370] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1324.175636][T17370] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1325.226532][T17370] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1325.639985][T17968] usb 9-1: USB disconnect, device number 28 [ 1325.682220][T17370] usb 1-1: USB disconnect, device number 55 [ 1325.801921][T17370] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1325.812625][T22860] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 1326.030459][ T30] audit: type=1326 audit(2000525326.741:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22862 comm="syz.7.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4078f749 code=0x7ffc0000 [ 1326.086835][ T30] audit: type=1326 audit(2000525326.741:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22862 comm="syz.7.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4078f749 code=0x7ffc0000 [ 1326.206589][ T30] audit: type=1326 audit(2000525326.741:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22862 comm="syz.7.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d4078f749 code=0x7ffc0000 [ 1326.340013][ T30] audit: type=1326 audit(2000525326.741:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22862 comm="syz.7.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4078f749 code=0x7ffc0000 [ 1326.591068][ T30] audit: type=1326 audit(2000525326.741:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22862 comm="syz.7.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d4078f749 code=0x7ffc0000 [ 1326.771524][T22881] netlink: 'syz.0.4059': attribute type 1 has an invalid length. [ 1326.792925][ T30] audit: type=1326 audit(2000525326.741:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22862 comm="syz.7.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4078f749 code=0x7ffc0000 [ 1327.507257][T22886] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4059'. [ 1327.592502][T22881] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1328.124841][ T30] audit: type=1326 audit(2000525326.741:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22862 comm="syz.7.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4078f749 code=0x7ffc0000 [ 1328.150560][ T30] audit: type=1326 audit(2000525326.741:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22862 comm="syz.7.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f0d4078f749 code=0x7ffc0000 [ 1328.174607][ T30] audit: type=1326 audit(2000525326.741:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22862 comm="syz.7.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4078f749 code=0x7ffc0000 [ 1328.198303][ T30] audit: type=1326 audit(2000525326.741:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22862 comm="syz.7.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4078f749 code=0x7ffc0000 [ 1328.280983][T22892] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4062'. [ 1328.355092][T22895] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4061'. [ 1328.505841][T22904] 9p: Bad value for 'rfdno' [ 1331.965561][T22951] netlink: 'syz.0.4077': attribute type 1 has an invalid length. [ 1332.025147][T22954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4077'. [ 1332.435586][T22951] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1333.258407][T17370] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1333.435067][T17370] usb 9-1: Using ep0 maxpacket: 8 [ 1333.448805][T17370] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.530177][T17370] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1333.553807][T17370] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1333.565611][T17370] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1333.575377][T17370] usb 9-1: config 1 interface 1 has no altsetting 0 [ 1333.583981][T17370] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1333.593560][T17370] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.636945][T17370] usb 9-1: Product: syz [ 1333.641129][T17370] usb 9-1: Manufacturer: syz [ 1334.101273][T17370] usb 9-1: SerialNumber: syz [ 1334.949503][T17370] usb 9-1: 0:2 : does not exist [ 1334.977874][T17370] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1335.036910][T22994] Cannot find set identified by id 65534 to match [ 1335.121813][T17370] usb 9-1: MIDIStreaming interface descriptor not found [ 1335.150134][T17370] usb 9-1: USB disconnect, device number 29 [ 1336.085283][T19726] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1336.106961][T18433] udevd[18433]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1337.222208][T23025] netlink: 80 bytes leftover after parsing attributes in process `syz.8.4094'. [ 1337.235146][T19726] usb 6-1: Using ep0 maxpacket: 16 [ 1337.394810][T19726] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 1337.638873][T19726] usb 6-1: config 0 has no interface number 0 [ 1337.857303][T19726] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1337.885433][T19726] usb 6-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1337.903702][T19726] usb 6-1: config 0 interface 49 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1339.240867][T19726] usb 6-1: string descriptor 0 read error: -71 [ 1339.275505][T19726] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1339.319428][T19726] usb 6-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 1339.340353][T19726] usb 6-1: config 0 descriptor?? [ 1339.443020][T19726] usb 6-1: can't set config #0, error -71 [ 1339.459179][T19726] usb 6-1: USB disconnect, device number 55 [ 1341.178378][T23088] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4106'. [ 1342.224859][T23103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4109'. [ 1342.260770][T23103] hsr_slave_0: left promiscuous mode [ 1342.285821][T23103] hsr_slave_1: left promiscuous mode [ 1343.986995][T23120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4111'. [ 1344.193251][T23120] hsr_slave_0: left promiscuous mode [ 1344.205930][T23120] hsr_slave_1: left promiscuous mode [ 1345.382251][ T1005] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.627629][ T1005] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.744071][T23162] tipc: Enabling of bearer rejected, failed to enable media [ 1345.877445][T23162] comedi comedi3: multiq3: I/O port conflict (0xcf7,16) [ 1346.533685][ T1005] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.254620][ T1005] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.057160][ T5822] Bluetooth: hci2: unexpected event for opcode 0x0c46 [ 1348.462360][ T1005] bridge_slave_1: left allmulticast mode [ 1348.477633][ T1005] bridge_slave_1: left promiscuous mode [ 1348.483359][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.568344][ T1005] bridge_slave_0: left allmulticast mode [ 1348.573985][ T1005] bridge_slave_0: left promiscuous mode [ 1348.587837][T23200] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4130'. [ 1348.738809][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.250335][T17070] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1349.271472][T17070] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1349.297417][T17070] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1349.348522][T17070] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1349.379639][T17070] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1350.646866][T17370] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1350.837687][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1350.839509][T17370] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1350.871378][T17370] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1350.871433][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1350.909777][T17370] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.926740][T17370] usb 9-1: Product: syz [ 1350.927676][ T1005] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1350.936909][T17370] usb 9-1: Manufacturer: syz [ 1350.943799][T17370] usb 9-1: SerialNumber: syz [ 1350.948461][ T1005] bond0 (unregistering): Released all slaves [ 1351.127596][ T1005] bond1 (unregistering): Released all slaves [ 1351.192155][T23223] netlink: 'syz.8.4133': attribute type 39 has an invalid length. [ 1351.232787][ T1005] bond2 (unregistering): Released all slaves [ 1351.447912][ T1005] tipc: Left network mode [ 1351.471184][ T5822] Bluetooth: hci0: command tx timeout [ 1353.042882][T19726] usb 9-1: USB disconnect, device number 30 [ 1353.550964][ T5822] Bluetooth: hci0: command tx timeout [ 1354.354501][ T1005] hsr_slave_0: left promiscuous mode [ 1354.429904][T23259] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 1354.910514][ T1005] hsr_slave_1: left promiscuous mode [ 1354.916273][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1354.959608][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1355.003154][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1355.027283][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1355.100761][ T1005] veth1_macvtap: left promiscuous mode [ 1355.106290][ T1005] veth0_macvtap: left promiscuous mode [ 1355.139242][ T1005] veth1_vlan: left promiscuous mode [ 1355.147391][T19726] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 1355.158052][ T1005] veth0_vlan: left promiscuous mode [ 1355.369431][T19726] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1355.380350][T19726] usb 9-1: not running at top speed; connect to a high speed hub [ 1355.556920][T19726] usb 9-1: config 5 has an invalid interface number: 2 but max is 0 [ 1355.565332][T19726] usb 9-1: config 5 has no interface number 0 [ 1355.576494][T19726] usb 9-1: config 5 interface 2 has no altsetting 0 [ 1355.662185][ T5822] Bluetooth: hci0: command tx timeout [ 1355.673761][T19726] usb 9-1: string descriptor 0 read error: -22 [ 1355.680177][T19726] usb 9-1: New USB device found, idVendor=09fb, idProduct=602e, bcdDevice=a9.9d [ 1355.689593][T19726] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.706535][T19726] ftdi_sio 9-1:5.2: FTDI USB Serial Device converter detected [ 1355.719158][T19726] ftdi_sio ttyUSB0: unknown device type: 0xa99d [ 1357.372012][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 1357.412062][T12952] smc: removing ib device syz2 [ 1357.412462][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 1357.718799][ T5822] Bluetooth: hci0: command tx timeout [ 1357.917609][T15235] syz2: Port: 1 Link DOWN [ 1357.927736][T15235] usb 9-1: USB disconnect, device number 31 [ 1357.942236][T15235] ftdi_sio 9-1:5.2: device disconnected [ 1358.437868][T23295] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 1359.030885][ T5822] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 1360.894479][T23209] chnl_net:caif_netlink_parms(): no params data found [ 1361.460455][T23336] netlink: 'syz.7.4156': attribute type 1 has an invalid length. [ 1362.449589][T23336] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1363.491337][T23365] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 1364.033224][T23371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4162'. [ 1364.083358][T23373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4162'. [ 1364.309735][T23209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.316924][T23209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.328623][T23209] bridge_slave_0: entered allmulticast mode [ 1364.337321][T23209] bridge_slave_0: entered promiscuous mode [ 1364.350718][T23209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.358062][T23209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.373593][T23209] bridge_slave_1: entered allmulticast mode [ 1364.396230][T23209] bridge_slave_1: entered promiscuous mode [ 1365.220419][T23390] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4165'. [ 1365.401448][T23209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1365.414122][ T1005] IPVS: stop unused estimator thread 0... [ 1365.445324][T23209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1365.649213][T23209] team0: Port device team_slave_0 added [ 1365.657113][T23209] team0: Port device team_slave_1 added [ 1365.688589][T18569] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1365.720071][T23209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1365.736747][T23209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1365.827963][T23209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1365.859721][T23209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1365.866737][T23209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1365.900161][T18569] usb 1-1: Using ep0 maxpacket: 32 [ 1365.923438][T18569] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 1365.952099][T23209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1365.990692][T18569] usb 1-1: config 0 has no interface number 0 [ 1365.996830][T18569] usb 1-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1366.119305][T18569] usb 1-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1366.164141][T18569] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1366.175129][T18569] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.183316][T18569] usb 1-1: Product: syz [ 1366.187593][T18569] usb 1-1: Manufacturer: syz [ 1366.194536][T18569] usb 1-1: SerialNumber: syz [ 1366.213619][T18569] usb 1-1: config 0 descriptor?? [ 1366.223301][T18569] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1366.251480][T23209] hsr_slave_0: entered promiscuous mode [ 1366.309350][T23209] hsr_slave_1: entered promiscuous mode [ 1366.598795][T23398] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4168'. [ 1366.739716][T18569] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 1366.759388][T18569] gspca_pac7302 1-1:0.172: probe with driver gspca_pac7302 failed with error -110 [ 1366.928309][T17968] usb 1-1: USB disconnect, device number 56 [ 1367.420317][T23209] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1367.710739][T23209] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1367.865378][T23209] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1367.939117][T23438] netlink: 'syz.0.4173': attribute type 1 has an invalid length. [ 1368.001311][T23439] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4173'. [ 1369.489991][T23446] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4175'. [ 1369.592998][T23447] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4175'. [ 1369.680075][T23209] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1369.826389][T23438] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1370.224475][T23209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1370.358438][T23209] 8021q: adding VLAN 0 to HW filter on device team0 [ 