last executing test programs: 14m47.434824641s ago: executing program 3 (id=226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000004ffffffff000000000200000009000000000000000000001002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vxcan1\x00', 0x2000}) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x19}, {@local, 0x4e20, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) 14m44.363477228s ago: executing program 32 (id=203): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_IO_FLUSHER(0x34, 0x4000001) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r4, 0x0) 14m42.648242013s ago: executing program 3 (id=236): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) socket(0x11, 0x800000003, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000200)}, 0x24008004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) 14m38.678878654s ago: executing program 3 (id=242): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_access\x00') ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x5, 0x7f) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) 14m36.242882085s ago: executing program 3 (id=247): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hpfs\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1, 0x2}, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x42, 0x3}, 0x7}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20048000}, 0x44840) 14m34.891517832s ago: executing program 3 (id=250): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0485661, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) 14m32.171833561s ago: executing program 3 (id=253): socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0xfffffffffffffffc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) openat$dsp(0xffffffffffffff9c, 0x0, 0x480040, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "91cf254bf5fe255d", "3ada753cf5218d6f778cd129a62163719d8bd735bb9cac4e08006ff9229fcb57", "0200", "4a2112c97a93bca7"}, 0x38) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) unshare(0x62040200) socket$inet6_tcp(0xa, 0x1, 0x0) 14m16.387060671s ago: executing program 33 (id=253): socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0xfffffffffffffffc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) openat$dsp(0xffffffffffffff9c, 0x0, 0x480040, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "91cf254bf5fe255d", "3ada753cf5218d6f778cd129a62163719d8bd735bb9cac4e08006ff9229fcb57", "0200", "4a2112c97a93bca7"}, 0x38) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) unshare(0x62040200) socket$inet6_tcp(0xa, 0x1, 0x0) 11m51.805550767s ago: executing program 4 (id=516): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f00000006c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}, "0000c0d4"}}}}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x6, "0062ba7d1b0000000002f7ffffff00"}) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff060003", 0x13}], 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000514"], 0x50}}, 0x0) r5 = syz_open_pts(r3, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) landlock_restrict_self(r1, 0x0) r6 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001500), 0x40, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r7, 0x3b87, &(0x7f0000001540)={0x18}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x6d}) 11m51.682041643s ago: executing program 4 (id=518): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x800, 0x0, 0x35315842, 0x0, 0x500, [{0x0, 0xffffffff}, {0xffffffff}, {0x100000, 0x3}, {0x0, 0xf}, {0x0, 0x100}, {}, {0xfffffffc}, {0x8}], 0x0, 0x0, 0x7, 0x1}}) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x36) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, &(0x7f0000000040)={0x23, 0x4, 0x3}, 0x10) bind$phonet(r5, &(0x7f0000000040)={0x23, 0x4}, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000280)={r9, @in={{0x2, 0x4e23, @empty}}, 0x6185, 0x401}, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x4) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r10, 0x84, 0x19, &(0x7f0000000140)={r9, 0x1}, 0x8) bind$phonet(r6, &(0x7f0000000180)={0x23, 0x9, 0x48, 0x2}, 0x10) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x149882, 0x20) write$cgroup_int(r11, &(0x7f0000000040)=0x40000, 0x12) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067726574617000001400028006000e0001000000080007007f00000108000a00", @ANYRES32=r4, @ANYBLOB="d393b33281a32ade7313d30b4744ffdc4e22d62e52cd2c8bd59344d6b17563f7115fc41810f573bb4ba1dd257e"], 0x4c}}, 0x0) 11m49.569044273s ago: executing program 4 (id=525): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010101}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x4, 0x183000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f0000000300), 0x0, 0x0, 0x1, 0x7ff, 0x10000, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0xfffffffe, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) writev(r5, &(0x7f0000000780)=[{0x0}], 0x1) connect$pptp(0xffffffffffffffff, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x5, "2a000000000000005a957fe0213b2e100af028f0030b2eff0b61e6e66b8f37ff"}) 11m37.36199211s ago: executing program 4 (id=547): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@redirect_dir_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_off}]}) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) r0 = userfaultfd(0x801) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0xcb0a) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r3, 0xc028aa05, &(0x7f0000000000)={{&(0x7f0000856000/0x3000)=nil, 0x3000}, 0x1000000}) chdir(&(0x7f0000000140)='./bus\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f00000003c0)=0x7fffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) 11m34.996020759s ago: executing program 4 (id=552): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x20008040) 11m32.525559877s ago: executing program 4 (id=556): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0xc80) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = creat(0x0, 0x0) close(r2) r3 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, 0x0) r4 = creat(0x0, 0x0) close(r4) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f000000be00)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000040)={0x0, 0xae, 0x3ff, 0x30315559, 0x2, [r8, 0x0, 0x0, r9], [], [0x0, 0xfffffffc], [0x400000000000001]}) close_range(r1, 0xffffffffffffffff, 0x0) 11m29.681400623s ago: executing program 34 (id=556): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0xc80) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = creat(0x0, 0x0) close(r2) r3 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, 0x0) r4 = creat(0x0, 0x0) close(r4) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f000000be00)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000040)={0x0, 0xae, 0x3ff, 0x30315559, 0x2, [r8, 0x0, 0x0, r9], [], [0x0, 0xfffffffc], [0x400000000000001]}) close_range(r1, 0xffffffffffffffff, 0x0) 10m54.385571407s ago: executing program 6 (id=615): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) syz_open_dev$amidi(0x0, 0x2, 0x101) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d882, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x202, 0x0) ioctl$SNDCTL_TMR_START(r5, 0x5402) 10m50.524268142s ago: executing program 6 (id=623): openat$iommufd(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x1e, 0x1, 0x0) shutdown(r2, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r6 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000380)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) rseq(0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r6, 0x381b, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 10m44.221619777s ago: executing program 6 (id=636): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000)=0x9, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b03d25a806f8c2d94f90324fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 10m39.586878249s ago: executing program 6 (id=644): capset(0x0, &(0x7f0000002100)={0x0, 0x0, 0x2, 0x0, 0x9}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0xfffff9b2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r1}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r5, 0x0, 0x0) madvise(&(0x7f00000ec000/0x1000)=nil, 0x1000, 0x9) times(0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB]) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2}, 0x101}) 10m33.280317338s ago: executing program 6 (id=654): ftruncate(0xffffffffffffffff, 0x200000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1fffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x4040, &(0x7f0000000140)=ANY=[]) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r0, {0x7, 0x24}}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f000000adc0)={0x2020}, 0x2020) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f00000018c0), 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001fffffff3000000000001"], 0x114}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 10m29.073389813s ago: executing program 6 (id=660): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x5000003a, r1, 0x0) r3 = fanotify_init(0x28, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r3, 0x41, 0x8000038, r4, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r6) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r7, 0x1, 0x70bd28, 0xfffffffc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x29}]}, 0x34}}, 0x0) r8 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x12, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb66b3abc2b8cd0800450000020001000000029078ac1414bbe00000011100909b00000000fc6bc25e8e7d9b183d4fa584baf7b91baff332e064d5945ac9565d456023a4011cd9960ab597a6edde831ad0c625c0e425e60d0223e48669e1160c7727a1cfaac8e9739d01"], 0x0) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r9 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='@\x00', r9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x40002) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 10m13.037628705s ago: executing program 35 (id=660): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x5000003a, r1, 0x0) r3 = fanotify_init(0x28, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r3, 0x41, 0x8000038, r4, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r6) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r7, 0x1, 0x70bd28, 0xfffffffc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x29}]}, 0x34}}, 0x0) r8 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x12, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb66b3abc2b8cd0800450000020001000000029078ac1414bbe00000011100909b00000000fc6bc25e8e7d9b183d4fa584baf7b91baff332e064d5945ac9565d456023a4011cd9960ab597a6edde831ad0c625c0e425e60d0223e48669e1160c7727a1cfaac8e9739d01"], 0x0) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r9 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='@\x00', r9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x40002) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 10m10.513735012s ago: executing program 7 (id=694): prctl$PR_SET_MM(0x23, 0x2, &(0x7f000092e000/0x2000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x22, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000002540)={@multicast1, @empty}, 0xc) socket(0x2, 0x80805, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) r6 = syz_io_uring_setup(0x2239, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x1}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffe}}) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 10m5.950769674s ago: executing program 7 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) move_mount(0xffffffffffffffff, 0x0, r1, &(0x7f0000000280)='./file0\x00', 0x124) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xa8, 0x0, &(0x7f00000000c0)=0x46) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000001480)={0xe}) r5 = dup3(r3, r2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x1101, 0x1}, @flat=@weak_handle={0x77682a85, 0x6, 0xfffffffe}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x34}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/234, 0xea}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r7, &(0x7f0000000040)=[{&(0x7f0000000140)='75', 0x2}], 0x1) 10m2.408210278s ago: executing program 7 (id=705): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000001300)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x81, 0x4, {{0x1c, 0x4, 0x3, 0x6, 0x70, 0x65, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x70, [@local]}, @noop, @noop, @generic={0x44, 0x6, "dc7a7a4c"}, @timestamp_prespec={0x44, 0x44, 0xae, 0x3, 0xc, [{@private=0xa010102, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}, {@private=0xa010102, 0x1000}, {@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff0000}, {@broadcast, 0x3}, {@remote, 0x1d2}, {@local, 0xcbc4}]}, @generic={0x83, 0x3, "1c"}]}}}}}) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000240)={r6, @broadcast, @local}, 0xc) listen(r4, 0x4000000) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x600, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0xb, 0x1, 0x0, "adbdeec74e8e4aea6adda300"}) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x7, 0x301000) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0x2}, 0x1000, 0x20, &(0x7f00000001c0), 0x0, 0xed, 0x0, 0x8001, 0x2, 0x4, &(0x7f0000000300)="05aeca555c110dd129f047a92a91a1d2a16646d435e2192d8d678762d343440e6e7d4ce5a16320cbf976c8d714121d1682710dcf70318e6adf16105348a9a620d5556113ad425f528f3b652f0dbb5173244f62f3a45396bcc46f005f1a77aff0d26133ff9324deee7285f5a028a47f38bcfeedea5ba966c2a6c4bf54680b77a79c3e1426243307b949d9b04b29cf51cb3c6be09e2d591cceb9b8d3d26c284e791f8dc73e9fab6cf78203ce019945fd543d1acfc83e9c215986f45db522f593e74cc0c60ecebbdf6c252629e6894ab2c1e14a19b13803d15b011f1cc314e47cfef1d63dc707a91cd730783957d76543bd1115983d3777792b79f6f6917eaa3cdc6567f7b73bd0f786acef432356619b80def436ff3e77c94e53e06dc433ef46835ec1247ccdaa18d156002554698cec3a9e4c22162983bb013503fbbe453d952c58d25f31e32fe7df069d094be92e68fb44f8581c7a97794889bac98870e5e72b7dc7daca416c4f4b4865d9e90de8b94acaa475fac56e6a0168d7b51eda28e3118acc0329afdc947f8a8d98301e6ea1fe7aabbc62eedc13eb54d83e95633e733101fc5c33d1651e1991f7494b74cef3e7e91c58565683b886fc98bf9622ffa68af054a4eb1726fb25511d1bcc12be1fba931b20a10ad21aeda73eeddc96558055b8f5417a44e8cd9a5c1024d4761f1eef73ba321c2f96b679d38f7100ae31f39d44c9bd699725933e4e58994a21bf3af1f17f1b3bbc3e8124e42f2be575d88ed58d1295de73b7d29b3e86c10d552f3bef3f30a10af59122c8cc85be7534840ee7e2e6b0360dd68284a1885a626b91680426e676a12236aa380aad1aa817c3e16daa0e4db42d8869a239d163f41911b78891c49c10ac5b99dcb3cfc7ad2c52f728c71789165de539647731aeca30f73e6683989c745a3d4773959ae0e0d9c58e7653dcbf69a44d2fa326ba084b51b5b1988063f000866721e389925663c324bfc6481c1beb7a35712a0cf238e73aa1386389de3f00947ee8a1ea117283d78a65bcf9a74145d5128b64c6588a17ace820bcc098946ed461b6875330e290fcc4993e7d3bf9d1c79b8e397ca2910b46ac8531b81391fc05b97e1a33ab0dbb3fb5a786b2b88ee9f79baba74a0e15b52f28996f20a6c3cee14512d4bb5a49d6f1d12d2cc67df8a8b31169534106dd96da784220fd7b23e7ad8601fb7a981ad80ca76dcd6b1d9eb2721abc57284dd17109b243bf62e10e8c2cf7d6bd83a69597e35f95164ab54069bac52cf0dcd823313a198c9574e92db29a19e66f6773f0f408c6249638e3c97fa3421d4e109fe6c90f41c1d36eacf839011e96b85def42783038e02f5f5b2e326cd5b36948627b644c7d6f896abd16e15ae536da02c11012101db3c2308d07eedc29fd732e824191f17888e067b60a3021e9fde03c04eeed55201a22b91ccb66d4f27a487e9c7c575ff0ac825ad59150547f228bd13c38b30bec3775855cfea82300dfcf384f7720795f703aa2d25a98bc118953e538ebab0aaf7d5265612008b6afdf6fe4df2fbff610c1a1e6f899283e6a8b3de3b3068cc7ce1587e9bbe4bb0c41c54f5313e23c9846995e4d87595af1f43fa186533246499788d0d1f7c08143fe93144345b3ebc61e4fd546ebc035fbdd8ef8759b4e58b649006f7c241f3b881c9d88f7c1d55b8570ca4a7dae85ecb64e7a27fc2b47fe8cf0af6be1bc6026c16bc0cf89c1e35c8ae7c172f3fb6cdb8d06b266391010a8b644a536a0f4d474c6934aae0cb18b410a4e83375bcd02612c249c920d0f631a5680eedcbc2620ae7d518c249b44503fa206b89b86aa1d52cdf5d503dad5003f7c1eb7f49f76c10c85c6aa2e7d0a2472554350c153c55c93260ca1c9e1aad24faadf1b69e1e4182fab487550ab6f4f97932b6c3eeafacff5696c3733a0c7702c848f4e3edce0ca60c4cca308df74be4d384d00ce9a7bb7ea748b5cf9fb60cf21f23fcd4b16db7050f69c9b8aaf9b09626fe307a87695c6a2c656d34e6f8d1ba4bcf44a15523f9474476530cfff533129d0f969fdeb9f0bcdc28a171720129ae202f23e36671c61f70773a5a375cd9c51b1d0b0124cef488d1d972844761f58c7bb20fe0b28336526a1b9f68e3f5c414ac243da1920cea66e8dad02b121fca594072ee4bb1a244da6a44972ad31f4d9725c17535d88b55f21cd1409ea14debc8077833618f6b4dc8a27815f1e6656394dbceba821b1b6571cf2bca1acf08e1c34900906804e5ab339bc247fd04c223bc4c733c0831fec143a19a928b155995da4b7ad4d265ab660a4e7e3b5b6cf1c1fcf1c3012a9146d301ee0e75775451828ca396fc2862a9924dbea535a94487281488062796f1e71742c6280f081c29a471312ec356d09979d7c51a6c5b72e9e4d11b47d95310eec68d2ded3a2138306dff9f7e68053b8d05a180f87da6a2b034e32289c518bbdc07652ec46142cf6a713e5e839a0820a0d718b8cb1ac6b89290b1ee50af544f7e86961042fb26c298db5f793c2b3563e40092f8a2b35fa73f7572b04d278626a9f1103f41f706ed878f265620c83351ae9db218d8ee493abf73a476838f5291462906991d9e7992e76fef09161224915862a1eaf3c6aad5e7ccf26831441614d51bcdf5d59b68de0af3d9144b60f7ca93f9b928ba5cdc4f6a5d800ab6f49d3d178082e99bde68f8bd05b9ceed325b11fd57ab5e58a15d57f698a7e0d8a30164b872d4be78c1d3c3e1bc12b289ccc5b5336a01f74d8d09bf11132db3e7f2a2067d98d06e988d9667f9ecbd1a103bc7111d84d2c9f82db828741531746f8b41bce70bacea36b81d5cbfa244072f6e768662d116def87d0c4c7000a82c9f0e21717d0af38e15f001bf9a5cec813302048848b5cb1c634ffb2c05bb685f0fdc09ef5490ecbbaa142560c0dd95a1e4308e07ecc9718769ac2e53b75caa436131fd0256276f9b8b5d25ab304bef66766441d5d7a893123886827f570c1c0336c7b4217bcf4b8cbb2ee8ca90410d75468d05b869bf76029d006e881b9219aa998149831096168a6958fe1a2b2265084e1883f88ad0330aff9db4de6c51e188796f5d76777f16c71863706639c9e1b88140b7f70ffc0e96f665c695e79df895fe81fec486870bac89d8a25344fb6e9898ca685d7c87d74ea9e3ea9829f6ee702b3acd0df41f72d13f7f8209ab00c8d87097edfb5f24ba422fe00c9484c43a5a3ec6606d9da5a74eddf09925f0f131d6ffe5decafb54d00dea7172eba46b78245a8612e34ec5e3b84694782b89f55ae6c7150796e50621d53940c6e5a5b4002f66fcfc6a0f51e835e8bc6b98d4f5bb2ded69529dd96ee02aa65215c83bf23a4005dab3c06c7db8d60d6f492b4aa675583e6c2b98221ec7fe301ad6183012f15a9cdca3bfa979eeb809a3fdf61741f84a62cce2e810d2aeef68b283bd9ddfa8f887a0b9da21817940a97920ac3e4b5b07aa9e00b5d9295a1a9dc34958232c2212fc97659d02ddf1e4326f33c199c0b24406f65c92be3fafc5f966280ca0d4f6259d25f77fee0f61732d02eca7add3b5cbb2765cba559f7ddb829cc778a252e1a17b71fc966e23d3330403a3ee40a786b426f47b93d7aface4cbe7afaa491ea529c9a1ec5c53cbc3689b80d97cd85175886011973078119febe5febcfc40bb79ba6218c1fea291f0689d46ad8687e9bb2f8ded735f3b2620d0a2e508eb998d224a3c0eeadf98cced062aa801a02528736d421a630c76378a1c26088b5ee6b3058534485b80391eca6212658b96f5c5c4d59b2ad480791af158642807a552b185598c5fdf391f806e3a4c9e5dc3f98d362f6cd9769172c493b1c73be887a85a5e81cf5ecf8c8524a60539768dd99930a17890024fcf4c78e08ef4a0e75f63a36b5bc540796d28d4ba191ef780533f15dd344e111e7240110a6100e1e148f98f6c3f2b1fecd4297c66963ef2f2f142840b62e223790c827ccad998da999b8c493d754615b9021ad34c36cd7e3af495b7b73de4320f68d43b1a6d5c86290363b6d1a0c32d2f9b5feaf2df5b67f867fd0983fa42500411135cd4104899eb225ac243e9e5ee5b1104e2650ed13c1b09dccb5422201ac9e62468cad7879d93b60b9d5cdde364fda1d269efc0b0ae24155431a9dc9a3bdf30866ae403b2e94b215af5e53bd28784e3e25150ea04dfb0dcab0def62c2defda8a80fab148c525699b623dd4bfa1099e30f3b9aa1111067333e2db29cfdeaf6f19b4d12d6101f8ecdfc8a8b4e5543b1f9392b30ea22e296fe915bfdde28b8288a4fd7c412cba2a51e22d80e64d507fb4ff3c961b3da318e2f94548706dd3bc5c5fd7396f459784b262d74a707fa47c07bda7450fd38dcac235c4e8d447b92b87731caa935ace57aebd99bdd4453dba1ed6845ae3770392dc6e7297294172fe7753addb6757c22e0aabaeebb0f6c4ee67234f68fe823ec883bc9d1767aee618222b0b1d730e680e6542871f52dc41c771da1f7d16668610a6c177125bcff8aa565c36245c5bf6d9a74c0ddec0be56c3a71c276c3814a506fc31b0615732955e6c00a1331f3cf0dbb5a69cd481b61bdbe96659515c5cc9df27bb229811f566d2d101a8957c0a9ac6f4de643b2e6d5496b300065bf353b9bb67483b160166929d42b143a73a5022a87e9b016a57a3df7e1481aae1200b119669eab69076b3e5b997e04977b28ffb2c93679e2e64665acb84aea9388d06ae751d456deed470a4a170cf4baf3459e102c0fd6c7aa5284e50fe15bebd3b82d2d38b9f1b6d02b65725df20e72a6bf29517227464358ada403f400f19163f5686f24233ec6419d32d54b78eeffd028c2cd8814750756cc809763acf5fce894af21758c0bdfbfd95fd3754b58cc552dec91646e22e911e8da1f15f550c631a13db7c5978e54c83e6bf98d4ddea6970c1b3572ca855ef00b517466fba27f22033fea179825cdff68263b93e30f307c9d635053fe190ef77484541eff79fa5a086eddb1b37f80105d22b489e19af469621e76bd017a78fd429dfe0db68c65148874c30732f79f7978592ba09947b5c29e5317b32cc278a5018bd83e98a9af389c4956f5f7543c8fd4315c9e53980d79a8efe9a54e6ee21d328acc33502835952638251ebd6bd495c30abd7f4fb9100e9f5ad24b6b92001bb52350b251cb602670f0b771167bdd4a35d979d9e1849885cd7da3955197d5de4be4f35115fd4ffd09057ef0d452f24bd25f491e9567af32958a2a0d5f17e91403b501b0dd90f703c5671a584b97a58d3908b19440c3073badc41e6280863954348d426bc2446e9ebaf8a3614cac0bc9de6ce39727ad89b00884263e301a1aebc3849d4945dad0a6d50e6dcc6b7f3ebbe6ff29c9d261cfc01976094282816b9bf5b95d365c685e75b3b28e49d8079fec16a884ce17d9be68e396302d61003faaeb2607b2062e5d8b8f3c4593754653980b6ea8e85922016fe238a894dc3b1713651d9c8c9eb94732b534966e390fcf08866c5ee7578aabdaa740c01eced4015ed3cafc0589fddb20bfb8b170e6c4996b5a10bcdeb6e936992633b9edfaf96213afd291c4b4851d68e0a4cf77fc20852cd8860bf055d0f0958b29218ec79bfd54d0b76f2a6a813b576fb2c2d40f05f80479760303cf5037b62d16d941ae8ee043214cfcc285d2370c941ce8319146c7d68709c8cb4ac22487617870b7d64402d85a75d0809d14961e5f3a09a24a0fc9f44b9709e8a202200e936662dbef54911795f6052f1a989360fdc14ba0d0e749a9f7ef36ab0"}) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 