last executing test programs: 8m24.169819676s ago: executing program 32 (id=85): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001300)=ANY=[@ANYBLOB="6f73322e4021009afda26f87449eb287988b03ec"], &(0x7f0000000340)='GPL\x00', 0x4, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) sendmsg$nl_route_sched_retired(r4, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x804, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0xb}, {0xfff3, 0xe}, {0x10, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x539b1cfd2cf5b5e5}, 0x40000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 6m43.820448123s ago: executing program 33 (id=386): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) accept4$ax25(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @rose}, [@default, @null, @netrom, @netrom, @netrom, @remote, @netrom, @rose]}, &(0x7f0000000100)=0x48, 0x800) syz_io_uring_complete(0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 5m34.850189459s ago: executing program 5 (id=673): syz_usb_connect$hid(0x6, 0x3f, 0x0, &(0x7f00000006c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x1, 0x2, 0xc3, 0x20, 0x2}, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x2, 0x4, 0xfff7}]}, 0x9, [{0x2, &(0x7f00000001c0)=@string={0x2}}, {0x58, &(0x7f0000000280)=@string={0x58, 0x3, "6eb1a7d22590a4233600b7c42d64852a43100a08836d6459685f13669677230168c2cf6672329fdd78b6f3c30eeddfef3f5e5b789c4eb47104b28159c56e36e0f47548736ea43c42e8fbbfcf3ce1f20ed0e7baa793fe"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41b}}, {0x93, &(0x7f0000000340)=@string={0x93, 0x3, "25907780018c2d11ae7906c9a1c902d1fee088a3bd408214528d702f9496eb5a6f61a94e9ee95b483adfe72cdf701945a8bda5e915378a6fe8fc134395f993e7af4406bbd6957c47e5c026a52b7a89f1753bf8fed232e5ef641965edbde928d7c57e49b0deb76d057775c5a5260c29b2018d9cb1d00d5314334a79d340b04c80411bb935118a157594b91a8edec2725c77"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x401}}, {0xe7, &(0x7f00000004c0)=@string={0xe7, 0x3, "3e9f6c2a419e2582bc85ce7a1f2f8a8af422b017a58bd776df9c1c5b7a948bef1b483999b8ba3dfa52f42ffee9aceac7ebb019282297b79cd97d1b64ff1242c1c6f9b0969a4809d401f6a30dd8407916d5ed6aaad6a37864f2e9e4a264c5f2ec42bd368b7d62f0721d90689710b17b04eff4a74508a688a7486beb06fe09bbf057c4fbcec2470e20964266001dff7a6ca8195f30c774b2fdc0a7727291456ba5be67dbc80d27642a7c549e494dcdf1525d64101456e839d2ba38ce4763a2ec481493460e0f1daeddfbead3a7e2b8f65700d3c6dac9531c70803169295e45868f41c3695326"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x6c, &(0x7f0000000600)=@string={0x6c, 0x3, "069b132866c9431a5e80266a11f4e75c4bcc7eb50f1c23dd66dea874945e39653757c3a3997ccb0d10b7013d2bc701b01a9946e7175c4f05db64c65f6c859c0e5c7fa1a2f9cc20d37175f698c1b8135dfa8a8e91df155bc68ab96d5ac25b8bdf107b6ab5491ba2cf4237"}}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) gettid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000010100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) landlock_restrict_self(0xffffffffffffffff, 0x0) getrusage(0x0, 0x0) getrusage(0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x42) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000030701030000006a7f177453000000030000000c0002400bff7f0000000000420cffa3364dba4c6754b5d5585ea2"], 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 5m32.814424421s ago: executing program 5 (id=679): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) listen(0xffffffffffffffff, 0x3) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r9, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 5m31.858237391s ago: executing program 5 (id=680): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$caif_seqpacket(0x25, 0x5, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0x403, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xf}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 5m31.079431101s ago: executing program 5 (id=685): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x3}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x20000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xd) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000400)={0x40, 0x15, 0x6a, "ddab8a3eff05b83572a9d58d6f8ed67cd1a438139bd8c0a1cf199189e493d1982e381b86b40c477a75301923d31c8fd4b5810332342cc52e4e06371ad26e0e7becbee129ff6856aacbcfeb758668d004b9d5ad8c6077d3f8056dbabb48c76330dd9a42ff5ea7b258541f"}, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x1c, 0x1}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000200), 0x4080, &(0x7f0000000340)=ANY=[@ANYBLOB="00ee50866867883195d7137b12c995a7e80afc7a460f78b90c14e748460fef75a9dfb991973dba9815c817e30eba05df1cd9ce219cde4757b22b11fdec5fccf55a0d22188a8644ac86000ab7ebd1e79642d10791c6e6f35dacb157af140b8a4993a85bca8b50983ed6d033cccd59b5c1287e8edca0e27a6202ffbb3a8201ccb607000000d7128364e512be1dafc0"]) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0), 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000000)={0x0, 0x53}, 0x2) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x12c7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 5m27.585208581s ago: executing program 5 (id=695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000680)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0], &(0x7f0000000040), 0x1, r5, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r6], 0x0, 0x0, 0x0, 0x0, 0x300}) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x4b, 0x9c, 0xfc, 0x8, 0x52b, 0x1803, 0x1617, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x0, 0xb5, 0x94, 0x85}}]}}]}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x6a, &(0x7f0000000080)=[@cr4={0x1, 0x240e68}], 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x6d}}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40014}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x800, 0x0) 5m27.190701782s ago: executing program 5 (id=696): syz_open_dev$vbi(0x0, 0x1, 0x2) (async) r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) (async) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f00000005c0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000140), 0x1, &(0x7f00000000c0)=""/43, 0x2e}, 0xfffffffb}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/226, 0xfffffffffffffe2a}, {&(0x7f0000000540)=""/122, 0x7a}, {&(0x7f00000009c0)=""/200, 0xb8}], 0x3, &(0x7f00000006c0)=""/185, 0x10e}, 0xfffffffa}], 0x2, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r4, &(0x7f0000000300)='1\x00', 0x2) sendmmsg$alg(r4, &(0x7f0000006980)=[{0x0, 0x0, &(0x7f0000000980)}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00), 0x0, 0x840}, {0x0, 0x0, &(0x7f0000004100)=[{0x0}, {&(0x7f0000003000)="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", 0xffc}], 0x2, &(0x7f0000004140), 0x0, 0x20004000}, {0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000005300)="5a41fb45c1ddc12e5bed858b2d8877829a069897069bb2d1d1c28d", 0x1b}, {&(0x7f0000005340)="7af88b234a734bf00ec3186927ba7a1f38ade4b31e657860be193ec0aec24838c1b37346e4a407c720949469f20432a26bd17a5add5119e120433e854dd950c38b1aefca662ddffd0ff49c19bc99818a115b6869a35f72219500fc5338e28dc987b138cc6fd6447241fed5257a808dd4ff6e6f463ee822d4301cc610", 0x7c}, {0x0}, {&(0x7f0000005440)="4ed274867a6b484cb55f1480753e6846d6684bfb9ca855c952813f9cb356bf0fe1f865a09c517c0de2ad396b32a3b896d764f9131f875b32252c57738c71908eb8f9f74af55c22b908f01b170a3ec2faf63c277c95ef6b181355b67ad707e45e9e9e7ff433f73a9de75d20832728d06034dfe3246f14f3466d688ac2085804ecd8a1f98976c2ed4151a2f5d841272bf4c38b622c5300000000a8a1f99a8824707f406da90ca7aa", 0xa7}], 0x4, &(0x7f0000000780)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8000}, {0x0, 0x0, &(0x7f00000057c0)=[{&(0x7f0000005600)="c19dd05ca56fe1b562f49e13709a4f41dc8f8bdad3fd09af2e8a75cbfc3bffd8a401e288a6c943a90da7efae700aa445dde21c01f437e70c819109ef928edaa06399daf58438894853cfd374db7f5a515ddf856badd69f688e0320c99e3c4b5c1350ff9fbb24981401201df49095efbd126f0d7f116f6f42814bd64783d32141c0aecbdd02e76e8dd749c3d28616c2f30c2b247768539a85acc13538315f650e4269e1a514fb3946df7248d49317c2e0ba494b6da841f4e1f0f0", 0xba}, {&(0x7f00000056c0)="9f41b888a13c28f2455b00cad9f8e64d2d0d71d862a9d56e0af7caafaefdb3dcb5e8f8a7837e6dad6ce0f8ce27a70491f2094cc1bd0d0797895e2657970db1e1af7300f4f3818d8a2967dcf0b9fa86b684416ccba47f1abd86dec68c6e252a65fb68784357375100d19d55d607d1b6ec2a046f66be5ea725ed672834bbc845c1f5fe2486b7ff6a07219afc79b4432c7a4d599f53a148f38a3af4b55e2c3dc4395a3f46a030540ce6191eeb1ded17a03edca591337b9cfb3c647a6167835fb9a7e655ff9f0ad4ae1c63ec7d252f85427a268cb81925", 0xd5}], 0x2, &(0x7f0000005800)=ANY=[@ANYBLOB="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"/4280], 0x10c8, 0x4010}], 0x5, 0x20000894) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000040)={0x19980330}, 0x0) (async) capset(&(0x7f0000000040)={0x19980330}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x4010, 0xffffffffffffffff, 0x10000000) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x4010, 0xffffffffffffffff, 0x10000000) openat$vcsa(0xffffffffffffff9c, 0x0, 0x20000, 0x0) (async) r6 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x20000, 0x0) fadvise64(r0, 0xa, 0x7, 0x0) (async) fadvise64(r0, 0xa, 0x7, 0x0) syz_io_uring_submit(0x0, r5, 0x0) (async) syz_io_uring_submit(0x0, r5, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) (async) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r7 = syz_io_uring_setup(0x497, &(0x7f00000004c0)={0x0, 0x465e, 0x400, 0x3, 0x31d}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r7, 0x40f9, 0x217, 0xa5, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0xb16, 0x1, 0x1}) openat2(r6, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x220040, 0x28, 0x14}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x10, 0x803, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 5m26.682271861s ago: executing program 34 (id=696): syz_open_dev$vbi(0x0, 0x1, 0x2) (async) r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) (async) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f00000005c0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000140), 0x1, &(0x7f00000000c0)=""/43, 0x2e}, 0xfffffffb}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/226, 0xfffffffffffffe2a}, {&(0x7f0000000540)=""/122, 0x7a}, {&(0x7f00000009c0)=""/200, 0xb8}], 0x3, &(0x7f00000006c0)=""/185, 0x10e}, 0xfffffffa}], 0x2, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r4, &(0x7f0000000300)='1\x00', 0x2) sendmmsg$alg(r4, &(0x7f0000006980)=[{0x0, 0x0, &(0x7f0000000980)}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00), 0x0, 0x840}, {0x0, 0x0, &(0x7f0000004100)=[{0x0}, {&(0x7f0000003000)="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", 0xffc}], 0x2, &(0x7f0000004140), 0x0, 0x20004000}, {0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000005300)="5a41fb45c1ddc12e5bed858b2d8877829a069897069bb2d1d1c28d", 0x1b}, {&(0x7f0000005340)="7af88b234a734bf00ec3186927ba7a1f38ade4b31e657860be193ec0aec24838c1b37346e4a407c720949469f20432a26bd17a5add5119e120433e854dd950c38b1aefca662ddffd0ff49c19bc99818a115b6869a35f72219500fc5338e28dc987b138cc6fd6447241fed5257a808dd4ff6e6f463ee822d4301cc610", 0x7c}, {0x0}, {&(0x7f0000005440)="4ed274867a6b484cb55f1480753e6846d6684bfb9ca855c952813f9cb356bf0fe1f865a09c517c0de2ad396b32a3b896d764f9131f875b32252c57738c71908eb8f9f74af55c22b908f01b170a3ec2faf63c277c95ef6b181355b67ad707e45e9e9e7ff433f73a9de75d20832728d06034dfe3246f14f3466d688ac2085804ecd8a1f98976c2ed4151a2f5d841272bf4c38b622c5300000000a8a1f99a8824707f406da90ca7aa", 0xa7}], 0x4, &(0x7f0000000780)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8000}, {0x0, 0x0, &(0x7f00000057c0)=[{&(0x7f0000005600)="c19dd05ca56fe1b562f49e13709a4f41dc8f8bdad3fd09af2e8a75cbfc3bffd8a401e288a6c943a90da7efae700aa445dde21c01f437e70c819109ef928edaa06399daf58438894853cfd374db7f5a515ddf856badd69f688e0320c99e3c4b5c1350ff9fbb24981401201df49095efbd126f0d7f116f6f42814bd64783d32141c0aecbdd02e76e8dd749c3d28616c2f30c2b247768539a85acc13538315f650e4269e1a514fb3946df7248d49317c2e0ba494b6da841f4e1f0f0", 0xba}, {&(0x7f00000056c0)="9f41b888a13c28f2455b00cad9f8e64d2d0d71d862a9d56e0af7caafaefdb3dcb5e8f8a7837e6dad6ce0f8ce27a70491f2094cc1bd0d0797895e2657970db1e1af7300f4f3818d8a2967dcf0b9fa86b684416ccba47f1abd86dec68c6e252a65fb68784357375100d19d55d607d1b6ec2a046f66be5ea725ed672834bbc845c1f5fe2486b7ff6a07219afc79b4432c7a4d599f53a148f38a3af4b55e2c3dc4395a3f46a030540ce6191eeb1ded17a03edca591337b9cfb3c647a6167835fb9a7e655ff9f0ad4ae1c63ec7d252f85427a268cb81925", 0xd5}], 0x2, &(0x7f0000005800)=ANY=[@ANYBLOB="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"/4280], 0x10c8, 0x4010}], 0x5, 0x20000894) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000040)={0x19980330}, 0x0) (async) capset(&(0x7f0000000040)={0x19980330}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x4010, 0xffffffffffffffff, 0x10000000) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x4010, 0xffffffffffffffff, 0x10000000) openat$vcsa(0xffffffffffffff9c, 0x0, 0x20000, 0x0) (async) r6 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x20000, 0x0) fadvise64(r0, 0xa, 0x7, 0x0) (async) fadvise64(r0, 0xa, 0x7, 0x0) syz_io_uring_submit(0x0, r5, 0x0) (async) syz_io_uring_submit(0x0, r5, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) (async) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r7 = syz_io_uring_setup(0x497, &(0x7f00000004c0)={0x0, 0x465e, 0x400, 0x3, 0x31d}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r7, 0x40f9, 0x217, 0xa5, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0xb16, 0x1, 0x1}) openat2(r6, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x220040, 0x28, 0x14}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x10, 0x803, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 4m55.381335471s ago: executing program 6 (id=805): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000800000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffffffff7a0000000000000005000000000000000000000000000000ff7f000000000000080000000000000001000300000000000a00100001"], 0xc4}}, 0x8044) sendto$inet6(r5, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0xfffffff5, @local, 0x9}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(r1, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002abd7000fedbdf251000000005000f0001000000060011001703000008000100", @ANYRESHEX=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4008891}, 0x20008080) 4m54.449576402s ago: executing program 6 (id=809): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb932ec3211eda5a0, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$video(0x0, 0x80000001, 0x8a800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8004}, 0x0) (async) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYBLOB="1ddb31f3eef6081941abf2cb70deffc49b01e73c503025001909f601da0fe502e32707e7410b9708498094cb6fb3e77fff265d9ec6415772641bb57c0f1316a52af4"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x20008050) (async) mount(0x0, 0x0, 0x0, 0x808f53, 0x0) (async) syz_emit_ethernet(0x46, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PPPIOCGFLAGS1(r2, 0x2284, &(0x7f0000000040)) (async) r3 = accept(0xffffffffffffffff, 0x0, 0x0) (async) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000001c0)=0xa0000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) (async) brk(0x101) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f0000000480)={0x0, 0x2, 0x0, 0xffffffff}) (async) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f0000000000)={r3}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 4m53.841323565s ago: executing program 6 (id=813): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xa7, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x1, 0x5, 0x131c92c1523c2dfd, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xca, 0x1, 0x1, 0x68, "317de5", '\b\x00)'}, @as_header={0x7, 0x24, 0x1, 0x2, 0x60, 0x2}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xe, 0x4, 0x9, 0x5, "", "51ff72"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x3, 0x87, 0xf9, "ec"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0x64, 0x0, {0x7, 0x25, 0x1, 0x83, 0x2, 0x25c2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7, 0x2, 0x3, 0x8, "6ac8", "040080"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0x7f, 0x3, {0x7, 0x25, 0x1, 0x0, 0x6, 0x800}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x7, 0xb0, 0x0, 0x8, 0xf}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x80c}}, {0x3d, &(0x7f0000000340)=@string={0x3d, 0x3, "dc58321c285de59ec29ccb697007324017fac2b11f4ff0f01fb05d8f68445267a8da4a1314f6cb860cb6ef9ee2b1c4529be610ec56cad94e353f25"}}, {0x67, &(0x7f0000000380)=ANY=[@ANYBLOB="67031624763b1bd3c5afd2117494585a01396100f0f5ec7b26423523183672e78bd4b8f17c2761993e1b0a1dcb216d84215278456dc1d203e6a53f65301d9ed3be907280f7229b54f1a13e8d92984dd13f39e4a3c45166d83fd45200000080000000005a6a5527"]}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x243f}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1404}}]}) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0xffffffef}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0xe, 0x0, &(0x7f0000000140)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@bridge_dellink={0x20, 0x11, 0x1, 0x0, 0x2}, 0x20}, 0x1, 0x0, 0x0, 0x50005}, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x40) sendfile(r1, r3, 0x0, 0x10ffff) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x5, 