1370.384807][T22568] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.391930][T22568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1370.696125][T22090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.703240][T22090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1372.557904][T23510] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1372.712186][T23511] infiniband syz2: set active [ 1372.716911][T23511] infiniband syz2: added veth1_to_team [ 1372.739710][T23511] RDS/IB: syz2: added [ 1372.743719][T23511] smc: adding ib device syz2 with port count 1 [ 1372.749939][T23511] smc: ib device syz2 port 1 has no pnetid [ 1372.907787][T23209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1373.416224][T15267] usb 9-1: new full-speed USB device number 32 using dummy_hcd [ 1373.584994][T23528] netlink: 'syz.5.4189': attribute type 1 has an invalid length. [ 1373.647090][T23530] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4189'. [ 1373.745781][T23528] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1373.811653][T15267] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1373.926014][T15267] usb 9-1: not running at top speed; connect to a high speed hub [ 1374.083604][T15267] usb 9-1: config 5 has an invalid interface number: 2 but max is 0 [ 1374.178262][T15267] usb 9-1: config 5 has no interface number 0 [ 1374.325265][T15267] usb 9-1: config 5 interface 2 has no altsetting 0 [ 1374.662616][T15267] usb 9-1: string descriptor 0 read error: -22 [ 1374.765113][T15267] usb 9-1: New USB device found, idVendor=09fb, idProduct=602e, bcdDevice=a9.9d [ 1374.921279][T15267] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.012158][T15267] usb 9-1: can't set config #5, error -71 [ 1376.025833][T15267] usb 9-1: USB disconnect, device number 32 [ 1376.392354][T23209] veth0_vlan: entered promiscuous mode [ 1376.414310][T23209] veth1_vlan: entered promiscuous mode [ 1376.832834][T23209] veth0_macvtap: entered promiscuous mode [ 1376.852319][T23209] veth1_macvtap: entered promiscuous mode [ 1377.947140][T23566] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4194'. [ 1378.283887][T23209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1378.296928][T23209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1378.309813][ T6360] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.326624][ T6360] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.354346][ T6360] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.447443][ T6360] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.472312][ T6360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1378.504991][ T6360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1378.876598][ T4776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1378.887421][ T4776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.820915][T23597] netlink: zone id is out of range [ 1379.841761][T23597] netlink: zone id is out of range [ 1379.849593][T23597] netlink: zone id is out of range [ 1379.859587][T23597] netlink: zone id is out of range [ 1379.892249][T23597] netlink: zone id is out of range [ 1379.899228][T23597] netlink: zone id is out of range [ 1379.904871][T23597] netlink: zone id is out of range [ 1379.911332][T23597] netlink: zone id is out of range [ 1379.917450][T23597] netlink: zone id is out of range [ 1379.953125][T23597] netlink: zone id is out of range [ 1380.119914][T23602] netlink: 'syz.5.4203': attribute type 1 has an invalid length. [ 1380.330201][T15266] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1380.352526][T23604] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4203'. [ 1380.590846][T15266] usb 10-1: Using ep0 maxpacket: 16 [ 1380.605868][T15266] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.641518][T15266] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1380.703422][T15266] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1380.782233][T15266] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1380.899783][T15266] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.956470][T23602] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1380.964635][T15266] usb 10-1: config 0 descriptor?? [ 1382.138696][T23601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.203136][T23601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.332211][T15266] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 1382.392186][T15266] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 1382.903690][T15266] microsoft 0003:045E:07DA.001F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1383.144617][T15266] microsoft 0003:045E:07DA.001F: no inputs found [ 1383.234327][T15266] microsoft 0003:045E:07DA.001F: could not initialize ff, continuing anyway [ 1384.047636][T23638] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4211'. [ 1384.612963][T15235] usb 10-1: USB disconnect, device number 2 [ 1385.216778][T15235] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1385.666675][T23678] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4219'. [ 1385.676567][T23678] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4219'. [ 1386.627834][T23681] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4208'. [ 1387.129697][T15235] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1387.138062][T15235] usb 10-1: not running at top speed; connect to a high speed hub [ 1387.167427][T15235] usb 10-1: config 0 has an invalid interface number: 89 but max is 1 [ 1387.182007][T15235] usb 10-1: config 0 has an invalid interface number: 30 but max is 1 [ 1387.190306][T15235] usb 10-1: config 0 has no interface number 0 [ 1387.196809][T15235] usb 10-1: config 0 has no interface number 1 [ 1387.203365][T15235] usb 10-1: config 0 interface 89 has no altsetting 0 [ 1387.210255][T15235] usb 10-1: config 0 interface 30 has no altsetting 0 [ 1387.222261][T15235] usb 10-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=31.1b [ 1387.231886][T15235] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.242930][T15235] usb 10-1: Manufacturer:   [ 1387.247735][T15235] usb 10-1: SerialNumber: 뉚池ꦚ냹㗑웤큮調鏥猪솔쵏 [ 1387.250739][T23694] netlink: 'syz.0.4221': attribute type 4 has an invalid length. [ 1387.285434][T15235] usb 10-1: config 0 descriptor?? [ 1387.990911][T23706] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1388.044615][T15235] uvcvideo 10-1:0.89: Found UVC 0.00 device (045e:0721) [ 1388.071095][T15235] uvcvideo 10-1:0.89: No valid video chain found. [ 1388.094704][T15235] usb 10-1: USB disconnect, device number 3 [ 1388.512307][T23725] uprobe: syz.9.4228:23725 failed to unregister, leaking uprobe [ 1389.153657][T17070] Bluetooth: hci0: command 0x0405 tx timeout [ 1389.503052][T17070] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 1391.212230][T18569] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1391.418643][T15267] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 1391.742340][T18569] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1391.768017][T15267] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1391.777487][T18569] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1391.782220][T15267] usb 9-1: not running at top speed; connect to a high speed hub [ 1391.803286][T15267] usb 9-1: config 5 has an invalid interface number: 2 but max is 0 [ 1391.811358][T15267] usb 9-1: config 5 has no interface number 0 [ 1391.827831][T18569] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1391.843183][T15267] usb 9-1: config 5 interface 2 has no altsetting 0 [ 1391.853727][T18569] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1391.855534][T15267] usb 9-1: string descriptor 0 read error: -22 [ 1391.880022][T15267] usb 9-1: New USB device found, idVendor=09fb, idProduct=602e, bcdDevice=a9.9d [ 1391.929640][T18569] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1392.001579][T15267] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.024560][T18569] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.029875][T15267] ftdi_sio 9-1:5.2: FTDI USB Serial Device converter detected [ 1392.047315][T15267] ftdi_sio ttyUSB0: unknown device type: 0xa99d [ 1392.543408][T18569] usb 1-1: config 0 descriptor?? [ 1394.034831][T19844] usb 9-1: USB disconnect, device number 33 [ 1394.042536][T19844] ftdi_sio 9-1:5.2: device disconnected [ 1394.472845][T18569] usbhid 1-1:0.0: can't add hid device: -71 [ 1394.478859][T18569] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1394.688356][T23804] syz.8.4243 (23804): /proc/23792/oom_adj is deprecated, please use /proc/23792/oom_score_adj instead. [ 1395.080736][T18569] usb 1-1: USB disconnect, device number 57 [ 1395.815198][T23824] net_ratelimit: 46 callbacks suppressed [ 1395.815211][T23824] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1397.042213][ T24] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1397.442460][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1397.452362][ T24] usb 6-1: config 0 has an invalid interface number: 172 but max is 0 [ 1397.918154][ T24] usb 6-1: config 0 has no interface number 0 [ 1397.925772][ T24] usb 6-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1397.938662][ T24] usb 6-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1397.951280][ T24] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1397.963419][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.973543][ T24] usb 6-1: Product: syz [ 1397.977730][ T24] usb 6-1: Manufacturer: syz [ 1397.982699][ T24] usb 6-1: SerialNumber: syz [ 1397.986140][T23859] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4257'. [ 1397.994368][ T24] usb 6-1: config 0 descriptor?? [ 1398.024192][ T24] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1398.058230][T23859] netlink: 'syz.8.4257': attribute type 12 has an invalid length. [ 1398.110973][T23859] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4257'. [ 1398.140948][T23859] netlink: 'syz.8.4257': attribute type 12 has an invalid length. [ 1398.266241][T23837] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4254'. [ 1398.336342][ T24] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1398.450582][ T24] gspca_pac7302 6-1:0.172: probe with driver gspca_pac7302 failed with error -71 [ 1399.050803][ T24] usb 6-1: USB disconnect, device number 56 [ 1400.493518][T23895] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4265'. [ 1401.405675][T17070] Bluetooth: hci2: unexpected event for opcode 0x0c46 [ 1402.309412][T23906] /dev/nullb0: Can't open blockdev [ 1404.595785][T23948] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 1405.005855][T23947] Bluetooth: MGMT ver 1.23 [ 1405.087067][T17968] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1405.103341][T18569] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 1405.180576][T23954] binder: 23952:23954 ioctl c0306201 0 returned -14 [ 1405.676024][T18569] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1405.694517][T18569] usb 6-1: not running at top speed; connect to a high speed hub [ 1405.905838][T18569] usb 6-1: config 5 has an invalid interface number: 2 but max is 0 [ 1405.914169][T18569] usb 6-1: config 5 has no interface number 0 [ 1405.920729][T18569] usb 6-1: config 5 interface 2 has no altsetting 0 [ 1405.932137][T18569] usb 6-1: string descriptor 0 read error: -22 [ 1405.938582][T18569] usb 6-1: New USB device found, idVendor=09fb, idProduct=602e, bcdDevice=a9.9d [ 1406.143294][T17968] usb 10-1: Using ep0 maxpacket: 32 [ 1406.156359][T17968] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1406.166983][T17968] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1406.176320][T17968] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1406.306928][T17968] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.354131][T17968] usb 10-1: config 0 descriptor?? [ 1406.778732][T18569] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.793065][T18569] ftdi_sio 6-1:5.2: FTDI USB Serial Device converter detected [ 1406.859024][T18569] ftdi_sio ttyUSB0: unknown device type: 0xa99d [ 1406.913397][T15267] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 1407.072756][T18569] usb 10-1: USB disconnect, device number 4 [ 1407.615391][T15267] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1407.634712][T15267] usb 1-1: not running at top speed; connect to a high speed hub [ 1407.645552][T15267] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.674577][T23973] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4287'. [ 1407.706948][T15267] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1407.738424][T15267] usb 1-1: string descriptor 0 read error: -22 [ 1407.748949][T15267] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1407.878056][T15267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.478387][T15267] usb 1-1: 0:2 : does not exist [ 1408.519211][T18569] usb 6-1: USB disconnect, device number 57 [ 1408.531210][T18569] ftdi_sio 6-1:5.2: device disconnected [ 1408.601099][T23965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.610467][T23965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.954606][T15267] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1408.984124][T15267] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1408.998793][T15267] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1409.065807][T23995] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1409.073056][T23995] IPv6: NLM_F_CREATE should be set when creating new route [ 1409.080337][T23995] IPv6: NLM_F_CREATE should be set when creating new route [ 1409.096310][T15267] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 1409.117401][T23986] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4289'. [ 1409.693334][T15267] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1409.732039][T15267] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1409.748745][T15267] usb 1-1: USB disconnect, device number 58 [ 1410.369723][T24017] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1411.618663][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1411.618680][ T30] audit: type=1400 audit(2000525412.321:919): avc: denied { rename } for pid=24016 comm="syz.5.4297" name="#71" dev="tmpfs" ino=1304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1414.094401][ T24] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1414.314456][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1414.363489][ T24] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1414.395645][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.431589][ T24] usb 6-1: config 0 descriptor?? [ 1414.462103][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1414.900344][T24053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1414.914968][T24053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.332296][T24069] kvm: MWAIT instruction emulated as NOP! [ 1416.003174][ T24] gspca_vc032x: reg_w err -110 [ 1416.304966][T24076] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1416.304966][T24076] The task syz.8.4309 (24076) triggered the difference, watch for misbehavior. [ 1416.334804][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 1416.340550][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 1416.347669][ T30] audit: type=1400 audit(2000525417.051:920): avc: denied { read } for pid=24063 comm="syz.7.4307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1416.374405][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 1416.390231][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 1416.697003][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 1416.721575][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 1416.732734][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 1416.738374][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 1416.752347][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 1416.759800][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 1416.765540][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 1416.771881][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 1416.791610][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 1416.797794][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 1416.805383][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 1416.811816][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 1416.821699][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 1416.836472][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 1416.845907][ T24] gspca_vc032x: Unknown sensor... [ 1416.855653][ T24] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 1417.153158][T24090] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4312'. [ 1417.372799][T24095] netlink: 'syz.8.4314': attribute type 1 has an invalid length. [ 1417.456293][T24097] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4314'. [ 1417.759462][T24095] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1418.835079][ T5950] usb 6-1: USB disconnect, device number 58 [ 1419.337091][T24111] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 1419.342804][T24111] PKCS7: Only support pkcs7_signedData type [ 1419.795330][T17968] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1420.028698][T17968] usb 6-1: Using ep0 maxpacket: 16 [ 1420.102142][T17968] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1420.111713][T17968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.130358][T17968] usb 6-1: Product: syz [ 1420.148255][T17968] usb 6-1: Manufacturer: syz [ 1420.152888][T17968] usb 6-1: SerialNumber: syz [ 1420.179473][T17968] usb 6-1: config 0 descriptor?? [ 1420.649636][T17968] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1420.671763][T17968] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1420.693298][T17968] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1420.704970][T17968] usb 6-1: media controller created [ 1420.731607][T17968] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1420.782606][T24136] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4325'. [ 1421.980093][T17968] zl10353_read_register: readreg error (reg=127, ret==0) [ 1421.989024][T17968] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1422.003025][T17968] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1422.137281][T17070] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 1422.474101][T17968] usb 6-1: USB disconnect, device number 59 [ 1422.564700][T17968] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1423.280429][T24161] netlink: 76 bytes leftover after parsing attributes in process `syz.9.4332'. [ 1423.828242][T17968] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1424.065400][T17968] usb 1-1: Using ep0 maxpacket: 32 [ 1424.166506][T17968] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 1424.195733][T17968] usb 1-1: config 0 has no interface number 0 [ 1424.533758][T17968] usb 1-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1424.547716][T17968] usb 1-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1424.579744][T17968] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1424.590152][T17968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.598396][T17968] usb 1-1: Product: syz [ 1424.602626][T17968] usb 1-1: Manufacturer: syz [ 1424.607457][T17968] usb 1-1: SerialNumber: syz [ 1424.624266][T17968] usb 1-1: config 0 descriptor?? [ 1424.643168][T17968] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1424.680259][T24174] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1424.687498][T24174] IPv6: NLM_F_CREATE should be set when creating new route [ 1424.694778][T24174] IPv6: NLM_F_CREATE should be set when creating new route [ 1425.196168][T17968] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 1425.203114][T17968] gspca_pac7302 1-1:0.172: probe with driver gspca_pac7302 failed with error -110 [ 1425.869600][T24164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4334'. [ 1426.050677][ T24] usb 1-1: USB disconnect, device number 59 [ 1426.994573][T24195] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4340'. [ 1427.220912][T24197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=24197 comm=syz.9.4341 [ 1427.391526][T23682] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.583839][T23682] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.778058][T24210] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 1429.029838][T19844] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 1429.068977][T23682] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.436375][T19844] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1429.461836][T19844] usb 1-1: not running at top speed; connect to a high speed hub [ 1429.508070][T19844] usb 1-1: config 5 has an invalid interface number: 2 but max is 0 [ 1429.527795][T19844] usb 1-1: config 5 has no interface number 0 [ 1429.557822][T19844] usb 1-1: config 5 interface 2 has no altsetting 0 [ 1429.583562][T19844] usb 1-1: string descriptor 0 read error: -22 [ 1429.608022][T19844] usb 1-1: New USB device found, idVendor=09fb, idProduct=602e, bcdDevice=a9.9d [ 1429.609921][T23682] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.646052][T19844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.687573][T19844] ftdi_sio 1-1:5.2: FTDI USB Serial Device converter detected [ 1429.695592][T19844] ftdi_sio ttyUSB0: unknown device type: 0xa99d [ 1429.889644][T15267] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1430.158300][T15267] usb 9-1: Using ep0 maxpacket: 32 [ 1430.370365][T15267] usb 9-1: config 0 has an invalid interface number: 29 but max is 0 [ 1430.408635][T15267] usb 9-1: config 0 has no interface number 0 [ 1430.431811][T15267] usb 9-1: config 0 interface 29 has no altsetting 0 [ 1430.460020][T15267] usb 9-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1430.497191][T15267] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.527774][T15267] usb 9-1: Product: syz [ 1430.545024][T15267] usb 9-1: Manufacturer: syz [ 1430.559543][T15267] usb 9-1: SerialNumber: syz [ 1430.580457][T17070] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1430.668888][T17070] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1430.672225][T15267] usb 9-1: config 0 descriptor?? [ 1430.681831][T17070] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1430.692920][T17070] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1430.711012][T17070] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1431.471193][ T24] usb 1-1: USB disconnect, device number 60 [ 1431.502882][ T24] ftdi_sio 1-1:5.2: device disconnected [ 1432.363855][T23682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1432.385132][T23682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1432.411004][T23682] bond0 (unregistering): Released all slaves [ 1432.802420][T24267] Cannot find del_set index 4 as target [ 1433.123613][ T5822] Bluetooth: hci1: command tx timeout [ 1433.251002][T23682] bond1 (unregistering): Released all slaves [ 1433.343456][ T30] audit: type=1400 audit(2000525434.039:921): avc: denied { read } for pid=24270 comm="syz.8.4357" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1433.759740][T24278] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4358'. [ 1433.839399][T24279] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4358'. [ 1434.766981][T23682] bond2 (unregistering): Released all slaves [ 1434.783045][T23682] bond3 (unregistering): Released all slaves [ 1435.080892][T23682] bond4 (unregistering): (slave wlan0): Releasing active interface [ 1435.089527][T23682] bond4 (unregistering): Released all slaves [ 1435.100396][T23682] bond5 (unregistering): Released all slaves [ 1435.127407][T15267] peak_usb 9-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 1435.136117][T15267] peak_usb 9-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 1435.158527][ T5822] Bluetooth: hci1: command tx timeout [ 1435.728660][T23682] tipc: Left network mode [ 1435.743961][ T5822] Bluetooth: hci4: unexpected event for opcode 0x0c46 [ 1435.990653][T15267] peak_usb 9-1:0.29: probe with driver peak_usb failed with error -71 [ 1436.026710][T23682] IPVS: stopping backup sync thread 20255 ... [ 1436.248966][T15267] usb 9-1: USB disconnect, device number 34 [ 1437.237448][ T5822] Bluetooth: hci1: command tx timeout [ 1437.520068][ T30] audit: type=1400 audit(2000525438.188:922): avc: denied { watch watch_reads } for pid=24317 comm="syz.0.4368" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 1437.630945][T24337] bridge_slave_1: left allmulticast mode [ 1437.636640][T24337] bridge_slave_1: left promiscuous mode [ 1437.644752][T24337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.665361][T24337] bridge_slave_0: left allmulticast mode [ 1437.672680][T24337] bridge_slave_0: left promiscuous mode [ 1437.678470][T24337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.686964][T15267] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1437.846949][T15267] usb 6-1: Using ep0 maxpacket: 16 [ 1437.860108][T15267] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1437.879507][T15267] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1437.891266][T15267] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.922303][T15267] usb 6-1: Product: syz [ 1437.926581][T15267] usb 6-1: Manufacturer: syz [ 1437.932023][T15267] usb 6-1: SerialNumber: syz [ 1437.941331][T15267] usb 6-1: config 0 descriptor?? [ 1437.950673][T15267] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1437.967102][T15267] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1437.988815][T23682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1437.996220][T23682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1438.058387][T23682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1438.069744][T23682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1438.133467][T23682] veth1_macvtap: left promiscuous mode [ 1438.176526][T23682] veth0_macvtap: left promiscuous mode [ 1438.182491][T23682] veth1_vlan: left promiscuous mode [ 1438.188191][T23682] veth0_vlan: left promiscuous mode [ 1438.477562][T24354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4371'. [ 1438.551620][T24355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4371'. [ 1439.366448][ T5822] Bluetooth: hci1: command tx timeout [ 1439.390504][T15267] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1439.673705][ T5822] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 1439.682898][T23682] pim6reg (unregistering): left allmulticast mode [ 1440.497260][T19844] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1440.637312][T19844] usb 9-1: device descriptor read/64, error -71 [ 1440.767645][T15267] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1440.793577][T15267] em28xx 6-1:0.0: board has no eeprom [ 1440.867550][T15267] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1440.875400][T15267] em28xx 6-1:0.0: dvb set to bulk mode. [ 1440.877344][T19844] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1440.887286][T17968] em28xx 6-1:0.0: Binding DVB extension [ 1440.912410][T15267] usb 6-1: USB disconnect, device number 60 [ 1440.940632][T15267] em28xx 6-1:0.0: Disconnecting em28xx [ 1440.981403][T17968] em28xx 6-1:0.0: Registering input extension [ 1440.987763][T15267] em28xx 6-1:0.0: Closing input extension [ 1441.005613][T15267] em28xx 6-1:0.0: Freeing device [ 1441.027683][T19844] usb 9-1: device descriptor read/64, error -71 [ 1441.184241][T19844] usb usb9-port1: attempt power cycle [ 1441.657474][T19844] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1441.684150][T19844] usb 9-1: device descriptor read/8, error -71 [ 1441.785419][T23682] team0 (unregistering): Port device team_slave_1 removed [ 1441.823781][T23682] team0 (unregistering): Port device team_slave_0 removed [ 1441.927723][T19844] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1441.948145][T19844] usb 9-1: device descriptor read/8, error -71 [ 1442.067808][T19844] usb usb9-port1: unable to enumerate USB device [ 1443.069069][T24384] tc_dump_action: action bad kind [ 1443.156007][T24233] chnl_net:caif_netlink_parms(): no params data found [ 1443.793144][T24404] netlink: 'syz.8.4383': attribute type 1 has an invalid length. [ 1444.637804][T24404] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1445.456610][T24233] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.489186][T24233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.496496][T24233] bridge_slave_0: entered allmulticast mode [ 1445.505676][T24233] bridge_slave_0: entered promiscuous mode [ 1445.530805][T24233] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.568812][T24233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.699374][T24233] bridge_slave_1: entered allmulticast mode [ 1445.725098][T24233] bridge_slave_1: entered promiscuous mode [ 1445.737866][T18569] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1445.778529][T23682] IPVS: stop unused estimator thread 0... [ 1446.134801][T18569] usb 1-1: Using ep0 maxpacket: 16 [ 1446.142489][T18569] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1446.164870][T18569] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1446.185746][T18569] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.226518][T18569] usb 1-1: Product: syz [ 1446.241199][T18569] usb 1-1: Manufacturer: syz [ 1446.261114][T18569] usb 1-1: SerialNumber: syz [ 1446.290064][T18569] usb 1-1: config 0 descriptor?? [ 