9m57.298667011s ago: executing program 7 (id=712): madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r0, 0x89e0, 0x0) dup(0xffffffffffffffff) syz_open_dev$radio(&(0x7f0000000140), 0x1, 0x2) syz_emit_ethernet(0x46, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r2, 0x0, 0x0) iopl(0x3) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x181480, 0x0) socket$inet(0xa, 0x801, 0x84) socket$kcm(0x10, 0x2, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x42000) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 9m51.749922973s ago: executing program 7 (id=720): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000100025150000000200009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x207, 0x161a81) r2 = memfd_create(&(0x7f0000000840)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdc\xc0*rw[\r\x98\xf6\xd3\xbf\xa1\xcf\x8e\xc2\x8c\f\xee}g\xfe\xae\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\x01\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x1f\x88Z0\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdf\x00\x10\x00\x00\x00\x00\x00\x00\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, 0x0, 0x0) sendto$netrom(r8, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x381b, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x80001, 0x0) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, 0x0, 0x0) writev(r11, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000", 0x36}], 0x1) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x310) setsockopt$inet6_group_source_req(r9, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4000, 0x1b, @mcast1}}, {{0xa, 0x0, 0x855b, @empty, 0x1ff}}}, 0x108) sendmsg$NFT_BATCH(r4, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000a2c000000050a0101000000000000000002090001007379783000"], 0x54}}, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r3, r2}}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}]}, 0x4c}}, 0x0) 9m34.776950067s ago: executing program 36 (id=725): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, 0x0, 0x0) sendto$netrom(r8, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x381b, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x80001, 0x0) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, 0x0, 0x0) writev(r11, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000", 0x36}], 0x1) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x310) setsockopt$inet6_group_source_req(r9, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4000, 0x1b, @mcast1}}, {{0xa, 0x0, 0x855b, @empty, 0x1ff}}}, 0x108) sendmsg$NFT_BATCH(r4, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000a2c000000050a0101000000000000000002090001007379783000"], 0x54}}, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r3, r2}}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}]}, 0x4c}}, 0x0) 2m57.407917518s ago: executing program 5 (id=2526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 2m56.194341848s ago: executing program 5 (id=2527): r0 = dup(0xffffffffffffffff) openat$cgroup_ro(r0, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r0, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@uuid_on}, {@verity_on}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r5, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r6 = getegid() setresgid(r6, r6, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001040)="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", 0x2000, &(0x7f0000003240)={&(0x7f0000000240)={0x50, 0x0, 0x7, {0x7, 0x29, 0x80, 0x2600, 0x1, 0x9, 0x7ff, 0x8000, 0x0, 0x0, 0x8, 0x9}}, &(0x7f0000000100)={0x18, 0x0, 0xd6b, {0xfffffffffffffff7}}, &(0x7f0000000180)={0x18, 0x0, 0x400}, &(0x7f0000000300)={0x18, 0x0, 0x8000000000000000, {0xff}}, &(0x7f0000000380)={0x18, 0xfffffffffffffffe, 0x9aa8}, &(0x7f00000003c0)={0x28, 0x0, 0xe, {{0x2, 0x7, 0x2, r1}}}, &(0x7f0000000480)={0x60, 0x0, 0x6a6, {{0x3d612f83, 0x0, 0x3, 0x8, 0x5, 0x800, 0x800, 0x5}}}, &(0x7f0000000500)={0x18, 0x0, 0x100000001, {0x4}}, &(0x7f0000000680)={0x17, 0xfffffffffffffffe, 0x4, {'uuid=on'}}, &(0x7f00000006c0)={0x20, 0x0, 0x100, {0x0, 0x3}}, &(0x7f0000000800)={0x78, 0x0, 0x8, {0x10000, 0x7fffffff, 0x0, {0x1, 0xdf3, 0x8, 0x1, 0x86c, 0x4, 0xffff0001, 0x7, 0x100, 0x8000, 0x46b8, 0x0, 0x0, 0x9, 0x7}}}, &(0x7f0000000940)={0x90, 0x0, 0x0, {0x6, 0x0, 0x3, 0x5a, 0x7, 0x27, {0x3, 0xbdd, 0xb, 0x9, 0x6, 0x8000000000000001, 0x10000, 0x6, 0x2, 0x8000, 0x7f, 0x0, 0x0, 0xee3}}}, &(0x7f0000000a00)={0x68, 0xffffffffffffffda, 0x81, [{0x0, 0x6, 0x1, 0x7fff, '\\'}, {0x0, 0x7fffffff, 0x0, 0xe}, {0x4, 0x80000001, 0x4, 0x1, '^&(\xda'}]}, &(0x7f0000000c00)={0x298, 0x0, 0x2, [{{0x5, 0x2, 0x9, 0x7f, 0x9a, 0xc535, {0x0, 0x1, 0xffffffffffff0000, 0x0, 0x3, 0x5, 0x4, 0xea, 0x8000, 0x8000, 0xba, 0xffffffffffffffff, 0x0, 0x1, 0x3}}, {0x2, 0x0, 0xd, 0x8, 'sched_switch\x00'}}, {{0x2, 0x3, 0xffffffff, 0x4, 0x1, 0x9, {0x0, 0x6, 0x9, 0x81, 0x6, 0x1, 0x5, 0x4, 0xff, 0x1000, 0xd, 0x0, 0x0, 0x3, 0x10}}, {0x1, 0x7, 0x8, 0x3, 'overlay\x00'}}, {{0x0, 0x1, 0x8, 0xcb1, 0x1, 0x8, {0x6, 0x8000000000000000, 0x2, 0xffffffffffffffff, 0x5, 0x6, 0x4, 0xffffffff, 0x3e24e67d, 0x1000, 0x0, 0xee00, 0x0, 0x0, 0x6b89}}, {0x4, 0x3, 0x7, 0x8, '\xe6}[!,^*'}}, {{0x6, 0x0, 0x6, 0x92, 0x7, 0x9, {0x2, 0x9, 0x0, 0x5, 0x7, 0x8, 0xf, 0x7, 0x9, 0x1b000, 0x10001, 0x0, 0x0, 0x426f, 0x7}}, {0x5, 0x6, 0x2, 0xffff, '^#'}}]}, &(0x7f0000003040)={0xa0, 0x0, 0x0, {{0x2, 0x1, 0xfff, 0x9, 0xfffffff7, 0xd, {0x5, 0x1c5, 0x9, 0x7f, 0x1, 0x3, 0x4, 0xfffffff7, 0x1e83, 0x4000, 0xc, 0x0, 0x0, 0x45, 0xa}}}}, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x3, 0x0, 0x0, 0x10}}, &(0x7f0000003100)={0x130, 0x0, 0x3, {0x33ee, 0x247, 0x0, '\x00', {0x1, 0x3, 0x2, 0x0, 0x0, r6, 0x1000, '\x00', 0x5, 0x10001, 0x4, 0x4, {0xd, 0x80}, {0x4, 0x7f}, {0x7, 0x7fffffff}, {0x1d43, 0x4fee}, 0xc0, 0x8, 0x4f8, 0x6}}}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m53.703639023s ago: executing program 5 (id=2534): syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f102000050801060c8b631b7507250102020700090501", @ANYBLOB="4ad8"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}]}}}]}, 0x44}}, 0x0) modify_ldt$read(0x0, &(0x7f00000007c0)=""/166, 0xa6) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) r2 = socket$inet(0x2, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0xf0, 0x0) ioctl$TCFLSH(r1, 0x8925, 0x20000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0xfffffffe, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 2m48.043258795s ago: executing program 5 (id=2548): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d00)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x2, 0x0, 0x0, 0xa, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x5}, {0xc, 0xa}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xa495, 0x7ff, 0x4, 0x0, 0xffffffff}, 0x80, 0x0, 0x3, 0x4, 0x8, 0xd, 0x17, 0x1b, 0x11, 0x4625b128, {0x9, 0x5, 0x0, 0x2, 0xb, 0x6}}}}]}, 0x78}}, 0x4000) sendmmsg$inet6(r0, &(0x7f00000031c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x33}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)="8e", 0x1}], 0x1}}], 0x1, 0x4040) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) 2m46.328513672s ago: executing program 5 (id=2553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/18, 0x12}], 0x1}}], 0x1, 0x40002023, 0x0) 2m44.959935538s ago: executing program 5 (id=2556): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f00000001c0)=ANY=[], 0x18}}], 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff000) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) 2m29.052344909s ago: executing program 37 (id=2556): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f00000001c0)=ANY=[], 0x18}}], 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff000) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) 23.196610438s ago: executing program 1 (id=2908): socketpair(0x1, 0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000004dd06e7f9602d5d69e0996a8a2995d502675ade63d0b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) io_setup(0x3, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) socket(0x10, 0x400000000080803, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) 21.160625584s ago: executing program 1 (id=2915): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x7fffffff, 0x3, 0x0, 0x6, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbef8, 0x8031, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) 20.887432122s ago: executing program 0 (id=2916): quotactl$Q_SETINFO(0xffffffff80000600, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000009000085000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="170000000a0001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 19.946329031s ago: executing program 1 (id=2918): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_LOCK(0x0, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x8, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, 0x2, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x204c004) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) connect$inet6(r4, 0x0, 0xd7cc5d556c3ede87) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 19.540580809s ago: executing program 9 (id=2920): r0 = dup(0xffffffffffffffff) openat$cgroup_ro(r0, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r0, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000440)={[{@uuid_on}, {@verity_on}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r5, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r6 = getegid() setresgid(r6, r6, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001040)="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", 0x2000, &(0x7f0000003240)={&(0x7f0000000240)={0x50, 0x0, 0x7, {0x7, 0x29, 0x80, 0x2600, 0x1, 0x9, 0x7ff, 0x8000, 0x0, 0x0, 0x8, 0x9}}, &(0x7f0000000100)={0x18, 0x0, 0xd6b, {0xfffffffffffffff7}}, &(0x7f0000000180)={0x18, 0x0, 0x400}, &(0x7f0000000300)={0x18, 0x0, 0x8000000000000000, {0xff}}, &(0x7f0000000380)={0x18, 0xfffffffffffffffe, 0x9aa8}, &(0x7f00000003c0)={0x28, 0x0, 0xe, {{0x2, 0x7, 0x2, r1}}}, &(0x7f0000000480)={0x60, 0x0, 0x6a6, {{0x3d612f83, 0x0, 0x3, 0x8, 0x5, 0x800, 0x800, 0x5}}}, &(0x7f0000000500)={0x18, 0x0, 0x100000001, {0x4}}, &(0x7f0000000680)={0x17, 0xfffffffffffffffe, 0x4, {'uuid=on'}}, &(0x7f00000006c0)={0x20, 0x0, 0x100, {0x0, 0x3}}, &(0x7f0000000800)={0x78, 0x0, 0x8, {0x10000, 0x7fffffff, 0x0, {0x1, 0xdf3, 0x8, 0x1, 0x86c, 0x4, 0xffff0001, 0x7, 0x100, 0x8000, 0x46b8, 0x0, 0x0, 0x9, 0x7}}}, &(0x7f0000000940)={0x90, 0x0, 0x0, {0x6, 0x0, 0x3, 0x5a, 0x7, 0x27, {0x3, 0xbdd, 0xb, 0x9, 0x6, 0x8000000000000001, 0x10000, 0x6, 0x2, 0x8000, 0x7f, 0x0, 0x0, 0xee3}}}, &(0x7f0000000a00)={0x68, 0xffffffffffffffda, 0x81, [{0x0, 0x6, 0x1, 0x7fff, '\\'}, {0x0, 0x7fffffff, 0x0, 0xe}, {0x4, 0x80000001, 0x4, 0x1, '^&(\xda'}]}, &(0x7f0000000c00)={0x298, 0x0, 0x2, [{{0x5, 0x2, 0x9, 0x7f, 0x9a, 0xc535, {0x0, 0x1, 0xffffffffffff0000, 0x0, 0x3, 0x5, 0x4, 0xea, 0x8000, 0x8000, 0xba, 0xffffffffffffffff, 0x0, 0x1, 0x3}}, {0x2, 0x0, 0xd, 0x8, 'sched_switch\x00'}}, {{0x2, 0x3, 0xffffffff, 0x4, 0x1, 0x9, {0x0, 0x6, 0x9, 0x81, 0x6, 0x1, 0x5, 0x4, 0xff, 0x1000, 0xd, 0x0, 0x0, 0x3, 0x10}}, {0x1, 0x7, 0x8, 0x3, 'overlay\x00'}}, {{0x0, 0x1, 0x8, 0xcb1, 0x1, 0x8, {0x6, 0x8000000000000000, 0x2, 0xffffffffffffffff, 0x5, 0x6, 0x4, 0xffffffff, 0x3e24e67d, 0x1000, 0x0, 0xee00, 0x0, 0x0, 0x6b89}}, {0x4, 0x3, 0x7, 0x8, '\xe6}[!,^*'}}, {{0x6, 0x0, 0x6, 0x92, 0x7, 0x9, {0x2, 0x9, 0x0, 0x5, 0x7, 0x8, 0xf, 0x7, 0x9, 0x1b000, 0x10001, 0x0, 0x0, 0x426f, 0x7}}, {0x5, 0x6, 0x2, 0xffff, '^#'}}]}, &(0x7f0000003040)={0xa0, 0x0, 0x0, {{0x2, 0x1, 0xfff, 0x9, 0xfffffff7, 0xd, {0x5, 0x1c5, 0x9, 0x7f, 0x1, 0x3, 0x4, 0xfffffff7, 0x1e83, 0x4000, 0xc, 0x0, 0x0, 0x45, 0xa}}}}, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x3, 0x0, 0x0, 0x10}}, &(0x7f0000003100)={0x130, 0x0, 0x3, {0x33ee, 0x247, 0x0, '\x00', {0x1, 0x3, 0x2, 0x0, 0x0, r6, 0x1000, '\x00', 0x5, 0x10001, 0x4, 0x4, {0xd, 0x80}, {0x4, 0x7f}, {0x7, 0x7fffffff}, {0x1d43, 0x4fee}, 0xc0, 0x8, 0x4f8, 0x6}}}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 19.535477982s ago: executing program 0 (id=2921): open(0x0, 0x20002, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000013c0)}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_emit_ethernet(0x2a4, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a6026e0000fc020000000000000000000000000000fe8000000000000000000000000000aa223427d5c9a46b9fa14172170a013589317d2af31ba554311bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645e"], 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000240), &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)="a81ea7adf7a8ef1444aa6167fd531d5328dff1de695415defd24fda17ee74ad61d0112b1629b2d8d0000600072bdbf090000a96fed48b08a7e23172abad780ca335f9c70378cdd52ed1ad8b09fce9d1c1550d01c8b858cf486e304f7857d98ab96c3d0952714471e88985aef579ae438957547e4af5c129b404932687d48f7bc7e00"/142, 0x8e, r4) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) 18.411599217s ago: executing program 9 (id=2923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r2 = memfd_create(&(0x7f0000000b00)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd98\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F\xc6\x8b\x81L\xa3e9za\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\b\x00x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\x19\x87Qf\xbcJ\x91\xad\xf6\x1d\xe9\xb6\x13\xc8\xe4k\xfcX\x12\x9a\xc0\xab\xe9P\xad\xea\xc3e\a\xf0S\xce$\x81w\x93Q\xfd\xdc\"\xf2e{J\xef\xd8f\x18e6k|\x1b\x1e\xc7bD\x95H\xe8\xaf2\x99\\\x0ep\xa3\x03 \xb4\xba\xf6\x11\xe3\xa4\x1a\xdc_w\xe7n\xd1\xb62+\xfd\b\x1a\xf8)\xc4\xa9\x1c\x13\xb0\xf2\xc7\x80\x8e\xbd\xf2\xe6u\xc8\xb08?\xbc\xbc\xcao\xa8^3T\xed\xf6\xce\x04q\xfcC)\x8d\xa6-\xfb3\x80\x1eAT\x1b\xa7\xbc\xa2\xb2\'/\xa7\x18|7C\xc8\x9e\xc3\a<\xc9\xcb46\xae\xa2\xb5\xbf\x1d}O\x98\xfcD,\xfb\x8c\xc1Y\xf7\xa9\xb17\xc0A\xe8\xcc:Yi_H\xf5:9\xa6lZ\xfa\x84\f\xdcl*gL\bz\x87l)\xa5\x89#\\\x170 \x03', 0x2) lseek(r2, 0xfffffffffffffffc, 0x3) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r3, 0x29, 0x4d, &(0x7f0000000140)=ANY=[], 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010000173c2e5864a2fad65000000000a28000000000a010400000000000000000100004008000240000000020900010073797a300000000014000000110001689b2d8a34d4f6e2ed81529cc3bd67fb918b960b73d57807d6eb210309d1020d32d0a1278620bec91d7749d881a25f2c1555397aa42411734085db93e967"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600001900000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000000d0a010e0000000000000000010000000900010073797a30000000000900020073797a3200000000cb97d6513e5986c29fe24fffb436f3144d8b419c1118e495d11031278cdf691ed1c927eb85f567223772542f5b3ee45adbbed11d0e24f729d09ad57307776bef6b40eb5871f3a93015684942000000000000000810a9b1ab216e8cbbc0c4ffbdb873193c0bc449b3375050f820795426ec0cce6a13a91825ea7a7a70c0245a698faa7cbbcd7859cb27a6ec53aab79a3b2ba9b08509c881805190891aae10845f1cba4b33d8893df1a0a8524a208bd4acab9d765e8b"], 0x2c}}, 0x0) 17.588970462s ago: executing program 0 (id=2924): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003180), 0x0, 0x0, 0x50}}], 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x4d5, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 15.836221782s ago: executing program 1 (id=2927): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102385, &(0x7f0000000000)=0x18ff1) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xd2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 10.796469422s ago: executing program 8 (id=2933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000000706010200000000000000000a000002050001000785a51706544d09c0b2d7084394ef3240dc1dc77376fc071bb5b917183d8046843481ebcb2d3c63bfd3a580ef779a5194984bd90030a460e6f493fbc9a859d8f34068f70a278a365c153a364eede065bd50c47368b02b9d78c2bcc14a1516b42782c3d67d06e08fb07681498d6681016ec9d53f92213e953e7aeaef49131e3559096aedc7ce717d1b2af2e84cfaa1229c41d187fd0a0d4d7acc06b571e8d00d15f3565f596e0453907dd8a2a56ec7eb849f16823613198bd3e3f79c657f26e15c6f374b"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x44, r2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x44}, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24000090) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) pipe2$9p(&(0x7f0000000240), 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1\xd1\x11\xf0\xc2Gj+kV\x00'/179, 0x2) ftruncate(r5, 0xfbff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000000c0)=0x5) 10.752013291s ago: executing program 2 (id=2934): socket$inet_udp(0x2, 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x66) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r0, 0x0, 0x300}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000002c0)={@null, 0xa, 'ip_vti0\x00'}) syz_open_dev$vcsu(&(0x7f00000003c0), 0x0, 0x4e2c2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 9.590090178s ago: executing program 2 (id=2935): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x13f}}, 0x20) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000400)='io.pressure\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_io_uring_setup(0xe02, 0x0, &(0x7f00000000c0), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x0, @local}, 0x2}}, 0x26) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000000)={0x13, 0x10, 0x8, {0x0, r2, 0x1}}, 0x18) 9.55113788s ago: executing program 8 (id=2936): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x0) epoll_create(0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x2, 0x0) r4 = add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0x2, r4, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000200)=0x80000000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) 9.472623433s ago: executing program 9 (id=2937): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) recvmsg$unix(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x2}, 0x22) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, &(0x7f00000026c0), &(0x7f0000002700)=0x4) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$incfs(0xffffffffffffff9c, 0x0, 0x10841, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x5, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(r3, &(0x7f0000000000), 0xc) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) write(r3, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 9.454804035s ago: executing program 0 (id=2938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0xa102, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x37000, 0x1000}, 0x20) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], 0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 8.184936428s ago: executing program 8 (id=2939): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r4, &(0x7f0000002700)="a8", 0x1, 0x20000004, &(0x7f0000002840)={0x11, 0x1c, r6, 0x1, 0x5, 0x6, @random="0e000000000b"}, 0x14) sched_setaffinity(0x0, 0x0, 0x0) 8.175088521s ago: executing program 2 (id=2940): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x3, 0x0, 0x80000000, 0x0, [0x0], [], [0x0, 0x0, 0xfffffffc], [0x9ee, 0x4, 0x0, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r9}) close_range(r0, 0xffffffffffffffff, 0x0) r10 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(0x0, r10) syz_genetlink_get_family_id$wireguard(0x0, r10) 8.166356394s ago: executing program 1 (id=2941): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r5, &(0x7f0000000080)=""/75, 0x8e, 0x0) inotify_init1(0x80000) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x18000000000002a0, 0x12b, 0x0, &(0x7f00000006c0)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be30043d50ea5a6b8686731cb89ef77123c899b699eeaa8eaa5444d375e21dda0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf7e59a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000fbd78168fee800dda5e68e5455f7a3e90d043cefae39c5b17dcc638993ad8ee45540bbabed", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.643183119s ago: executing program 0 (id=2942): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 5.071396419s ago: executing program 2 (id=2943): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) 4.983689468s ago: executing program 9 (id=2944): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES8=r1, @ANYBLOB="0000000000000000000000000000000000000000bf074a12f3f9e18338e7d684a5de104e229aac988ef86f0e2353270f889feaa1edad667f430a2901fedc06e0276a4ef3cb7d8ae01e38ded35d7aed0c724f1842eb7a42de55adad58e6bf35589542c2db598c88", @ANYRES32, @ANYRESDEC=r1, @ANYRES8=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001780)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000015000000b7090000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cd7e027e5191e36a97550000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba991c3116776458d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc33a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a016852ccd0000000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbda0f31f00a8ce6e973a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda907f976dee2651fb6da4435497a29682881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff9402b0960a7097b9cf8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139cad54b65b90009950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e260321760666d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca78a0000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a420c08dd810bc97204b7600000000000000000000000000cb1c30c01b22ae3c1c473e111022c5cede47cb335cb842bb1269ca8098f4d248c989727cdc413d3de1f06eff2ebb36826e5f0db6962891605fcb95af5087d3778e06f45516f8268ccdb1a0db1847a592960032045dd3fd3f3833199b6cc86fe4d76ecda53270a3a6fbce4cd87e3b82a47204be63375b1672039dba57afdeaa342ab3e85816475c7c1a5078fb4daa82b6e0f70e7459619015b364ec58c71ed3b015a64cb9f6d941d67a0622900dc0c8402c54b03a8b01ddd772c24a444c9730556b144d2931d67615e22a401a6cfc654c116c9abb5d1835843d2cbe2eaa594bc649443defca1cb93829"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f2f, 0xf, 0x3ce, &(0x7f00000007c0)="9f449487219195806840106a86dd", 0x0, 0xfd33, 0x0, 0xb1, 0xffffffffffffff19, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e0798e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="675901b49f4914256e6e8d2aa26c9567dbec07a38cc0bec64eeba31aad6c0da339f977f6873cf1c73e0218cc94c8c0b4b438ca1e7f4987540d92492448791407e6f37a521ba9b42d969a3ce903efb9a39fa05bdbe7424e36a542c3b00485fcef3be43c5d45a5b3d63291adda6d81d771cacea20e5f33ca681f54a044d1862f38b4dfc849614974842fef9114b4e01d957e5e8c523a62190362cfb27c82bb1d6f9efaada5bccb1ca44f56b191ebcd2580b61194842af36549aa2359742c48ed9d3c2a61c51c1ca0d724cf0bf1c0d6ed1705", 0x0, 0x0, 0x2}, 0x23) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) lseek(r5, 0x164, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000100)=@req3={0x2548, 0x4, 0x0, 0x5, 0xa, 0xff, 0x7f}, 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = userfaultfd(0x801) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f00000023c0)=""/241, 0x1115000, 0x0, 0x0, 0x2}, 0x1c) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 4.485778047s ago: executing program 8 (id=2946): r0 = socket(0x1000000000000010, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000440)='\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) read$midi(r2, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x8a003, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) 4.074379079s ago: executing program 0 (id=2947): syz_pidfd_open(0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x6, 0x4e21, 0x2, 0xa, 0xa0, 0x20, 0x9d}, {0xb, 0xaea9, 0x1000, 0x9, 0x100000000, 0x6, 0x8, 0x3}, {0xd, 0x8001, 0x1, 0x1}, 0x9, 0x6e6bba, 0x1, 0x0, 0x2}, {{@in=@empty, 0x4d6, 0x6c}, 0x2, @in6=@mcast1, 0x3503, 0x0, 0x2, 0xd1, 0x9, 0x3, 0x1}}, 0xe8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0xc048aec8, &(0x7f0000000280)={0x1, 0x0, 0x3, 0x80000000000000}) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 3.202506494s ago: executing program 8 (id=2948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200800089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\xee', 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1c8, 0x12) r6 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x67a1, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) 3.201329032s ago: executing program 9 (id=2949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) capset(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f"], 0xd) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x200000000000008f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = socket(0x23, 0x5, 0x0) listen(r3, 0x0) connect$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) 2.17964462s ago: executing program 2 (id=2950): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xb6, &(0x7f00000006c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x22, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x66, 0x0, [{0x0, 0x2}, {0x0, 0x8, "789607671442"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}, "0000c0d4"}}}}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x6, "0062ba7d1b0000000002f7ffffff00"}) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff060003", 0x13}], 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000514"], 0x50}}, 0x0) r5 = syz_open_pts(r3, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TCXONC(r5, 0x540a, 0x1) landlock_restrict_self(r1, 0x0) r6 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001500), 0x40, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r7, 0x3b87, &(0x7f0000001540)={0x18}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x6d}) 1.02532116s ago: executing program 2 (id=2951): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0xb8e]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000440)='./file1\x00', 0xc) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000600, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r4 = fanotify_init(0x0, 0x0) write$binfmt_elf64(r4, 0x0, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 1.02490282s ago: executing program 8 (id=2952): socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) pipe(0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0xf) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$dupfd(r0, 0x406, r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getrlimit(0x0, &(0x7f0000000040)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 9 (id=2953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback=0xac1414aa}, {0x8, 0x2, @private}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x28a}]}]}, 0x44}}, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) kernel console output (not intermixed with test programs): ath="/225/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 721.059548][ T5823] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 721.131069][T13054] netlink: 'syz.9.1512': attribute type 3 has an invalid length. [ 721.229754][ T8] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 721.232297][ T5823] usb 9-1: Using ep0 maxpacket: 16 [ 721.262731][ T5823] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.289042][ T5823] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.381384][ T8] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 721.409901][ T8] usb 6-1: config 0 has no interface number 0 [ 721.438702][ T8] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.469643][ T8] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.477584][ T5823] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 721.493040][ T5823] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 721.502616][ T5823] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.512346][ T5823] usb 9-1: config 0 descriptor?? [ 721.525274][ T8] usb 6-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 721.538278][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.557445][ T8] usb 6-1: config 0 descriptor?? [ 721.665022][T13072] xt_CT: You must specify a L4 protocol and not use inversions on it [ 721.779443][T13077] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.934107][ T5823] microsoft 0003:045E:07DA.0004: report is too long [ 721.943152][ T5823] microsoft 0003:045E:07DA.0004: item 0 4 0 8 parsing failed [ 721.957625][ T5823] microsoft 0003:045E:07DA.0004: parse failed [ 721.966767][ T5823] microsoft 0003:045E:07DA.0004: probe with driver microsoft failed with error -22 [ 721.996767][ T8] hid-retrode 0003:0403:97C1.0005: unknown main item tag 0x0 [ 722.016025][ T8] hid-retrode 0003:0403:97C1.0005: unknown main item tag 0x2 [ 722.028777][ T8] hid-retrode 0003:0403:97C1.0005: item fetching failed at offset 2/5 [ 722.039043][ T8] hid-retrode 0003:0403:97C1.0005: probe with driver hid-retrode failed with error -22 [ 722.207876][ T5823] usb 9-1: USB disconnect, device number 6 [ 722.243820][ T5865] usb 6-1: USB disconnect, device number 13 [ 722.295568][T13092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1524'. [ 722.371371][T13094] No control pipe specified [ 723.660459][T13121] xt_CT: You must specify a L4 protocol and not use inversions on it [ 723.721308][T13123] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1534'. [ 723.730607][T13123] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1534'. [ 724.419131][T13153] xt_CT: You must specify a L4 protocol and not use inversions on it [ 724.492868][T13150] vlan2: entered promiscuous mode [ 724.497935][T13150] syz_tun: entered promiscuous mode [ 724.545657][T13150] vlan2: entered allmulticast mode [ 724.550964][T13150] syz_tun: entered allmulticast mode [ 724.552526][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1546'. [ 724.557604][T13150] team0: Device vlan2 is up. Set it down before adding it as a team port [ 724.587567][T13150] syz_tun: left allmulticast mode [ 724.608351][T13150] syz_tun: left promiscuous mode [ 724.919568][ T47] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 725.026006][T13176] loop9: detected capacity change from 0 to 6 [ 725.116075][ T47] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 725.144690][ T47] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 725.179682][ T47] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 725.229036][ T47] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.264907][T13161] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 725.284762][ T47] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 725.552633][ T5865] IPVS: starting estimator thread 0... [ 725.709880][T13203] IPVS: using max 24 ests per chain, 57600 per kthread [ 725.960704][ T47] usb 10-1: USB disconnect, device number 9 [ 726.219206][T13222] macvlan0: entered allmulticast mode [ 726.253439][T13222] veth1_vlan: entered allmulticast mode [ 726.270133][T13222] macvlan0: left allmulticast mode [ 726.275399][T13222] veth1_vlan: left allmulticast mode [ 726.848432][T13257] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1578'. [ 726.875765][T13257] IPv6: Can't replace route, no match found [ 727.160019][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1583'. [ 727.454533][T13289] bond_slave_1: invalid flags given to default FDB implementation [ 727.999150][T13322] No control pipe specified [ 728.460277][ T8] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 728.717026][T13359] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 728.726140][T13359] overlayfs: missing 'lowerdir' [ 728.800689][ T8] usb 9-1: Using ep0 maxpacket: 16 [ 728.815423][ T8] usb 9-1: config 0 has an invalid interface number: 101 but max is 0 [ 728.825313][ T8] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.839955][ T8] usb 9-1: config 0 has no interface number 0 [ 728.874016][T13373] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 728.884622][ T8] usb 9-1: config 0 interface 101 has no altsetting 0 [ 728.912224][ T8] usb 9-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 728.935209][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.965330][ T8] usb 9-1: Product: syz [ 728.978625][ T8] usb 9-1: Manufacturer: syz [ 728.984251][ T8] usb 9-1: SerialNumber: syz [ 728.995982][ T8] usb 9-1: config 0 descriptor?? [ 729.089146][T13381] netlink: 'syz.5.1614': attribute type 3 has an invalid length. [ 729.297839][ T5868] usb 9-1: USB disconnect, device number 7 [ 729.654905][T13414] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1625'. [ 730.550807][T13451] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 730.929643][ T5823] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 731.026926][T13482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1644'. [ 731.087065][T13485] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1646'. [ 731.146240][ T5823] usb 10-1: Using ep0 maxpacket: 32 [ 731.159996][ T5823] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 731.179402][ T5823] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.205476][ T5823] usb 10-1: config 0 descriptor?? [ 731.213885][ T5823] gspca_main: sunplus-2.14.0 probing 041e:400b [ 731.273370][T13497] netlink: 'syz.5.1649': attribute type 3 has an invalid length. [ 731.419806][ T5823] gspca_sunplus: reg_w_riv err -71 [ 731.435656][ T5823] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 731.500907][ T5823] usb 10-1: USB disconnect, device number 10 [ 731.621900][T13513] loop9: detected capacity change from 0 to 6 [ 732.201462][ T5868] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 732.574974][ T5868] usb 6-1: Using ep0 maxpacket: 8 [ 732.660194][ T5868] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 732.686358][ T5868] usb 6-1: config 179 has no interface number 0 [ 732.709285][ T5868] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 732.743349][ T5868] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 732.789658][ T5868] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 732.829686][ T5868] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 732.869176][ T5868] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 732.884006][ T5868] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 732.901467][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.922616][T13527] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 732.945732][T13545] netlink: 'syz.9.1661': attribute type 3 has an invalid length. [ 733.362524][T13564] loop9: detected capacity change from 0 to 6 [ 733.519636][ T1119] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 733.719632][ T1119] usb 9-1: Using ep0 maxpacket: 8 [ 733.769934][ T1119] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 733.796750][ T5868] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input23 [ 733.799624][ T1119] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 733.865291][ T1119] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 733.929690][ T1119] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 733.963735][T11813] usb 6-1: USB disconnect, device number 14 [ 733.963795][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 733.979095][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 733.985160][ T1119] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 734.023318][T11813] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 734.086090][ T1119] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 734.108350][ T1119] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 734.132495][ T1119] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 734.150858][ T1119] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 734.190220][ T29] audit: type=1400 audit(1737447678.746:1104): avc: denied { mount } for pid=13573 comm="syz.1.1669" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 734.235105][ T1119] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 734.249109][ T1119] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 734.262697][ T29] audit: type=1400 audit(1737447678.766:1105): avc: denied { mounton } for pid=13573 comm="syz.1.1669" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 734.262805][ T1119] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 734.284595][ C1] vkms_vblank_simulate: vblank timer overrun [ 734.329580][ T29] audit: type=1400 audit(1737447678.866:1106): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 734.348438][ T1119] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 734.398114][ T1119] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 734.425223][ T1119] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 734.452092][ T1119] usb 9-1: string descriptor 0 read error: -22 [ 734.469051][ T1119] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 734.478369][T13588] netlink: 'syz.9.1673': attribute type 3 has an invalid length. [ 734.486932][ T1119] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.567228][ T1119] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 734.818153][T11813] usb 9-1: USB disconnect, device number 8 [ 735.191894][ T29] audit: type=1400 audit(1737447679.766:1107): avc: denied { connect } for pid=13626 comm="syz.9.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 735.447617][ T29] audit: type=1400 audit(1737447680.016:1108): avc: denied { listen } for pid=13644 comm="syz.8.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 735.526706][ T29] audit: type=1400 audit(1737447680.076:1109): avc: denied { unmount } for pid=7529 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 735.591350][T13653] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1690'. [ 735.678260][T13659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1693'. [ 735.799886][T11813] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 735.982525][T11813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.009565][T11813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.030102][T11813] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 736.049951][T11813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.065841][T11813] usb 6-1: config 0 descriptor?? [ 736.456197][T13707] lo: entered allmulticast mode [ 736.470182][T13707] lo: left allmulticast mode [ 736.501340][T11813] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 736.508676][T11813] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 736.539662][ T5868] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 736.570035][T11813] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0006/input/input24 [ 736.699634][ T5868] usb 9-1: Using ep0 maxpacket: 8 [ 736.713574][ T5868] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 736.749235][ T5868] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 736.795333][ T5868] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 736.803982][T11813] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 736.828945][T11813] usb 6-1: USB disconnect, device number 15 [ 736.837579][ T5868] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.405986][ T5868] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 737.427979][ T5868] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.774901][ T5868] usb 9-1: usb_control_msg returned -32 [ 737.789610][ T5868] usbtmc 9-1:16.0: can't read capabilities [ 737.836679][ T5866] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 737.849173][T13743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1711'. [ 737.858486][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1711'. [ 738.031966][T13754] netlink: 'syz.0.1714': attribute type 3 has an invalid length. [ 738.059715][ T5866] usb 10-1: Using ep0 maxpacket: 8 [ 738.066502][ T5866] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 738.088677][ T5866] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 738.098943][ T5866] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 738.114683][ T5866] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 738.128254][ T5866] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 738.139703][ T5866] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.423581][T11813] usb 9-1: USB disconnect, device number 9 [ 738.439101][ T5866] usb 10-1: GET_CAPABILITIES returned 0 [ 738.445032][ T5866] usbtmc 10-1:16.0: can't read capabilities [ 738.511929][T13769] xt_CT: You must specify a L4 protocol and not use inversions on it [ 738.628749][ T5823] usb 10-1: USB disconnect, device number 11 [ 739.057656][T13786] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 739.066721][T13786] overlayfs: missing 'lowerdir' [ 739.266574][ T29] audit: type=1400 audit(1737447683.836:1110): avc: denied { ioctl } for pid=13797 comm="syz.5.1731" path="socket:[34781]" dev="sockfs" ino=34781 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 739.576667][T13810] syz.9.1736[13810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 739.576773][T13810] syz.9.1736[13810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 739.589084][T13810] syz.9.1736[13810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 739.617446][ T29] audit: type=1400 audit(1737447684.186:1111): avc: denied { execmod } for pid=13808 comm="syz.9.1736" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=34794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 739.739288][T13813] xt_CT: You must specify a L4 protocol and not use inversions on it [ 740.146027][ T29] audit: type=1400 audit(1737447684.716:1112): avc: denied { relabelfrom } for pid=13821 comm="syz.9.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 740.169856][ T1119] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 740.191423][ T29] audit: type=1400 audit(1737447684.746:1113): avc: denied { relabelto } for pid=13821 comm="syz.9.