0x28, 0xe4d, 0x2, 0x7fb, 0x3861, 0x7, 0x3ff, 0x2, 0xffff, 0x200, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 4m49.238846353s ago: executing program 6 (id=831): r0 = syz_io_uring_setup(0x489, &(0x7f0000000600)={0x0, 0x3f73, 0x400, 0x0, 0x148}, &(0x7f00000005c0)=0x0, &(0x7f0000000240)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000002300)='./file0\x00') stat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000004000)={[{0x0, 0x0, 0xb, 0xf4}]}, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getenv(0x4201, r3, 0x1, &(0x7f00000000c0)) r4 = socket$inet6(0xa, 0x80002, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f00000002c0)='./file1\x00', 0x1000, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x24, 0x0, r4, 0x0, &(0x7f0000002140)='<', 0x1, 0x100}) io_uring_enter(r0, 0x3516, 0xf400, 0x42, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x7a) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="a477cfc4b0"], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000140)=0x4) 4m46.125047739s ago: executing program 6 (id=844): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x40, 0xd, 0x3, "60298c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x300, 0x25dfdbfc, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000, 0x0, 0xffffffff}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TC={0x5, 0x6, 0x7}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "58090e541b64f22a8982d3f5aaacd21a0ca186608b74f1"}]}]}}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="0c0100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000dc00128009000100766c616e00000000cc00028006000100000000001c0003800a000100"], 0x10c}, 0x1, 0xba01}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4m45.584668031s ago: executing program 6 (id=849): syz_usb_connect(0x2, 0x1cb, &(0x7f00000001c0)=ANY=[@ANYRES8, @ANYRESHEX], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) openat$fb0(0xffffffffffffff9c, 0x0, 0x2100c0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x3, 0x6, 0x1b}) ioctl$TIOCMSET(r4, 0x5418, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setgroups(0x24, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r7, 0x1, {}, 0xff}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r7, 0x0, {0x0, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x2400c011) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x1) 4m45.205407782s ago: executing program 35 (id=849): syz_usb_connect(0x2, 0x1cb, &(0x7f00000001c0)=ANY=[@ANYRES8, @ANYRESHEX], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) openat$fb0(0xffffffffffffff9c, 0x0, 0x2100c0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x3, 0x6, 0x1b}) ioctl$TIOCMSET(r4, 0x5418, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setgroups(0x24, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r7, 0x1, {}, 0xff}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r7, 0x0, {0x0, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x2400c011) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x1) 4m2.671525343s ago: executing program 1 (id=1023): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0xfffffffc, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) syz_open_dev$video4linux(0x0, 0x5, 0x101000) (async, rerun: 32) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x9, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0xffffffffffffffdd, &(0x7f0000000080)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x60bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x10, 0x5}, {}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e24}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20080084) (async) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (async) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r8) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r7, 0xc01864b0, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x8000000, 0x3a9e9908}) (async, rerun: 64) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) (async) socket$key(0xf, 0x3, 0x2) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32) mremap(&(0x7f00005a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ac4000/0x4000)=nil) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES8=r9, @ANYRES32=0x0], 0x2c2) 4m0.814680963s ago: executing program 1 (id=1034): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x29) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000400), 0x8) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000540)={0xfffffff7, 0x200401, 0xfffffffd, 0xc6cf, 0x91, "0000080100", 0x240000, 0x1fd}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x8) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(r4, 0x0, 0x0) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0xa400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000200)={'dt2801\x00', [0x9e1, 0x2566, 0xfffffffe, 0x100000, 0x8, 0xfffffffc, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x7, 0x0, 0x8, 0x3, 0x9, 0xe, 0x100, 0x1003, 0x5, 0xa, 0x5, 0x1, 0xb0c4, 0x7df, 0x8, 0x400009, 0x1]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) 4m0.404311519s ago: executing program 1 (id=1036): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c00020006", @ANYRES32, @ANYBLOB='\b'], 0x64}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x6023, 0x0) syz_emit_ethernet(0x288, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000002440)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000100)={0x6, 0x1, 0x1, "446216e924934e178cb394e17e362af7c5cd5e9eb598e00b961feee297d2a061", 0x38414762}) r7 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x6b03, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r5, 0xc000000, &(0x7f00000001c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3m59.86613427s ago: executing program 1 (id=1039): r0 = userfaultfd(0x80001) syz_usb_connect(0x5, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000febcb420fc043102a96f01ed020109022b00010000001009046e0002e76e460009050000f9ffffff000705db224370bf09050b02"], 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x50, r0, 0x4000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000281000/0x3000)=nil, 0x3000}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x38, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0xffffffffffffffc0}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x2}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x440, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f00000003c0)={0x28, 0x4, r7, 0x0, &(0x7f0000000340)="f3f8dd354ee7005f35a458a31b5429fbeef59175bf29162d2aaa1bf6328bade9e49d3701cf6987473af20df3393e87c3be7fb868e510e2a85190304d55ea51d0dbea6dfde60b6f2214c958a33a", 0x4d, 0x3}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48001}, 0x4040010) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xbee) r9 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1061, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5", 0x2}], 0x1, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r9, 0x47f8, 0x0, 0x0, 0x0, 0x0) r12 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) 3m56.139033507s ago: executing program 1 (id=1051): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) (async) socket(0x10, 0x3, 0x0) (async) syz_usb_connect(0x0, 0x3d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000088ee20104f100400c3c60102030109022b000100000000000002b6b33c000905000000000000000705940a0207da0905050200000000000000"], 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) (async) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0) (async) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x22000, 0x80) openat$dir(0xffffffffffffff9c, 0x0, 0xa0000, 0x40) 3m54.796056038s ago: executing program 1 (id=1056): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x42a00, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4002, 0x0) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000040)) getsockopt(r1, 0x110, 0x80000001, 0x0, &(0x7f00000003c0)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, 0x0) 3m39.181626223s ago: executing program 36 (id=1056): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x42a00, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4002, 0x0) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000040)) getsockopt(r1, 0x110, 0x80000001, 0x0, &(0x7f00000003c0)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, 0x0) 2m47.069659819s ago: executing program 7 (id=1261): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x5c, 0x2c, 0xd27, 0x870b528, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x13}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x78, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR="5bb4"]}]}}]}]}]}}]}, 0x78}}, 0x20040054) write$tun(r1, &(0x7f0000000200)={@void, @void, @ipv4=@generic={{0x1f, 0x4, 0x2, 0x5, 0x134, 0x68, 0x0, 0x25, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@rr={0x7, 0x13, 0x2e, [@local, @dev={0xac, 0x14, 0x14, 0x20}, @local, @local]}, @rr={0x7, 0x1f, 0xe1, [@dev={0xac, 0x14, 0x14, 0x3b}, @private=0xa010100, @multicast1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast]}, @timestamp={0x44, 0xc, 0xa7, 0x0, 0x7, [0x0, 0x0]}, @timestamp={0x44, 0x28, 0xff, 0x0, 0x1, [0x80000001, 0x7, 0x7fff, 0x5, 0x9, 0x0, 0x3a7f, 0x79ca, 0x8]}]}}, "b6ce4001ac84e4601d2202624906248fb3ecb3bc03066e3dac84a9ef485221aa365a35c4e4f9ce3cb580868976de7b4cf92a4e7dd99be1839d7da1db04db799789e97f35a4dfe7bfe76657ae6e618aed3de433f91b9af6ca7a8ab34e7ea59d54a4c68d5477cd6137243062c0bdc0a4353c7f375ab6711c200d0da4eeb43d12995673f5a505227c12242f2084e33b7783d17de3f111958739bc31c1a6494b1d832108966dade6987c60578b2d13f1cb77daba7787e973cd04"}}, 0x134) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) 2m45.785291192s ago: executing program 7 (id=1264): r0 = syz_create_resource$binfmt(&(0x7f0000000140)='./mnt\x00') syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x8902, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c4682010703fcffbfffffffffff03003e000500000000010000000000004000000001feffffffffffff00000000000000003e00380003"], 0xe8) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 2m45.658035407s ago: executing program 7 (id=1265): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="009e6cc2d96aa31c1ac8156c63", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) socket$qrtr(0x2a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r5, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r7, &(0x7f0000000180), 0x4000190, 0x0) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) accept$unix(r2, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1800002) 2m43.643154566s ago: executing program 7 (id=1271): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000006, 0x20000000ec071, 0xffffffffffffffff, 0x6b1f1000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2m43.154840851s ago: executing program 7 (id=1274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) unshare(0x6a060000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18f900000000000002000000000800009500000000000000797710d1b251498f4b91933f142bb44904042a6564b85c22d25f8aa8ea5b150000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) r11 = syz_open_dev$dri(&(0x7f0000000900), 0xfc27, 0x141800) ioctl$DRM_IOCTL_GET_UNIQUE(r11, 0xc0106401, &(0x7f0000000a00)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x0, 0x80000000, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x49f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0xff, 0x0, 0x95c}) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x2d) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x458002, 0x0) r13 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r13, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x600, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default]}, 0x40) 2m42.292055888s ago: executing program 7 (id=1277): syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000880)=ANY=[@ANYBLOB="12011001000000106d0415c240100102030109022d00010104600509040002020301001e09210918ac83c1b9f98efd8004012282060905810310000802cf09050203400007667f91cebacc2553d19dd8f50db5e40a14928b29b836c90495f35ea3fb062d3f8e90cd4b8e496312ed400ecfffdbcd1cb99747d15b45bdbdeeb28fd265215fe9d62fd5ba4c3467d0930628a02bf38beb8ecd2187f025464c60a9a8e5fd506f0a3cdfa6ad01ea2a8ef01287a6d0"], &(0x7f00000006c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x1, 0x2, 0xc3, 0x20, 0x2}, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x2, 0x4, 0xfff7}]}, 0xa, [{0x9c, &(0x7f00000001c0)=ANY=[@ANYBLOB="9c03688d740a969e55a348be1dab5a49682eeb198b078eb37273de4cda37425ec293dad8652e49a236a200fdb128eeb7ec793f79dc1e13eb3cd4a69bb8919e7e9936d98c77b35b79b8304dab5265713db54819c63ba4d44350d559c51c636ae82c00141c3453daad28db3afd03d28bb07521e734317e59930e9d7791adcdb9161f857eda1c72fbbbd860fbe5ff09ba3e47082a3d5bb5ae1924376e3b"]}, {0x43, &(0x7f0000000280)=@string={0x43, 0x3, "6eb1a7d22590a4233600b7c42d64852a43100a08836d6459685f13669677230168c2cf6672329fdd78b6f3c30eeddfef3f5e5b789c4eb47104b28159c56e36e0f4"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41b}}, {0xbf, &(0x7f0000000340)=@string={0xbf, 0x3, "25907780018c2d11ae7906c9a1c902d1fee088a3bd408214528d702f9496eb5a6f61a94e9ee95b483adfe72cdf701945a8bda5e915378a6fe8fc134395f993e7af4406bbd6957c47e5c026a52b7a89f1753bf8fed232e5ef641965edbde928d7c57e49b0deb76d057775c5a5260c29b2018d9cb1d00d5314334a79d340b04c80411bb935118a157594b91a8edec2725c7789ad1e5fc8f1c8b32c8f7504708d000d16483c294929513b66154178ec158b6e2f2dc597050945d3ad08048a"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x401}}, {0xe7, &(0x7f00000004c0)=@string={0xe7, 0x3, "3e9f6c2a419e2582bc85ce7a1f2f8a8af422b017a58bd776df9c1c5b7a948bef1b483999b8ba3dfa52f42ffee9aceac7ebb019282297b79cd97d1b64ff1242c1c6f9b0969a4809d401f6a30dd8407916d5ed6aaad6a37864f2e9e4a264c5f2ec42bd368b7d62f0721d90689710b17b04eff4a74508a688a7486beb06fe09bbf057c4fbcec2470e20964266001dff7a6ca8195f30c774b2fdc0a7727291456ba5be67dbc80d27642a7c549e494dcdf1525d64101456e839d2ba38ce4763a2ec481493460e0f1daeddfbead3a7e2b8f65700d3c6dac9531c70803169295e45868f41c3695326"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x8f, &(0x7f0000000600)=@string={0x8f, 0x3, "069b132866c9431a5e80266a11f4e75c4bcc7eb50f1c23dd66dea874945e39653757c3a3997ccb0d10b7013d2bc701b01a9946e7175c4f05db64c65f6c859c0e5c7fa1a2f9cc20d37175f698c1b8135dfa8a8e91df155bc68ab96d5ac25b8bdf107b6ab5491ba2cf4237d7988220b3e7bb122f52a69572b446e4f7b5891f6c85eba46d1172ccde6f2c1e636705"}}]}) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000010100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x10}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x25, 0x7, 0x1, 0x0, "1f5c5166c2b59bb5afa3bd27326d4876838fe813f196a7eea8b7efec00ea9451a7"}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x0, 0x20, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000780)={r3, 0x6}, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) landlock_restrict_self(0xffffffffffffffff, 0x0) getrusage(0x0, 0x0) getrusage(0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x42) socket$nl_netfilter(0x10, 0x3, 0xc) 2m26.758568954s ago: executing program 37 (id=1277): syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000880)=ANY=[@ANYBLOB="12011001000000106d0415c240100102030109022d00010104600509040002020301001e09210918ac83c1b9f98efd8004012282060905810310000802cf09050203400007667f91cebacc2553d19dd8f50db5e40a14928b29b836c90495f35ea3fb062d3f8e90cd4b8e496312ed400ecfffdbcd1cb99747d15b45bdbdeeb28fd265215fe9d62fd5ba4c3467d0930628a02bf38beb8ecd2187f025464c60a9a8e5fd506f0a3cdfa6ad01ea2a8ef01287a6d0"], &(0x7f00000006c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x1, 0x2, 0xc3, 0x20, 0x2}, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x2, 0x4, 0xfff7}]}, 0xa, [{0x9c, &(0x7f00000001c0)=ANY=[@ANYBLOB="9c03688d740a969e55a348be1dab5a49682eeb198b078eb37273de4cda37425ec293dad8652e49a236a200fdb128eeb7ec793f79dc1e13eb3cd4a69bb8919e7e9936d98c77b35b79b8304dab5265713db54819c63ba4d44350d559c51c636ae82c00141c3453daad28db3afd03d28bb07521e734317e59930e9d7791adcdb9161f857eda1c72fbbbd860fbe5ff09ba3e47082a3d5bb5ae1924376e3b"]}, {0x43, &(0x7f0000000280)=@string={0x43, 0x3, "6eb1a7d22590a4233600b7c42d64852a43100a08836d6459685f13669677230168c2cf6672329fdd78b6f3c30eeddfef3f5e5b789c4eb47104b28159c56e36e0f4"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41b}}, {0xbf, &(0x7f0000000340)=@string={0xbf, 0x3, "25907780018c2d11ae7906c9a1c902d1fee088a3bd408214528d702f9496eb5a6f61a94e9ee95b483adfe72cdf701945a8bda5e915378a6fe8fc134395f993e7af4406bbd6957c47e5c026a52b7a89f1753bf8fed232e5ef641965edbde928d7c57e49b0deb76d057775c5a5260c29b2018d9cb1d00d5314334a79d340b04c80411bb935118a157594b91a8edec2725c7789ad1e5fc8f1c8b32c8f7504708d000d16483c294929513b66154178ec158b6e2f2dc597050945d3ad08048a"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x401}}, {0xe7, &(0x7f00000004c0)=@string={0xe7, 0x3, "3e9f6c2a419e2582bc85ce7a1f2f8a8af422b017a58bd776df9c1c5b7a948bef1b483999b8ba3dfa52f42ffee9aceac7ebb019282297b79cd97d1b64ff1242c1c6f9b0969a4809d401f6a30dd8407916d5ed6aaad6a37864f2e9e4a264c5f2ec42bd368b7d62f0721d90689710b17b04eff4a74508a688a7486beb06fe09bbf057c4fbcec2470e20964266001dff7a6ca8195f30c774b2fdc0a7727291456ba5be67dbc80d27642a7c549e494dcdf1525d64101456e839d2ba38ce4763a2ec481493460e0f1daeddfbead3a7e2b8f65700d3c6dac9531c70803169295e45868f41c3695326"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x8f, &(0x7f0000000600)=@string={0x8f, 