1446.331859][T18569] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1446.905836][T18569] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1446.927728][T24233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1446.958184][ T5950] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1446.984138][T24233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1447.095613][T24233] team0: Port device team_slave_0 added [ 1447.119876][ T5950] usb 9-1: Using ep0 maxpacket: 16 [ 1447.129577][T24233] team0: Port device team_slave_1 added [ 1447.141677][ T5950] usb 9-1: config 0 has an invalid interface number: 49 but max is 0 [ 1447.178177][ T5950] usb 9-1: config 0 has no interface number 0 [ 1447.262748][ T5950] usb 9-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1447.433985][T18569] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1447.448112][ T5950] usb 9-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1447.493642][ T5950] usb 9-1: config 0 interface 49 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1447.963743][T24233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1447.976983][ T5950] usb 9-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1447.986150][T24233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1448.015264][ T5950] usb 9-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 1448.037891][ T5950] usb 9-1: Product: syz [ 1448.049345][ T5950] usb 9-1: Manufacturer: syz [ 1448.054105][ T5950] usb 9-1: SerialNumber: syz [ 1448.058778][T24233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1448.072092][ T5950] usb 9-1: config 0 descriptor?? [ 1448.184357][T24435] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1448.195197][T24233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1448.308785][T24233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1448.336015][T24233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1448.364596][T24454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4390'. [ 1448.431007][T24455] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4390'. [ 1450.033400][T18569] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1450.073286][T18569] em28xx 1-1:0.0: board has no eeprom [ 1450.233963][T18569] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1450.418516][T18569] em28xx 1-1:0.0: dvb set to bulk mode. [ 1450.478431][T19844] em28xx 1-1:0.0: Binding DVB extension [ 1450.542797][T19844] em28xx 1-1:0.0: Registering input extension [ 1450.560100][T24233] hsr_slave_0: entered promiscuous mode [ 1450.585599][T24233] hsr_slave_1: entered promiscuous mode [ 1450.596001][T24233] debugfs: 'hsr0' already exists in 'hsr' [ 1450.613390][T24233] Cannot create hsr debugfs directory [ 1450.664476][ T5950] usb 9-1: USB disconnect, device number 39 [ 1450.903785][T19844] usb 1-1: USB disconnect, device number 61 [ 1450.912686][T24473] netlink: 'syz.5.4395': attribute type 1 has an invalid length. [ 1451.019111][T19844] em28xx 1-1:0.0: Disconnecting em28xx [ 1451.024758][T19844] em28xx 1-1:0.0: Closing input extension [ 1451.275842][T24468] SELinux: failed to load policy [ 1451.541011][T24473] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1451.588623][T24475] bond2: (slave wlan0): Releasing active interface [ 1451.620518][T24475] bond9: (slave wlan0): Opening slave failed [ 1451.764275][T19844] em28xx 1-1:0.0: Freeing device [ 1452.992843][ T30] audit: type=1400 audit(2000525453.696:923): avc: denied { setopt } for pid=24491 comm="syz.0.4400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1453.731159][ T24] usb 6-1: new low-speed USB device number 61 using dummy_hcd [ 1453.910283][ T24] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 1454.074339][ T24] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1454.107834][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1454.208905][ T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1454.220889][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1454.230831][T15220] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1454.239367][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1454.325599][ T24] usb 6-1: string descriptor 0 read error: -22 [ 1454.332208][ T24] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1454.359116][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.401039][T15220] usb 1-1: Using ep0 maxpacket: 16 [ 1454.430401][T15220] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1454.443657][ T24] usb 6-1: config 0 descriptor?? [ 1454.450825][T15220] usb 1-1: config 0 has no interface number 0 [ 1454.457867][ T24] hub 6-1:0.0: bad descriptor, ignoring hub [ 1454.464261][T15220] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1454.474038][ T24] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1454.488085][T15220] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1454.524170][T15220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.568524][T15220] usb 1-1: Product: syz [ 1454.580184][T15220] usb 1-1: Manufacturer: syz [ 1454.590761][T15220] usb 1-1: SerialNumber: syz [ 1454.619454][T15220] usb 1-1: config 0 descriptor?? [ 1454.654846][T15220] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22 [ 1454.675663][T24494] Bluetooth: MGMT ver 1.23 [ 1454.762273][T24233] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1454.783673][T24233] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1454.799869][ T5950] usb 6-1: USB disconnect, device number 61 [ 1454.801662][T24233] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1454.829813][T24508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4402'. [ 1454.830826][T24509] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4402'. [ 1454.853946][T24233] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1454.881803][T24531] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4402'. [ 1454.901459][T24508] Can't find ip_set type [ 1454.909021][T24509] Can't find ip_set type [ 1454.922775][T24531] Can't find ip_set type [ 1454.999915][T15220] usb 1-1: USB disconnect, device number 62 [ 1455.125673][T24233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1455.168557][T24233] 8021q: adding VLAN 0 to HW filter on device team0 [ 1455.182951][T14543] bridge0: port 1(bridge_slave_0) entered blocking state [ 1455.190137][T14543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1455.224720][T14543] bridge0: port 2(bridge_slave_1) entered blocking state [ 1455.231925][T14543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1455.479431][T17968] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1455.791347][T24233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1455.810341][T17968] usb 1-1: Using ep0 maxpacket: 32 [ 1455.851500][T17968] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1455.860814][T17968] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1455.933303][T17968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.957368][T17968] usb 1-1: Product: syz [ 1455.977937][T17968] usb 1-1: Manufacturer: syz [ 1456.000506][T17968] usb 1-1: SerialNumber: syz [ 1456.018851][T17968] usb 1-1: config 0 descriptor?? [ 1456.030344][T24233] veth0_vlan: entered promiscuous mode [ 1456.108426][T24233] veth1_vlan: entered promiscuous mode [ 1456.209708][T24233] veth0_macvtap: entered promiscuous mode [ 1456.492498][T17968] gs_usb 1-1:0.0: Configuring for 2 interfaces [ 1456.685311][T24233] veth1_macvtap: entered promiscuous mode [ 1456.708219][T24591] overlayfs: failed to clone upperpath [ 1456.770822][T24587] overlayfs: failed to clone upperpath [ 1457.031079][T24233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1457.072442][T24233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1457.106464][ T6008] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.136247][ T6008] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.252372][ T30] audit: type=1400 audit(2001049745.957:924): avc: denied { accept } for pid=24545 comm="syz.0.4406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1457.274218][T17968] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 1457.408336][ T6008] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.482694][ T6008] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.518309][T17968] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 1457.541110][T17968] usb 1-1: USB disconnect, device number 63 [ 1457.579710][T24609] netlink: 'syz.5.4418': attribute type 1 has an invalid length. [ 1457.698315][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1457.724709][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1457.796480][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1457.813996][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.172160][T24659] bridge_slave_1: left allmulticast mode [ 1461.177874][T24659] bridge_slave_1: left promiscuous mode [ 1461.184368][T24659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.201420][T24659] bridge_slave_0: left allmulticast mode [ 1462.207304][T24659] bridge_slave_0: left promiscuous mode [ 1462.213283][T24659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.162371][T19844] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1465.097578][T19844] usb 6-1: device descriptor read/64, error -71 [ 1465.400342][T19844] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1465.550610][T19844] usb 6-1: device descriptor read/64, error -71 [ 1465.907100][T19844] usb usb6-port1: attempt power cycle [ 1466.064855][T24720] fuse: Bad value for 'fd' [ 1466.079364][T24720] overlayfs: failed to clone upperpath [ 1466.250573][T19844] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1466.492049][T19844] usb 6-1: device descriptor read/8, error -71 [ 1466.757051][T24730] block nbd0: server does not support multiple connections per device. [ 1466.784885][T24730] block nbd0: shutting down sockets [ 1466.800813][T19844] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1467.125344][T19844] usb 6-1: device descriptor read/8, error -71 [ 1467.263812][T19844] usb usb6-port1: unable to enumerate USB device [ 1467.286579][T24746] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4444'. [ 1467.968494][ T24] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 1468.281124][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1468.417040][ T24] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1468.426495][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.451209][ T24] usb 1-1: config 0 descriptor?? [ 1468.460853][T24754] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1469.187428][ T24] elan 0003:04F3:0755.0020: unknown main item tag 0x0 [ 1469.211231][ T24] elan 0003:04F3:0755.0020: item fetching failed at offset 3/5 [ 1469.236068][ T24] elan 0003:04F3:0755.0020: Hid Parse failed [ 1469.268640][ T24] elan 0003:04F3:0755.0020: probe with driver elan failed with error -22 [ 1469.576977][T18569] usb 1-1: USB disconnect, device number 64 [ 1469.672931][T24792] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4452'. [ 1469.699599][T24792] 9p: Unknown access argument 18446744073709551615: -34 [ 1469.742225][T24792] netlink: 'syz.5.4452': attribute type 1 has an invalid length. [ 1469.831493][T24797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4452'. [ 1470.020384][T24801] fuse: Bad value for 'fd' [ 1470.034439][T24801] overlayfs: failed to clone upperpath [ 1470.349229][T24792] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1470.851438][T18569] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1470.991063][T18569] usb 4-1: device descriptor read/64, error -71 [ 1471.611304][ T30] audit: type=1400 audit(2001049760.165:925): avc: denied { bind } for pid=24788 comm="syz.8.4451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1471.672491][T18569] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1471.881268][T18569] usb 4-1: device descriptor read/64, error -71 [ 1472.011371][T18569] usb usb4-port1: attempt power cycle [ 1472.158840][T24841] mkiss: ax0: crc mode is auto. [ 1472.391416][T18569] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1472.423715][T18569] usb 4-1: device descriptor read/8, error -71 [ 1472.661331][T18569] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1472.692350][T18569] usb 4-1: device descriptor read/8, error -71 [ 1472.842815][T18569] usb usb4-port1: unable to enumerate USB device [ 1473.296246][T24859] GUP no longer grows the stack in syz.0.4461 (24859): 200000011000-200000018000 (20000000e000) [ 1473.307149][T24859] CPU: 1 UID: 0 PID: 24859 Comm: syz.0.4461 Tainted: G L syzkaller #0 PREEMPT(full) [ 1473.307170][T24859] Tainted: [L]=SOFTLOCKUP [ 1473.307175][T24859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1473.307182][T24859] Call Trace: [ 1473.307188][T24859] [ 1473.307194][T24859] dump_stack_lvl+0x16c/0x1f0 [ 1473.307214][T24859] gup_vma_lookup+0x1d2/0x220 [ 1473.307230][T24859] __get_user_pages+0x241/0x3590 [ 1473.307251][T24859] ? find_held_lock+0x2b/0x80 [ 1473.307271][T24859] ? __pfx___get_user_pages+0x10/0x10 [ 1473.307291][T24859] get_user_pages_remote+0x243/0xab0 [ 1473.307306][T24859] ? mas_new_root+0x690/0x6e0 [ 1473.307323][T24859] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1473.307342][T24859] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1473.307359][T24859] __access_remote_vm+0x24d/0x850 [ 1473.307376][T24859] ? do_raw_spin_lock+0x12c/0x2b0 [ 1473.307391][T24859] ? __pfx___access_remote_vm+0x10/0x10 [ 1473.307409][T24859] proc_pid_cmdline_read+0x4de/0x8e0 [ 1473.307424][T24859] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1473.307437][T24859] ? rw_verify_area+0xcf/0x6c0 [ 1473.307451][T24859] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1473.307462][T24859] vfs_readv+0x5c1/0x8b0 [ 1473.307478][T24859] ? __pfx_vfs_readv+0x10/0x10 [ 1473.307501][T24859] ? __fget_files+0x20e/0x3c0 [ 1473.307521][T24859] ? do_preadv+0x1a6/0x270 [ 1473.307533][T24859] do_preadv+0x1a6/0x270 [ 1473.307546][T24859] ? __pfx_do_preadv+0x10/0x10 [ 1473.307563][T24859] do_syscall_64+0xcd/0xf80 [ 1473.307579][T24859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.307592][T24859] RIP: 0033:0x7f43a5f8f749 [ 1473.307601][T24859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1473.307612][T24859] RSP: 002b:00007f43a6dd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1473.307624][T24859] RAX: ffffffffffffffda RBX: 00007f43a61e5fa0 RCX: 00007f43a5f8f749 [ 1473.307631][T24859] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000005 [ 1473.307638][T24859] RBP: 00007f43a6013f91 R08: 0000000000006a76 R09: 0000000000000000 [ 1473.307644][T24859] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 1473.307651][T24859] R13: 00007f43a61e6038 R14: 00007f43a61e5fa0 