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 740.246930][T13824] netlink: 'syz.1.1742': attribute type 1 has an invalid length. [ 740.339746][ T1119] usb 9-1: Using ep0 maxpacket: 32 [ 740.384505][ T1119] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 740.440615][T13831] loop9: detected capacity change from 0 to 6 [ 740.483643][ T1119] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.563566][ T1119] usb 9-1: Product: syz [ 740.572068][ T1119] usb 9-1: Manufacturer: syz [ 740.576928][ T1119] usb 9-1: SerialNumber: syz [ 740.599361][ T1119] usb 9-1: config 0 descriptor?? [ 740.629827][ T1119] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 740.630440][T13833] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 740.846659][ T1119] gspca_ov534_9: reg_w failed -71 [ 740.876502][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1748'. [ 741.013484][T13847] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 741.022692][T13847] overlayfs: missing 'lowerdir' [ 741.063199][T13838] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.279813][ T1119] gspca_ov534_9: Unknown sensor 0000 [ 741.279877][ T1119] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 741.300733][ T1119] usb 9-1: USB disconnect, device number 10 [ 741.489614][ T5866] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 741.519314][T13867] loop9: detected capacity change from 0 to 6 [ 741.748760][ T5866] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 741.822937][ T5866] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.846486][ T5866] usb 10-1: config 0 descriptor?? [ 741.908714][T13871] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 742.041242][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'. [ 742.177349][T13886] No control pipe specified [ 742.183883][ T5832] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 742.191854][ T1119] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 742.349532][ T1119] usb 9-1: Using ep0 maxpacket: 8 [ 742.355878][ T1119] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 742.365699][ T1119] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 742.375965][ T1119] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 742.386351][ T1119] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 742.396445][ T1119] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 742.409534][ T1119] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 742.418587][ T1119] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.639848][ T1119] usb 9-1: usb_control_msg returned -32 [ 742.645860][ T1119] usbtmc 9-1:16.0: can't read capabilities [ 742.810650][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1771'. [ 742.998163][ T5866] usb 10-1: Cannot set autoneg [ 743.003896][ T5866] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 743.087878][ T1119] usb 10-1: USB disconnect, device number 12 [ 743.132727][T13899] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 743.143252][T13899] overlayfs: missing 'lowerdir' [ 743.260998][ T5866] usb 9-1: USB disconnect, device number 11 [ 744.430984][T13929] loop9: detected capacity change from 0 to 6 [ 744.758526][T13931] batadv_slave_1: entered promiscuous mode [ 744.780247][T13930] batadv_slave_1: left promiscuous mode [ 745.248417][T13953] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 745.306222][T13953] overlayfs: missing 'lowerdir' [ 746.089626][T13971] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1803'. [ 746.108929][T13971] netem: unknown loss type 13 [ 746.134718][T13971] netem: change failed [ 746.339069][ T29] audit: type=1400 audit(1737447690.886:1114): avc: denied { listen } for pid=13975 comm="syz.5.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 746.606122][T13984] No control pipe specified [ 747.105776][ T29] audit: type=1400 audit(1737447691.676:1115): avc: denied { bind } for pid=13997 comm="syz.0.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 747.192625][T14000] No control pipe specified [ 747.200297][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.100006][ T1119] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 748.279580][ T1119] usb 9-1: Using ep0 maxpacket: 32 [ 748.293471][ T1119] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 748.310101][ T1119] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.328549][ T1119] usb 9-1: Product: syz [ 748.337689][ T1119] usb 9-1: Manufacturer: syz [ 748.351226][ T1119] usb 9-1: SerialNumber: syz [ 748.372597][ T1119] usb 9-1: config 0 descriptor?? [ 748.382980][ T1119] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 748.629835][ T5823] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 748.778852][T14032] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 748.793559][T14032] overlayfs: missing 'lowerdir' [ 748.865314][ T5823] usb 6-1: Using ep0 maxpacket: 8 [ 748.878303][ T5823] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 748.889062][ T5823] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 748.899633][ T5823] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 748.910511][ T5823] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 748.923980][ T5823] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 748.933494][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.162351][ T5823] usb 6-1: usb_control_msg returned -32 [ 749.178424][ T5823] usbtmc 6-1:16.0: can't read capabilities [ 749.556122][T14039] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 749.581970][T11583] usb 6-1: USB disconnect, device number 16 [ 749.615053][ T1119] gspca_stk1135: reg_w 0xd err -71 [ 749.637568][ T1119] gspca_stk1135: serial bus timeout: status=0x00 [ 749.653668][ T1119] gspca_stk1135: Sensor write failed [ 749.659701][ T1119] gspca_stk1135: serial bus timeout: status=0x00 [ 749.666113][ T1119] gspca_stk1135: Sensor write failed [ 749.677577][ T1119] gspca_stk1135: serial bus timeout: status=0x00 [ 749.679856][T14042] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 749.684188][ T1119] gspca_stk1135: Sensor read failed [ 749.705751][ T1119] gspca_stk1135: serial bus timeout: status=0x00 [ 749.712358][ T1119] gspca_stk1135: Sensor read failed [ 749.717631][ T1119] gspca_stk1135: Detected sensor type unknown (0x0) [ 749.730237][ T1119] gspca_stk1135: serial bus timeout: status=0x00 [ 749.736865][ T1119] gspca_stk1135: Sensor read failed [ 749.749036][ T1119] gspca_stk1135: serial bus timeout: status=0x00 [ 749.758903][ T1119] gspca_stk1135: Sensor read failed [ 749.771584][ T1119] gspca_stk1135: serial bus timeout: status=0x00 [ 749.782111][ T1119] gspca_stk1135: Sensor write failed [ 749.787512][ T1119] gspca_stk1135: serial bus timeout: status=0x00 [ 749.797400][ T1119] gspca_stk1135: Sensor write failed [ 749.806012][ T1119] stk1135 9-1:0.0: probe with driver stk1135 failed with error -71 [ 749.845131][ T1119] usb 9-1: USB disconnect, device number 12 [ 750.159796][T11583] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 750.330959][T11583] usb 10-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 750.356205][T11583] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.373933][T11583] usb 10-1: config 0 descriptor?? [ 750.392523][T11583] pwc: Creative Labs Webcam Pro Ex detected. [ 750.931745][T14088] xt_CT: You must specify a L4 protocol and not use inversions on it [ 751.014944][T11583] pwc: recv_control_msg error -32 req 02 val 2b00 [ 751.024528][T11583] pwc: recv_control_msg error -32 req 02 val 2700 [ 751.236103][T11583] pwc: recv_control_msg error -71 req 02 val 2c00 [ 751.247148][T11583] pwc: recv_control_msg error -71 req 04 val 1000 [ 751.268581][T11583] pwc: recv_control_msg error -71 req 04 val 1300 [ 751.286261][T11583] pwc: recv_control_msg error -71 req 04 val 1400 [ 751.307203][T11583] pwc: recv_control_msg error -71 req 02 val 2000 [ 751.314791][T11583] pwc: recv_control_msg error -71 req 02 val 2100 [ 751.322598][T11583] pwc: recv_control_msg error -71 req 06 val 0600 [ 751.329389][T11583] pwc: recv_control_msg error -71 req 04 val 1500 [ 751.336466][T11583] pwc: recv_control_msg error -71 req 02 val 2500 [ 751.344725][T11583] pwc: recv_control_msg error -71 req 02 val 2400 [ 751.356081][T11583] pwc: recv_control_msg error -71 req 02 val 2600 [ 751.366050][T11583] pwc: recv_control_msg error -71 req 02 val 2900 [ 751.383047][T11583] pwc: recv_control_msg error -71 req 02 val 2800 [ 751.397804][T11583] pwc: recv_control_msg error -71 req 04 val 1100 [ 751.406344][T11583] pwc: recv_control_msg error -71 req 04 val 1200 [ 751.491879][T11583] pwc: Registered as video103. [ 751.497736][T11583] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input25 [ 751.513684][T14105] loop9: detected capacity change from 0 to 6 [ 751.680248][T11813] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 751.905859][T11583] usb 10-1: USB disconnect, device number 13 [ 751.925746][T11813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.953107][T11813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.972913][T11813] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 752.016289][T11813] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 752.043870][T11813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.062942][T11813] usb 6-1: config 0 descriptor?? [ 752.072055][T14108] syzkaller0: entered allmulticast mode [ 752.495397][T11813] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 752.514440][T11813] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 752.530277][T11813] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 752.709858][T14129] No control pipe specified [ 752.864708][ T1119] usb 6-1: USB disconnect, device number 17 [ 752.870868][T11813] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 753.462520][T11813] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 753.471495][T11813] usb 9-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 753.500542][T11813] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 753.538899][T11813] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 753.554030][T14139] No control pipe specified [ 753.565666][ T5832] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 753.598616][T11813] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 753.634238][T11813] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 753.647848][T11813] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 753.669031][T14141] loop9: detected capacity change from 0 to 6 [ 753.680629][T11813] usb 9-1: Product: syz [ 753.688967][T11813] usb 9-1: Manufacturer: syz [ 753.745280][T11813] cdc_wdm 9-1:1.0: skipping garbage [ 753.760148][T11813] cdc_wdm 9-1:1.0: skipping garbage [ 753.769738][T11813] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 753.775655][T11813] cdc_wdm 9-1:1.0: Unknown control protocol [ 754.131829][T11583] usb 9-1: USB disconnect, device number 13 [ 754.618671][T14150] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 754.639538][ T8] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 754.666316][T14150] overlayfs: missing 'lowerdir' [ 754.780922][T14153] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 754.789922][T14153] overlayfs: missing 'lowerdir' [ 755.101852][T11583] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 755.129859][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 755.137639][ T8] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 755.146427][ T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 755.165655][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 755.176407][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 755.190671][ T8] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 755.204320][ T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 755.219974][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.280927][T11583] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 755.300217][T11583] usb 9-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 755.329879][T11583] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 755.338918][T11583] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 755.361943][ T29] audit: type=1400 audit(1737447699.926:1116): avc: denied { name_bind 0x1000000 } for pid=14154 comm="syz.1.1873" path="socket:[36379]" dev="sockfs" ino=36379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 755.379533][T11583] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 755.453620][ T8] usb 6-1: usb_control_msg returned -32 [ 755.470667][T11583] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 755.480101][ T8] usbtmc 6-1:16.0: can't read capabilities [ 755.486703][T11583] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 755.502817][T14157] sd 0:0:1:0: PR command failed: 1026 [ 755.508265][T14157] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 755.512018][T11583] usb 9-1: Product: syz [ 755.524240][ T29] audit: type=1400 audit(1737447700.076:1117): avc: denied { read } for pid=14156 comm="syz.9.1874" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 755.534746][T11583] usb 9-1: Manufacturer: syz [ 755.570444][T14157] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 755.584750][ T29] audit: type=1400 audit(1737447700.076:1118): avc: denied { open } for pid=14156 comm="syz.9.1874" path="/236/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 755.593076][T11583] cdc_wdm 9-1:1.0: skipping garbage [ 755.649670][ T29] audit: type=1400 audit(1737447700.076:1119): avc: denied { ioctl } for pid=14156 comm="syz.9.1874" path="/236/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 755.679632][T11583] cdc_wdm 9-1:1.0: skipping garbage [ 755.695253][T11583] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device [ 755.704721][T11583] cdc_wdm 9-1:1.0: Unknown control protocol [ 755.735376][T11583] usb 9-1: USB disconnect, device number 14 [ 756.039647][ T29] audit: type=1400 audit(1737447700.606:1120): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 756.098073][T14174] No control pipe specified [ 756.243878][T14176] netlink: 'syz.9.1882': attribute type 21 has an invalid length. [ 756.262295][T14177] usbtmc 6-1:16.0: CHECK_CLEAR_STATUS returned 0 [ 756.279760][T14176] netlink: 156 bytes leftover after parsing attributes in process `syz.9.1882'. [ 756.541817][T14186] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 756.541837][T14186] overlayfs: missing 'lowerdir' [ 756.716174][ T5908] usb 6-1: USB disconnect, device number 18 [ 757.016131][T14195] KVM: debugfs: duplicate directory 14195-5 [ 757.168923][T14206] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 757.178373][T14206] overlayfs: missing 'lowerdir' [ 757.427487][T14212] No control pipe specified [ 757.625723][ T29] audit: type=1400 audit(1737447702.196:1121): avc: denied { bind } for pid=14209 comm="syz.5.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 757.999592][ T1119] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 758.159627][ T1119] usb 10-1: Using ep0 maxpacket: 16 [ 758.168260][ T1119] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 758.185660][ T1119] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.196580][ T1119] usb 10-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 758.210007][ T1119] usb 10-1: config 0 interface 0 has no altsetting 0 [ 758.216778][ T1119] usb 10-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 758.232180][ T1119] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.243804][ T1119] usb 10-1: config 0 descriptor?? [ 758.249608][ T5908] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 758.410250][ T5908] usb 9-1: Using ep0 maxpacket: 16 [ 758.418820][ T5908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.430621][ T5908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.441049][ T5908] usb 9-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 758.450471][ T5908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.466742][ T1119] usb 10-1: string descriptor 0 read error: -71 [ 758.475666][ T5908] usb 9-1: config 0 descriptor?? [ 758.492550][ T1119] usbhid 10-1:0.0: can't add hid device: -71 [ 758.502579][ T1119] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 758.516523][ T1119] usb 10-1: USB disconnect, device number 14 [ 758.645426][T14240] No control pipe specified [ 758.652578][ T5832] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 758.704983][ T29] audit: type=1400 audit(1737447703.276:1122): avc: denied { unmount } for pid=7529 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 758.771519][T14244] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 758.934410][ T5908] playstation 0003:054C:05C4.0008: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.8-1/input0 [ 759.353605][ T5908] playstation 0003:054C:05C4.0008: Failed to retrieve feature with reportID 163: -32 [ 759.449722][ T5908] playstation 0003:054C:05C4.0008: Failed to retrieve DualShock4 firmware info: -32 [ 759.509711][ T5908] playstation 0003:054C:05C4.0008: Failed to get firmware info from DualShock4 [ 759.531437][T14257] siw: device registration error -23 [ 759.563247][ T5908] playstation 0003:054C:05C4.0008: HW/FW version data in sysfs will be invalid. [ 759.604719][ T5908] input: HID 054c:05c4 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:054C:05C4.0008/input/input26 [ 759.657177][ T5908] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:054C:05C4.0008/input/input27 [ 759.664107][T14266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.697745][ T5908] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:054C:05C4.0008/input/input28 [ 759.774497][ T5908] playstation 0003:054C:05C4.0008: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 759.839805][ T5908] usb 9-1: USB disconnect, device number 15 [ 760.318902][T14274] No control pipe specified [ 760.402460][ T29] audit: type=1400 audit(1737447704.976:1123): avc: denied { cmd } for pid=14277 comm="syz.1.1918" path="socket:[37462]" dev="sockfs" ino=37462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 761.164019][ T29] audit: type=1326 audit(1737447705.726:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14303 comm="syz.9.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2585d29 code=0x7ffc0000 [ 761.199919][ T29] audit: type=1326 audit(1737447705.756:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14303 comm="syz.9.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2585d29 code=0x7ffc0000 [ 761.224209][ T29] audit: type=1326 audit(1737447705.756:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14303 comm="syz.9.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7feac2585d29 code=0x7ffc0000 [ 761.306563][ T29] audit: type=1326 audit(1737447705.756:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14303 comm="syz.9.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2585d29 code=0x7ffc0000 [ 761.363833][ T29] audit: type=1326 audit(1737447705.756:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14303 comm="syz.9.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2585d29 code=0x7ffc0000 [ 761.415656][ T29] audit: type=1326 audit(1737447705.766:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14303 comm="syz.9.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feac2584690 code=0x7ffc0000 [ 761.448468][ T29] audit: type=1326 audit(1737447705.766:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14303 comm="syz.9.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7feac2587557 code=0x7ffc0000 [ 761.483857][ T29] audit: type=1326 audit(1737447705.766:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14303 comm="syz.9.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feac2585d29 code=0x7ffc0000 [ 761.508472][ T29] audit: type=1326 audit(1737447705.766:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14303 comm="syz.9.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7feac2587557 code=0x7ffc0000 [ 761.732563][T14327] No control pipe specified [ 761.747027][ T5832] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 763.409581][ T5908] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 763.559708][ T5908] usb 10-1: Using ep0 maxpacket: 8 [ 763.569974][ T5908] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.588348][ T5908] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 763.599313][ T5908] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 763.615297][ T5908] usb 10-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 763.625049][ T5908] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.633404][ T5908] usb 10-1: Product: syz [ 763.638053][ T5908] usb 10-1: Manufacturer: syz [ 763.643118][ T5908] usb 10-1: SerialNumber: syz [ 763.652104][ T5908] usb 10-1: config 0 descriptor?? [ 763.660303][ T5908] powermate 10-1:0.0: probe with driver powermate failed with error -22 [ 764.678975][T14384] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 765.106512][T14395] netlink: 'syz.5.1954': attribute type 10 has an invalid length. [ 765.116419][T14395] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.450813][T14402] loop9: detected capacity change from 0 to 6 [ 765.807213][T14406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1960'. [ 765.816313][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1960'. [ 765.896172][T14409] xt_hashlimit: size too large, truncated to 1048576 [ 765.920211][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 765.920227][ T29] audit: type=1400 audit(1737447710.486:1143): avc: denied { write } for pid=14408 comm="syz.8.1961" dev="9p" ino=7919202256731811978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 765.962972][ T29] audit: type=1400 audit(1737447710.526:1144): avc: denied { open } for pid=14408 comm="syz.8.1961" name="/" dev="9p" ino=7919202256731811978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 766.178913][ T5908] usb 10-1: USB disconnect, device number 15 [ 766.579601][ T29] audit: type=1400 audit(1737447711.146:1145): avc: denied { create } for pid=14418 comm="syz.9.