0x3, "069b132866c9431a5e80266a11f4e75c4bcc7eb50f1c23dd66dea874945e39653757c3a3997ccb0d10b7013d2bc701b01a9946e7175c4f05db64c65f6c859c0e5c7fa1a2f9cc20d37175f698c1b8135dfa8a8e91df155bc68ab96d5ac25b8bdf107b6ab5491ba2cf4237d7988220b3e7bb122f52a69572b446e4f7b5891f6c85eba46d1172ccde6f2c1e636705"}}]}) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000010100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x10}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x25, 0x7, 0x1, 0x0, "1f5c5166c2b59bb5afa3bd27326d4876838fe813f196a7eea8b7efec00ea9451a7"}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x0, 0x20, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000780)={r3, 0x6}, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) landlock_restrict_self(0xffffffffffffffff, 0x0) getrusage(0x0, 0x0) getrusage(0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x42) socket$nl_netfilter(0x10, 0x3, 0xc) 1m34.106899237s ago: executing program 4 (id=1513): r0 = socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x2400c054) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'pimreg0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800b26c470239d912d06ba23c1030f15c9d94"], &(0x7f0000000200)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41100, 0x13, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfdfffffd}, 0x94) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0xb}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000340)={0x80000000, 0x2, 0x0, "640d816f2d7088aecb8c5d2ed7b7728103a87cda8d537858abf95403e26dd96a", 0x50424752}) socket$kcm(0x23, 0x2, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3234, 0x1, 0x0, 0x3dc}, &(0x7f0000000040), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3b2, &(0x7f0000000a00)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8000e3", 0x37c, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, {[@dstopts={0x64, 0x15, '\x00', [@ra={0x5, 0x2, 0xc}, @generic={0x30, 0x78, "cc15c8210c6b6305b126ed972de978250f3025d1bdab9b2c6e449b3501aff08c652f0667fc8f2839acb791db2688c36cc766f5b60fd9d35bef20a9b544eb1563b28dc0c625602396a25a4ebf86bb0bae662c00cf1e2e12a50703b7678c2dfa226408a1a6cbe0c57d0f4136208945cddb9f5a0082a1ebaf0f"}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x10, {0x3, 0x2, 0x6, 0x0, [0x96]}}, @ra]}, @fragment={0x3a, 0x0, 0x6, 0x0, 0x0, 0xa, 0x67}, @routing={0x2c, 0x14, 0x2, 0x2, 0x0, [@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @empty, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @dev={0xfe, 0x80, '\x00', 0xe}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback]}, @routing={0x38, 0xa, 0x3, 0x7, 0x0, [@private2, @private1, @loopback, @mcast1, @private2]}, @dstopts={0x87, 0x2e, '\x00', [@generic={0x7, 0x58, "9ffc128a7ea8cf1823724753e8aa9ab74c911c3bcd52badbeb5a993d95653ac46c7bd9f343fcb24b3da154111e64da54dab4ec001dc0e00c34fe99e43d2a300eb26882d1203e47fd2affc9efea65b179eb5375bab9ef1503"}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x30, {0x2, 0xa, 0x3, 0x0, [0x9, 0x7, 0x2, 0x4, 0x4]}}, @generic={0xf, 0xc8, "37bc009c9c476d64d777eeae1b6810bc3525dbd6c2821dd5a40d0459f4a9b9779871229861e566a0c9ee1b67921e89f7ea301433ce70790502d77dcf2e7284a0aa38e9dcbbd53e8e8411365113c92d50a9c24652361496de74d93d6bcac237b0372dc2dd63937d9beab4d964dd929347eee92c00079baac83182c4ddb9677139ab59ad09720008045977e489cc155f1194f490de1ce915789236158fb35bc53711c46d69a838a24bf45dd877885546abf517f760f3c4913c2c87c3ab14d4a1e5948df2e4c478e1b3"}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}]}, @hopopts={0x2f, 0x4, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @private2}]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x2}}}}}}}, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000000)='/d\n\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) getpeername$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000400)=0x1c) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x6f, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa4dd9dcf1235a2f2a5fa807ad3ff6aa000800450000610000000000b8506f260000000000000000000001004d907842090000800000009cc18437269182954156db8db1d7016fa662d8c2ac0cdacd59074a6b7fad6491599eab1b79e8fb43bc17ab75a4cfd8d760c853d36f9603ff2600000000"], 0x0) socket(0x200000000000011, 0x2, 0x0) syz_emit_ethernet(0xda, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000cc000000000001907864010100ac1414aa0b009078032c00004c000000000000000089000000000000ac1414aa862f0000000000125e000000ff000000b9371c2f8200000005054eb8a600129606053d0006ff00800000b61af93a93831300ac141400ffffffff7f000001e000000286430000000000074b6cefc500000cdf61168c24ac88ad078c000a2189ea43a2149b84000bf7d11634eea26b75af000802a20948fd74000dccf0294e2a3bdb4aa40b24441456000000000000000000000000000000000000000033c7ae016cd5ea1da376314e435b1784b107bf2540770aa4df6b9b99c7222906c262912aad5c42b6630d6357e4d03435d2bde5fdb0682b75c9914e7cf7875b353f6694fc204c7b12a473280ec6d847d26425089b04b528"], 0x0) 1m32.888192067s ago: executing program 4 (id=1517): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x2, 0x6, 0x5, 0x0, 0x0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd9d, &(0x7f0000000300)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="09000100626f6e640000000014000280080007f64651d5d618bcb080e0000001"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 1m32.764268354s ago: executing program 4 (id=1518): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) getpid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r2, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f0000000380)=@base={0x1e, 0xffffffff, 0x4, 0xfffffc75, 0x0, 0xffffffffffffffff, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 1m31.752424383s ago: executing program 4 (id=1528): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x1000, 0x4, 0x10000000, 0xc}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x32) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) r6 = syz_open_procfs(0x0, 0x0) connect$pppl2tp(r6, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x37, 0x0, &(0x7f0000000340)="8c0657f71fa5e7a15c00dd0a9a9cd27d18023b7bed1ca53460fd6d557df0e576d57302c520b4b7aa0c5b731fd74572337f5eec475bedaf"}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bind$rose(r1, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x4, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e24, @remote}}, 0xffb, 0x5, 0x3, 0xfffffff9, 0x92, 0x7}, &(0x7f0000000200)=0x9c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000480)=@assoc_value={r7, 0x7bd5}, 0x8) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001a00100026bd7000fddbdf250000000074b00b2128836564537343f379f1b122d8f47d1eb008b054b57a85668f2bcbb82af43582a3487e1ee69be07494b45bf6d3723e2672d1b7935ce4c58d025a866cb1404b417d5d62e4f21021c9e55b0f84f91ed2d2eae4059559ce3a11c0d6358f3267dcf937d5ca3904ba04f08e44fab8c21d271a31fe26bc48b343"], 0x14}}, 0x0) 1m31.066960713s ago: executing program 4 (id=1530): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004010c}, 0x20040000) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, 0x0) (async) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$inet(r1, &(0x7f00000000c0)="b560285adf29e017b38d", 0xa, 0x400, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x76, 0x0, 0x0) connect$rose(0xffffffffffffffff, &(0x7f0000000440)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x5, [@bcast, @bcast, @default, @default, @null, @default]}, 0x40) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x4000, 0x6000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9fae702d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b9f802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963cd14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb193213f4bccab1c34c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f0d9ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d579531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a785d820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37dfd149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f2729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab21842da1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336343f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) (rerun: 32) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m30.899071351s ago: executing program 4 (id=1533): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendfile(r2, r0, &(0x7f0000002080)=0x9c, 0x23b) 1m15.711600031s ago: executing program 38 (id=1533): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendfile(r2, r0, &(0x7f0000002080)=0x9c, 0x23b) 14.282453974s ago: executing program 2 (id=1786): openat$kvm(0x0, &(0x7f0000000040), 0x14d300, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000000c0)=0x10001) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001040), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000318000/0x2000)=nil, 0x2000, 0x1000006, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x21) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42c2, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000440)={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r8, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="2002000000001610"], 0x0, 0x0, 0x0, 0x0}) 11.927071534s ago: executing program 0 (id=1793): r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x800000000008b}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0x5, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x2, 0x0, 0x0, 0x7ff80002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x100800000000f7) keyctl$revoke(0x3, r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x40084) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x80000000e) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x400000002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'caif0\x00', 0x1}) socket(0x400000000010, 0x3, 0x0) 10.755103393s ago: executing program 0 (id=1799): socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xb144, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_open_dev$sg(&(0x7f00000000c0), 0x80, 0xa81) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) pipe2(&(0x7f0000000000), 0x4000) (async) gettid() ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 10.118806599s ago: executing program 0 (id=1800): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="000c1c"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000500)={0x24, &(0x7f0000002140)=ANY=[@ANYBLOB="02020c"], 0x0, 0x0, 0x0}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) syz_pidfd_open(0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008011}, 0x4040004) recvmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f00000000c0)=""/20, 0x14}, {&(0x7f0000002180)=""/155}], 0x1}, 0xfff}], 0x35, 0x2021, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 9.883047399s ago: executing program 8 (id=1801): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x10, 0x12, 0x2, 0x4, {0x2, 0xcecc, 0x7, 0x5c, 0xe9, 0x7}}}}]}, 0x78}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000d80)="ebe3a0e9796cfd1647e299f4084bfdba128280b372219d205e81f4a7f71c1926aae1efd7e0053912f398af3f2af0d02078e9e4f0cbb02b2c7998877013e60ebb01918fd5a528f3630509b366a1f81607477f4ce761a0ee29a70239bfba8b3b3cf3b890802c9793e8f99d5192a435f71c15a8998c75d2ead637575442c5e5f38bef1c137dc4ef1fd6d916c9256d27c27324128f78307078a28a99f1e92554f262c41f1112f48ada8f3b3b0d070000049e99683290ab5aa9982b6c18fd5ec56bf43bcbc097a99f05e664e722998ddb32ff0f5ccd3bf6a6d23fd3c88458c0bc0df139d5421a894a78f883a403", 0xeb}], 0x1, 0x0, 0x0, 0x4040044}], 0x1, 0x4000) recvmsg(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000ac0)=""/76, 0x4c}], 0x1}, 0x10041) 9.216870666s ago: executing program 2 (id=1802): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000500), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$sequencer(0xffffffffffffff9c, 0x0, 0x400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x7, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) userfaultfd(0x801) (async) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r5 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r5, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) (async) sendto$inet(r5, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) pipe2(&(0x7f0000000100), 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r5, 0x0, r6, 0x0, 0x7ffff000, 0x0) (async) splice(r5, 0x0, r6, 0x0, 0x7ffff000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="000088b5ffffffffffffaaaaaaaaaaaa08004500001c0000e000002f907800001feeae1414aaa0a2"], 0x2e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 8.892209102s ago: executing program 8 (id=1804): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r0, &(0x7f0000005ac0)=[{{&(0x7f00000003c0)=@tipc=@id, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000840)=""/204, 0xcc}, {&(0x7f0000000940)=""/164, 0xa4}, {&(0x7f0000000a00)=""/165, 0xa5}, {&(0x7f0000000ac0)=""/179, 0xb3}, {&(0x7f00000005c0)=""/103, 0x67}], 0x5, &(0x7f0000000740)=""/128, 0x80}, 0x7}, {{&(0x7f0000001840)=@generic, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000004000)=""/156, 0x9c}, 0x8000}, {{&(0x7f0000001b00)=@isdn, 0x80, &(0x7f0000004680)=[{&(0x7f0000000c00)=""/157, 0x9d}, {&(0x7f00000018c0)=""/169, 0xa9}, {&(0x7f0000003e00)=""/238, 0xee}, {&(0x7f0000002d00)=""/229, 0xe5}, {&(0x7f0000006d00)=""/4112, 0x1010}, {&(0x7f0000002e00)=""/4095, 0xfff}, {&(0x7f00000044c0)=""/158, 0x9e}, {&(0x7f0000004580)=""/191, 0xbf}, {&(0x7f00000040c0)=""/91, 0x5b}, {&(0x7f0000004140)=""/22, 0x16}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000640)=""/57, 0x39}, {&(0x7f0000001a40)=""/59, 0x3b}, {&(0x7f0000004780)=""/211, 0xd3}], 0xe, &(0x7f0000004240)=""/84, 0x54}, 0xb4b2}, {{&(0x7f00000042c0)=@ieee802154, 0x80, &(0x7f0000005800)=[{&(0x7f0000004340)=""/126, 0x7e}, {&(0x7f0000005cc0)=""/4100, 0x1004}, {&(0x7f0000000cc0)=""/168, 0xa8}, {&(0x7f00000043c0)=""/233, 0xe9}, {&(0x7f0000005580)=""/191, 0xbf}, {&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000003f00)=""/241, 0xf1}, {&(0x7f0000000340)=""/25, 0x19}], 0x8}, 0x400}, {{0x0, 0x0, &(0x7f0000005a00)=[{&(0x7f0000005880)=""/238, 0xee}, {&(0x7f0000000500)=""/87, 0x57}], 0x2, &(0x7f0000005a40)=""/120, 0x78}, 0x3}], 0x5, 0x40013141, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000002bc0), 0xfffffffffffffffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x3, 0x4, 0x40, 0x0, {}, {0x4, 0x0, 0x0, 0x0, 0x3}, 0xfffffff9, 0x1, {0x0}}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000380)='io.pressure\x00', 0x2, 0x0) close(r4) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff4f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='i2c_read\x00', r7}, 0x18) r8 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_RDWR(r8, 0x707, &(0x7f00000004c0)={&(0x7f0000000480)=[{0xfffc, 0x8011, 0x0, 0x0}, {0x100, 0x1000, 0x0, 0x0}], 0x2}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x82, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x2) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 8.278862062s ago: executing program 2 (id=1806): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) (async) syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x101580) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0}, 0x3000c085) syz_io_uring_setup(0xf04, &(0x7f0000000180)={0x0, 0x2138, 0x200, 0xfffffffa, 0x24000}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) (async) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000400)) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) (async) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) write(r2, &(0x7f0000000040)="240000001e005f0214ffff0600fffff8070000000000000000000100080003000b000000", 0x24) (async) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000440)={{0x3, 0x1, 0x8000, 0x2, 0x585}, 0x6, 0x1, 'id0\x00', 'timer1\x00', 0x0, 0x7, 0x9, 0xd, 0xe}) 8.003040786s ago: executing program 8 (id=1807): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000240)=@other={'trylock', ' ', 'mem'}, 0xc) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) socket$kcm(0xa, 0x2, 0x3a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0xffffffff, r7}) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000440)={0x6, 0xfffffffc, 0x10}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc000) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 7.639602889s ago: executing program 0 (id=1808): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x1ff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0x8a010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)}, 0x0) ptrace$peek(0x1, r2, &(0x7f00000000c0)) syz_open_procfs(0x0, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 7.543080322s ago: executing program 2 (id=1809): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x1ff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0x8a010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)}, 0x0) ptrace$peek(0x1, r2, &(0x7f00000000c0)) syz_open_procfs(0x0, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 5.772962246s ago: executing program 0 (id=1811): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001c7a67d40b1134200ec000102030109021b00013600000009049a009209"], 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 5.76354278s ago: executing program 2 (id=1812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$fb0(0xffffffffffffff9c, 0x0, 0x101, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000001440)=ANY=[], 0xffffff6a) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000"], 0x48) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x44003) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0x2000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r6, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRESDEC=r4], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) 4.929499815s ago: executing program 3 (id=1815): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x5c, 0x2c, 0xd27, 0x870b528, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x13}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x78, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR="5bb4"]}]}}]}]}]}}]}, 0x78}}, 0x20040054) write$tun(r1, &(0x7f0000000200)={@void, @void, @ipv4=@generic={{0x20, 0x4, 0x2, 0x5, 0x133, 0x68, 0x0, 0x25, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@rr={0x7, 0x13, 0x2e, [@local, @dev={0xac, 0x14, 0x14, 0x20}, @local, @local]}, @rr={0x7, 0x23, 0xe1, [@dev={0xac, 0x14, 0x14, 0x3b}, @remote, @private=0xa010100, @multicast1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast]}, @timestamp={0x44, 0xc, 0xa7, 0x0, 0x7, [0x0, 0x0]}, @timestamp={0x44, 0x28, 0xff, 0x0, 0x1, [0x80000001, 0x7, 0x7fff, 0x5, 0x9, 0x0, 0x3a7f, 0x79ca, 0x8]}]}}, "b6ce4001ac84e4601d2202624906248fb3ecb3bc03066e3dac84a9ef485221aa365a35c4e4f9ce3cb580868976de7b4cf92a4e7dd99be1839d7da1db04db799789e97f35a4dfe7bfe76657ae6e618aed3de433f91b9af6ca7a8ab34e7ea59d54a4c68d5477cd6137243062c0bdc0a4353c7f375ab6711c200d0da4eeb43d12995673f5a505227c12242f2084e33b7783d17de3f111958739bc31c1a6494b1d832108966dade6987c60578b2d13f1cb77daba77"}}, 0x133) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) 4.580831426s ago: executing program 8 (id=1818): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x20008}}, 0x20}}, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setfsgid(0x0) r2 = memfd_create(&(0x7f0000000480)='y\x105\x14\xf8u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\x15]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xb4\x95\xd1\xc8s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV\x06\xee\x91\'\xae\x9c\x06\xb2\xd4\xfa,\xc0\xca\xd90$\xd7\xfe\xae\xddf?