R15: 00007fff34c9fe98 [ 1473.307666][T24859] [ 1475.202802][T24874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4464'. [ 1475.888653][ T5822] Bluetooth: hci0: command 0x0405 tx timeout [ 1476.549652][T24874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1476.702144][T24874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1477.015214][T17070] Bluetooth: hci4: unexpected event for opcode 0x0c46 [ 1477.995160][T15267] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 1478.490717][T15267] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1478.512167][T15267] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1478.560905][T15267] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1478.577354][T15267] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.658910][T24928] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1478.665839][T24928] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1478.685598][T24928] vhci_hcd vhci_hcd.0: Device attached [ 1478.722378][T15220] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1478.845348][ T30] audit: type=1400 audit(2001049767.544:926): avc: denied { execute } for pid=24927 comm="syz.0.4476" path="/proc/partitions" dev="proc" ino=4026532177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 1478.860191][T24929] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 0 [ 1478.906276][T15267] usb 9-1: usb_control_msg returned -32 [ 1478.951249][T15267] usbtmc 9-1:16.0: can't read capabilities [ 1478.972808][T18569] usb 34-1: SetAddress Request (2) to port 0 [ 1478.977577][T15220] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1478.978898][T18569] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1479.030899][ T4776] vhci_hcd vhci_hcd.0: stop threads [ 1479.079858][T15220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.096020][ T4776] vhci_hcd vhci_hcd.0: release socket [ 1479.179108][ T4776] vhci_hcd vhci_hcd.0: disconnect device [ 1479.214154][T15220] usb 4-1: Product: syz [ 1479.285169][T15220] usb 4-1: Manufacturer: syz [ 1479.353255][T15220] usb 4-1: SerialNumber: syz [ 1479.616267][T15220] usb 4-1: config 0 descriptor?? [ 1480.089251][T24936] netlink: 6068 bytes leftover after parsing attributes in process `syz.8.4470'. [ 1480.099308][T15220] hub 4-1:0.0: bad descriptor, ignoring hub [ 1480.125700][T15220] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1480.402727][T24936] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4470'. [ 1480.425571][T24940] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1480.948463][T15220] f81232 4-1:0.0: f81534a converter detected [ 1481.067977][T24939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24939 comm=syz.8.4470 [ 1481.082451][T18569] usb 34-1: enqueue for inactive port 0 [ 1481.593979][T18569] usb usb34-port1: attempt power cycle [ 1481.607811][T24933] syz.0.4476 (24933): drop_caches: 2 [ 1481.632939][T15220] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1481.640505][T15220] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1481.675873][T15220] usb 4-1: USB disconnect, device number 8 [ 1481.685571][T15220] f81232 4-1:0.0: device disconnected [ 1481.836442][T24954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4479'. [ 1482.193499][T18569] usb usb34-port1: unable to enumerate USB device [ 1482.298992][T18569] usb 9-1: USB disconnect, device number 40 [ 1482.343974][T15220] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1482.444917][T24971] input: syz1 as /devices/virtual/input/input65 [ 1482.544505][T15220] usb 1-1: Using ep0 maxpacket: 8 [ 1482.680032][T15220] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1482.861614][T15220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.886664][T18569] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1482.908186][T15220] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1482.925114][T15220] pvrusb2: ********** [ 1482.990090][T15220] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1483.028029][T15220] pvrusb2: Important functionality might not be entirely working. [ 1483.056229][T15220] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1483.073264][T18569] usb 4-1: Using ep0 maxpacket: 16 [ 1483.081264][T18569] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1483.090891][T15220] pvrusb2: ********** [ 1483.106491][ T2336] pvrusb2: Invalid write control endpoint [ 1483.120978][T18569] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1483.153316][T18569] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.184526][T18569] usb 4-1: Product: syz [ 1483.199339][T18569] usb 4-1: Manufacturer: syz [ 1483.214084][T18569] usb 4-1: SerialNumber: syz [ 1483.227346][T24988] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4485'. [ 1483.252221][T18569] usb 4-1: config 0 descriptor?? [ 1483.284184][T18569] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1483.310325][T24965] pvrusb2: Invalid write control endpoint [ 1483.331730][T18569] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1483.356234][T19844] usb 1-1: USB disconnect, device number 65 [ 1483.428351][ T2336] pvrusb2: Invalid write control endpoint [ 1483.444175][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1483.472068][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1483.516113][T24991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24991 comm=syz.5.4485 [ 1483.526440][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1483.586874][ T2336] pvrusb2: Device being rendered inoperable [ 1483.612839][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1483.629452][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1483.651610][ T2336] pvrusb2: Attached sub-driver cx25840 [ 1483.657378][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1483.668240][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1483.886908][T18569] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1483.911962][T24998] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4487'. [ 1484.246040][T25005] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 1484.616649][T18569] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1484.629900][T18569] em28xx 4-1:0.0: board has no eeprom [ 1484.704346][T18569] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1484.753072][T15220] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 1484.760980][T18569] em28xx 4-1:0.0: dvb set to bulk mode. [ 1484.771480][T19844] em28xx 4-1:0.0: Binding DVB extension [ 1484.820081][T18569] usb 4-1: USB disconnect, device number 9 [ 1484.879444][T18569] em28xx 4-1:0.0: Disconnecting em28xx [ 1484.934981][T15220] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1484.951947][T19844] em28xx 4-1:0.0: Registering input extension [ 1484.975036][T15220] usb 1-1: not running at top speed; connect to a high speed hub [ 1484.983103][T18569] em28xx 4-1:0.0: Closing input extension [ 1485.006173][T15220] usb 1-1: config 5 has an invalid interface number: 2 but max is 0 [ 1485.038715][T15220] usb 1-1: config 5 has no interface number 0 [ 1485.038843][T18569] em28xx 4-1:0.0: Freeing device [ 1485.071775][T15220] usb 1-1: config 5 interface 2 has no altsetting 0 [ 1485.111107][T15220] usb 1-1: string descriptor 0 read error: -22 [ 1485.153109][T15220] usb 1-1: New USB device found, idVendor=09fb, idProduct=602e, bcdDevice=a9.9d [ 1485.232998][T15220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.538244][T25029] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4491'. [ 1485.548032][T25029] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4491'. [ 1486.193111][T25030] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4492'. [ 1486.211543][T15220] ftdi_sio 1-1:5.2: FTDI USB Serial Device converter detected [ 1486.225737][T15220] ftdi_sio ttyUSB0: unknown device type: 0xa99d [ 1486.799215][ T5950] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1487.588859][ T5987] usb 1-1: USB disconnect, device number 66 [ 1487.630282][ T5950] usb 9-1: Using ep0 maxpacket: 16 [ 1487.642321][ T5987] ftdi_sio 1-1:5.2: device disconnected [ 1487.654859][ T5950] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1487.668014][ T5950] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1487.717452][ T5950] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1487.760158][ T5950] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1487.778920][ T5950] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.802554][ T5950] usb 9-1: config 0 descriptor?? [ 1488.199781][T25053] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4498'. [ 1489.088117][T25063] fuse: Bad value for 'fd' [ 1489.453955][ T5950] usbhid 9-1:0.0: can't add hid device: -71 [ 1489.461425][ T5950] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1489.481956][ T5950] usb 9-1: USB disconnect, device number 41 [ 1491.439133][T25105] netlink: 'syz.3.4507': attribute type 15 has an invalid length. [ 1491.485125][T25105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4507'. [ 1491.575302][ T6026] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1491.620206][ T6026] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1491.657212][ T6026] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1491.689194][ T6026] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1493.874770][ T30] audit: type=1400 audit(2001049782.572:927): avc: denied { create } for pid=25128 comm="syz.0.4506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1497.503967][ T30] audit: type=1400 audit(2001049786.191:928): avc: denied { getopt } for pid=25139 comm="syz.0.4513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1497.759124][T25177] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4512'. [ 1497.791040][T25177] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4512'. [ 1498.801370][T25198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4522'. [ 1498.814169][T25198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4522'. [ 1505.877860][T25274] 9p: Bad value for 'wfdno' [ 1505.958759][T25273] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4538'. [ 1506.871767][T25287] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4542'. [ 1509.619002][T25312] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1509.810740][T25312] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1509.950683][T25319] /dev/nullb0: Can't open blockdev [ 1510.596568][T25312] bond0: entered promiscuous mode [ 1510.601918][T25312] bond_slave_0: entered promiscuous mode [ 1510.609172][T25312] bond_slave_1: entered promiscuous mode [ 1510.621642][T25312] dummy0: entered promiscuous mode [ 1510.630103][T25312] debugfs: 'hsr0' already exists in 'hsr' [ 1510.635897][T25312] Cannot create hsr debugfs directory [ 1510.642521][T25312] hsr0: entered promiscuous mode [ 1510.647601][T25312] hsr0: entered allmulticast mode [ 1510.652661][T25312] bond0: entered allmulticast mode [ 1510.657885][T25312] bond_slave_0: entered allmulticast mode [ 1510.663620][T25312] bond_slave_1: entered allmulticast mode [ 1510.669527][T25312] dummy0: entered allmulticast mode [ 1512.762978][T25357] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 1513.336126][T25364] hfsplus: unable to find HFS+ superblock [ 1513.547371][T25366] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4558'. [ 1513.567846][T25366] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4558'. [ 1513.579585][T25366] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4558'. [ 1513.595228][T25366] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4558'. [ 1513.605132][T25366] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4558'. [ 1513.620382][T25366] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4558'. [ 1513.633206][T25366] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4558'. [ 1513.652930][T25366] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4558'. [ 1513.663062][T25366] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4558'. [ 1513.679171][T25366] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4558'. [ 1513.718025][T25349] comedi comedi3: comedi_config --init_data is deprecated [ 1513.801805][T25360] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 1514.398232][ T30] audit: type=1400 audit(2001049803.089:929): avc: denied { read write } for pid=25362 comm="syz.5.4558" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1516.437391][ T30] audit: type=1400 audit(2001049803.109:930): avc: denied { open } for pid=25362 comm="syz.5.4558" path="/292/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1518.040218][T25395] hsr_slave_0: left promiscuous mode [ 1518.078083][T25395] hsr_slave_1: left promiscuous mode [ 1518.186952][ T30] audit: type=1400 audit(2001049806.869:931): avc: denied { write } for pid=25401 comm="syz.0.4565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1519.861749][T25418] __nla_validate_parse: 11 callbacks suppressed [ 1519.861762][T25418] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4568'. [ 1520.317821][ T5892] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 1521.058140][ T5892] usb 1-1: config 47 has no interfaces? [ 1521.065792][ T5892] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1521.081027][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.096958][ T5892] usb 1-1: Product: syz [ 1521.101329][ T5892] usb 1-1: Manufacturer: syz [ 1521.144714][ T5892] usb 1-1: SerialNumber: syz [ 1521.421421][T25426] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4570'. [ 1521.428189][T25425] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4570'. [ 1521.695440][ T5892] usb 1-1: USB disconnect, device number 67 [ 1522.087588][T15266] usb 9-1: new full-speed USB device number 42 using dummy_hcd [ 1522.147998][ T5892] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1522.259276][T15266] usb 9-1: config 2 has an invalid interface number: 219 but max is 0 [ 1522.267648][T15266] usb 9-1: config 2 has no interface number 0 [ 1522.273784][T15266] usb 9-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=b3.76 [ 1522.283312][T15266] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.296331][T15266] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 1522.308215][ T5950] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1522.319093][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 1522.388214][T15267] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 1522.553020][T25450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1522.680137][T25450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1522.776237][ T5950] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1522.793727][ T5950] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1522.808236][ T5950] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1522.810039][T15266] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 1522.817874][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.825888][T15267] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1522.862828][T15266] pac7311 9-1:2.219: probe with driver pac7311 failed with error -71 [ 1522.873805][T15267] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1522.894010][T15266] usb 9-1: USB disconnect, device number 42 [ 1522.916895][T15267] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1522.940865][T15267] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.091437][ T5950] usb 4-1: usb_control_msg returned -32 [ 1523.101281][ T5950] usbtmc 4-1:16.0: can't read capabilities [ 1523.176436][T15267] usb 6-1: usb_control_msg returned -32 [ 1523.192494][T15267] usbtmc 6-1:16.0: can't read capabilities [ 1523.786999][T25478] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.4578'. [ 1523.812166][T25476] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4584'. [ 1523.826775][T25461] netlink: 6068 bytes leftover after parsing attributes in process `syz.5.4579'. [ 1523.843362][T25461] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4579'. [ 1523.859166][T25478] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4578'. [ 1523.887344][T25478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25478 comm=syz.3.4578 [ 1523.915167][T25461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25461 comm=syz.5.4579 [ 1524.947415][ T5892] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1524.971597][ T5892] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1524.981263][ T5892] usb 1-1: can't read configurations, error -71 [ 1525.119357][T25493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4588'. [ 1525.137469][T18569] usb 6-1: USB disconnect, device number 66 [ 1525.150175][T15267] usb 4-1: USB disconnect, device number 10 [ 1525.250243][ T30] audit: type=1326 audit(2001049813.938:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25496 comm="syz.3.