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 766.629356][ T29] audit: type=1400 audit(1737447711.146:1146): avc: denied { write } for pid=14418 comm="syz.9.1965" path="socket:[37743]" dev="sockfs" ino=37743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 766.653715][ C0] vkms_vblank_simulate: vblank timer overrun [ 769.496880][ T29] audit: type=1400 audit(1737447714.056:1147): avc: denied { accept } for pid=14442 comm="syz.0.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 770.228503][T14465] No control pipe specified [ 770.269589][T10537] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 770.421180][ T29] audit: type=1400 audit(1737447714.966:1148): avc: denied { write } for pid=14463 comm="syz.8.1985" path="socket:[37832]" dev="sockfs" ino=37832 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 770.459680][T10537] Bluetooth: hci2: command 0x1003 tx timeout [ 770.479713][ T5832] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 770.899261][T14481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14481 comm=syz.8.1990 [ 770.909700][ T8] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 770.918738][T14481] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1990'. [ 770.930653][T14481] netlink: 'syz.8.1990': attribute type 30 has an invalid length. [ 771.070074][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 771.076710][ T8] usb 6-1: config 1 interface 0 altsetting 253 bulk endpoint 0x1 has invalid maxpacket 32 [ 771.086979][ T8] usb 6-1: config 1 interface 0 has no altsetting 0 [ 771.095516][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 771.107940][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.118226][ T8] usb 6-1: Product: syz [ 771.122812][ T8] usb 6-1: Manufacturer: syz [ 771.127747][ T8] usb 6-1: SerialNumber: syz [ 771.128364][T14487] overlayfs: failed to clone upperpath [ 771.139022][T14475] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 771.549710][ T5908] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 771.719612][ T5908] usb 10-1: Using ep0 maxpacket: 8 [ 771.734095][ T5908] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 771.762055][ T5908] usb 10-1: config 1 has no interface number 0 [ 771.768280][ T5908] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.787807][ T8] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 771.799498][ T5908] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 771.811287][ T5908] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 771.826977][ T5908] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.845728][ T5908] usb 10-1: Product: syz [ 771.855328][ T5908] usb 10-1: Manufacturer: syz [ 771.860191][ T5908] usb 10-1: SerialNumber: syz [ 771.939364][T14510] No control pipe specified [ 772.016810][ T29] audit: type=1400 audit(1737447716.586:1149): avc: denied { read write } for pid=14474 comm="syz.5.1988" name="lp0" dev="devtmpfs" ino=3058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 772.047524][ T8] usb 6-1: USB disconnect, device number 19 [ 772.071282][ T8] usblp0: removed [ 772.079669][ T29] audit: type=1400 audit(1737447716.616:1150): avc: denied { open } for pid=14474 comm="syz.5.1988" path="/dev/usb/lp0" dev="devtmpfs" ino=3058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 772.689068][T14521] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2007'. [ 772.749195][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2007'. [ 772.769981][ T5908] cdc_ncm 10-1:1.1: bind() failure [ 773.058525][ T8] usb 10-1: USB disconnect, device number 16 [ 773.366588][T14543] No control pipe specified [ 773.372958][ T5832] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 773.565376][ T29] audit: type=1400 audit(1737447718.136:1151): avc: denied { mounton } for pid=14547 comm="syz.8.2015" path="/198/file0" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 773.568936][T14548] overlayfs: statfs failed on './file0' [ 773.590274][ T29] audit: type=1400 audit(1737447718.136:1152): avc: denied { getattr } for pid=14547 comm="syz.8.2015" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 773.805275][ T29] audit: type=1400 audit(1737447718.376:1153): avc: denied { setattr } for pid=14553 comm="syz.8.2017" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 773.967727][T14562] ip6erspan0: entered promiscuous mode [ 774.139824][ T29] audit: type=1400 audit(1737447718.696:1154): avc: denied { nlmsg_write } for pid=14563 comm="syz.8.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 774.564018][T14567] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 774.737313][T14574] netlink: 'syz.0.2027': attribute type 3 has an invalid length. [ 775.279644][T14585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2030'. [ 775.315511][T14585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2030'. [ 775.429928][T14592] block device autoloading is deprecated and will be removed. [ 775.443342][T14591] md: md2 stopped. [ 775.670560][T14609] netlink: 2036 bytes leftover after parsing attributes in process `syz.5.2036'. [ 775.682464][T14609] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2036'. [ 776.100229][T14617] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 776.308382][T14620] netlink: 'syz.8.2040': attribute type 3 has an invalid length. [ 776.760436][T14639] loop9: detected capacity change from 0 to 6 [ 776.810957][T14640] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 777.419684][ T5866] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 777.573348][ T5866] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.589751][ T5866] usb 10-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 777.599645][ T5866] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.620273][ T5866] usb 10-1: config 0 descriptor?? [ 778.061651][ T5866] logitech 0003:046D:C50C.0009: unbalanced delimiter at end of report description [ 778.071835][ T5866] logitech 0003:046D:C50C.0009: parse failed [ 778.096611][ T5866] logitech 0003:046D:C50C.0009: probe with driver logitech failed with error -22 [ 778.174923][T14677] loop9: detected capacity change from 0 to 6 [ 778.495287][ T5866] usb 10-1: USB disconnect, device number 17 [ 778.731017][ T47] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 779.082061][ T47] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 779.096929][ T47] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 779.124500][ T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.132980][ T47] usb 9-1: Product: syz [ 779.137935][ T47] usb 9-1: Manufacturer: syz [ 779.149161][ T47] usb 9-1: SerialNumber: syz [ 779.165989][T14679] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 779.434105][ T47] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 779.473545][ T47] usb 9-1: USB disconnect, device number 16 [ 779.879743][ T8] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 779.919579][ T47] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 780.032330][ T29] audit: type=1400 audit(1737447724.606:1155): avc: denied { append } for pid=14715 comm="syz.5.2076" name="event3" dev="devtmpfs" ino=1001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 780.063055][ T8] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 780.079541][ T47] usb 9-1: Using ep0 maxpacket: 8 [ 780.086203][ T47] usb 9-1: config index 0 descriptor too short (expected 301, got 72) [ 780.086366][ T8] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 780.094964][ T47] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 780.109301][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.128129][ T8] usb 10-1: Product: syz [ 780.132660][ T8] usb 10-1: Manufacturer: syz [ 780.134683][ T47] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 780.137341][ T8] usb 10-1: SerialNumber: syz [ 780.159277][T14713] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 780.186691][ T47] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 780.202412][ T47] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.214521][ T47] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2007, setting to 1024 [ 780.230507][ T47] usb 9-1: config 16 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 3 [ 780.247323][ T47] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 780.257773][ T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.278665][T14679] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 780.395514][ T8] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 780.411431][ T8] usb 10-1: USB disconnect, device number 18 [ 780.497913][ T47] usb 9-1: usb_control_msg returned -32 [ 780.504396][ T47] usbtmc 9-1:16.0: can't read capabilities [ 780.870361][ T47] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 781.039807][ T47] usb 10-1: Using ep0 maxpacket: 8 [ 781.074196][ T47] usb 10-1: config index 0 descriptor too short (expected 301, got 68) [ 781.150268][ T47] usb 10-1: config 16 has an invalid descriptor of length 215, skipping remainder of the config [ 781.192099][ T47] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 781.204560][ T47] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 781.273122][ T47] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 2304, setting to 1024 [ 781.367509][ T47] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 781.429715][ T47] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 781.474143][ T47] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 781.498680][ T47] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.554189][T14713] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 781.612842][T14736] ref_ctr increment failed for inode: 0xb79 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807a41ce00 [ 781.634339][T14735] uprobe: syz.0.2082:14735 failed to unregister, leaking uprobe [ 781.802522][ T47] usb 10-1: usb_control_msg returned -32 [ 781.810404][ T47] usbtmc 10-1:16.0: can't read capabilities [ 781.825112][T14740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2084'. [ 781.858493][T14740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2084'. [ 781.948357][ T8] usb 9-1: USB disconnect, device number 17 [ 781.984063][T14741] xt_CT: You must specify a L4 protocol and not use inversions on it [ 782.324098][T14754] netlink: 'syz.1.2088': attribute type 3 has an invalid length. [ 783.210712][T14771] netlink: 372 bytes leftover after parsing attributes in process `syz.8.2094'. [ 783.276988][ T5866] usb 10-1: USB disconnect, device number 19 [ 783.301204][ T29] audit: type=1400 audit(1737447727.866:1156): avc: denied { accept } for pid=14774 comm="syz.5.2096" lport=39818 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 783.390703][ T29] audit: type=1400 audit(1737447727.866:1157): avc: denied { write } for pid=14774 comm="syz.5.2096" lport=39818 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 783.439137][ T29] audit: type=1400 audit(1737447727.866:1158): avc: denied { setopt } for pid=14774 comm="syz.5.2096" lport=39818 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 783.486228][ T29] audit: type=1800 audit(1737447727.926:1159): pid=14777 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2097" name="bus" dev="overlay" ino=2335 res=0 errno=0 [ 783.603510][ T29] audit: type=1400 audit(1737447727.996:1160): avc: denied { write } for pid=14772 comm="syz.0.2095" path="socket:[39714]" dev="sockfs" ino=39714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 783.669504][ T29] audit: type=1400 audit(1737447728.116:1161): avc: denied { read } for pid=14782 comm="syz.9.2098" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 783.893389][ T29] audit: type=1400 audit(1737447728.116:1162): avc: denied { open } for pid=14782 comm="syz.9.2098" path="/276/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 784.038539][ T29] audit: type=1400 audit(1737447728.116:1163): avc: denied { ioctl } for pid=14782 comm="syz.9.2098" path="/276/file0/file0" dev="fuse" ino=0 ioctlcmd=0x545c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 784.148630][T10537] Bluetooth: hci4: command 0x0406 tx timeout [ 784.164638][T14800] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 784.740599][ T29] audit: type=1326 audit(1737447729.316:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14813 comm="syz.9.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2585d29 code=0x7ffc0000 [ 784.992760][ T5832] Bluetooth: hci3: Unable to find connection for big 0x00 [ 785.233188][T14834] No control pipe specified [ 785.240152][ T5832] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 785.659637][ T47] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 785.830183][ T47] usb 6-1: Using ep0 maxpacket: 16 [ 785.849936][ T47] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.876017][ T47] usb 6-1: config 0 has no interfaces? [ 785.889772][ T47] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 785.909238][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.937967][ T47] usb 6-1: config 0 descriptor?? [ 786.032357][T14850] random: crng reseeded on system resumption [ 786.401470][ T47] usb 6-1: USB disconnect, device number 20 [ 786.714809][T14868] No control pipe specified [ 787.047647][T14883] netlink: 'syz.1.2129': attribute type 10 has an invalid length. [ 787.055661][T14883] bridge0: left allmulticast mode [ 787.061623][T14883] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.068711][T14883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.077915][T14883] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 787.538384][T14901] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 787.586706][T14903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 787.667471][T14903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 787.745915][T14909] No control pipe specified [ 787.767439][ T5832] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 787.949067][T14903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.519618][ T47] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 788.596474][T14918] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 788.801648][T14925] No control pipe specified [ 788.874845][ T47] usb 9-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 788.910672][ T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.020491][ T47] usb 9-1: config 0 descriptor?? [ 789.604168][T14932] binder: BINDER_SET_CONTEXT_MGR already set [ 789.610296][T14932] binder: 14931:14932 ioctl 4018620d 20000040 returned -16 [ 789.756515][T14935] No control pipe specified [ 790.013427][T14930] team0 (unregistering): Port device team_slave_0 removed [ 790.146150][ T47] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 790.217553][ T47] asix 9-1:0.0: probe with driver asix failed with error -71 [ 790.272786][ T47] usb 9-1: USB disconnect, device number 18 [ 790.516977][T14930] team0 (unregistering): Port device team_slave_1 removed [ 790.543324][T14930] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.552764][T14930] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.561654][T14930] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.570574][T14930] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.608191][T14930] team0 (unregistering): Port device vxlan0 removed [ 790.641404][T14930] team0 (unregistering): Port device batadv1 removed [ 791.309116][T14957] overlayfs: failed to clone upperpath [ 791.357935][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 791.357950][ T29] audit: type=1400 audit(1737447735.926:1188): avc: denied { bind } for pid=14952 comm="syz.8.2156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 791.439170][T14961] No control pipe specified [ 793.164096][T14995] No control pipe specified [ 793.180963][ T5832] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 793.937507][ T5832] Bluetooth: hci4: Unknown advertising packet type: 0x14 [ 793.937548][ T5832] Bluetooth: hci4: Unknown advertising packet type: 0x20 [ 794.238559][T15014] No control pipe specified [ 795.147200][T15020] __vm_enough_memory: pid: 15020, comm: syz.9.2179, bytes: 21200357560320 not enough memory for the allocation [ 795.259390][T15022] kernel read not supported for file /!selinuÿ (pid: 15022 comm: syz.5.2180) [ 795.285010][ T29] audit: type=1800 audit(1737447739.846:1189): pid=15022 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2180" name=2173656C696E75FF7F dev="mqueue" ino=41372 res=0 errno=0 [ 795.766639][T15027] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 795.775798][T15027] overlayfs: missing 'lowerdir' [ 796.664944][T15032] xt_CT: You must specify a L4 protocol and not use inversions on it [ 796.837859][ T29] audit: type=1400 audit(1737447741.406:1190): avc: denied { accept } for pid=15033 comm="syz.5.2183" path="socket:[41388]" dev="sockfs" ino=41388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 797.267741][ T29] audit: type=1400 audit(1737447741.836:1191): avc: denied { connect } for pid=15039 comm="syz.1.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 797.681699][T15054] No control pipe specified [ 797.731663][ T5832] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 798.489318][ T29] audit: type=1400 audit(1737447743.056:1192): avc: denied { setopt } for pid=15059 comm="syz.5.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 798.502593][T15062] netlink: 'syz.5.2194': attribute type 10 has an invalid length. [ 798.700814][T15071] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 798.710275][T15071] overlayfs: missing 'lowerdir' [ 798.920921][T15062] team0: Port device netdevsim0 added [ 799.049521][T15074] xt_CT: You must specify a L4 protocol and not use inversions on it [ 799.369673][ T29] audit: type=1400 audit(1737447743.936:1193): avc: denied { write } for pid=15080 comm="syz.5.2200" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 799.414479][T15082]  [ 799.563922][T15094] No control pipe specified [ 799.575024][ T5832] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 800.401549][T15103] No control pipe specified [ 801.151538][ T29] audit: type=1400 audit(1737447745.706:1194): avc: denied { transfer } for pid=15100 comm="syz.5.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 801.240122][T15108] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = -1, id = 0 [ 801.601267][ T5866] kernel read not supported for file /842/attr/exec (pid: 5866 comm: kworker/0:4) [ 801.759753][ T8] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 801.945121][ T8] usb 9-1: Using ep0 maxpacket: 32 [ 802.047344][T15120] xt_CT: You must specify a L4 protocol and not use inversions on it [ 802.090774][ T8] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 802.516523][ T8] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 802.530303][ T8] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 802.545696][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 802.582922][ T8] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 802.609856][ T8] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 802.653832][ T8] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 802.694826][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.740626][ T8] usb 9-1: config 0 descriptor?? [ 802.955344][ T8] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 802.977101][T15135] No control pipe specified [ 802.983619][ T5832] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 803.222535][ C1] usblp0: nonzero read bulk status received: -71 [ 803.237927][T15112] usblp0: error -71 reading from printer [ 803.239707][ T8] usb 9-1: USB disconnect, device number 19 [ 803.270401][ T8] usblp0: removed [ 803.286543][T15141] kvm: pic: non byte write [ 803.296066][T15143] kvm: vcpu 0: requested 366 ns lapic timer period limited to 200000 ns [ 803.843158][T15147] No control pipe specified [ 804.525457][ T29] audit: type=1400 audit(1737447749.096:1195): avc: denied { setopt } for pid=15151 comm="syz.0.