$\xb1\xeeE\b\xbc\xd1[\xd5tO`Z\x15 1\v\xa6\xd0[K!+>,FE\x10\t\xbb\x90Jj\xb8{', 0x2) ftruncate(r2, 0x400ffff) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000000}) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r2, 0x1, 0x1000, 0x1000000}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x169201, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) 4.154434248s ago: executing program 9 (id=1820): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc, 0x40000000}, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) openat$kvm(0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16]) (async, rerun: 64) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0) (async, rerun: 64) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) (rerun: 64) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) sendmmsg$inet6(r1, 0x0, 0x0, 0x80) syz_emit_ethernet(0x6f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd601275546529000800393a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0200907800000000605b29ab00001100fc01000000000000000000000000000000000000000000000000000000000000fb36eeca6f"], 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) (async, rerun: 32) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000040)=0x78, 0x4) (async, rerun: 32) sendmmsg$inet6(r3, &(0x7f0000000c40)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x9, @remote, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="24000000000000002900000032000000ff"], 0x28}}], 0x1, 0x0) (async) syz_pidfd_open(0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000080)={0x8000, 0x0, 0x0, 0x1, 0x0, "000100"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x1) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x80984120, &(0x7f0000000280)) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) 3.931203429s ago: executing program 8 (id=1821): socket$inet_sctp(0x2, 0x5, 0x84) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x48080, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x4, 0x0, 0x9, 0x1, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x1) r5 = syz_pidfd_open(r2, 0x0) setns(r5, 0x24020000) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) waitid(0x1, r7, 0x0, 0x40000000, &(0x7f0000000080)) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x1) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a02, 0x0) ioctl$BLKFRAGET(r8, 0x1265, &(0x7f0000000040)) 3.917189288s ago: executing program 9 (id=1822): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x48, 0x2c, 0xd27, 0x870b528, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x13}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x20040054) write$tun(r1, &(0x7f0000000200)={@void, @void, @ipv4=@generic={{0x17, 0x4, 0x2, 0x5, 0x114, 0x68, 0x0, 0x25, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@rr={0x7, 0x13, 0x2e, [@local, @dev={0xac, 0x14, 0x14, 0x20}, @local, @local]}, @rr={0x7, 0x3, 0xe1}, @timestamp={0x44, 0x8, 0xa7, 0x0, 0x7, [0x0]}, @timestamp={0x44, 0x28, 0xff, 0x0, 0x1, [0x80000001, 0x7, 0x7fff, 0x5, 0x9, 0x0, 0x3a7f, 0x79ca, 0x8]}]}}, "b6ce4001ac84e4601d2202624906248fb3ecb3bc03066e3dac84a9ef485221aa365a35c4e4f9ce3cb580868976de7b4cf92a4e7dd99be1839d7da1db04db799789e97f35a4dfe7bfe76657ae6e618aed3de433f91b9af6ca7a8ab34e7ea59d54a4c68d5477cd6137243062c0bdc0a4353c7f375ab6711c200d0da4eeb43d12995673f5a505227c12242f2084e33b7783d17de3f111958739bc31c1a6494b1d832108966dade6987c60578b2d13f1cb77daba7787e973cd04"}}, 0x114) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) 3.610831719s ago: executing program 8 (id=1823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x1008c66) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x4480, 0x0) r7 = syz_pidfd_open(r6, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0xa, 0x147b42) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r9}) r10 = openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000000000000000040"]) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r9, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) close_range(r7, 0xffffffffffffffff, 0x0) r13 = eventfd2(0x5, 0x800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000010c0)={0x6, 0x1, 0x0, r13}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffffc, 0x0, 0x1, r2, 0x8}) syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000180)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x4}, @broadcast, @broadcast, @from_mac=@device_b, {0x6, 0x8}, "", @value={0x1, 0x0, 0x1, 0x1, 0xb5}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x1, 0x0, 0x1, 0x1}}, @a_msdu}, 0x1e) 3.539226964s ago: executing program 9 (id=1824): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0xfdef, 0x0, 0x0) userfaultfd(0x801) request_key(&(0x7f00000000c0)='cifs.spnego\x00', 0x0, &(0x7f00000004c0)='msdos\x00', 0xfffffffffffffffa) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0x3a0af83a) shutdown(r3, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee4aa1f0a834619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca5b00e8aa4ea5f442f18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a1acfb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae33db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9ee8a0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655a981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8ffffefb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea555055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbeebd2efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a5ab207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f99849dc2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0xf800000000000001, 0x2, 0xfffffffffffffffe, 0x0, 0x1, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x55e867cb, 0x6000, 0x0, 0x0, r4, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000004f40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000500)="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", 0x2000, &(0x7f0000004180)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x16, 0x2, 0x6, 0x5, 0xfffffffc, 0x10, 0x0, 0x0, 0x80, 0x7fff}}, &(0x7f0000000240)={0x18, 0x0, 0x4, {0x800}}, &(0x7f0000000300)={0x18, 0x0, 0x3}, &(0x7f0000000340)={0x18, 0x0, 0x3, {0x6}}, &(0x7f0000000380)={0x18, 0xfffffffffffffff5, 0x5, {0xff}}, &(0x7f00000003c0)={0x28, 0x0, 0x9, {{0x6, 0x3, 0x1, r0}}}, &(0x7f0000000400)={0x60, 0xfffffffffffffffe, 0x7fffffffffffffff, {{0x3, 0x4, 0x7, 0x59, 0xfffffffffffffff7, 0x8bf, 0x400, 0xb9a1}}}, &(0x7f0000000480)={0x18, 0xfffffffffffffff5, 0x2, {0x800}}, &(0x7f0000002500)=ANY=[@ANYBLOB="13000090eedd47367f52eb0001000000402200"], &(0x7f0000002540)={0x20, 0x0, 0x5, {0x0, 0xc}}, &(0x7f0000002580)={0x78, 0x0, 0x200, {0x8, 0x81, 0x0, {0x4, 0x40a, 0x6, 0x7fff, 0x1ea800, 0x6, 0xfffffffd, 0x8, 0x1ff, 0xc000, 0x3, 0x0, 0x0, 0x4, 0x5}}}, &(0x7f0000002640)={0x90, 0x0, 0x6, {0x2, 0x1, 0xa, 0x80000001, 0x47, 0x5, {0x4, 0x54, 0x0, 0x800, 0x86c, 0x9, 0x800, 0x9, 0x3, 0xc000, 0xffffff73, 0x0, 0x0, 0x1, 0x4274}}}, &(0x7f0000002700)=ANY=[@ANYBLOB="b0000000000000000004000000000000000000000000008385120000000000000a00000000010000265d5ebf2f23c62e40240000000000000100000000000000ff070000000000000600000500f7ffff6d73646f730000000000000000000000030000000000000004000000030000002e243a2800000000020000e5ffffff00070000000000000003000000ffffff7f2d40270000006d000100000066179881ad250000000003000000000000000000"], &(0x7f0000004980)=ANY=[@ANYBLOB="d8030000000000000300000000000000040000000000000002000000000000000600000000000000090000000000000025000000030000000000000000000000050000000000000036000000000000000700000000000000060000000000000008000000000000000200000007000000000100000060000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0180000007000000000000000600000000000000ed0000000000000003000000004000007be23a00000000000200000000000000030000000000000001000000000000008d0500000000000009000000060000000000000000000000090000000000000000080000000000000800000000000000010000000000000004000000000000000200000000000000008000000040000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0f0000005e0000000000000000000000000000000180000000000000050000000000000040215b215d000000020000000000000002000000000000000100000000000000d20900000000000079000000030000000500000000000000ffffffffffffff7f0100000000000000ff0100000000000007000000000000000f00000000000000b2ffffff02000000070000000060000006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="9900000004000000000000000500000000000400040000000000020002000000a2470000232decffffff00000300000006400000020000000000000003000000000000000700000000000000000c0000030000000400000000000000bf00000000000000050000000000000004000000000000000400e83fa500000000000003000000000000000000008080000000010000000080000009", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00006000ea390000000000000000000000000000291e00000000000006000000090000006d73646f73000000a600000000000000030000000000000004000000000000000100000000000000018000000200000003000000000000005e280000000000002e000000000000007f000000000000000700000000000000a14800000000000060000000c50000000800000000a0000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="050000000300000000000000050000000000000004000000000000000a000000000000002f6465762f6375736500000000000000030000000000000000000000000000003ede00000000000069040000000000000200000006000000030000000000000000000100000000000800000000000000060000000000000009640000000000000180000000000000f3d200000600000068dc0000006000007a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="05000000ff070000000000000600000000000000090000000000000001000000000000008c00000000000000"], &(0x7f0000004e40)={0xa0, 0x0, 0x12, {{0x1, 0x3, 0x8, 0x2, 0x1, 0x74b, {0x1, 0x5, 0xfbc, 0x7, 0x7, 0x8000000000000000, 0x2, 0x4, 0x5, 0x0, 0xfffffff8, 0x0, r4, 0x6, 0xe}}, {0x0, 0x6}}}, &(0x7f0000004f00)={0x20, 0xffffffffffffffda, 0xfffffffffffffff7, {0x5, 0x0, 0x5}}, &(0x7f0000006f80)={0x130, 0xfffffffffffffffe, 0x6, {0x0, 0xffffffff, 0x0, '\x00', {0x400, 0x5, 0x6, 0x4193, 0x0, r5, 0x6000, '\x00', 0x2, 0x8, 0x7, 0x700, {0x5, 0x8}, {0xce, 0x7fff}, {0x9, 0x200}, {0x7fffffffffffffff, 0xd}, 0x1, 0x0, 0x8, 0x8}}}}) listen(r3, 0x1e) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x200000000000008, 0xbe, 0x80, 0x2, 0xffffffffffffffff, 0x100, 0x8000010001000}, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 3.360697549s ago: executing program 3 (id=1825): r0 = socket$unix(0x1, 0x5, 0x0) syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0, 0x0, 0x0, 0x80800, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x13}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) getpid() 1.746828721s ago: executing program 3 (id=1826): times(&(0x7f0000000000)) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x1000, 0x9, &(0x7f0000000080)=""/135}) times(&(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000540)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000280)=""/231, 0xe7}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/106, 0x6a}], 0x3, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}, 0x1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000580), &(0x7f00000005c0)=0x14) times(&(0x7f0000000600)) recvmmsg(r4, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)=""/54, 0x36}, {&(0x7f0000000680)=""/144, 0x90}], 0x2, &(0x7f0000000780)=""/175, 0xaf}, 0x401}, {{&(0x7f0000000840), 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)=""/104, 0x68}, {&(0x7f0000000940)=""/16, 0x10}], 0x2, &(0x7f00000009c0)=""/221, 0xdd}, 0x7}, {{&(0x7f0000000ac0)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000b40)=""/3, 0x3}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/136, 0x88}, {&(0x7f0000001c40)=""/122, 0x7a}], 0x4, &(0x7f0000001d00)=""/223, 0xdf}, 0x101}, {{&(0x7f0000001e00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000003040)=[{&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/155, 0x9b}, {&(0x7f0000002f40)=""/225, 0xe1}], 0x3}, 0xd}, {{&(0x7f0000003080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000004100)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}, 0x6}], 0x5, 0x40000000, 0x0) r12 = syz_open_dev$MSR(&(0x7f0000004280), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r12, 0xc02063a0, &(0x7f00000042c0)=[0x4, 0x0, 0xd9, 0x0, 0x3, 0x7fff, 0x6, 0x42b]) r13 = fcntl$dupfd(r12, 0x0, r8) setresgid(r3, r9, r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000004380)={'erspan0\x00', &(0x7f0000004300)={'syztnl2\x00', r11, 0x40, 0x40, 0x10000, 0x40, {{0x13, 0x4, 0x0, 0xc, 0x4c, 0x65, 0x0, 0x6, 0x2f, 0x0, @empty, @private=0xa010101, {[@end, @timestamp_prespec={0x44, 0x24, 0xcc, 0x3, 0xa, [{@empty, 0x7fff}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9b}, {@private=0xa010101, 0x6}]}, @lsrr={0x83, 0x7, 0x12, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0xcb, 0x3, 0x6, [{@remote, 0x2}]}]}}}}}) sendmsg$nl_route(r8, &(0x7f0000004540)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004500)={&(0x7f0000004400)=@bridge_getneigh={0xe0, 0x1e, 0x4, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, r14, 0x800, 0x1000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x4}, @IFLA_PHYS_SWITCH_ID={0x1e, 0x24, "c47154c690403223081b4bf35e9e14476426e91e97bb2d3cc070"}, @IFLA_VF_PORTS={0x88, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2e69d89721bf613f31a229099b66b994"}, @IFLA_PORT_PROFILE={0xb, 0x2, '-+*\xab&]\x00'}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, '${\\\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xa}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xd2}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2e1d70d6a335823462a4bd7898d80851"}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, '\x80}[.