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0678f749 code=0x7ffc0000 [ 1525.339578][ T30] audit: type=1326 audit(2001049813.938:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25496 comm="syz.3.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0678f749 code=0x7ffc0000 [ 1525.380327][ T30] audit: type=1326 audit(2001049813.938:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25496 comm="syz.3.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0678f749 code=0x7ffc0000 [ 1525.404443][ T30] audit: type=1326 audit(2001049813.938:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25496 comm="syz.3.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f9a0678f749 code=0x7ffc0000 [ 1525.562024][ T30] audit: type=1326 audit(2001049813.938:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25496 comm="syz.3.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0678f749 code=0x7ffc0000 [ 1525.586580][ T30] audit: type=1326 audit(2001049813.938:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25496 comm="syz.3.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9a0678f749 code=0x7ffc0000 [ 1525.617668][ T30] audit: type=1326 audit(2001049813.938:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25496 comm="syz.3.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0678f749 code=0x7ffc0000 [ 1525.643408][ T30] audit: type=1326 audit(2001049813.938:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25496 comm="syz.3.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a0678f749 code=0x7ffc0000 [ 1525.846112][ T30] audit: type=1326 audit(2001049813.938:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25496 comm="syz.3.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0678f749 code=0x7ffc0000 [ 1525.871060][ T30] audit: type=1326 audit(2001049813.938:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25496 comm="syz.3.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a06791667 code=0x7ffc0000 [ 1525.895550][T18569] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 1526.028618][T18569] usb 6-1: device descriptor read/64, error -71 [ 1526.193969][T17070] Bluetooth: hci4: unexpected event for opcode 0x0c46 [ 1526.422343][T18569] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 1526.628649][T18569] usb 6-1: device descriptor read/64, error -71 [ 1527.277973][T18569] usb usb6-port1: attempt power cycle [ 1528.179767][T18569] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 1528.432054][T25535] netlink: 6068 bytes leftover after parsing attributes in process `syz.9.4600'. [ 1528.489597][T18569] usb 6-1: device descriptor read/8, error -71 [ 1528.496292][T25535] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4600'. [ 1528.745193][T25548] netlink: 'syz.8.4604': attribute type 10 has an invalid length. [ 1528.810632][T25548] 8021q: adding VLAN 0 to HW filter on device team0 [ 1528.835255][T25548] team0: entered promiscuous mode [ 1528.840498][T25548] team_slave_0: entered promiscuous mode [ 1528.847389][T25548] team_slave_1: entered promiscuous mode [ 1528.854313][T25548] team0: entered allmulticast mode [ 1528.859586][T25548] team_slave_0: entered allmulticast mode [ 1528.866677][T25548] team_slave_1: entered allmulticast mode [ 1528.974486][T25548] bond0: (slave team0): Enslaving as an active interface with an up link [ 1530.038016][T25561] 9p: Bad value for 'rfdno' [ 1530.712871][T25584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4611'. [ 1530.758704][T25581] gretap1: entered promiscuous mode [ 1531.673749][T25602] netlink: 'syz.0.4618': attribute type 1 has an invalid length. [ 1531.710655][T25602] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1532.692658][T15235] usb 9-1: new full-speed USB device number 43 using dummy_hcd [ 1532.738034][T25602] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 1532.748008][T25602] bond1: (slave wlan0): Releasing active interface [ 1532.757209][T25602] bond6: (slave wlan0): Enslaving as an active interface with a down link [ 1532.798031][T25608] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4620'. [ 1532.835313][T25608] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4620'. [ 1532.934908][T15235] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1532.948106][T15235] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1532.965336][T15235] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1532.984637][T15235] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.219926][T15235] usb 9-1: usb_control_msg returned -32 [ 1533.225526][T15235] usbtmc 9-1:16.0: can't read capabilities [ 1533.528995][T25628] netlink: 'syz.5.4621': attribute type 10 has an invalid length. [ 1533.575286][T25628] netlink: 'syz.5.4621': attribute type 13 has an invalid length. [ 1533.593413][T25629] netlink: 6068 bytes leftover after parsing attributes in process `syz.8.4617'. [ 1533.616712][T25628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1533.638506][T25629] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4617'. [ 1534.983551][T17968] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1535.052925][T15235] usb 9-1: USB disconnect, device number 43 [ 1535.195007][T17968] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.206786][T17968] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1535.222197][T17968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.401288][T17968] usb 6-1: config 0 descriptor?? [ 1535.412070][T17968] pwc: Askey VC010 type 2 USB webcam detected. [ 1535.415672][T25657] overlay: Unknown parameter 'uid' [ 1535.447107][T25652] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4631'. [ 1535.789904][T15235] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1535.848985][T17968] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1535.856673][T17968] pwc: recv_control_msg error -32 req 02 val 2700 [ 1535.875743][T17968] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1536.037138][T17968] pwc: recv_control_msg error -32 req 04 val 1000 [ 1536.044477][T17968] pwc: recv_control_msg error -32 req 04 val 1300 [ 1536.051930][T17968] pwc: recv_control_msg error -32 req 04 val 1400 [ 1536.080042][T15235] usb 9-1: Using ep0 maxpacket: 16 [ 1536.907774][T15235] usb 9-1: config 0 has an invalid interface number: 74 but max is 0 [ 1537.888619][T15235] usb 9-1: config 0 has no interface number 0 [ 1537.897393][T15235] usb 9-1: config 0 interface 74 has no altsetting 0 [ 1537.906805][T15235] usb 9-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=66.36 [ 1537.920101][T15235] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.928102][T15235] usb 9-1: Product: syz [ 1537.938444][T15235] usb 9-1: Manufacturer: syz [ 1538.030111][T15235] usb 9-1: SerialNumber: syz [ 1538.041619][T15235] usb 9-1: config 0 descriptor?? [ 1538.324847][T25683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4640'. [ 1538.380240][T25684] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1538.702688][T15266] IPVS: starting estimator thread 0... [ 1538.719778][T15235] belkin_sa 9-1:0.74: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 1538.753092][T15235] usb 9-1: bcdDevice: 6636, bfc: 0 [ 1538.761445][T15235] usb 9-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 1538.867422][T25682] netlink: 'syz.9.4642': attribute type 23 has an invalid length. [ 1538.875738][T15235] usb 9-1: USB disconnect, device number 44 [ 1538.890571][T25685] IPVS: using max 47 ests per chain, 112800 per kthread [ 1538.917082][T15235] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 1539.178593][T15235] belkin_sa 9-1:0.74: device disconnected [ 1539.192045][T25332] udevd[25332]: setting mode of /dev/bus/usb/009/044 to 020664 failed: No such file or directory [ 1539.219553][T25332] udevd[25332]: setting owner of /dev/bus/usb/009/044 to uid=0, gid=0 failed: No such file or directory [ 1540.917858][T25690] Set syz1 is full, maxelem 65536 reached [ 1541.014844][T25698] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4645'. [ 1541.263373][T17968] pwc: recv_control_msg error -110 req 02 val 2000 [ 1541.296577][T25697] netlink: 'syz.0.4641': attribute type 11 has an invalid length. [ 1541.306650][T17968] pwc: recv_control_msg error -32 req 02 val 2100 [ 1541.353821][T17968] pwc: recv_control_msg error -32 req 04 val 1500 [ 1541.408069][T17968] pwc: recv_control_msg error -32 req 02 val 2500 [ 1541.433942][T17968] pwc: recv_control_msg error -32 req 02 val 2400 [ 1541.464216][T17968] pwc: recv_control_msg error -32 req 02 val 2600 [ 1541.591888][T17968] pwc: recv_control_msg error -32 req 02 val 2900 [ 1541.599576][T17968] pwc: recv_control_msg error -32 req 02 val 2800 [ 1541.680125][T17968] pwc: recv_control_msg error -32 req 04 val 1100 [ 1541.710290][T17968] pwc: recv_control_msg error -32 req 04 val 1200 [ 1541.749879][T17968] pwc: Registered as video103. [ 1541.781748][T17968] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input69 [ 1541.847030][T18569] usb 6-1: USB disconnect, device number 71 [ 1542.510785][T18569] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1542.747416][T18569] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1543.560889][T18569] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1543.569079][T18569] usb 6-1: Product: syz [ 1543.581093][T18569] usb 6-1: Manufacturer: syz [ 1543.585721][T18569] usb 6-1: SerialNumber: syz [ 1543.616068][T18569] usb 6-1: config 0 descriptor?? [ 1543.636297][T18569] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1543.647540][T18569] dvb-usb: bulk message failed: -22 (2/0) [ 1543.742709][T18569] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1543.781383][T18569] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1544.240629][T18569] usb 6-1: media controller created [ 1544.243624][T25717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1544.254760][T18569] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1544.291471][T25717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1544.316539][T18569] cxusb: set interface failed [ 1544.331417][T18569] dvb-usb: bulk message failed: -22 (1/0) [ 1544.520000][T18569] DVB: Unable to find symbol mt352_attach() [ 1544.532959][T18569] dvb-usb: bulk message failed: -22 (5/0) [ 1544.538945][T18569] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1544.613898][T25747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4659'. [ 1544.627016][T25747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4659'. [ 1545.429241][T18569] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1545.463348][T25748] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1545.731176][T18569] rc_core: IR keymap rc-dvico-mce not found [ 1545.737156][T18569] Registered IR keymap rc-empty [ 1545.752163][T18569] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1545.767200][T18569] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input70 [ 1545.796973][T18569] dvb-usb: schedule remote query interval to 100 msecs. [ 1545.820671][T18569] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1545.857107][T18569] usb 6-1: USB disconnect, device number 72 [ 1546.107577][T18569] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1546.311423][T15266] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1546.471332][T18569] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1546.508133][T15266] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1546.536715][T15266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1546.679779][T25778] tmpfs: Bad value for 'mpol' [ 1546.689400][T15266] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1546.708270][T15266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.716693][T15266] usb 4-1: Product: syz [ 1546.782907][T18569] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.114873][T18569] usb 6-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1547.126310][T18569] usb 6-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1547.141525][T18569] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1547.148166][T18569] usb 6-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1547.161378][T15266] usb 4-1: Manufacturer: syz [ 1547.173752][T15266] usb 4-1: SerialNumber: syz [ 1547.192328][T15266] usb 4-1: config 0 descriptor?? [ 1547.231661][T15266] usb 4-1: no audio or video endpoints found [ 1547.253788][T18569] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.270112][T18569] usb 6-1: config 0 descriptor?? [ 1547.471808][T15266] usb 4-1: USB disconnect, device number 11 [ 1547.512143][T25786] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4672'. [ 1547.746756][T18569] uclogic 0003:5543:0005.0021: unknown main item tag 0x3 [ 1547.753954][T18569] uclogic 0003:5543:0005.0021: item fetching failed at offset 4/5 [ 1547.773162][T18569] uclogic 0003:5543:0005.0021: parse failed [ 1547.785615][T18569] uclogic 0003:5543:0005.0021: probe with driver uclogic failed with error -22 [ 1547.857003][T25791] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4673'. [ 1547.869818][T25791] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4673'. [ 1548.944303][ T24] usb 6-1: USB disconnect, device number 73 [ 1549.182918][T25797] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1549.184874][T25795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1549.802160][ T24] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1550.001996][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1550.149233][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1550.218215][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.236873][ T24] usb 6-1: Product: syz [ 1550.258866][ T24] usb 6-1: Manufacturer: syz [ 1550.268169][ T24] usb 6-1: SerialNumber: syz [ 1550.280743][ T24] usb 6-1: config 0 descriptor?? [ 1550.663446][T25820] fuse: Bad value for 'fd' [ 1550.669392][T25820] overlayfs: failed to clone upperpath [ 1552.504697][ T24] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1552.528322][ T24] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1552.565827][ T24] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1553.525599][T25836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4684'. [ 1553.528422][T25837] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1553.552638][ T24] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1553.867401][T25836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4684'. [ 1555.499882][ T24] usb 6-1: USB disconnect, device number 74 [ 1556.461138][T25852] kthread_run failed with err -4 [ 1556.813848][T25868] netlink: 'syz.8.4694': attribute type 29 has an invalid length. [ 1556.873132][T25871] netlink: 'syz.8.4694': attribute type 29 has an invalid length. [ 1557.496274][T25880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4696'. [ 1557.516661][T25880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4696'. [ 1560.039497][T17070] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 1560.703847][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1560.703880][ T30] audit: type=1400 audit(2001049849.383:962): avc: denied { relabelto } for pid=25896 comm="syz.0.4700" name="NETLINK" dev="sockfs" ino=86910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:var_auth_t:s0" [ 1563.194013][ T5950] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 1563.345745][ T5950] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1563.354419][ T5950] usb 6-1: not running at top speed; connect to a high speed hub [ 1563.363937][ T5950] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1563.374707][ T5950] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1563.387364][ T5950] usb 6-1: string descriptor 0 read error: -22 [ 1563.424323][ T5950] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1563.441957][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.914896][ T5950] usb 6-1: 0:2 : does not exist [ 1563.965704][T25930] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4707'. [ 1564.721895][T25922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1564.734313][T25922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1564.754207][ T5950] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1564.798395][ T5950] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1564.817432][ T5950] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 1564.872612][ T5950] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1564.911773][ T5950] usb 6-1: USB disconnect, device number 75 [ 1568.456669][T25972] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4720'. [ 1569.024356][T17968] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 1569.339551][T17968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1569.425729][T17968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1569.438369][T17968] usb 6-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 1569.449378][T17968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.471049][T17968] usb 6-1: config 0 descriptor?? [ 1570.816156][ T30] audit: type=1400 audit(2001049858.792:963): avc: denied { bind } for pid=25997 comm="syz.3.4728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1570.953325][ T30] audit: type=1400 audit(2001049858.802:964): avc: denied { write } for pid=25997 comm="syz.3.4728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1571.902198][T17968] apple 0003:05AC:029C.0022: unknown main item tag 0x0 [ 1571.938083][T17968] apple 0003:05AC:029C.0022: unknown main item tag 0x0 [ 1571.948502][T17968] apple 0003:05AC:029C.0022: unknown main item tag 0x0 [ 1572.150377][T17968] apple 0003:05AC:029C.0022: unknown main item tag 0x0 [ 1572.184729][T17968] apple 0003:05AC:029C.0022: unknown main item tag 0x0 [ 1572.191853][T17968] apple 0003:05AC:029C.0022: unknown main item tag 0x0 [ 1572.200635][T17968] apple 0003:05AC:029C.0022: unknown main item tag 0x0 [ 1572.209251][T17968] apple 0003:05AC:029C.0022: unknown main item tag 0x0 [ 1572.218335][T17968] apple 0003:05AC:029C.0022: unknown main item tag 0x0 [ 1572.228472][T17968] apple 0003:05AC:029C.0022: unknown main item tag 0x0 [ 1572.300450][T17968] apple 0003:05AC:029C.0022: hidraw0: USB HID v0.04 Device [HID 05ac:029c] on usb-dummy_hcd.5-1/input0 [ 1572.342529][T17968] usb 6-1: USB disconnect, device number 76 [ 1572.401822][T26009] fido_id[26009]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1572.512130][T26013] syz_tun: entered allmulticast mode [ 1572.578700][T26013] dvmrp8: entered allmulticast mode [ 1573.223124][T26010] syz_tun: left allmulticast mode [ 1573.314566][T26030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4734'. [ 1573.380258][T26030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4734'. [ 1573.421367][T26033] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4735'. [ 1574.074226][T26053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4739'. [ 1575.001751][T26066] netlink: 107460 bytes leftover after parsing attributes in process `syz.9.4745'. [ 1575.610885][T26078] xt_connbytes: Forcing CT accounting to be enabled [ 1575.689187][T26082] input: syz1 as /devices/virtual/input/input73 [ 1576.518642][T26096] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4752'. [ 1576.531786][T26097] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4751'. [ 1576.541158][T26097] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4751'. [ 1577.073545][T26103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4755'. [ 1578.089580][T18569] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1578.542881][T26116] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4758'. [ 1578.675914][T17070] Bluetooth: hci1: command 0x0406 tx timeout [ 1579.345737][T18569] usb 9-1: Using ep0 maxpacket: 16 [ 1579.357940][T18569] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1579.469700][T18569] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1579.480782][T26117] process '/newroot/133/file0' started with executable stack [ 1579.769744][T18569] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.780130][T18569] usb 9-1: Product: syz [ 1579.784323][T18569] usb 9-1: Manufacturer: syz [ 1579.786159][T26124] input: syz1 as /devices/virtual/input/input74 [ 1579.805963][T18569] usb 9-1: SerialNumber: syz [ 1579.815374][T18569] usb 9-1: config 0 descriptor?? [ 1579.850104][T18569] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1579.876640][T18569] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1580.049211][ T30] audit: type=1400 audit(2001049868.730:965): avc: denied { setattr } for pid=26142 comm="syz.9.4766" name="/" dev="configfs" ino=1124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1580.448582][T18569] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1580.488735][T26153] netlink: 'syz.5.4768': attribute type 1 has an invalid length. [ 1580.557612][T26153] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1580.586999][T26155] bond11: (slave wlan0): Enslaving as an active interface with a down link [ 1582.384361][T18569] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1582.416144][T18569] em28xx 9-1:0.0: board has no eeprom [ 1582.586261][T18569] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1582.602882][T18569] em28xx 9-1:0.0: dvb set to bulk mode. [ 1582.614300][T14836] em28xx 9-1:0.0: Binding DVB extension [ 1582.631213][T18569] usb 9-1: USB disconnect, device number 45 [ 1582.645562][T18569] em28xx 9-1:0.0: Disconnecting em28xx [ 1582.711378][T14836] em28xx 9-1:0.0: Registering input extension [ 1582.719999][T18569] em28xx 9-1:0.0: Closing input extension [ 1582.763557][T18569] em28xx 9-1:0.0: Freeing device [ 1582.805482][ T30] audit: type=1400 audit(2001049871.480:966): avc: denied { write } for pid=26168 comm="syz.3.4771" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1582.831967][T26169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4771'. [ 1582.845958][ T30] audit: type=1400 audit(2001049871.520:967): avc: denied { ioctl } for pid=26168 comm="syz.3.4771" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1582.972196][T26174] netlink: 'syz.5.4773': attribute type 15 has an invalid length. [ 1582.983673][T26174] netlink: 666 bytes leftover after parsing attributes in process `syz.5.4773'. [ 1584.789695][T26196] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4780'. [ 1584.799565][T26196] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4780'. [ 1584.976570][ T5950] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1584.984640][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1585.116425][ T5950] usb 4-1: device descriptor read/64, error -32 [ 1585.780123][T26200] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1586.603610][T26209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4784'. [ 1586.613733][T26209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4784'. [ 1586.636810][ T24] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1586.636810][ T5950] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1586.796711][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 1586.805250][ T24] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1586.816723][T18569] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1586.824524][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.846279][ T24] usb 9-1: Product: syz [ 1586.854786][ T24] usb 9-1: Manufacturer: syz [ 1586.865048][ T24] usb 9-1: SerialNumber: syz [ 1586.878125][ T24] usb 9-1: config 0 descriptor?? [ 1586.986722][T18569] usb 6-1: Using ep0 maxpacket: 8 [ 1586.993582][T18569] usb 6-1: config 127 has an invalid interface number: 171 but max is 1 [ 1587.002417][T18569] usb 6-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.013038][T18569] usb 6-1: config 127 has no interface number 1 [ 1587.117378][T18569] usb 6-1: config 127 interface 171 has no altsetting 0 [ 1587.137333][T18569] usb 6-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1587.146872][T18569] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.155179][T18569] usb 6-1: Product: syz [ 1587.160692][T18569] usb 6-1: Manufacturer: syz [ 1587.173330][T18569] usb 6-1: SerialNumber: syz [ 1588.785459][T26200] orangefs_mount: mount request failed with -4 [ 1588.815236][ T24] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1588.893754][T26242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4794'. [ 1588.905767][T26242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4794'. [ 1589.914396][ T24] dvb_usb_af9015 9-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1590.091176][ T24] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1590.115247][ T24] dvb_usb_af9035 9-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1590.164523][ T24] usb 9-1: USB disconnect, device number 46 [ 1590.498820][ T24] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1590.669442][ T24] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1590.682179][ T24] usb 9-1: config 1 has an invalid descriptor of length 122, skipping remainder of the config [ 1590.707084][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1590.759673][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1590.806370][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59347, setting to 1024 [ 1590.826251][ T24] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1590.837828][ T24] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1590.971066][ T24] usb 9-1: Product: syz [ 1590.984868][ T24] usb 9-1: Manufacturer: syz [ 1591.005955][T26248] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1591.028244][ T24] cdc_wdm 9-1:1.0: skipping garbage [ 1591.041963][T26276] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4804'. [ 1591.052796][ T24] cdc_wdm 9-1:1.0: skipping garbage [ 1591.084139][ T24] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1591.105535][ T24] cdc_wdm 9-1:1.0: Unknown control protocol [ 1591.453660][T26279] vimc link validate: Sensor B:src:16x16 (0x47524247, 1, 0, 2, 1) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1591.476799][T26279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1591.618436][T26279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1591.636521][T18569] xr_serial 6-1:127.171: xr_serial converter detected [ 1591.676415][T18569] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1591.704534][T18569] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1591.770420][T18569] usb 6-1: USB disconnect, device number 77 [ 1591.824273][T18569] xr_serial 6-1:127.171: device disconnected [ 1591.986772][T26286] netlink: 'syz.9.4807': attribute type 1 has an invalid length. [ 1592.013606][T26286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1592.059206][T26288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4806'. [ 1592.072238][T26288] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4806'. [ 1593.315099][T26286] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 1593.324084][T26286] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 1594.274640][T14836] usb 9-1: USB disconnect, device number 47 [ 1594.358495][T26306] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4812'. [ 1594.389482][T18569] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1594.401685][T26310] gfs2: gfs2 mount does not exist [ 1594.474295][ T30] audit: type=1400 audit(2001049883.148:968): avc: denied { ioctl } for pid=26307 comm="syz.5.4814" path="socket:[88666]" dev="sockfs" ino=88666 