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 804.874682][T15160] netlink: 'syz.9.2225': attribute type 10 has an invalid length. [ 804.890859][T15160] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.901494][T15160] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.908636][T15160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.918082][T15160] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 804.939719][ T8] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 805.009911][ T5866] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 805.103517][T15169] xt_CT: You must specify a L4 protocol and not use inversions on it [ 805.230751][ T5866] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 805.240161][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.249545][ T5866] usb 6-1: config 0 descriptor?? [ 805.299592][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 805.306946][ T8] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 805.317779][ T8] usb 9-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 805.329378][ T8] usb 9-1: config 179 has no interface number 0 [ 805.338152][ T8] usb 9-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 805.351799][ T8] usb 9-1: config 179 interface 65 has no altsetting 0 [ 805.359147][ T8] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 805.368333][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.750812][ T5868] usb 9-1: USB disconnect, device number 20 [ 805.997303][T15188] No control pipe specified [ 807.014857][ T29] audit: type=1400 audit(1737447751.586:1196): avc: denied { listen } for pid=15194 comm="syz.0.2234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 807.259327][T15207] kvm: pic: non byte write [ 807.267715][ T29] audit: type=1400 audit(1737447751.836:1197): avc: denied { write } for pid=15205 comm="syz.9.2238" path="socket:[41843]" dev="sockfs" ino=41843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 807.337133][T15209] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2239'. [ 807.412790][ T29] audit: type=1400 audit(1737447751.986:1198): avc: denied { read } for pid=15212 comm="syz.1.2241" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 807.585206][T15218] No control pipe specified [ 807.630207][ T5832] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 807.770247][ T5866] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 807.926853][ T5866] asix 6-1:0.0: probe with driver asix failed with error -71 [ 808.130360][ T5866] usb 6-1: USB disconnect, device number 21 [ 808.227697][ T29] audit: type=1400 audit(1737447752.796:1199): avc: denied { read } for pid=15225 comm="syz.9.2245" path="socket:[41896]" dev="sockfs" ino=41896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 808.649880][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.197476][T15236] overlayfs: failed to clone upperpath [ 809.667166][T15247] xt_CT: You must specify a L4 protocol and not use inversions on it [ 810.747734][T15262] overlayfs: failed to clone upperpath [ 810.772970][T15262] Invalid ELF header magic: != ELF [ 810.783050][ T29] audit: type=1400 audit(1737447755.346:1200): avc: denied { module_load } for pid=15261 comm="syz.0.2256" path="/592/bus/bus" dev="tmpfs" ino=3201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 810.867570][ T29] audit: type=1400 audit(1737447755.426:1201): avc: denied { read } for pid=15259 comm="syz.5.2255" lport=44790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 810.888017][ C1] vkms_vblank_simulate: vblank timer overrun [ 810.895974][ T29] audit: type=1326 audit(1737447755.466:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15264 comm="syz.8.2257" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0672185d29 code=0x0 [ 811.342857][ T29] audit: type=1400 audit(1737447755.906:1203): avc: denied { lock } for pid=15240 comm="syz.1.2251" path="socket:[40695]" dev="sockfs" ino=40695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 811.816894][T15290] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 812.266547][ T29] audit: type=1804 audit(1737447756.836:1204): pid=15300 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.2266" name="/newroot/306/bus/bus" dev="overlay" ino=1660 res=1 errno=0 [ 812.266740][T15300] Invalid ELF header magic: != ELF [ 812.351419][ T5832] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 813.230797][T15316] netlink: 'syz.5.2271': attribute type 10 has an invalid length. [ 813.531842][T15330] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 813.554300][T15330] af_packet: tpacket_rcv: packet too big, clamped from 252 to 4294967272. macoff=96 [ 813.567006][T15330] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 813.586254][T15331] uprobe: syz.8.2276:15331 failed to unregister, leaking uprobe [ 813.857480][T15337] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2278'. [ 814.218644][T15343] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 814.227695][T15343] overlayfs: missing 'lowerdir' [ 814.825774][ T47] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 814.866397][T15346] random: crng reseeded on system resumption [ 814.999880][ T47] usb 6-1: Using ep0 maxpacket: 8 [ 815.287888][ T47] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 815.339886][ T47] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 815.370361][ T47] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 815.409502][ T47] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 815.422561][ T47] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 816.105017][ T47] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 816.139180][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.563477][ T47] usb 6-1: usb_control_msg returned -32 [ 816.569099][ T47] usbtmc 6-1:16.0: can't read capabilities [ 816.610722][T15360] netlink: 'syz.1.2285': attribute type 1 has an invalid length. [ 816.761129][T15360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 816.820954][T15362] bond1: (slave veth3): Enslaving as an active interface with a down link [ 816.835237][T15366] netfs: Couldn't get user pages (rc=-14) [ 816.849363][ T29] audit: type=1400 audit(1737447761.406:1205): avc: denied { bind } for pid=15365 comm="syz.0.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 816.906337][T15360] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 817.055028][T15376] No control pipe specified [ 817.071474][ T5832] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 818.196558][T15394] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 818.205967][T15394] overlayfs: missing 'lowerdir' [ 818.476546][ T5868] usb 6-1: USB disconnect, device number 22 [ 819.018167][T15395] xt_hashlimit: max too large, truncated to 1048576 [ 820.420545][T15409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2299'. [ 820.526231][T15415] binder_alloc: 15413: binder_alloc_buf size 4096 failed, no address space [ 820.535974][T15415] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 4088 (num: 1 largest: 4088) [ 820.637199][T15423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2302'. [ 820.778250][T15429] netlink: 'syz.8.2304': attribute type 21 has an invalid length. [ 824.344141][T15483] xt_CT: You must specify a L4 protocol and not use inversions on it [ 826.987528][ T5866] page_pool_release_retry() stalled pool shutdown: id 86, 1 inflight 60 sec [ 827.850052][T15533] xt_CT: You must specify a L4 protocol and not use inversions on it [ 828.294735][ T29] audit: type=1400 audit(1737447772.856:1206): avc: denied { ioctl } for pid=15531 comm="syz.5.2338" path="socket:[43513]" dev="sockfs" ino=43513 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 829.054261][T15543] netlink: 'syz.8.2342': attribute type 4 has an invalid length. [ 829.111038][T15546] netlink: 'syz.8.2342': attribute type 4 has an invalid length. [ 829.211410][ T29] audit: type=1800 audit(1737447773.786:1207): pid=15548 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2345" name="/" dev="9p" ino=2 res=0 errno=0 [ 829.293664][T15557] netlink: 'syz.1.2346': attribute type 3 has an invalid length. [ 829.969528][T11813] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 830.149483][T11813] usb 6-1: Using ep0 maxpacket: 16 [ 830.200891][T11813] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.320277][T11813] usb 6-1: config 0 has no interfaces? [ 830.328490][T11813] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 830.338147][T11813] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 830.360679][T11813] usb 6-1: Product: syz [ 830.376066][T11813] usb 6-1: SerialNumber: syz [ 830.396047][T11813] usb 6-1: config 0 descriptor?? [ 831.336553][ T5868] usb 6-1: USB disconnect, device number 23 [ 832.725725][T15603] bond0: (slave bridge0): Releasing backup interface [ 832.775647][T15603] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.805587][T15603] bridge_slave_0: left allmulticast mode [ 832.819935][T15603] bridge_slave_0: left promiscuous mode [ 832.835118][T15603] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.210221][T15603] bridge_slave_1: left allmulticast mode [ 834.215906][T15603] bridge_slave_1: left promiscuous mode [ 834.253698][T15603] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.293443][T15616] overlayfs: failed to clone upperpath [ 834.558220][T15603] bond0: (slave bond_slave_0): Releasing backup interface [ 834.669829][T15603] bond0: (slave bond_slave_1): Releasing backup interface [ 834.723287][T15622] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2367'. [ 835.033977][T15628] xt_CT: You must specify a L4 protocol and not use inversions on it [ 835.193911][T15603] team0: Port device team_slave_0 removed [ 835.251632][T15630] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 835.261200][T15630] overlayfs: missing 'lowerdir' [ 835.907903][T15603] team0: Port device team_slave_1 removed [ 835.920445][T15603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.942415][T15603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.028372][T15603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.056319][T15603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.126112][T15607] wlan1: mtu less than device minimum [ 836.187544][T15634] bridge: RTM_NEWNEIGH with invalid ether address [ 838.086936][ T5908] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 838.271040][ T5908] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.315380][ T5908] usb 10-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6d.4d [ 838.402209][ T5908] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.450291][ T5908] usb 10-1: config 0 descriptor?? [ 838.478010][ T5908] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 838.497256][ T5908] command write [95] error -22 [ 839.239676][ T5908] usb 10-1: USB disconnect, device number 20 [ 839.532236][T15677] No control pipe specified [ 839.543572][ T5832] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 840.255665][T15679] overlayfs: failed to clone upperpath [ 840.524367][ T29] audit: type=1400 audit(1737447785.096:1208): avc: denied { accept } for pid=15687 comm="syz.9.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 840.548635][T15683] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.701009][T15683] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.872081][T15683] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.008443][T15683] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.148229][T15683] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.467853][T15683] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.867157][T15683] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.911676][T15683] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.037511][ T5868] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 842.478772][ T29] audit: type=1400 audit(1737447787.046:1209): avc: denied { getopt } for pid=15707 comm="syz.1.2393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 842.942648][T15716] No control pipe specified [ 842.980308][ T5832] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 843.180095][T15718] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 843.189098][T15718] overlayfs: missing 'lowerdir' [ 843.519714][ T5868] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.531072][ T5868] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 843.540353][ T5868] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.554143][ T5868] usb 10-1: config 0 descriptor?? [ 843.569230][ T5868] pwc: Askey VC010 type 2 USB webcam detected. [ 844.024440][ T5868] pwc: recv_control_msg error -32 req 02 val 2b00 [ 844.172331][ T5868] pwc: recv_control_msg error -32 req 02 val 2700 [ 844.314714][ T5868] pwc: recv_control_msg error -32 req 02 val 2c00 [ 844.408171][ T5868] pwc: recv_control_msg error -32 req 04 val 1000 [ 844.427291][ T5868] pwc: recv_control_msg error -32 req 04 val 1300 [ 844.444475][ T5868] pwc: recv_control_msg error -32 req 04 val 1400 [ 844.477763][ T5868] pwc: recv_control_msg error -32 req 02 val 2000 [ 844.498857][ T5868] pwc: recv_control_msg error -32 req 02 val 2100 [ 844.841587][ T5868] pwc: recv_control_msg error -71 req 02 val 2500 [ 844.850948][ T5868] pwc: recv_control_msg error -71 req 02 val 2400 [ 844.858190][ T5868] pwc: recv_control_msg error -71 req 02 val 2600 [ 844.865578][ T5868] pwc: recv_control_msg error -71 req 02 val 2900 [ 844.872649][ T5868] pwc: recv_control_msg error -71 req 02 val 2800 [ 844.879765][ T5868] pwc: recv_control_msg error -71 req 04 val 1100 [ 844.886978][ T5868] pwc: recv_control_msg error -71 req 04 val 1200 [ 844.897555][ T5868] pwc: Registered as video103. [ 844.903788][ T5868] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input29 [ 844.941508][ T5868] usb 10-1: USB disconnect, device number 21 [ 845.631560][T15763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 845.638787][T15763] IPv6: NLM_F_CREATE should be set when creating new route [ 845.646029][T15763] IPv6: NLM_F_CREATE should be set when creating new route [ 845.810238][T15768] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 847.016808][T15777] No control pipe specified [ 847.093763][ T5832] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 847.747191][T15784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2410'. [ 847.796186][T15784] erspan0: left allmulticast mode [ 847.829660][T15784] erspan0: left promiscuous mode [ 847.834898][T15784] bridge0: port 3(erspan0) entered disabled state [ 847.898641][T15784] bridge_slave_1: left allmulticast mode [ 847.919495][T15784] bridge_slave_1: left promiscuous mode [ 847.938582][T15784] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.967498][T15784] bridge_slave_0: left allmulticast mode [ 848.006937][T15784] bridge_slave_0: left promiscuous mode [ 848.019205][T15784] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.095414][T15784] bond0: (slave bridge0): Releasing backup interface [ 848.759471][T15800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2416'. [ 848.878686][T15807] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2419'. [ 849.079542][ T1119] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 849.242401][ T1119] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.277886][ T1119] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 849.289344][ T1119] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.311097][ T1119] usb 10-1: config 0 descriptor?? [ 849.331286][ T1119] pwc: Askey VC010 type 2 USB webcam detected. [ 849.732782][ T1119] pwc: recv_control_msg error -32 req 02 val 2b00 [ 849.767110][ T1119] pwc: recv_control_msg error -32 req 02 val 2700 [ 849.790099][ T1119] pwc: recv_control_msg error -32 req 02 val 2c00 [ 849.805592][ T1119] pwc: recv_control_msg error -32 req 04 val 1000 [ 849.813962][ T1119] pwc: recv_control_msg error -32 req 04 val 1300 [ 850.046518][T15840] sch_fq: defrate 0 ignored. [ 850.062882][ T1119] pwc: recv_control_msg error -32 req 04 val 1400 [ 850.145815][ T29] audit: type=1400 audit(1737447794.706:1210): avc: denied { search } for pid=5484 comm="dhcpcd" name="netdev:wlan0" dev="debugfs" ino=45120 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 850.272982][ T1119] pwc: recv_control_msg error -71 req 02 val 2100 [ 850.476998][ T1119] pwc: recv_control_msg error -71 req 04 val 1500 [ 850.637444][ T1119] pwc: recv_control_msg error -71 req 02 val 2500 [ 850.838002][ T1119] pwc: recv_control_msg error -71 req 02 val 2400 [ 850.846442][ T1119] pwc: recv_control_msg error -71 req 02 val 2600 [ 850.853489][ T1119] pwc: recv_control_msg error -71 req 02 val 2900 [ 850.860734][ T1119] pwc: recv_control_msg error -71 req 02 val 2800 [ 850.867542][ T1119] pwc: recv_control_msg error -71 req 04 val 1100 [ 850.874652][ T1119] pwc: recv_control_msg error -71 req 04 val 1200 [ 850.884956][ T1119] pwc: Registered as video103. [ 850.891575][ T1119] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input30 [ 850.919705][ T1119] usb 10-1: USB disconnect, device number 22 [ 851.406760][ T29] audit: type=1400 audit(1737447795.966:1211): avc: denied { watch } for pid=15847 comm="syz.5.2426" path="/411/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 851.493899][ T29] audit: type=1326 audit(1737447796.066:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.9.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2585d29 code=0x7ffc0000 [ 851.557191][ T29] audit: type=1326 audit(1737447796.096:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.9.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2585d29 code=0x7ffc0000 [ 851.587893][ T29] audit: type=1326 audit(1737447796.096:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.9.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feac2584690 code=0x7ffc0000 [ 851.619573][ T29] audit: type=1326 audit(1737447796.096:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.9.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2585d29 code=0x7ffc0000 [ 851.649321][ T29] audit: type=1326 audit(1737447796.096:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.9.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2585d29 code=0x7ffc0000 [ 851.693664][ T29] audit: type=1326 audit(1737447796.096:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.9.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feac2585d29 code=0x7ffc0000 [ 851.718678][ T29] audit: type=1326 audit(1737447796.096:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.9.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2585d29 code=0x7ffc0000 [ 851.782447][ T29] audit: type=1326 audit(1737447796.096:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15856 comm="syz.9.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac2585d29 code=0x7ffc0000 [ 852.246312][T15872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2432'. [ 855.360117][T11813] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 855.539926][T11813] usb 9-1: Using ep0 maxpacket: 32 [ 855.579747][T15925] dvmrp8: entered allmulticast mode [ 855.608583][T11813] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 855.647541][T11813] usb 9-1: config 0 has no interface number 0 [ 855.681409][T11813] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 855.695571][T15922] dvmrp8: left allmulticast mode [ 855.703001][T11813] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.747771][T11813] usb 9-1: Product: syz [ 855.757858][T11813] usb 9-1: Manufacturer: syz [ 855.769890][T11813] usb 9-1: SerialNumber: syz [ 855.811607][T11813] usb 9-1: config 0 descriptor?? [ 855.844426][T11813] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 855.909371][T11813] usb 9-1: selecting invalid altsetting 1 [ 855.918140][T11813] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 856.219127][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 856.219232][ T29] audit: type=1400 audit(1737447800.576:1244): avc: denied { write } for pid=15931 comm="syz.0.2446" path="socket:[45256]" dev="sockfs" ino=45256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 856.523381][T11813] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 856.533829][T11813] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 856.549506][T11813] usb 9-1: media controller created [ 856.581667][T11813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 856.876414][T11813] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 856.996892][T11813] usb 9-1: USB disconnect, device number 21 [ 858.283930][T15980] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2453'. [ 858.293426][T15980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2453'. [ 859.187075][ T29] audit: type=1800 audit(1737447803.746:1245): pid=15989 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2457" name="/" dev="9p" ino=2 res=0 errno=0 [ 860.895238][T16014] netlink: 'syz.0.2455': attribute type 3 has an invalid length. [ 861.607107][T16021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.972167][T16027] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 861.981293][T16027] overlayfs: missing 'lowerdir' [ 862.527202][T16021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.551437][T16037] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2471'. [ 864.584978][T16057] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 864.619060][T16057] overlayfs: missing 'lowerdir' [ 865.639876][ T29] audit: type=1400 audit(1737447809.676:1246): avc: denied { read } for pid=16060 comm="syz.8.