(\'I\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f64c992f36bcf20a03c63143b06e8478"}]}]}, @IFLA_GROUP={0x8, 0x1b, 0xf}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x41c3c}]}, 0xe0}, 0x1, 0x0, 0x0, 0x44800}, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000047c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000004780)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000004800)={0x13, 0x10, 0xfa00, {&(0x7f0000004580), r15, 0x2}}, 0x18) times(&(0x7f0000004840)) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000004880), &(0x7f00000048c0), 0x2, 0x3) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000004900)={0x0, @pix_mp={0xa, 0x7ce0, 0x32314142, 0x7, 0x0, [{0x7, 0x200}, {0xeed, 0xfffffffe}, {0x7, 0x7}, {0x5, 0xfffffffa}, {0x5, 0x3}, {0x0, 0x7}, {0x3e1, 0x80000001}, {0x3, 0x200}], 0x4, 0x7, 0x3, 0x2, 0x6}}) r16 = gettid() r17 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r17, &(0x7f0000004a00)="64d1e9b2719db242d393dd41bc44cb8132b4021aea07f923edc3bef82cefc669d2b034ecbdf8951cfa45852b91bf303199d26edc98feccd887398830c6b8c23e8716d3fc8eb74faa5a6e64a799474057ac7359c85f34a82ea1010cb232ee9691387da9da17ee8fb9dd1b8f844f1ef735d5c56d176add", 0x76, 0x24000011, &(0x7f0000004a80)={0xa, 0x4e24, 0x4, @remote, 0x6}, 0x1c) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000004ac0)={0x0, r7, 0x3, 0x3, 0x10000, 0x6}) ptrace$peeksig(0x4209, r16, &(0x7f0000004b00)={0x1, 0x0, 0x1}, &(0x7f0000004b40)=[{}]) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000004bc0), 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f0000004c40)=0x0) sendto(r10, &(0x7f0000004c00)="7178adf35b390153512fa84c7393eb2d9edbdcd7f98bf0e875a41327", 0x1c, 0x20000004, &(0x7f0000004c80)=@nfc_llcp={0x27, r18, 0xffffffffffffffff, 0x4, 0x1, 0x2, "0a9f2b3317bbe0e63d75977af5dfb61ebb78cf4d67ceb3473a741c1d64dd1fb73b307477351d8fdc3b1b2b768acb8fe52f076d2dec0ab53f06856b2870ecea", 0x1c}, 0x80) socket$netlink(0x10, 0x3, 0x4) gettid() 1.72361365s ago: executing program 2 (id=1827): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0xc6, 0x1e, 0x40, 0x7c9, 0x12, 0xc2f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcb, 0x8e, 0x2f}}]}}]}}, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './cgroup\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000940)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={0x0}}, 0x40080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0xc0, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0x9, 0xffff}, {0x2, 0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xf, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4], 0x0, [0x8, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfffe, 0x3], [0x0, 0x8]}}]}}, @TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x2, "50dcc843149aafbf97145189da7719b6"}}}]}, 0xc0}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000000206010800000000000000000000fffd14000780080011408856ddb1050500010006000000050005fb09001cd205000400000000000900020073797a30000000000c000300686173683a697000845b30429e02000eafcd67db4064a8d3fa3ae6fab24f4bcc3e83e7f6116a7883b2df5a20f446e97173291fe21a4d862ff7d59242b2bdd4524d05a8b1569e631c849a37c1131667dabb8d61d3bf1fbd"], 0x58}}, 0x80) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000380)=@random="c12fd58c", 0x4, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x2, 0xffffffffffffffff, 0x7ff}) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r8 = syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x14b200) read(r8, 0x0, 0x2) write$char_usb(r8, &(0x7f0000000440)="e20576d8305eda80a9a9bc8f7df2814c2e4967df78c53a907621bc02008c18e67bc5dea3bd5901f34e69b6b31e23c21dbd72fb9cd903c07eb7fb38dabd6ad4ab9c7fcc8b7da9ba1e0000000100000003818a2d3a26", 0x55) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 1.721802479s ago: executing program 9 (id=1828): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r1 = syz_io_uring_setup(0x9c, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40000333}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)="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", 0x12f) r6 = syz_usb_connect(0x0, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def010203010902400001020000000904"], 0x0) (async) r7 = syz_open_dev$video(&(0x7f0000000100), 0x1, 0x82) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000580)={0x4, @win={{0x9, 0xd0f, 0x1, 0x429a6f5a}, 0x4, 0x2, &(0x7f0000000340)={{0x6, 0xec, 0x10000}, &(0x7f0000000300)={{0x8001, 0x2, 0x0, 0x80}, &(0x7f0000000140)={{0x700000, 0x8, 0x7, 0x8001}}}}, 0x0, &(0x7f0000000780)="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", 0x8}}) (async) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, &(0x7f0000000000)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x6, @string={0x6, 0x3, "14cf8720"}}, 0x0, 0x0, 0x0}, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, 0x0, 0x0) 1.571106603s ago: executing program 0 (id=1829): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b00)) r1 = dup(r0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r1}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x208) r3 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x1, @time}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180), 0x8) r5 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101290000090509"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 1.464512543s ago: executing program 3 (id=1830): sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x8d, 0x10, 0x66, 0x3, 0xffff, 0xfffffffffffffffd, 0x1, 0x2}, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x2, 0x2}, &(0x7f0000000280)) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000440)={'veth0_virt_wifi\x00', @local}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) (async) getrlimit(0x8, &(0x7f0000000180)) r1 = syz_open_dev$media(0x0, 0x10001, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) (async) r2 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x4, 0xc, 0x4, 0x5, 0x6, 0xa9, 0x3, 0xb2, 0x1}) (async) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x34, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4040010) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) (async) socket$phonet(0x23, 0x2, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaa072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a3ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a98838156ff00000000000000cdbf91f7582ab314be3e67b8c9459564c856339a80919ecf839560c62e69df8667b274cc53f83f2086cfd2664252471fad9081824d60741d663ee258705c364e162b84a09870acd0a19399103474444f4fa12dcbd10b40195b6088513029b60a34e4161fe48c092693eb07dc8ddcba2eac2efe30b285a877c862c73ff8a60cf73f1b17da0000000000005664181c1f28cd2880e6872bae932eaf4b0000000000007b662c0fe22cfd6d4bd7b851ae928cebeec6375b16af342e93c39d97e5d74d5a8e96c15fdcde7526b0af54b145e61b042c1e600390590a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) (async) syz_open_dev$usbfs(0x0, 0x76, 0x101301) (async) pselect6(0x40, &(0x7f00000001c0)={0x300, 0xff, 0xfffffffffffff0af, 0xffffffffffffffff, 0x0, 0x10000, 0x103, 0x3}, 0x0, &(0x7f00000002c0)={0x3fe, 0x8000000005, 0x3, 0x7, 0x9, 0x45ff, 0xd68d, 0x40000000000}, 0x0, 0x0) 1.253754753s ago: executing program 3 (id=1831): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/uevent_helper', 0x149882, 0x60) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) prlimit64(0x0, 0x1, 0x0, &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x3}}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xb470}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r6 = dup(0xffffffffffffffff) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x3, @val=@tcx={@void, @value=r2}}, 0x1c) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r7 = socket(0x26, 0x5, 0x27bf) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00'}) 747.044112ms ago: executing program 9 (id=1832): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1061, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5", 0x2}], 0x1, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f00000004c0)={0x0, 0x13, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0xf0, 0x6}, 0xff}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000000000018000000180000000200000000000000000000030000000002000000ffffffff000000000000"], 0x0, 0x32, 0x0, 0x0, 0x3ff}, 0x28) syz_open_dev$dri(0x0, 0x5, 0x200000) r6 = accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(0x0, r7) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 659.427505ms ago: executing program 3 (id=1833): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x3b, &(0x7f0000000400)={0x0, 0x2, 0x10100, 0x2, 0x2b5}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1, 0x0, 0x26}, 0x0, 0x80002101}) io_uring_enter(r3, 0xd81, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/4082, 0xff2, 0x7) symlinkat(&(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x9, 0x0, 0xfffff034}, {0x6, 0x9, 0x0, 0x7fffffff}]}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a3200"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) r10 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast2, 0xdf7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x200}}}, 0x108) 0s ago: executing program 9 (id=1834): openat$comedi(0xffffff9c, &(0x7f0000000340)='/dev/comedi3\x00', 0x89000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0xc0843, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x88ec, 0x101040) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$loop(&(0x7f0000000440), 0x8, 0x149103) unshare(0x22020600) capset(0x0, &(0x7f0000000080)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0xfffd, @private=0xa010102}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0x2}}, 0xe8) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r2, &(0x7f0000000180), 0x400000000000077, 0x7600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) r4 = socket(0x10, 0x3, 0x0) fremovexattr(r4, &(0x7f0000000240)=@known='trusted.overlay.upper\x00') pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x11ffffffffff, 0x2, 0x500, 0x0, 0x1800000000000000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x53bf, 0x0, 0x200000004, 0x4000000000000086, 0x804, 0x3, 0x1}, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x8, 0x149103) ioctl$BLKFRAGET(r5, 0x1265, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x400002, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000000)={0x48}) kernel console output (not intermixed with test programs): 2.0' in warm state. [ 463.669521][ T5973] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 463.697464][ T1208] dvb-usb: bulk message failed: -22 (3/0) [ 463.740357][ T1208] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 463.767143][ T1208] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 463.785857][ T1208] usb 5-1: media controller created [ 463.822565][ T1208] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 464.138107][ T1208] DVB: Unable to find symbol mt352_attach() [ 464.144146][ T1208] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 464.153445][ T1208] dvb-usb: bulk message failed: -22 (3/0) [ 464.264578][ T1208] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 464.322624][ T30] audit: type=1400 audit(1757432076.317:1158): avc: denied { read } for pid=11920 comm="syz.8.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 464.499383][ T5915] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 464.694274][T11924] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1403'. [ 465.019139][ T5915] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 465.074731][ T5915] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.086318][ T5915] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 465.102864][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 465.113209][ T5915] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 465.125248][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.307270][ T5973] usb 1-1: USB disconnect, device number 49 [ 465.330710][ T5973] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 465.359009][ T5915] usb 3-1: config 0 descriptor?? [ 465.545457][T11926] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.552985][T11926] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.562728][T11926] bridge0: entered allmulticast mode [ 465.588697][T11926] bridge_slave_1: left allmulticast mode [ 465.596076][T11926] bridge_slave_1: left promiscuous mode [ 465.603155][T11926] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.640097][T11926] bridge_slave_0: left allmulticast mode [ 465.660187][T11926] bridge_slave_0: left promiscuous mode [ 465.672420][T11926] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.761156][T11929] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 465.770289][T11929] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 465.791932][T11929] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 465.805387][T11929] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 465.821220][T11929] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 465.828412][T11929] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 465.841758][ T5915] hid-alps 0003:044E:120C.000F: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.2-1/input0 [ 465.903183][T11929] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 465.914265][T11929] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 465.991461][ T5973] usb 5-1: USB disconnect, device number 4 [ 466.030516][ T5973] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 466.072290][T11929] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 466.090564][T11929] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 466.096451][T11936] tipc: Started in network mode [ 466.115248][T11936] tipc: Node identity , cluster identity 4711 [ 466.117552][T11929] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 466.140745][T11936] tipc: Failed to obtain node identity [ 466.151435][T11936] tipc: Enabling of bearer rejected, failed to enable media [ 466.154429][T11929] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 466.307879][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 466.307893][ T30] audit: type=1400 audit(1757432078.307:1163): avc: denied { ioctl } for pid=11932 comm="syz.4.1410" path="socket:[41675]" dev="sockfs" ino=41675 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 466.338650][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.570809][ T30] audit: type=1400 audit(1757432078.547:1164): avc: denied { create } for pid=11938 comm="syz.9.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 466.678727][T11918] could not allocate digest TFM handle digest_null-generic [ 466.791918][ T5915] usb 3-1: USB disconnect, device number 61 [ 467.079746][ T30] audit: type=1400 audit(1757432079.057:1165): avc: denied { bind } for pid=11958 comm="syz.8.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 467.113631][ T30] audit: type=1400 audit(1757432079.057:1166): avc: denied { read write } for pid=11958 comm="syz.8.1414" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 467.136959][ C1] vkms_vblank_simulate: vblank timer overrun [ 467.144029][ T30] audit: type=1400 audit(1757432079.057:1167): avc: denied { open } for pid=11958 comm="syz.8.1414" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 467.186900][ T30] audit: type=1400 audit(1757432079.057:1168): avc: denied { ioctl } for pid=11958 comm="syz.8.1414" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 467.270521][T11968] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1415'. [ 467.284741][ T9] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 467.358956][ T5973] Process accounting resumed [ 467.413829][T11970] Process accounting resumed [ 467.443924][ T30] audit: type=1400 audit(1757432079.427:1169): avc: denied { append } for pid=11977 comm="syz.9.1420" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 467.476296][ T9] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 467.486885][ T9] usb 1-1: config 0 has no interface number 0 [ 467.492995][ T9] usb 1-1: config 0 interface 41 has no altsetting 0 [ 467.522192][ T9] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 467.531969][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.538903][ T30] audit: type=1400 audit(1757432079.537:1170): avc: denied { watch } for pid=11980 comm="syz.8.1422" path="/112" dev="tmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 467.551173][ T9] usb 1-1: Product: syz [ 467.571154][T11974] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1415'. [ 467.621231][ T9] usb 1-1: Manufacturer: syz [ 467.628915][ T9] usb 1-1: SerialNumber: syz [ 467.667926][ T9] usb 1-1: config 0 descriptor?? [ 467.702704][T11983] gtp0: entered promiscuous mode [ 467.737276][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1423'. [ 467.919160][T11985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1421'. [ 467.941916][ T30] audit: type=1400 audit(1757432079.927:1171): avc: denied { ioctl } for pid=11988 comm="syz.4.1425" path="socket:[40618]" dev="sockfs" ino=40618 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 468.173083][ T30] audit: type=1400 audit(1757432079.937:1172): avc: denied { create } for pid=11986 comm="syz.8.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 469.102754][ T9] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 469.121383][ T9] usb 1-1: USB disconnect, device number 50 [ 469.134749][ T5928] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 469.436332][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.693072][T12017] loop6: detected capacity change from 0 to 1 [ 469.735071][T12017] Dev loop6: unable to read RDB block 1 [ 469.740704][T12017] loop6: unable to read partition table [ 469.752671][T12017] loop6: partition table beyond EOD, truncated [ 469.758911][T12017] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 469.889748][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.899849][ T5928] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 469.929131][ T5928] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 469.944376][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.955140][ T5928] usb 5-1: config 0 descriptor?? [ 470.177697][ T5928] usbhid 5-1:0.0: can't add hid device: -71 [ 470.183858][ T5928] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 470.235391][ T5928] usb 5-1: USB disconnect, device number 5 [ 470.420489][T12040] lo speed is unknown, defaulting to 1000 [ 470.428959][T12040] lo speed is unknown, defaulting to 1000 [ 470.642161][T12040] lo speed is unknown, defaulting to 1000 [ 471.579511][T12059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1438'. [ 471.832140][T12065] binder: 12060:12065 ioctl c0306201 200000000080 returned -14 [ 471.853528][T12065] tmpfs: Bad value for 'mpol' [ 471.883418][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 471.889621][ T30] audit: type=1400 audit(1757432083.847:1188): avc: denied { mounton } for pid=12060 comm="syz.2.1439" path="/syzcgroup/unified/syz2" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 472.201670][T12062] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 472.934811][ T5928] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 472.955778][T12084] delete_channel: no stack [ 472.956408][ T30] audit: type=1400 audit(1757432084.957:1189): avc: denied { create } for pid=12081 comm="syz.4.