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1594.549776][T18569] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1594.579139][T18569] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.591875][T18569] usb 4-1: config 0 descriptor?? [ 1594.613417][T18569] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1594.625781][T26326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4816'. [ 1594.703508][T26329] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4818'. [ 1594.772012][T26334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4818'. [ 1594.836378][T18569] gspca_sn9c2028: read1 error -32 [ 1594.841928][T18569] gspca_sn9c2028: read1 error -32 [ 1594.923879][T26339] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4819'. [ 1594.936704][T26339] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4819'. [ 1595.862924][T18569] usb 4-1: USB disconnect, device number 14 [ 1596.099066][ T5822] Bluetooth: hci2: unexpected event for opcode 0x0c46 [ 1600.590873][T15266] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1600.875463][T15266] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1600.921649][T15266] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.948711][T15266] usb 9-1: Product: syz [ 1600.963156][T15266] usb 9-1: Manufacturer: syz [ 1600.968469][T15266] usb 9-1: SerialNumber: syz [ 1600.980436][T15266] usb 9-1: config 0 descriptor?? [ 1601.178658][T18569] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1601.484885][T18569] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1601.519966][T18569] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1601.537872][T18569] usb 6-1: can't read configurations, error -71 [ 1602.175857][T15266] usb 9-1: Firmware version (0.0) predates our first public release. [ 1602.197332][T15266] usb 9-1: Please update to version 0.2 or newer [ 1602.467484][T26434] netlink: 'syz.9.4842': attribute type 29 has an invalid length. [ 1602.639000][T15266] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1602.859037][T15266] usb 4-1: Using ep0 maxpacket: 32 [ 1602.919699][T15266] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 1603.010259][T15266] usb 4-1: config 0 has no interface number 0 [ 1603.098070][T15266] usb 4-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1603.122035][ T5892] usb 9-1: USB disconnect, device number 48 [ 1603.142348][T15266] usb 4-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1603.166177][T15266] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1603.177478][T15266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.214198][T15266] usb 4-1: Product: syz [ 1603.231989][T15266] usb 4-1: Manufacturer: syz [ 1603.237094][T15266] usb 4-1: SerialNumber: syz [ 1603.251690][T15266] usb 4-1: config 0 descriptor?? [ 1603.261618][T15266] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1603.849436][T15266] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 1603.878185][T15266] gspca_pac7302 4-1:0.172: probe with driver gspca_pac7302 failed with error -110 [ 1604.031941][T26453] fuse: Bad value for 'fd' [ 1604.454408][T26430] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4840'. [ 1604.477827][T18569] usb 4-1: USB disconnect, device number 15 [ 1604.544142][T26461] bond1: (slave wlan0): Releasing active interface [ 1604.553464][T26445] SELinux: failed to load policy [ 1604.574528][T26463] (syz.9.4848,26463,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 1604.649452][ T30] audit: type=1400 audit(2001049893.247:969): avc: denied { add_name } for pid=26460 comm="syz.9.4848" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1604.846193][ T30] audit: type=1400 audit(2001049893.257:970): avc: denied { create } for pid=26460 comm="syz.9.4848" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1604.967072][ T30] audit: type=1400 audit(2001049893.257:971): avc: denied { associate } for pid=26460 comm="syz.9.4848" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1605.018949][ T30] audit: type=1400 audit(2001049893.387:972): avc: denied { prog_load } for pid=26458 comm="syz.5.4847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1605.069754][T26474] netlink: 548 bytes leftover after parsing attributes in process `syz.0.4849'. [ 1605.349371][ T5892] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1605.362189][T26467] netlink: 'syz.0.4849': attribute type 29 has an invalid length. [ 1605.415280][T26472] netlink: 'syz.0.4849': attribute type 29 has an invalid length. [ 1605.499344][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 1605.508352][ T5892] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 1605.538822][ T5892] usb 6-1: config 0 has no interface number 0 [ 1605.548152][ T5892] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1605.579352][ T5892] usb 6-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1605.604174][ T5892] usb 6-1: config 0 interface 49 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1605.627458][ T5892] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1605.641489][ T5892] usb 6-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 1605.657296][ T5892] usb 6-1: Product: syz [ 1605.669675][ T5892] usb 6-1: Manufacturer: syz [ 1605.674689][ T30] audit: type=1400 audit(2001049894.357:973): avc: denied { map_create } for pid=26485 comm="syz.8.4854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1605.700711][ T5892] usb 6-1: SerialNumber: syz [ 1605.715089][ T5892] usb 6-1: config 0 descriptor?? [ 1605.729061][ T30] audit: type=1400 audit(2001049894.357:974): avc: denied { map_read map_write } for pid=26485 comm="syz.8.4854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1605.760330][T26473] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1605.938066][ T30] audit: type=1400 audit(2001049894.617:975): avc: denied { prog_run } for pid=26493 comm="syz.9.4855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1607.592348][ T5892] usb 6-1: USB disconnect, device number 80 [ 1609.187911][ T5822] Bluetooth: hci4: unexpected event for opcode 0x0c46 [ 1610.645735][ T38] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.847067][ T38] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.047001][ T38] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.246805][ T38] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.397116][T17070] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1611.412101][T17070] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1611.425342][T17070] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1611.434098][T17070] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1611.441898][T17070] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1611.548066][T26588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26588 comm=syz.3.4877 [ 1613.051934][T17070] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 1613.467465][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1613.488095][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1613.500745][T17070] Bluetooth: hci3: command tx timeout [ 1613.518567][ T38] bond0 (unregistering): Released all slaves [ 1613.957424][T26640] 9pnet_fd: Insufficient options for proto=fd [ 1614.082163][ T38] bond1 (unregistering): Released all slaves [ 1614.407161][ T38] bond2 (unregistering): Released all slaves [ 1614.707610][ T38] bond3 (unregistering): Released all slaves [ 1614.889979][ T38] bond4 (unregistering): Released all slaves [ 1615.038377][ T38] bond5 (unregistering): Released all slaves [ 1615.195785][ T38] bond6 (unregistering): Released all slaves [ 1615.365451][ T38] bond7 (unregistering): Released all slaves [ 1615.494109][ T38] bond8 (unregistering): Released all slaves [ 1615.584744][T17070] Bluetooth: hci3: command tx timeout [ 1615.619638][ T38] bond9 (unregistering): Released all slaves [ 1615.730217][ T38] bond10 (unregistering): Released all slaves [ 1615.840768][ T38] bond11 (unregistering): (slave wlan0): Releasing active interface [ 1615.852246][ T38] bond11 (unregistering): Released all slaves [ 1616.085435][ T38] IPVS: stopping backup sync thread 22860 ... [ 1616.271395][T17070] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1616.299801][T26663] ------------[ cut here ]------------ [ 1616.305349][T26663] WARNING: drivers/gpu/drm/drm_prime.c:224 at drm_prime_destroy_file_private+0x43/0x60, CPU#0: syz.3.4887/26663 [ 1616.317246][T26663] Modules linked in: [ 1616.321346][T26663] CPU: 0 UID: 0 PID: 26663 Comm: syz.3.4887 Tainted: G L syzkaller #0 PREEMPT(full) [ 1616.332315][T26663] Tainted: [L]=SOFTLOCKUP [ 1616.336624][T26663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1616.346713][T26663] RIP: 0010:drm_prime_destroy_file_private+0x43/0x60 [ 1616.353833][T26663] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 21 48 8b 83 90 00 00 00 48 85 c0 75 06 5b e9 63 43 6c fc e8 5e 43 6c fc 90 <0f> 0b 90 5b e9 54 43 6c fc e8 4f 1d d6 fc eb d8 66 66 2e 0f 1f 84 [ 1616.373839][T26663] RSP: 0018:ffffc9000535fca0 EFLAGS: 00010283 [ 1616.379981][T26663] RAX: 0000000000001473 RBX: ffff888027077380 RCX: ffffc90004e31000 [ 1616.388169][T26663] RDX: 0000000000080000 RSI: ffffffff8552a312 RDI: ffff888027077410 [ 1616.396182][T26663] RBP: ffff888027077000 R08: 0000000000000001 R09: fffff52000a6bf74 [ 1616.404218][T26663] R10: ffffc9000535fba7 R11: 0000000000000000 R12: ffff888140fd2000 [ 1616.412392][T26663] R13: ffff8880270772b0 R14: 0000000000000000 R15: ffff8880270772d8 [ 1616.420361][T26663] FS: 00007f9a076ed6c0(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 1616.429313][T26663] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1616.435911][T26663] CR2: 00007fdf64415e9c CR3: 000000009e3bb000 CR4: 00000000003526f0 [ 1616.444093][T26663] Call Trace: [ 1616.447360][T26663] [ 1616.450285][T26663] drm_file_free.part.0+0x7ee/0xcd0 [ 1616.455518][T26663] ? __pfx___fsnotify_parent+0x10/0x10 [ 1616.461043][T26663] drm_close_helper.isra.0+0x186/0x1f0 [ 1616.466660][T26663] drm_release+0x1ab/0x360 [ 1616.471298][T26663] ? __pfx_drm_release+0x10/0x10 [ 1616.476230][T26663] __fput+0x402/0xb70 [ 1616.480201][T26663] task_work_run+0x150/0x240 [ 1616.484822][T26663] ? __pfx_task_work_run+0x10/0x10 [ 1616.489947][T26663] ? __do_sys_close_range+0x278/0x730 [ 1616.495360][T26663] exit_to_user_mode_loop+0xfb/0x540 [ 1616.500839][T26663] do_syscall_64+0x4ee/0xf80 [ 1616.505426][T26663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.511373][T26663] RIP: 0033:0x7f9a0678f749 [ 1616.515778][T26663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1616.535597][T26663] RSP: 002b:00007f9a076ed038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1616.544019][T26663] RAX: 0000000000000000 RBX: 00007f9a069e5fa0 RCX: 00007f9a0678f749 [ 1616.552008][T26663] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000007 [ 1616.559963][T26663] RBP: 00007f9a06813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1616.568301][T26663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1616.576290][T26663] R13: 00007f9a069e6038 R14: 00007f9a069e5fa0 R15: 00007fff0d57dcc8 [ 1616.584560][T26663] [ 1616.587570][T26663] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1616.594834][T26663] CPU: 0 UID: 0 PID: 26663 Comm: syz.3.4887 Tainted: G L syzkaller #0 PREEMPT(full) [ 1616.605753][T26663] Tainted: [L]=SOFTLOCKUP [ 1616.610058][T26663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1616.620087][T26663] Call Trace: [ 1616.623350][T26663] [ 1616.626259][T26663] dump_stack_lvl+0x3d/0x1f0 [ 1616.630839][T26663] vpanic+0x640/0x6f0 [ 1616.634799][T26663] ? drm_prime_destroy_file_private+0x43/0x60 [ 1616.640850][T26663] panic+0xca/0xd0 [ 1616.644562][T26663] ? __pfx_panic+0x10/0x10 [ 1616.648965][T26663] check_panic_on_warn+0xab/0xb0 [ 1616.653885][T26663] __warn+0x108/0x3c0 [ 1616.657854][T26663] __report_bug+0x2a0/0x520 [ 1616.662353][T26663] ? drm_prime_destroy_file_private+0x43/0x60 [ 1616.668398][T26663] ? __pfx___report_bug+0x10/0x10 [ 1616.673406][T26663] ? find_held_lock+0x2b/0x80 [ 1616.678069][T26663] ? drm_master_release+0x2c1/0x600 [ 1616.683248][T26663] ? drm_prime_destroy_file_private+0x43/0x60 [ 1616.689295][T26663] report_bug+0xb2/0x220 [ 1616.693517][T26663] ? drm_prime_destroy_file_private+0x43/0x60 [ 1616.699560][T26663] handle_bug+0x127/0x260 [ 1616.703870][T26663] exc_invalid_op+0x17/0x50 [ 1616.708440][T26663] asm_exc_invalid_op+0x1a/0x20 [ 1616.713264][T26663] RIP: 0010:drm_prime_destroy_file_private+0x43/0x60 [ 1616.719916][T26663] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 21 48 8b 83 90 00 00 00 48 85 c0 75 06 5b e9 63 43 6c fc e8 5e 43 6c fc 90 <0f> 0b 90 5b e9 54 43 6c fc e8 4f 1d d6 fc eb d8 66 66 2e 0f 1f 84 [ 1616.739500][T26663] RSP: 0018:ffffc9000535fca0 EFLAGS: 00010283 [ 1616.745551][T26663] RAX: 0000000000001473 RBX: ffff888027077380 RCX: ffffc90004e31000 [ 1616.753499][T26663] RDX: 0000000000080000 RSI: ffffffff8552a312 RDI: ffff888027077410 [ 1616.761445][T26663] RBP: ffff888027077000 R08: 0000000000000001 R09: fffff52000a6bf74 [ 1616.769390][T26663] R10: ffffc9000535fba7 R11: 0000000000000000 R12: ffff888140fd2000 [ 1616.777338][T26663] R13: ffff8880270772b0 R14: 0000000000000000 R15: ffff8880270772d8 [ 1616.785291][T26663] ? drm_prime_destroy_file_private+0x42/0x60 [ 1616.791342][T26663] drm_file_free.part.0+0x7ee/0xcd0 [ 1616.796525][T26663] ? __pfx___fsnotify_parent+0x10/0x10 [ 1616.801969][T26663] drm_close_helper.isra.0+0x186/0x1f0 [ 1616.807408][T26663] drm_release+0x1ab/0x360 [ 1616.811805][T26663] ? __pfx_drm_release+0x10/0x10 [ 1616.816720][T26663] __fput+0x402/0xb70 [ 1616.820680][T26663] task_work_run+0x150/0x240 [ 1616.825248][T26663] ? __pfx_task_work_run+0x10/0x10 [ 1616.830336][T26663] ? __do_sys_close_range+0x278/0x730 [ 1616.835691][T26663] exit_to_user_mode_loop+0xfb/0x540 [ 1616.840959][T26663] do_syscall_64+0x4ee/0xf80 [ 1616.845528][T26663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.851407][T26663] RIP: 0033:0x7f9a0678f749 [ 1616.855813][T26663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1616.875403][T26663] RSP: 002b:00007f9a076ed038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1616.883801][T26663] RAX: 0000000000000000 RBX: 00007f9a069e5fa0 RCX: 00007f9a0678f749 [ 1616.891757][T26663] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000007 [ 1616.899713][T26663] RBP: 00007f9a06813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1616.907666][T26663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1616.915617][T26663] R13: 00007f9a069e6038 R14: 00007f9a069e5fa0 R15: 00007fff0d57dcc8 [ 1616.923582][T26663] [ 1616.926939][T26663] Kernel Offset: disabled [ 1616.931238][T26663] Rebooting in 86400 seconds..