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 865.666944][T16052] 9pnet_fd: p9_fd_create_tcp (16052): problem connecting socket to 127.0.0.1 [ 865.748798][T16061] mkiss: ax0: crc mode is auto. [ 865.969612][T16070] netlink: 'syz.8.2481': attribute type 12 has an invalid length. [ 867.976972][ T29] audit: type=1400 audit(1737447812.546:1247): avc: denied { write } for pid=16090 comm="syz.1.2485" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 868.529318][T16101] nvme_fabrics: missing parameter 'transport=%s' [ 868.707078][T16101] nvme_fabrics: missing parameter 'nqn=%s' [ 868.732943][T16100] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2488'. [ 870.228707][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.928037][T16129] dvmrp0: entered allmulticast mode [ 871.368696][T16126] dvmrp0: left allmulticast mode [ 871.664918][T16145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2499'. [ 871.673993][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2499'. [ 872.743178][T16156] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2501'. [ 873.736568][T16183] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 873.779645][T16183] overlayfs: missing 'lowerdir' [ 873.781951][T16185] netlink: 'syz.1.2507': attribute type 3 has an invalid length. [ 874.105411][T16196] No control pipe specified [ 874.813342][T16195] vivid-000: ================= START STATUS ================= [ 874.887548][T16195] vivid-000: Test Pattern: 75% Colorbar [ 874.935650][T16195] vivid-000: Fill Percentage of Frame: 100 [ 874.966404][T16195] vivid-000: Horizontal Movement: No Movement [ 874.988711][T16195] vivid-000: Vertical Movement: Move Down Fast [ 875.005804][T16195] vivid-000: OSD Text Mode: Counters Only [ 875.024400][T16195] vivid-000: Show Border: false [ 875.032746][T16195] vivid-000: Show Square: false [ 875.042285][T16195] vivid-000: Sensor Flipped Horizontally: false [ 875.076615][T16195] vivid-000: Sensor Flipped Vertically: false [ 875.089017][T16195] vivid-000: Insert SAV Code in Image: false [ 875.499648][ T29] audit: type=1400 audit(1737447819.876:1248): avc: denied { accept } for pid=16202 comm="syz.8.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 875.852276][T16195] vivid-000: Insert EAV Code in Image: false [ 875.925539][T16195] vivid-000: Insert Video Guard Band: false [ 875.936269][T16195] vivid-000: Reduced Framerate: true [ 876.279724][T16195] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 876.309582][T16195] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 876.328363][T16195] vivid-000: Enable Capture Cropping: true [ 876.349666][T16195] vivid-000: Enable Capture Composing: true [ 876.355616][T16195] vivid-000: Enable Capture Scaler: true [ 876.405022][T16195] vivid-000: Timestamp Source: End of Frame [ 876.419642][T16195] vivid-000: Colorspace: SMPTE 170M [ 876.425284][T16195] vivid-000: Transfer Function: Default [ 876.449515][T16195] vivid-000: Y'CbCr Encoding: Default [ 876.459395][T16195] vivid-000: HSV Encoding: Hue 0-179 [ 876.489447][T16195] vivid-000: Quantization: Default [ 876.509614][T16195] vivid-000: Apply Alpha To Red Only: false [ 876.520118][T16195] vivid-000: Standard Aspect Ratio: 14x9 [ 876.538629][T16195] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 876.559337][T16195] vivid-000: DV Timings: 640x480p59 inactive [ 876.566028][T16195] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 876.582291][T16195] vivid-000: Maximum EDID Blocks: 2 [ 876.591462][ T29] audit: type=1400 audit(1737447821.166:1249): avc: denied { write } for pid=16212 comm="syz.9.2515" path="socket:[44846]" dev="sockfs" ino=44846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 876.635544][T16195] vivid-000: Limited RGB Range (16-235): false [ 876.662910][T16195] vivid-000: Rx RGB Quantization Range: Automatic [ 876.700119][T16195] vivid-000: Power Present: 0x00000001 [ 876.705916][T16195] tpg source WxH: 720x576 (Y'CbCr) [ 876.776205][T16195] tpg field: 8 [ 876.813115][T16195] tpg crop: 64x32@0x0 [ 876.849800][T16195] tpg compose: 16x8@0x0 [ 876.854143][T16195] tpg colorspace: 1 [ 876.869028][T16195] tpg transfer function: 0/1 [ 877.005133][T16195] tpg Y'CbCr encoding: 0/1 [ 877.112592][T16195] tpg quantization: 0/2 [ 877.201816][T16195] tpg RGB range: 0/2 [ 877.215526][T16225] xt_CT: You must specify a L4 protocol and not use inversions on it [ 877.313702][T16195] vivid-000: ================== END STATUS ================== [ 877.836264][T16235] xt_CT: You must specify a L4 protocol and not use inversions on it [ 878.616464][ T29] audit: type=1400 audit(1737447823.186:1250): avc: denied { connect } for pid=16239 comm="syz.8.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 879.334678][T16251] No control pipe specified [ 879.508125][T10537] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 882.335836][T16253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 883.307545][T16282] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 883.316824][T16282] overlayfs: missing 'lowerdir' [ 884.504653][ T5868] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 884.891082][ T5868] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 884.899488][ T5868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.918185][ T5868] usb 6-1: config 0 has no interface number 0 [ 884.925409][ T5868] usb 6-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 216 [ 884.935889][ T5868] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 884.958015][ T5868] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 884.967418][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.980552][ T5868] usb 6-1: config 0 descriptor?? [ 884.987006][T16287] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 885.038297][ T5868] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 885.630065][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2534'. [ 885.780041][T16287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2534'. [ 886.070196][ T6323] usb 6-1: Failed to submit usb control message: -110 [ 886.510584][T16305] block device autoloading is deprecated and will be removed. [ 886.532541][T16287] netlink: 'syz.5.2534': attribute type 18 has an invalid length. [ 886.569551][ T6323] usb 6-1: unable to send the bmi data to the device: -110 [ 886.576783][ T6323] usb 6-1: unable to get target info from device [ 886.577068][T16305] syz.1.2536: attempt to access beyond end of device [ 886.577068][T16305] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 886.694869][ T6323] usb 6-1: could not get target info (-110) [ 886.736271][ T6323] usb 6-1: could not probe fw (-110) [ 887.667829][T16332] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2543'. [ 887.684564][T16332] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 888.485608][ T5908] usb 6-1: USB disconnect, device number 24 [ 889.311627][T16350] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 890.863050][T16366] syz.5.2548 (16366) used greatest stack depth: 20768 bytes left [ 892.340780][T16397] ptrace attach of "./syz-executor exec"[9991] was attempted by "./syz-executor exec"[16397] [ 892.363630][T16386] ceph: No mds server is up or the cluster is laggy [ 896.551446][T16442] xt_CT: You must specify a L4 protocol and not use inversions on it [ 896.949556][ T5868] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 898.164973][ T5868] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 898.176412][ T5868] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 898.185753][ T5868] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.510992][ T5868] usb 9-1: config 0 descriptor?? [ 898.538004][ T5868] pwc: Askey VC010 type 2 USB webcam detected. [ 899.452421][ T5868] pwc: recv_control_msg error -32 req 02 val 2b00 [ 899.470124][ T5868] pwc: recv_control_msg error -32 req 02 val 2700 [ 899.485863][ T5868] pwc: recv_control_msg error -32 req 02 val 2c00 [ 899.496366][ T5868] pwc: recv_control_msg error -32 req 04 val 1000 [ 899.519670][ T5868] pwc: recv_control_msg error -32 req 04 val 1300 [ 899.540502][ T5868] pwc: recv_control_msg error -32 req 04 val 1400 [ 899.558053][ T5868] pwc: recv_control_msg error -32 req 02 val 2000 [ 899.578180][ T5868] pwc: recv_control_msg error -32 req 02 val 2100 [ 899.586175][ T5868] pwc: recv_control_msg error -32 req 04 val 1500 [ 899.594168][ T5868] pwc: recv_control_msg error -32 req 02 val 2500 [ 899.605009][ T5868] pwc: recv_control_msg error -32 req 02 val 2400 [ 899.614120][ T5868] pwc: recv_control_msg error -32 req 02 val 2600 [ 899.757861][T16476] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2572'. [ 899.767349][T16476] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2572'. [ 900.028731][ T5868] pwc: recv_control_msg error -71 req 02 val 2800 [ 900.041017][ T5868] pwc: recv_control_msg error -71 req 04 val 1100 [ 900.047911][ T5868] pwc: recv_control_msg error -71 req 04 val 1200 [ 900.064310][ T5868] pwc: Registered as video103. [ 900.078155][ T5868] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input31 [ 900.114149][ T5868] usb 9-1: USB disconnect, device number 22 [ 900.888906][T16488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2574'. [ 900.898219][T16488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2574'. [ 900.907663][T16488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2574'. [ 905.820656][T16536] sp0: Synchronizing with TNC [ 905.929225][T16536] xt_socket: unknown flags 0x50 [ 906.856003][ T29] audit: type=1400 audit(1737447851.426:1251): avc: denied { mounton } for pid=16540 comm="syz.9.2590" path="/370/file0" dev="tmpfs" ino=2013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 906.981988][ T29] audit: type=1800 audit(1737447851.556:1252): pid=16541 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2590" name="/" dev="9p" ino=2 res=0 errno=0 [ 907.333028][T16555] xt_TCPMSS: Only works on TCP SYN packets [ 912.110348][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 912.169985][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 912.191074][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 912.211346][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 912.223020][ T5832] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 912.233120][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 912.857889][T16615] chnl_net:caif_netlink_parms(): no params data found [ 913.935752][T16615] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.946864][T16615] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.440594][T16615] bridge_slave_0: entered allmulticast mode [ 914.449299][T16615] bridge_slave_0: entered promiscuous mode [ 914.458076][T16615] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.475532][ T5832] Bluetooth: hci2: command tx timeout [ 914.538085][T16615] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.639753][T16615] bridge_slave_1: entered allmulticast mode [ 914.647425][T16615] bridge_slave_1: entered promiscuous mode [ 914.746093][T16615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.765365][T16615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.964224][T16615] team0: Port device team_slave_0 added [ 914.972222][T16615] team0: Port device team_slave_1 added [ 914.993192][T16615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.048058][T16615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.450306][T16615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.599554][T16615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 915.619469][T16615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.646426][T16615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 915.706153][T16615] hsr_slave_0: entered promiscuous mode [ 915.720911][T16615] hsr_slave_1: entered promiscuous mode [ 915.730716][T16615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 915.739138][T16615] Cannot create hsr debugfs directory [ 916.883208][ T5832] Bluetooth: hci2: command tx timeout [ 917.692721][ T29] audit: type=1400 audit(1737447862.256:1253): avc: denied { getopt } for pid=16689 comm="syz.9.2620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 918.959840][ T5832] Bluetooth: hci2: command tx timeout [ 920.960284][T16735] netlink: 1284 bytes leftover after parsing attributes in process `syz.9.2627'. [ 920.970255][T16735] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 921.020905][ T5832] Bluetooth: hci2: command tx timeout [ 922.569015][T16762] netlink: 'syz.8.2631': attribute type 3 has an invalid length. [ 922.645837][T16766] netlink: 'syz.1.2633': attribute type 3 has an invalid length. [ 923.862161][T16776] xt_cgroup: invalid path, errno=-2 [ 926.851732][T16821] binder: 16817:16821 ioctl 4018620d 0 returned -22 [ 926.930239][T16836] netlink: 'syz.1.2646': attribute type 3 has an invalid length. [ 927.264661][T16615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 927.344613][T16615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 927.438083][T16615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 927.480334][T16615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 928.161684][T16615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.287854][T16615] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.467971][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.475160][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.063973][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.071171][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.527443][T16615] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 929.630175][T16615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 930.415624][T16896] netlink: 'syz.0.2657': attribute type 3 has an invalid length. [ 930.415841][T16615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 930.524006][T16615] veth0_vlan: entered promiscuous mode [ 930.641825][T16615] veth1_vlan: entered promiscuous mode [ 931.511487][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.760445][T16615] veth0_macvtap: entered promiscuous mode [ 931.791422][T16615] veth1_macvtap: entered promiscuous mode [ 931.897122][T16615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.954213][T16615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.629881][T16615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.672145][T16615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.732067][T16615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.789552][T16615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.799530][T16615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.810123][T16615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.829939][T16615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.429565][T16931] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2661'. [ 933.500120][T16928] No control pipe specified [ 933.576955][ T5832] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 933.788073][T16615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.918658][T16615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.983380][T16615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.037959][T16615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.048000][T16615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.058499][T16615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.085903][T16615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.095712][T16615] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.127807][T16615] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.147987][T16615] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.167775][T16615] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.222430][T16937] bond_slave_0: entered promiscuous mode [ 934.228740][T16937] bond_slave_1: entered promiscuous mode [ 934.348113][T16937] macsec1: entered promiscuous mode [ 934.591825][T16937] bond0: entered promiscuous mode [ 934.617974][T16937] macsec1: entered allmulticast mode [ 934.637231][T16937] bond0: entered allmulticast mode [ 934.649845][T16937] bond_slave_0: entered allmulticast mode [ 934.661721][T16937] bond_slave_1: entered allmulticast mode [ 934.769646][T16937] bond0: left allmulticast mode [ 934.779780][T16937] bond_slave_0: left allmulticast mode [ 934.785733][T16937] bond_slave_1: left allmulticast mode [ 934.880753][T16951] Cannot find del_set index 136 as target [ 935.125066][T16937] bond0: left promiscuous mode [ 935.180326][T16937] bond_slave_0: left promiscuous mode [ 935.185789][T16937] bond_slave_1: left promiscuous mode [ 935.250025][T16956] netlink: 'syz.9.2670': attribute type 1 has an invalid length. [ 935.257795][T16956] netlink: 'syz.9.2670': attribute type 4 has an invalid length. [ 935.266023][T16956] netlink: 15334 bytes leftover after parsing attributes in process `syz.9.2670'. [ 935.355398][T16958] netlink: 'syz.8.2669': attribute type 3 has an invalid length. [ 935.860415][T16615] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 935.878499][T16615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.963306][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.995599][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.002929][ T9913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.079444][ T9913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.379901][ T5832] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 939.880052][T17021] netlink: 'syz.9.2681': attribute type 3 has an invalid length. [ 940.362390][ T29] audit: type=1400 audit(1737451979.894:1254): avc: denied { ioctl } for pid=17024 comm="syz.2.2683" path="socket:[49216]" dev="sockfs" ino=49216 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 942.089618][T17040] delete_channel: no stack [ 942.255477][T17040] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2686'. [ 942.781855][ T5832] Bluetooth: hci2: ACL packet too small [ 942.811057][T17043] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2687'. [ 942.848657][T17043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2687'. [ 942.861914][T17043] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2687'. [ 942.872046][T17043] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2687'. [ 944.767386][ T5868] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 945.059502][ T5868] usb 9-1: Using ep0 maxpacket: 32 [ 945.120281][ T5868] usb 9-1: config 0 has no interfaces? [ 945.125931][ T5868] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 945.750903][ T5868] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.876362][T17089] smc: net device bond_slave_1 applied user defined pnetid SYZ1 [ 946.008672][ T5868] usb 9-1: config 0 descriptor?? [ 946.408320][T17097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 947.459782][ T5908] usb 9-1: USB disconnect, device number 23 [ 948.652448][ T5823] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 949.062359][ T5823] usb 10-1: Using ep0 maxpacket: 16 [ 949.243985][ T5823] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 949.342444][ T5823] usb 10-1: config 0 has no interface number 0 [ 949.348668][ T5823] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 949.400895][ T5823] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 949.423595][ T5823] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 949.482059][ T5823] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 949.823720][ T5823] usb 10-1: Product: syz [ 949.828013][ T5823] usb 10-1: SerialNumber: syz [ 949.874441][ T5823] usb 10-1: config 0 descriptor?? [ 949.917112][ T29] audit: type=1400 audit(1737451989.484:1255): avc: denied { mount } for pid=17151 comm="syz.0.2714" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 949.929324][ T5823] cm109 10-1:0.8: invalid payload size 1024, expected 4 [ 949.956724][ T5823] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input32 [ 950.071259][T17145] kvm: kvm [17144]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 950.191338][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 950.191887][T11583] usb 10-1: USB disconnect, device number 23 [ 950.198429][ C1] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 950.234187][T11583] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 950.692093][ T29] audit: type=1804 audit(1737451990.204:1256): pid=17170 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2717" name="/newroot/560/bus/bus" dev="overlay" ino=3041 res=1 errno=0 [ 954.218189][T17206] netlink: 'syz.9.2724': attribute type 10 has an invalid length. [ 955.496233][T17217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2726'. [ 955.505810][T17217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2726'. [ 956.403393][T17230] netlink: 'syz.9.2729': attribute type 3 has an invalid length. [ 957.388225][T17245] No control pipe specified [ 958.906491][T17251] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2734'. [ 958.915571][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2734'. [ 959.679667][T17266] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 959.686882][T17266] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 959.696929][T17266] vhci_hcd vhci_hcd.0: Device attached [ 960.309530][ T5866] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 960.362166][T17267] vhci_hcd: connection reset by peer [ 960.440848][ T6291] vhci_hcd: stop threads [ 960.447096][ T6291] vhci_hcd: release socket [ 960.492103][ T6291] vhci_hcd: disconnect device [ 960.615664][T17290] netlink: 'syz.2.2741': attribute type 3 has an invalid length. [ 963.642712][T17326] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 963.651860][T17326] overlayfs: missing 'lowerdir' [ 965.499631][ T5866] vhci_hcd: vhci_device speed not set [ 967.266950][T17362] pim6reg: entered allmulticast mode [ 967.542562][ T29] audit: type=1400 audit(1737452007.004:1257): avc: denied { ioctl } for pid=17361 comm="syz.1.2755" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 970.734748][T17402] team_slave_0: entered promiscuous mode [ 970.740991][T17402] team_slave_1: entered promiscuous mode [ 970.864569][T17402] macsec1: entered promiscuous mode [ 970.888023][T17402] team0: entered promiscuous mode [ 971.150306][T17402] macsec1: entered allmulticast mode [ 971.219723][T17402] team0: entered allmulticast mode [ 