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 473.094289][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1443'. [ 473.107027][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 473.123842][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.124647][T12075] netlink: 'syz.9.1443': attribute type 18 has an invalid length. [ 473.146326][T12075] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1443'. [ 473.164673][ T5928] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 473.183962][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.493838][ T5928] usb 3-1: config 0 descriptor?? [ 473.519699][T12075] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1443'. [ 473.836755][ T30] audit: type=1400 audit(1757432085.837:1190): avc: denied { ioctl } for pid=12087 comm="syz.0.1447" path="socket:[40843]" dev="sockfs" ino=40843 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 474.209189][ T5928] lenovo 0003:17EF:60A3.0010: unknown main item tag 0x1 [ 474.295320][ T5928] lenovo 0003:17EF:60A3.0010: hidraw0: USB HID v0.80 Device [HID 17ef:60a3] on usb-dummy_hcd.2-1/input0 [ 474.933646][T12113] netlink: 'syz.4.1451': attribute type 4 has an invalid length. [ 474.958583][T12113] netlink: 'syz.4.1451': attribute type 4 has an invalid length. [ 475.355049][ T5974] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 475.401715][T12115] autofs: Unknown parameter 'mV' [ 475.484677][T12116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.514839][ T5974] usb 10-1: Using ep0 maxpacket: 32 [ 475.528548][ T5974] usb 10-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 475.541280][ T5974] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.555162][ T5974] usb 10-1: Product: syz [ 475.559541][ T5974] usb 10-1: Manufacturer: syz [ 475.611745][ T5974] usb 10-1: SerialNumber: syz [ 475.624373][ T5974] usb 10-1: config 0 descriptor?? [ 475.717861][ T5928] usb 3-1: USB disconnect, device number 62 [ 475.836249][T12112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.846538][T12112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.899504][ T5974] peak_usb 10-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 475.927653][ T5974] peak_usb 10-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 475.937559][ T5975] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 476.095581][ T5974] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -71 [ 476.108656][ T30] audit: type=1400 audit(1757432088.087:1191): avc: denied { block_suspend } for pid=12120 comm="syz.2.1455" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 476.134142][ T5974] usb 10-1: USB disconnect, device number 10 [ 476.150691][ T5975] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 476.172342][ T5975] usb 5-1: config 0 has no interface number 0 [ 476.198579][ T5975] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 476.218069][ T5975] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 476.227692][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.237801][ T5975] usb 5-1: Product: syz [ 476.242429][ T5975] usb 5-1: Manufacturer: syz [ 476.247501][ T5975] usb 5-1: SerialNumber: syz [ 476.283109][ T5975] usb 5-1: config 0 descriptor?? [ 476.402766][ T5975] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 476.924840][ T5928] usb 5-1: USB disconnect, device number 6 [ 476.957004][ T5928] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 477.314626][ T5974] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 477.486476][T12147] 8021q: adding VLAN 0 to HW filter on device bond1 [ 477.494615][ T5974] usb 10-1: Using ep0 maxpacket: 8 [ 477.501038][ T5974] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.511517][ T5974] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 477.521432][ T5974] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.634570][T12156] vxcan3: entered promiscuous mode [ 477.924140][ T5973] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 478.009535][ T5974] usb 10-1: config 0 descriptor?? [ 478.028657][ T5974] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 478.125872][ T5973] usb 3-1: not running at top speed; connect to a high speed hub [ 478.146861][ T5973] usb 3-1: config 95 has an invalid interface number: 126 but max is 2 [ 478.164102][ T5973] usb 3-1: config 95 has an invalid interface number: 119 but max is 2 [ 478.191227][ T5973] usb 3-1: config 95 has an invalid interface number: 107 but max is 2 [ 478.231096][ T5973] usb 3-1: config 95 has no interface number 0 [ 478.257648][ T5973] usb 3-1: config 95 has no interface number 1 [ 478.300781][ T5973] usb 3-1: config 95 has no interface number 2 [ 478.330050][ T5973] usb 3-1: config 95 interface 126 has no altsetting 0 [ 478.390188][ T5973] usb 3-1: config 95 interface 119 has no altsetting 0 [ 478.410741][ T5973] usb 3-1: config 95 interface 107 has no altsetting 0 [ 478.422063][ T5973] usb 3-1: New USB device found, idVendor=03f0, idProduct=201d, bcdDevice=af.93 [ 478.432294][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.680745][ T5973] usb 3-1: Product: syz [ 478.688438][ T5973] usb 3-1: Manufacturer: syz [ 478.696161][ T5973] usb 3-1: SerialNumber: syz [ 478.936412][ T5973] usb 3-1: USB disconnect, device number 63 [ 479.510436][T12173] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 479.513050][ T30] audit: type=1400 audit(1757432091.507:1192): avc: denied { create } for pid=12172 comm="syz.2.1466" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 479.631029][ T30] audit: type=1400 audit(1757432091.507:1193): avc: denied { associate } for pid=12172 comm="syz.2.1466" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 479.768845][ T30] audit: type=1400 audit(1757432091.737:1194): avc: denied { rmdir } for pid=5843 comm="syz-executor" name="bus" dev="tmpfs" ino=1757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 479.951323][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1467'. [ 480.062383][T12175] chnl_net:caif_netlink_parms(): no params data found [ 480.142190][ T30] audit: type=1400 audit(1757432092.137:1195): avc: denied { sqpoll } for pid=12178 comm="syz.0.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 480.166528][ T5974] usb 10-1: USB disconnect, device number 11 [ 480.414995][ T5928] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 480.544591][ T5973] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 480.564625][ T5915] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 482.226403][ T5973] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 482.241125][ T5973] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 482.251390][ T5973] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 482.277066][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.409145][ T5915] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 482.420385][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.432926][T12182] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 482.450008][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.452267][ T5973] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 482.459911][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 482.460845][ T5915] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 482.503989][ T5915] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 482.532826][ T5915] usb 3-1: Manufacturer: syz [ 482.556460][ T5915] usb 3-1: config 0 descriptor?? [ 482.586949][T12206] netlink: 'syz.8.1475': attribute type 1 has an invalid length. [ 482.625828][T12206] netlink: 244 bytes leftover after parsing attributes in process `syz.8.1475'. [ 483.005144][ T5915] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 483.029622][ T5915] appleir 0003:05AC:8243.0011: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 483.113354][T12216] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1477'. [ 483.733450][ T5928] usb 1-1: unable to get BOS descriptor or descriptor too short [ 483.748618][ T5928] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 483.758822][ T5928] usb 1-1: can't read configurations, error -71 [ 483.793241][ T5915] usb 3-1: USB disconnect, device number 64 [ 483.992957][T12217] fido_id[12217]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 484.015729][ T30] audit: type=1400 audit(1757432095.987:1196): avc: denied { create } for pid=12218 comm="syz.0.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 484.292454][ T30] audit: type=1400 audit(1757432096.287:1197): avc: denied { listen } for pid=12218 comm="syz.0.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 484.371133][ T30] audit: type=1400 audit(1757432096.367:1198): avc: denied { accept } for pid=12218 comm="syz.0.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 484.553395][ T5973] usb 5-1: USB disconnect, device number 7 [ 485.006513][ T5973] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 485.659172][ T5973] usb 5-1: Using ep0 maxpacket: 8 [ 486.575136][ T30] audit: type=1400 audit(1757432098.537:1199): avc: denied { read } for pid=12247 comm="syz.8.1485" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 486.575191][ T30] audit: type=1400 audit(1757432098.547:1200): avc: denied { ioctl } for pid=12247 comm="syz.8.1485" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 486.635710][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.635768][ T5973] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 486.635794][ T5973] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.635813][ T5973] usb 5-1: config 0 has no interface number 0 [ 486.668705][ T5973] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 486.668733][ T5973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.668751][ T5973] usb 5-1: Product: syz [ 486.668765][ T5973] usb 5-1: Manufacturer: syz [ 486.668779][ T5973] usb 5-1: SerialNumber: syz [ 486.671461][ T5973] usb 5-1: config 0 descriptor?? [ 486.968466][ T5973] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 486.983860][ T5973] usb 5-1: No valid video chain found. [ 487.085453][ T5928] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 487.173896][T12226] tipc: Started in network mode [ 487.184910][T12226] tipc: Node identity 4, cluster identity 4711 [ 487.191080][T12226] tipc: Node number set to 4 [ 487.228020][T12226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=12226 comm=syz.4.1481 [ 487.291967][ T30] audit: type=1400 audit(1757432099.287:1201): avc: denied { write } for pid=12225 comm="syz.4.1481" path="socket:[43318]" dev="sockfs" ino=43318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 487.292105][ T5928] usb 3-1: unable to get BOS descriptor or descriptor too short [ 487.327338][ T24] usb 5-1: USB disconnect, device number 8 [ 487.357845][ T5928] usb 3-1: not running at top speed; connect to a high speed hub [ 487.373022][ T5928] usb 3-1: config 129 has an invalid interface number: 28 but max is 0 [ 487.381607][ T5928] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 487.394559][ T5928] usb 3-1: config 129 has no interface number 0 [ 487.400842][ T5928] usb 3-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 487.414868][ T5928] usb 3-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid wMaxPacketSize 0 [ 487.428889][ T5928] usb 3-1: config 129 interface 28 has no altsetting 0 [ 487.443695][ T5928] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 487.456456][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.465932][ T5928] usb 3-1: Product: syz [ 487.470331][ T5928] usb 3-1: Manufacturer: syz [ 487.476568][ T5928] usb 3-1: SerialNumber: syz [ 487.564623][ T5973] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 487.691754][ T5928] etas_es58x 3-1:129.28: Starting syz syz (Serial Number syz) [ 487.700355][ T5928] etas_es58x 3-1:129.28: could not retrieve the product info string [ 487.717196][ T5973] usb 1-1: unable to get BOS descriptor or descriptor too short [ 487.729676][ T5973] usb 1-1: config 9 has an invalid interface number: 198 but max is 0 [ 487.729794][ T5928] usb 3-1: USB disconnect, device number 65 [ 487.746919][ T5973] usb 1-1: config 9 has no interface number 0 [ 487.753110][ T5973] usb 1-1: config 9 interface 198 has no altsetting 0 [ 487.754679][ T5928] etas_es58x 3-1:129.28: Disconnecting syz syz [ 487.762644][ T5973] usb 1-1: string descriptor 0 read error: -22 [ 487.772890][ T5973] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 487.809900][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.826037][ T5973] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 487.835175][ T5973] dvb-usb: bulk message failed: -22 (3/0) [ 487.859961][ T5973] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 487.871834][ T5973] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 487.900404][ T5973] usb 1-1: media controller created [ 488.086288][ T5973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 488.975503][ T30] audit: type=1400 audit(1757432100.197:1202): avc: denied { accept } for pid=12270 comm="syz.9.1491" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 489.373707][ T30] audit: type=1400 audit(1757432100.207:1203): avc: denied { getopt } for pid=12270 comm="syz.9.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 489.454448][ T30] audit: type=1400 audit(1757432101.427:1204): avc: denied { unmount } for pid=9583 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 489.530851][ T30] audit: type=1400 audit(1757432101.527:1205): avc: denied { create } for pid=12284 comm="syz.8.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 489.554640][ T5973] DVB: Unable to find symbol mt352_attach() [ 489.637548][ T5973] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 489.949611][ T5973] dvb-usb: bulk message failed: -22 (3/0) [ 489.971390][T12293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1495'. [ 489.985274][ T5973] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 490.024240][T12293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1495'. [ 490.078516][ T30] audit: type=1400 audit(1757432101.557:1206): avc: denied { setopt } for pid=12284 comm="syz.8.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 490.223247][ T30] audit: type=1400 audit(1757432101.927:1207): avc: denied { ioctl } for pid=12273 comm="syz.4.1492" path="/dev/ptyqd" dev="devtmpfs" ino=132 ioctlcmd=0x541a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 490.530928][ T5928] usb 1-1: USB disconnect, device number 53 [ 490.569549][ T30] audit: type=1400 audit(1757432102.267:1208): avc: denied { create } for pid=12295 comm="syz.8.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 490.605902][ T5928] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 490.683141][T12296] netlink: 204 bytes leftover after parsing attributes in process `syz.8.1496'. [ 490.801143][T12296] can: request_module (can-proto-0) failed. [ 490.928562][T12309] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 490.935098][T12309] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 490.964175][T12309] vhci_hcd vhci_hcd.0: Device attached [ 491.047916][ T5928] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 491.134906][ T5973] vhci_hcd: vhci_device speed not set [ 491.396139][ T5973] usb 49-1: new high-speed USB device number 3 using vhci_hcd [ 491.464856][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 491.486520][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 491.534618][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.544609][T12302] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1498'. [ 491.643263][T12302] openvswitch: netlink: Flow actions attr not present in new flow. [ 491.694945][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 491.704768][ T5928] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 491.724670][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.927604][ T5928] usb 1-1: config 0 descriptor?? [ 491.932768][ T9] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 491.941463][ T9] usb 5-1: config 0 has no interface number 0 [ 491.948193][ T9] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 491.959475][ T5928] hub 1-1:0.0: USB hub found [ 491.965443][ T9] usb 5-1: config 0 interface 126 altsetting 16 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 491.978992][ T9] usb 5-1: config 0 interface 126 has no altsetting 0 [ 492.053312][ T9] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 492.114599][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.144693][ T9] usb 5-1: Product: syz [ 492.166933][ T5928] hub 1-1:0.0: 2 ports detected [ 492.206919][ T9] usb 5-1: Manufacturer: syz [ 492.211538][ T9] usb 5-1: SerialNumber: syz [ 492.246737][ T9] usb 5-1: config 0 descriptor?? [ 492.252493][T12316] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 492.467404][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 492.467416][ T30] audit: type=1400 audit(1757432104.467:1213): avc: denied { setopt } for pid=12329 comm="syz.8.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 492.472892][T12330] IPVS: sh: SCTP 127.0.0.1:0 - no destination available [ 492.500485][ T5915] IPVS: starting estimator thread 0... [ 492.573889][T12300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.582759][T12300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.601487][ T5928] usb 1-1: USB disconnect, device number 54 [ 492.614731][ T1208] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 492.622438][T12331] IPVS: using max 76 ests per chain, 182400 per kthread [ 492.776336][ T1208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.778953][ T9] ir_usb 5-1:0.126: required endpoints missing [ 492.804304][ T9] usb 5-1: USB disconnect, device number 9 [ 492.829160][ T1208] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 492.840488][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.384802][ T1208] usb 3-1: config 0 descriptor?? [ 493.573822][T12340] SELinux: policydb magic number 0x6b180001 does not match expected magic number 0xf97cff8c [ 493.584247][T12340] SELinux: failed to load policy [ 493.595395][ T30] audit: type=1400 audit(1757432105.567:1214): avc: denied { load_policy } for pid=12337 comm="syz.4.1507" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 493.640420][ T1208] usbhid 3-1:0.0: can't add hid device: -71 [ 493.655692][ T1208] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 493.894654][ T1208] usb 3-1: USB disconnect, device number 66 [ 494.434593][ T1208] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 494.617365][ T1208] usb 3-1: Using ep0 maxpacket: 16 [ 494.624206][ T1208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.638582][ T1208] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 494.647893][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.700935][ T1208] usb 3-1: config 0 descriptor?? [ 494.928224][ T1208] usbhid 3-1:0.0: can't add hid device: -71 [ 494.938353][ T1208] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 494.954368][ T1208] usb 3-1: USB disconnect, device number 67 [ 494.989017][T12363] netlink: 'syz.4.1513': attribute type 10 has an invalid length. [ 495.009061][T12363] batman_adv: batadv0: Adding interface: team0 [ 495.017765][T12363] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.046915][T12363] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 496.025176][ T30] audit: type=1400 audit(1757432108.017:1215): avc: denied { map } for pid=12374 comm="syz.2.1516" path="socket:[43924]" dev="sockfs" ino=43924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 496.057740][ T30] audit: type=1400 audit(1757432108.017:1216): avc: denied { read accept } for pid=12374 comm="syz.2.1516" path="socket:[43924]" dev="sockfs" ino=43924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 496.153565][T12379] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1517'. [ 496.309622][T12382] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 496.657634][T12381] netlink: 'syz.4.1518': attribute type 5 has an invalid length. [ 496.691142][T12389] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1520'. [ 496.738329][T12381] ip6erspan0: entered promiscuous mode [ 496.850788][T12398] syz.0.1524 (12398): /proc/12398/oom_adj is deprecated, please use /proc/12398/oom_score_adj instead. [ 496.900126][T12401] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1523'. [ 496.974785][ T1208] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 497.242060][ T1208] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.264769][ T1208] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 497.294024][ T1208] usb 3-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.40 [ 497.333656][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.394879][ T1208] usb 3-1: config 0 descriptor?? [ 497.440448][ T1208] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 498.396306][T12436] syz.4.1533 (12436): drop_caches: 4 [ 498.432574][T12389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.452264][T12389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.482870][T12438] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12438 comm=syz.9.1534 [ 498.536433][T12438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 498.718889][T12446] trusted_key: encrypted_key: insufficient parameters specified [ 499.700289][ T24] usb 3-1: USB disconnect, device number 68 [ 499.844212][ T30] audit: type=1400 audit(1757432111.837:1217): avc: denied { map } for pid=12456 comm="syz.2.1539" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 499.905099][T12459] binder: BINDER_SET_CONTEXT_MGR already set [ 499.911114][T12459] binder: 12456:12459 ioctl 4018620d 200000000040 returned -16 [ 500.154778][ T30] audit: type=1400 audit(1757432112.127:1218): avc: denied { read } for pid=12465 comm="syz.8.1541" path="socket:[45120]" dev="sockfs" ino=45120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 500.352048][ T30] audit: type=1400 audit(1757432112.143:1219): avc: denied { ioctl } for pid=12465 comm="syz.8.1541" path="socket:[44220]" dev="sockfs" ino=44220 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 500.844638][ T30] audit: type=1400 audit(1757432112.223:1220): avc: denied { create } for pid=12475 comm="syz.0.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 500.946840][ T30] audit: type=1400 audit(1757432112.543:1221): avc: denied { setopt } for pid=12475 comm="syz.0.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 501.228060][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.234369][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.284200][T12486] overlay: Unknown parameter 'subj_user' [ 501.933222][T12494] loop6: detected capacity change from 0 to 2560 [ 501.945582][T12494] buffer_io_error: 11 callbacks suppressed [ 501.951426][T12494] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.960347][T12494] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.969735][T12494] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.978607][T12494] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.987391][T12494] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.996398][T12494] Buffer I/O error on dev loop6, logical block 0, async page read [ 502.004717][T12494] Buffer I/O error on dev loop6, logical block 0, async page read [ 502.013346][T12494] Buffer I/O error on dev loop6, logical block 0, async page read [ 502.021821][T12494] ldm_validate_partition_table(): Disk read failed. [ 502.028868][T12494] Buffer I/O error on dev loop6, logical block 0, async page read [ 502.037635][T12494] Buffer I/O error on dev loop6, logical block 0, async page read [ 502.047651][T12494] Dev loop6: unable to read RDB block 0 [ 502.057156][T12494] loop6: unable to read partition table [ 502.064267][T12494] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 502.752657][ T30] audit: type=1400 audit(1757432114.753:1222): avc: denied { accept } for pid=12501 comm="syz.0.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 502.990231][T12507] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1548'. [ 503.330118][T12509] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 503.393560][ T30] audit: type=1400 audit(1757432115.393:1223): avc: denied { ioctl } for pid=12508 comm="syz.0.1551" path="socket:[44296]" dev="sockfs" ino=44296 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 505.037378][ T30] audit: type=1400 audit(1757432117.023:1224): avc: denied { bind } for pid=12524 comm="syz.8.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 505.088027][T12525] I/O error, dev loop17, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 505.098454][ T30] audit: type=1400 audit(1757432117.023:1225): avc: denied { node_bind } for pid=12524 comm="syz.8.1555" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 505.162621][T12525] EXT4-fs (loop17): unable to read superblock [ 505.819010][ T9] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 505.837869][T12546] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.1558'. [ 506.087930][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 506.099583][ T9] usb 3-1: config 9 has an invalid interface number: 198 but max is 0 [ 506.326685][ T9] usb 3-1: config 9 has no interface number 0 [ 506.350822][ T9] usb 3-1: config 9 interface 198 has no altsetting 0 [ 506.735046][ T9] usb 3-1: string descriptor 0 read error: -22 [ 506.741360][ T9] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 506.782296][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.872058][ T9] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 506.910106][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 506.940539][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 506.973205][ T9] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 507.007057][T12557] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1562'. [ 507.034660][ T9] usb 3-1: media controller created [ 507.042941][T12557] unsupported nlmsg_type 40 [ 507.069142][T12542] 9pnet_fd: Insufficient options for proto=fd [ 507.174218][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 507.199200][ T30] audit: type=1400 audit(1757432119.203:1226): avc: denied { accept } for pid=12559 comm="syz.0.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 507.751013][ T9] DVB: Unable to find symbol mt352_attach() [ 507.788308][ T9] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 507.790996][ T30] audit: type=1400 audit(1757432119.783:1227): avc: denied { mount } for pid=12565 comm="syz.9.1564" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 507.836937][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 507.888601][ T30] audit: type=1400 audit(1757432119.823:1228): avc: denied { remount } for pid=12565 comm="syz.9.1564" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 507.920252][ T9] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 508.722719][ T9] usb 3-1: USB disconnect, device number 69 [ 508.848607][ T9] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 509.048739][ T30] audit: type=1400 audit(1757432121.053:1229): avc: denied { write } for pid=12568 comm="syz.8.1566" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 509.076922][ T30] audit: type=1400 audit(1757432121.053:1230): avc: denied { open } for pid=12568 comm="syz.8.1566" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 509.164592][ T9] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 509.226031][ T30] audit: type=1400 audit(1757432121.233:1231): avc: denied { bind } for pid=12581 comm="syz.9.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 509.326356][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 509.359999][ T9] usb 3-1: config 9 has an invalid interface number: 198 but max is 0 [ 509.368375][ T9] usb 3-1: config 9 has no interface number 0 [ 509.374445][ T9] usb 3-1: config 9 interface 198 has no altsetting 0 [ 509.409848][ T9] usb 3-1: string descriptor 0 read error: -22 [ 509.500402][ T9] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 509.518187][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.550801][ T9] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 509.564673][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 509.588147][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 509.605012][ T9] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 509.615951][ T9] usb 3-1: media controller created [ 509.644125][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 509.656265][ T30] audit: type=1400 audit(1757432121.663:1232): avc: denied { name_bind } for pid=12585 comm="syz.0.1571" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 509.705417][ T9] DVB: Unable to find symbol mt352_attach() [ 509.718314][ T9] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 509.732709][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 509.738781][T12594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1571'. [ 509.879204][ T9] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 511.874584][ T5915] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 511.937606][ T9] usb 3-1: USB disconnect, device number 70 [ 511.970920][ T9] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 512.024345][T12628] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1580'. [ 512.038532][ T5915] usb 1-1: unable to get BOS descriptor or descriptor too short [ 512.051004][ T5915] usb 1-1: config 9 has an invalid interface number: 198 but max is 0 [ 512.059672][ T5915] usb 1-1: config 9 has no interface number 0 [ 512.068033][ T5915] usb 1-1: config 9 interface 198 has no altsetting 0 [ 512.080586][ T5915] usb 1-1: string descriptor 0 read error: -22 [ 512.087205][ T5915] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 512.105166][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.145747][ T5915] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 512.175506][ T5915] dvb-usb: bulk message failed: -22 (3/0) [ 512.205557][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 512.235903][ T5915] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 512.258899][ T5915] usb 1-1: media controller created [ 512.293909][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 512.334466][T12621] 9pnet_fd: Insufficient options for proto=fd [ 512.484280][ T5915] DVB: Unable to find symbol mt352_attach() [ 512.494690][ T5915] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 512.518068][ T5915] dvb-usb: bulk message failed: -22 (3/0) [ 512.544595][ T5915] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 512.966491][T12630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1581'. [ 513.299492][T12647] lo speed is unknown, defaulting to 1000 [ 513.306215][T12647] lo speed is unknown, defaulting to 1000 [ 513.312613][T12647] lo speed is unknown, defaulting to 1000 [ 514.068796][T12653] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 514.078203][T12653] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 514.088402][T12653] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 514.097623][T12653] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 514.106948][T12653] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 514.118277][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 514.126744][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 514.133912][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 514.141902][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 514.151525][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 514.227264][T12652] lo speed is unknown, defaulting to 1000 [ 514.234386][T12652] lo speed is unknown, defaulting to 1000 [ 514.241801][T12652] lo speed is unknown, defaulting to 1000 [ 514.276273][T12657] overlayfs: missing 'lowerdir' [ 514.326762][ T30] audit: type=1400 audit(1757432126.283:1233): avc: denied { mount } for pid=12655 comm="syz.9.1586" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 514.627390][T12652] chnl_net:caif_netlink_parms(): no params data found [ 514.689485][ T5915] usb 1-1: USB disconnect, device number 55 [ 514.746013][ T5915] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 514.835091][T12652] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.842292][T12652] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.852838][T12652] bridge_slave_0: entered allmulticast mode [ 514.861106][T12652] bridge_slave_0: entered promiscuous mode [ 514.873175][T12652] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.881007][T12652] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.888439][T12652] bridge_slave_1: entered allmulticast mode [ 514.896180][T12652] bridge_slave_1: entered promiscuous mode [ 514.939919][T12652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.951689][T12652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.072201][T12652] team0: Port device team_slave_0 added [ 515.080477][T12652] team0: Port device team_slave_1 added [ 515.125650][T12652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.132725][T12652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.160048][T12652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.184030][T12652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.191269][T12652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.220837][T12652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.298171][T12652] hsr_slave_0: entered promiscuous mode [ 515.309096][T12652] hsr_slave_1: entered promiscuous mode [ 515.316152][T12652] debugfs: 'hsr0' already exists in 'hsr' [ 515.321956][T12652] Cannot create hsr debugfs directory [ 515.330106][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1590'. [ 515.424567][ T24] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 516.425835][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1590'. [ 516.435298][T12653] Bluetooth: hci7: command tx timeout [ 516.453670][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 516.457129][ T30] audit: type=1326 audit(1757432128.453:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12686 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bb98ebe9 