971.225808][T17402] team_slave_0: entered allmulticast mode [ 971.232019][T17402] team_slave_1: entered allmulticast mode [ 971.247983][T17402] team0: Device macsec1 is already an upper device of the team interface [ 971.471626][T17402] team0: left allmulticast mode [ 971.476528][T17402] team_slave_0: left allmulticast mode [ 971.519353][T17402] team_slave_1: left allmulticast mode [ 972.183017][T17402] team0: left promiscuous mode [ 972.307561][T17402] team_slave_0: left promiscuous mode [ 972.313034][T17402] team_slave_1: left promiscuous mode [ 972.492703][T17421] xt_socket: unknown flags 0x50 [ 973.497495][T17397] sp0: Synchronizing with TNC [ 975.500085][T17459] netlink: 'syz.1.2775': attribute type 3 has an invalid length. [ 979.088112][T17504] bridge0: entered allmulticast mode [ 979.102955][T17504] bridge0: entered promiscuous mode [ 979.932485][ T29] audit: type=1400 audit(1737452019.504:1258): avc: denied { ioctl } for pid=17500 comm="syz.9.2785" path="socket:[49977]" dev="sockfs" ino=49977 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 980.120161][ T29] audit: type=1400 audit(1737452019.504:1259): avc: denied { write } for pid=17500 comm="syz.9.2785" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 981.958266][T17535] netlink: 'syz.2.2791': attribute type 3 has an invalid length. [ 986.173206][T17579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2800'. [ 986.249718][T17589] TCP: out of memory -- consider tuning tcp_mem [ 991.269895][T17645] Bluetooth: hci2: command 0x0405 tx timeout [ 991.717437][T17670] /dev/nullb0: Can't open blockdev [ 992.098845][T17672] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 992.105315][T17672] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 992.459165][T17677] netlink: 'syz.9.2817': attribute type 3 has an invalid length. [ 992.949220][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.525682][T17732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2826'. [ 1001.899946][T10294] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1003.197026][ T29] audit: type=1400 audit(1737452042.204:1260): avc: denied { read } for pid=17781 comm="syz.0.2842" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1003.209512][T10294] usb 9-1: Using ep0 maxpacket: 8 [ 1003.300644][ T29] audit: type=1400 audit(1737452042.864:1261): avc: denied { read } for pid=17787 comm="syz.9.2843" path="socket:[50382]" dev="sockfs" ino=50382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1003.300815][T10294] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1003.378630][T10294] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1003.400774][T17794] 9pnet_fd: Insufficient options for proto=fd [ 1003.400865][T10294] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1003.439330][T10294] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1003.463346][T10294] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1003.513743][T10294] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.956190][T10294] usb 9-1: GET_CAPABILITIES returned 0 [ 1004.023248][T10294] usbtmc 9-1:16.0: can't read capabilities [ 1004.328432][ T29] audit: type=1400 audit(1737452043.894:1262): avc: denied { mount } for pid=17808 comm="syz.0.2847" name="/" dev="configfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1004.380418][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1004.389788][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1004.398860][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1004.407912][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1004.416960][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1004.426009][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1004.435058][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1004.444104][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1004.453149][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1004.462190][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1004.471230][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1004.602244][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1004.611376][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1004.620472][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1004.629571][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1004.638662][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1004.796961][ T47] usb 9-1: USB disconnect, device number 24 [ 1005.249320][T17823] overlayfs: missing 'lowerdir' [ 1014.265459][ T29] audit: type=1400 audit(1737452053.354:1263): avc: denied { ioctl } for pid=17895 comm="syz.9.2868" path="pid:[4026532693]" dev="nsfs" ino=4026532693 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1017.979534][T17932] block nbd8: NBD_DISCONNECT [ 1017.986944][T17932] block nbd8: Disconnected due to user request. [ 1018.014274][T17932] block nbd8: shutting down sockets [ 1018.269466][T17955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2878'. [ 1018.278588][T17955] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2878'. [ 1019.516009][T17967] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1019.522533][T17967] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1021.849658][T17978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1022.573399][T17977] ISOFS: Unable to identify CD-ROM format. [ 1022.597704][T17983] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1022.842618][T17993] netlink: 'syz.0.2885': attribute type 3 has an invalid length. [ 1030.932008][T18073] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1031.139733][T18075] netlink: 'syz.2.2900': attribute type 3 has an invalid length. [ 1031.266336][T18083] overlayfs: missing 'lowerdir' [ 1031.289869][T18077] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1031.305471][T18077] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1031.381379][T18077] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1031.387579][T18077] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1031.474025][T18092] netlink: 'syz.2.2905': attribute type 4 has an invalid length. [ 1031.506935][T18077] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1031.670476][T18097] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1031.678699][T18097] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1031.688003][T18097] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1031.695922][T18097] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1031.768219][T18077] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1036.498985][T18152] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1039.538523][ T29] audit: type=1400 audit(1737452078.664:1264): avc: denied { write } for pid=18175 comm="syz.0.2921" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1043.757232][T18243] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1046.608819][T18279] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2933'. [ 1046.668860][T18279] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2933'. [ 1054.014690][T18321] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2944'. [ 1054.023794][T18321] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2944'. [ 1055.099817][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.129286][T18339] block device autoloading is deprecated and will be removed. [ 1055.583623][T18346] No source specified [ 1056.121319][T18345] netlink: 'syz.2.2950': attribute type 3 has an invalid length. [ 1057.244036][ T30] INFO: task kworker/u8:7:1152 blocked for more than 143 seconds. [ 1057.267022][ T30] Not tainted 6.13.0-syzkaller-00603-g3d3a9c8b89d4 #0 [ 1057.456280][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1057.506043][ T30] task:kworker/u8:7 state:D stack:23328 pid:1152 tgid:1152 ppid:2 flags:0x00004000 [ 1057.516384][ T30] Workqueue: events_unbound netfs_write_collection_worker [ 1057.523684][ T30] Call Trace: [ 1057.527007][ T30] [ 1057.540069][ T30] __schedule+0xe58/0x5ad0 [ 1057.544533][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1057.559241][ T30] ? __pfx___schedule+0x10/0x10 [ 1057.619541][ T30] ? schedule+0x298/0x350 [ 1057.623931][ T30] ? __pfx_lock_release+0x10/0x10 [ 1057.628970][ T30] ? __pfx_lock_release+0x10/0x10 [ 1057.645614][ T30] ? lock_acquire+0x2f/0xb0 [ 1057.650514][ T30] ? schedule+0x1fd/0x350 [ 1057.655753][ T30] schedule+0xe7/0x350 [ 1057.660095][ T30] bit_wait+0x15/0xe0 [ 1057.664091][ T30] __wait_on_bit+0x62/0x180 [ 1057.668580][ T30] ? __pfx_bit_wait+0x10/0x10 [ 1057.677359][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 1057.684709][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1057.691280][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 1057.697051][ T30] netfs_retry_writes+0x2fa/0x1a00 [ 1057.702520][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1058.673258][ T30] ? hlock_class+0x4e/0x130 [ 1058.687595][ T30] ? __lock_acquire+0x15a9/0x3c40 [ 1058.796847][ T30] ? __pfx_netfs_retry_writes+0x10/0x10 [ 1058.811621][ T30] ? debug_object_deactivate+0x1ef/0x370 [ 1059.321076][ T30] ? rcu_is_watching+0x12/0xc0 [ 1059.325883][ T30] netfs_write_collection_worker+0x23de/0x37c0 [ 1059.334327][ T30] process_one_work+0x9c5/0x1ba0 [ 1059.339275][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1059.346653][ T30] ? __pfx_process_one_work+0x10/0x10 [ 1059.354172][ T30] ? rcu_is_watching+0x12/0xc0 [ 1059.358943][ T30] ? assign_work+0x1a0/0x250 [ 1059.365262][ T30] worker_thread+0x6c8/0xf00 [ 1059.373276][ T30] ? __kthread_parkme+0x148/0x220 [ 1059.378481][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1059.385346][ T30] kthread+0x2c1/0x3a0 [ 1059.392052][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1059.397548][ T30] ? __pfx_kthread+0x10/0x10 [ 1059.432491][ T30] ret_from_fork+0x45/0x80 [ 1059.436932][ T30] ? __pfx_kthread+0x10/0x10 [ 1059.444438][ T30] ret_from_fork_asm+0x1a/0x30 [ 1059.449214][ T30] [ 1059.453556][ T30] INFO: task syz.5.2556:16405 blocked for more than 145 seconds. [ 1059.461980][ T30] Not tainted 6.13.0-syzkaller-00603-g3d3a9c8b89d4 #0 [ 1059.469263][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1059.478021][ T30] task:syz.5.2556 state:D stack:26048 pid:16405 tgid:16405 ppid:7529 flags:0x00000004 [ 1059.488318][ T30] Call Trace: [ 1059.491815][ T30] [ 1059.494749][ T30] __schedule+0xe58/0x5ad0 [ 1059.499154][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1059.509416][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1059.515013][ T30] ? __pfx___schedule+0x10/0x10 [ 1059.529431][ T30] ? schedule+0x298/0x350 [ 1059.533812][ T30] ? __pfx_lock_release+0x10/0x10 [ 1059.538844][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1059.559507][ T30] ? lock_acquire+0x2f/0xb0 [ 1059.564108][ T30] ? schedule+0x1fd/0x350 [ 1059.568497][ T30] schedule+0xe7/0x350 [ 1059.574091][ T30] schedule_preempt_disabled+0x13/0x30 [ 1059.585500][ T30] __mutex_lock+0x62b/0xa60 [ 1059.590391][ T30] ? netfs_writepages+0x16c/0x8f0 [ 1059.595681][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1059.601328][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1059.606870][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1059.612439][ T30] ? __pfx_netfs_writepages+0x10/0x10 [ 1059.618268][ T30] ? netfs_writepages+0x16c/0x8f0 [ 1059.623679][ T30] netfs_writepages+0x16c/0x8f0 [ 1059.628612][ T30] ? __pfx_netfs_writepages+0x10/0x10 [ 1059.646720][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 1059.652324][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1059.657599][ T30] ? lock_acquire+0x2f/0xb0 [ 1059.669228][ T30] ? is_bpf_text_address+0x30/0x1a0 [ 1059.674774][ T30] ? bpf_ksym_find+0x127/0x1c0 [ 1059.684242][ T30] ? __pfx_netfs_writepages+0x10/0x10 [ 1059.692748][ T30] do_writepages+0x1b3/0x820 [ 1059.697778][ T30] ? __pfx_do_writepages+0x10/0x10 [ 1059.703495][ T30] ? wbc_attach_fdatawrite_inode+0x13a/0x190 [ 1059.710068][ T30] ? __pfx_lock_release+0x10/0x10 [ 1059.715173][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 1059.721178][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1059.726638][ T30] ? lock_acquire+0x2f/0xb0 [ 1059.731555][ T30] ? wbc_attach_fdatawrite_inode+0x24/0x190 [ 1059.737539][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 1059.753150][ T30] filemap_fdatawrite_wbc+0x104/0x160 [ 1059.758628][ T30] __filemap_fdatawrite_range+0xb3/0xf0 [ 1059.766338][ T30] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1059.772893][ T30] ? kmem_cache_free+0x31d/0x4c0 [ 1059.777949][ T30] v9fs_dir_release+0x429/0x590 [ 1059.783192][ T30] ? __pfx_v9fs_dir_release+0x10/0x10 [ 1059.788639][ T30] ? __pfx___might_resched+0x10/0x10 [ 1059.794511][ T30] ? ima_iint_find+0xea/0x130 [ 1059.799776][ T30] ? __pfx_v9fs_dir_release+0x10/0x10 [ 1059.805234][ T30] __fput+0x3f8/0xb60 [ 1059.809281][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1059.815149][ T30] task_work_run+0x14e/0x250 [ 1059.820237][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1059.826041][ T30] ? __pfx___do_sys_close_range+0x10/0x10 [ 1059.832369][ T30] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1059.838118][ T30] do_syscall_64+0xda/0x250 [ 1059.843075][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.849052][ T30] RIP: 0033:0x7f0f6e585d29 [ 1059.853872][ T30] RSP: 002b:00007fff884dd2e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1059.866804][ T30] RAX: 0000000000000000 RBX: 00007f0f6e777ba0 RCX: 00007f0f6e585d29 [ 1059.875127][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1059.883444][ T30] RBP: 00007f0f6e777ba0 R08: 0000000000026f1c R09: 00007fff884dd5df [ 1059.891756][ T30] R10: 00007f0f6e777ac0 R11: 0000000000000246 R12: 00000000000da124 [ 1059.900433][ T30] R13: 00007fff884dd3f0 R14: 0000000000000032 R15: ffffffffffffffff [ 1059.908503][ T30] [ 1059.912355][ T30] [ 1059.912355][ T30] Showing all locks held in the system: [ 1059.932705][ T30] 1 lock held by khungtaskd/30: [ 1059.937656][ T30] #0: ffffffff8e1bbcc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 1059.948986][ T30] 2 locks held by kworker/u8:7/1152: [ 1059.957351][ T30] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1059.974810][ T30] #1: ffffc90004977d80 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1059.988505][ T30] 1 lock held by syslogd/5172: [ 1059.993454][ T30] 2 locks held by getty/5578: [ 1059.998127][ T30] #0: ffff88803229f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1060.008211][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 1060.018370][ T30] 1 lock held by syz.5.2556/16405: [ 1060.023543][ T30] #0: ffff88807f032530 (&ctx->wb_lock){+.+.}-{4:4}, at: netfs_writepages+0x16c/0x8f0 [ 1060.033760][ T30] 1 lock held by syz.5.2556/16408: [ 1060.038873][ T30] #0: ffff88807f032530 (&ctx->wb_lock){+.+.}-{4:4}, at: netfs_writepages+0xb9/0x8f0 [ 1060.048620][ T30] [ 1060.051481][ T30] ============================================= [ 1060.051481][ T30] [ 1060.060183][ T30] NMI backtrace for cpu 1 [ 1060.064513][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-00603-g3d3a9c8b89d4 #0 [ 1060.074647][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1060.084690][ T30] Call Trace: [ 1060.087956][ T30] [ 1060.090876][ T30] dump_stack_lvl+0x116/0x1f0 [ 1060.095552][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1060.100486][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1060.106461][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1060.112435][ T30] watchdog+0xf14/0x1240 [ 1060.116674][ T30] ? __pfx_watchdog+0x10/0x10 [ 1060.121339][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1060.126530][ T30] ? __kthread_parkme+0x148/0x220 [ 1060.131552][ T30] ? __pfx_watchdog+0x10/0x10 [ 1060.136221][ T30] kthread+0x2c1/0x3a0 [ 1060.140282][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1060.145472][ T30] ? __pfx_kthread+0x10/0x10 [ 1060.150065][ T30] ret_from_fork+0x45/0x80 [ 1060.154467][ T30] ? __pfx_kthread+0x10/0x10 [ 1060.159052][ T30] ret_from_fork_asm+0x1a/0x30 [ 1060.163817][ T30] [ 1060.167544][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1060.173096][ C0] NMI backtrace for cpu 0 [ 1060.173106][ C0] CPU: 0 UID: 0 PID: 66 Comm: kworker/u8:4 Not tainted 6.13.0-syzkaller-00603-g3d3a9c8b89d4 #0 [ 1060.173124][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1060.173134][ C0] Workqueue: bat_events batadv_nc_worker [ 1060.173152][ C0] RIP: 0010:__lock_acquire+0x4c9/0x3c40 [ 1060.173172][ C0] Code: 03 0f b6 14 11 48 89 f9 83 e1 07 38 ca 7f 08 84 d2 0f 85 25 2a 00 00 45 0f b6 77 21 45 84 f6 0f 88 10 0c 00 00 48 8b 74 24 30 <84> c0 48 ba 00 00 00 00 00 fc ff df 0f 44 c5 48 c1 ee 03 0f b6 14 [ 1060.173187][ C0] RSP: 0018:ffffc9000214f958 EFLAGS: 00000046 [ 1060.173199][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000001 [ 1060.173208][ C0] RDX: 0000000000000000 RSI: ffff88801c78af18 RDI: ffff88801c78af91 [ 1060.173219][ C0] RBP: 0000000000000003 R08: 0000000000000000 R09: fffffbfff2dce998 [ 1060.173228][ C0] R10: ffffffff96e74cc7 R11: 0000000000000002 R12: 0000000000000000 [ 1060.173238][ C0] R13: ffff88801c78a440 R14: 0000000000000000 R15: ffff88801c78af70 [ 1060.173248][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1060.173263][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1060.173273][ C0] CR2: 0000000020404030 CR3: 000000002a896000 CR4: 00000000003526f0 [ 1060.173283][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1060.173292][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1060.173301][ C0] Call Trace: [ 1060.173306][ C0] [ 1060.173312][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1060.173331][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1060.173348][ C0] ? nmi_handle+0x1ac/0x5d0 [ 1060.173366][ C0] ? __lock_acquire+0x4c9/0x3c40 [ 1060.173383][ C0] ? default_do_nmi+0x6a/0x160 [ 1060.173400][ C0] ? exc_nmi+0x170/0x1e0 [ 1060.173416][ C0] ? end_repeat_nmi+0xf/0x53 [ 1060.173434][ C0] ? __lock_acquire+0x4c9/0x3c40 [ 1060.173451][ C0] ? __lock_acquire+0x4c9/0x3c40 [ 1060.173469][ C0] ? __lock_acquire+0x4c9/0x3c40 [ 1060.173486][ C0] [ 1060.173491][ C0] [ 1060.173500][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1060.173518][ C0] ? rcu_preempt_deferred_qs_irqrestore+0x505/0xb80 [ 1060.173538][ C0] ? __pfx_lock_release+0x10/0x10 [ 1060.173557][ C0] lock_acquire.part.0+0x11b/0x380 [ 1060.173575][ C0] ? batadv_nc_worker+0x164/0x1060 [ 1060.173590][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1060.173609][ C0] ? rcu_is_watching+0x12/0xc0 [ 1060.173630][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 1060.173654][ C0] ? batadv_nc_worker+0x164/0x1060 [ 1060.173669][ C0] ? lock_acquire+0x2f/0xb0 [ 1060.173685][ C0] ? batadv_nc_worker+0x164/0x1060 [ 1060.173701][ C0] batadv_nc_worker+0x16a/0x1060 [ 1060.173716][ C0] ? batadv_nc_worker+0x164/0x1060 [ 1060.173733][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1060.173748][ C0] ? rcu_is_watching+0x12/0xc0 [ 1060.173773][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 1060.173796][ C0] ? process_one_work+0x921/0x1ba0 [ 1060.173817][ C0] ? lock_acquire+0x2f/0xb0 [ 1060.173833][ C0] ? process_one_work+0x921/0x1ba0 [ 1060.173851][ C0] process_one_work+0x9c5/0x1ba0 [ 1060.173871][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1060.173890][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1060.173906][ C0] ? rcu_is_watching+0x12/0xc0 [ 1060.173930][ C0] ? assign_work+0x1a0/0x250 [ 1060.173947][ C0] worker_thread+0x6c8/0xf00 [ 1060.173966][ C0] ? __kthread_parkme+0x148/0x220 [ 1060.173988][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1060.174005][ C0] kthread+0x2c1/0x3a0 [ 1060.174024][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1060.174043][ C0] ? __pfx_kthread+0x10/0x10 [ 1060.174064][ C0] ret_from_fork+0x45/0x80 [ 1060.174080][ C0] ? __pfx_kthread+0x10/0x10 [ 1060.174100][ C0] ret_from_fork_asm+0x1a/0x30 [ 1060.174127][ C0] [ 1060.209513][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1060.209529][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-00603-g3d3a9c8b89d4 #0 [ 1060.209554][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1060.209565][ T30] Call Trace: [ 1060.209571][ T30] [ 1060.209578][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1060.209611][ T30] panic+0x71d/0x800 [ 1060.209629][ T30] ? __pfx_panic+0x10/0x10 [ 1060.209645][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1060.598521][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1060.604492][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1060.609853][ T30] ? watchdog+0xd7e/0x1240 [ 1060.614260][ T30] ? watchdog+0xd71/0x1240 [ 1060.618667][ T30] watchdog+0xd8f/0x1240 [ 1060.622907][ T30] ? __pfx_watchdog+0x10/0x10 [ 1060.627573][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1060.632777][ T30] ? __kthread_parkme+0x148/0x220 [ 1060.637794][ T30] ? __pfx_watchdog+0x10/0x10 [ 1060.642462][ T30] kthread+0x2c1/0x3a0 [ 1060.646522][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1060.651711][ T30] ? __pfx_kthread+0x10/0x10 [ 1060.656314][ T30] ret_from_fork+0x45/0x80 [ 1060.660721][ T30] ? __pfx_kthread+0x10/0x10 [ 1060.665303][ T30] ret_from_fork_asm+0x1a/0x30 [ 1060.670067][ T30] [ 1060.673188][ T30] Kernel Offset: disabled [ 1060.677490][ T30] Rebooting in 86400 seconds..