code=0x7ffc0000 [ 516.485291][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1590'. [ 516.494931][ T30] audit: type=1326 audit(1757432128.453:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12686 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bb98ebe9 code=0x7ffc0000 [ 516.501790][ T24] usb 1-1: config 9 has an invalid interface number: 198 but max is 0 [ 516.520229][ T30] audit: type=1326 audit(1757432128.453:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12686 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f46bb98ebe9 code=0x7ffc0000 [ 516.554004][ T30] audit: type=1326 audit(1757432128.453:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12686 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bb98ebe9 code=0x7ffc0000 [ 516.600420][T12689] netlink: 'syz.2.1593': attribute type 1 has an invalid length. [ 516.608674][ T24] usb 1-1: config 9 has no interface number 0 [ 516.615091][ T24] usb 1-1: config 9 interface 198 has no altsetting 0 [ 516.643306][ T24] usb 1-1: string descriptor 0 read error: -22 [ 516.657283][ T24] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 516.666767][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.670615][ T30] audit: type=1326 audit(1757432128.453:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12686 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bb98ebe9 code=0x7ffc0000 [ 516.701245][ T24] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 516.713191][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 516.721335][ T30] audit: type=1326 audit(1757432128.453:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12686 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f46bb98ebe9 code=0x7ffc0000 [ 516.748067][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 516.758842][ T30] audit: type=1326 audit(1757432128.453:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12686 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bb98ebe9 code=0x7ffc0000 [ 516.759339][ T24] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 516.793680][T12690] netlink: 147356 bytes leftover after parsing attributes in process `syz.2.1593'. [ 516.803492][T12690] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 516.811422][ T30] audit: type=1326 audit(1757432128.453:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12686 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bb98ebe9 code=0x7ffc0000 [ 516.847688][ T30] audit: type=1326 audit(1757432128.453:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12686 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f46bb98ebe9 code=0x7ffc0000 [ 516.877319][ T24] usb 1-1: media controller created [ 516.906672][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 516.989833][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1590'. [ 517.054322][T12689] 8021q: adding VLAN 0 to HW filter on device bond3 [ 517.090345][T12690] ip6tnl1: entered allmulticast mode [ 517.114882][T12690] 8021q: adding VLAN 0 to HW filter on device bond3 [ 517.123014][T12690] bond3: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 517.135626][T12690] bond3: (slave ip6tnl1): Error -95 calling set_mac_address [ 517.213302][ T24] DVB: Unable to find symbol mt352_attach() [ 517.343717][ T24] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 517.402355][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 518.271098][ T24] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 518.496981][T12653] Bluetooth: hci7: command tx timeout [ 519.051013][T12652] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 519.061518][T12652] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 519.079246][T12652] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 519.094372][T12652] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 519.161845][T12652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.183440][T12652] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.194979][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.202037][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.216435][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.223519][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.289629][T12652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 519.672507][T12652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.755203][T12652] veth0_vlan: entered promiscuous mode [ 519.773373][T12652] veth1_vlan: entered promiscuous mode [ 519.836728][T12652] veth0_macvtap: entered promiscuous mode [ 519.856955][T12652] veth1_macvtap: entered promiscuous mode [ 519.969774][T12652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.007778][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 520.007792][ T30] audit: type=1326 audit(1757432131.006:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12686 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bb98ebe9 code=0x7ffc0000 [ 520.062433][T12652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.068411][ T30] audit: type=1326 audit(1757432131.056:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12686 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bb98ebe9 code=0x7ffc0000 [ 520.108908][ T5928] usb 1-1: USB disconnect, device number 56 [ 520.148985][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.169436][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.186010][ T5928] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 520.226645][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.238313][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.353935][ T228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.367256][ T228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.441868][ T228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.449951][ T228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.576911][T12653] Bluetooth: hci7: command tx timeout [ 520.895004][ T5928] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 521.104766][ T5928] usb 3-1: Using ep0 maxpacket: 8 [ 521.117387][ T5928] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 521.607969][ T30] audit: type=1400 audit(1757432132.186:1250): avc: denied { accept } for pid=12745 comm="syz.3.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 521.641993][ T5928] usb 3-1: config 0 has no interface number 0 [ 521.742061][ T5928] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 521.758307][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.780762][ T5928] usb 3-1: Product: syz [ 521.842818][ T5928] usb 3-1: Manufacturer: syz [ 521.851215][ T5928] usb 3-1: SerialNumber: syz [ 521.860795][ T5928] usb 3-1: config 0 descriptor?? [ 522.677288][T12653] Bluetooth: hci7: command tx timeout [ 522.800072][ T30] audit: type=1400 audit(1757432133.786:1251): avc: denied { connect } for pid=12764 comm="syz.0.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 522.921831][T12766] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1609'. [ 523.069215][T12767] syz.0.1608: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 523.099470][ T30] audit: type=1400 audit(1757432133.926:1252): avc: denied { getopt } for pid=12764 comm="syz.0.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 523.144462][ T30] audit: type=1400 audit(1757432134.066:1253): avc: denied { setopt } for pid=12764 comm="syz.0.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 523.151141][T12767] CPU: 1 UID: 0 PID: 12767 Comm: syz.0.1608 Not tainted syzkaller #0 PREEMPT(full) [ 523.151164][T12767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 523.151174][T12767] Call Trace: [ 523.151180][T12767] [ 523.151186][T12767] dump_stack_lvl+0x16c/0x1f0 [ 523.151211][T12767] warn_alloc+0x248/0x3a0 [ 523.151229][T12767] ? __pfx_warn_alloc+0x10/0x10 [ 523.151243][T12767] ? lockdep_hardirqs_on+0x7c/0x110 [ 523.151271][T12767] ? kasan_save_stack+0x42/0x60 [ 523.151287][T12767] ? kasan_save_stack+0x33/0x60 [ 523.151302][T12767] ? kasan_save_track+0x14/0x30 [ 523.151322][T12767] ? xskq_create+0x52/0x1d0 [ 523.151336][T12767] ? xsk_setsockopt+0x74e/0x9a0 [ 523.151349][T12767] ? do_sock_setsockopt+0xf3/0x1d0 [ 523.151372][T12767] ? xskq_create+0xfb/0x1d0 [ 523.151387][T12767] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 523.151417][T12767] ? xskq_create+0xfb/0x1d0 [ 523.151440][T12767] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 523.151471][T12767] ? xskq_create+0xfb/0x1d0 [ 523.151486][T12767] vmalloc_user_noprof+0x9e/0xe0 [ 523.151507][T12767] ? xskq_create+0xfb/0x1d0 [ 523.151523][T12767] xskq_create+0xfb/0x1d0 [ 523.151541][T12767] xsk_setsockopt+0x74e/0x9a0 [ 523.151557][T12767] ? __pfx_xsk_setsockopt+0x10/0x10 [ 523.151572][T12767] ? find_held_lock+0x2b/0x80 [ 523.151594][T12767] ? selinux_socket_setsockopt+0x6a/0x80 [ 523.151615][T12767] ? __pfx_xsk_setsockopt+0x10/0x10 [ 523.151632][T12767] do_sock_setsockopt+0xf3/0x1d0 [ 523.151655][T12767] __sys_setsockopt+0x1a0/0x230 [ 523.151677][T12767] __x64_sys_setsockopt+0xbd/0x160 [ 523.151693][T12767] ? do_syscall_64+0x91/0x4c0 [ 523.151711][T12767] ? lockdep_hardirqs_on+0x7c/0x110 [ 523.151729][T12767] do_syscall_64+0xcd/0x4c0 [ 523.151749][T12767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.151765][T12767] RIP: 0033:0x7ff26c38ebe9 [ 523.151779][T12767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.151793][T12767] RSP: 002b:00007ff26d1c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 523.151808][T12767] RAX: ffffffffffffffda RBX: 00007ff26c5c5fa0 RCX: 00007ff26c38ebe9 [ 523.151817][T12767] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 523.151826][T12767] RBP: 00007ff26c411e19 R08: 0000000000000004 R09: 0000000000000000 [ 523.151835][T12767] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.151843][T12767] R13: 00007ff26c5c6038 R14: 00007ff26c5c5fa0 R15: 00007ffd7bd9d668 [ 523.151864][T12767] [ 523.151870][T12767] Mem-Info: [ 523.559174][T12767] active_anon:56558 inactive_anon:0 isolated_anon:0 [ 523.559174][T12767] active_file:21490 inactive_file:4052 isolated_file:0 [ 523.559174][T12767] unevictable:768 dirty:257 writeback:0 [ 523.559174][T12767] slab_reclaimable:13471 slab_unreclaimable:112319 [ 523.559174][T12767] mapped:53988 shmem:46247 pagetables:1430 [ 523.559174][T12767] sec_pagetables:0 bounce:0 [ 523.559174][T12767] kernel_misc_reclaimable:0 [ 523.559174][T12767] free:1221591 free_pcp:20971 free_cma:0 [ 523.679872][T12767] Node 0 active_anon:227472kB inactive_anon:0kB active_file:85916kB inactive_file:16072kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:215424kB dirty:1132kB writeback:0kB shmem:184172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13624kB pagetables:5724kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 523.851443][ T5928] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 523.882271][ T5928] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 523.904560][T12767] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 523.993794][ T5928] usb 3-1: USB disconnect, device number 71 [ 524.023062][ T30] audit: type=1400 audit(1757432135.016:1254): avc: denied { listen } for pid=12783 comm="syz.9.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 524.067109][T12767] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 524.679594][T12767] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 524.699311][T12767] Node 0 DMA32 free:976852kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:224228kB inactive_anon:0kB active_file:85688kB inactive_file:15076kB unevictable:1536kB writepending:1144kB present:3129332kB managed:2539340kB mlocked:0kB bounce:0kB free_pcp:69488kB local_pcp:24068kB free_cma:0kB [ 524.765060][T12767] lowmem_reserve[]: 0 0 1 1 1 [ 524.771884][T12767] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:124kB inactive_anon:0kB active_file:228kB inactive_file:996kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:16kB free_cma:0kB [ 524.804525][T12767] lowmem_reserve[]: 0 0 0 0 0 [ 524.809629][T12767] Node 1 Normal free:3896004kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:136kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18176kB local_pcp:5184kB free_cma:0kB [ 524.964595][ T30] audit: type=1400 audit(1757432135.936:1255): avc: denied { write } for pid=12787 comm="syz.2.1612" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 524.988775][T12767] lowmem_reserve[]: 0 0 0 0 0 [ 524.993499][T12767] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 525.029148][ T30] audit: type=1400 audit(1757432135.936:1256): avc: denied { setopt } for pid=12787 comm="syz.2.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 525.134540][T12767] Node 0 DMA32: 2*4kB (ME) 2*8kB (UM) 3*16kB (UME) 297*32kB (UME) 236*64kB (UME) 103*128kB (UME) 58*256kB (UME) 24*512kB (UM) 7*1024kB (ME) 3*2048kB (UME) 217*4096kB (M) = 967144kB [ 525.193836][T12767] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 525.677795][T12767] Node 1 Normal: 171*4kB (UE) 27*8kB (UE) 34*16kB (UME) 193*32kB (UE) 62*64kB (UME) 7*128kB (UME) 6*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 3*2048kB (UM) 945*4096kB (UM) = 3896004kB [ 525.749979][T12767] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 525.785786][T12767] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 525.823600][T12767] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 525.954374][T12767] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 525.998108][T12767] 69618 total pagecache pages [ 526.011740][T12767] 0 pages in swap cache [ 526.016252][T12767] Free swap = 124996kB [ 526.020479][T12767] Total swap = 124996kB [ 526.027758][T12767] 2097051 pages RAM [ 526.031628][T12767] 0 pages HighMem/MovableOnly [ 526.036726][T12767] 430254 pages reserved [ 526.040925][T12767] 0 pages cma reserved [ 526.093420][ T30] audit: type=1400 audit(1757432137.086:1257): avc: denied { bind } for pid=12809 comm="syz.0.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 526.117988][ T5915] usb 3-1: new low-speed USB device number 72 using dummy_hcd [ 526.125743][T12810] QAT: failed to copy from user. [ 526.244577][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 526.277214][ T5915] usb 3-1: unable to get BOS descriptor or descriptor too short [ 526.287855][ T5915] usb 3-1: config 9 has an invalid interface number: 198 but max is 0 [ 526.296231][ T5915] usb 3-1: config 9 has no interface number 0 [ 526.302473][ T5915] usb 3-1: config 9 interface 198 has no altsetting 0 [ 526.416891][ T24] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 32 [ 526.583315][ T5915] usb 3-1: string descriptor 0 read error: -22 [ 526.606535][ T5915] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 526.633258][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.305952][ T24] usb 4-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 527.324130][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 527.341125][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 527.353843][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.369703][ T24] usb 4-1: Product: syz [ 527.373955][ T24] usb 4-1: Manufacturer: â°‰ [ 527.376631][ T5915] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 527.384497][ T24] usb 4-1: SerialNumber: syz [ 527.415451][T12803] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 527.424721][T12803] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 527.487468][ T5915] dvb-usb: bulk message failed: -22 (3/0) [ 527.510443][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 527.618478][T12799] 9pnet_fd: Insufficient options for proto=fd [ 527.652112][ T5915] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 527.660384][ T5915] usb 3-1: media controller created [ 527.676910][T12823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.904077][T12823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.103574][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 528.179650][ T24] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 528.203618][ T24] usb 4-1: USB disconnect, device number 21 [ 528.434028][ T5915] DVB: Unable to find symbol mt352_attach() [ 528.441373][ T5915] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 528.450895][ T5915] dvb-usb: bulk message failed: -22 (3/0) [ 528.479008][ T5915] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 528.528514][ T5915] usb 3-1: USB disconnect, device number 72 [ 528.582185][ T5915] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 528.726770][T12837] fuse: Bad value for 'user_id' [ 528.731648][T12837] fuse: Bad value for 'user_id' [ 529.211941][ T30] audit: type=1400 audit(1757432140.206:1258): avc: denied { connect } for pid=12842 comm="syz.3.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 529.696587][T12851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1628'. [ 529.847372][ T30] audit: type=1400 audit(1757432140.846:1259): avc: denied { call } for pid=12853 comm="syz.2.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 530.203691][T12859] 9pnet_fd: Insufficient options for proto=fd [ 530.284776][ T5928] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 530.378808][ T30] audit: type=1400 audit(1757432141.376:1260): avc: denied { read } for pid=12861 comm="syz.8.1633" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 530.438758][ T30] audit: type=1400 audit(1757432141.376:1261): avc: denied { open } for pid=12861 comm="syz.8.1633" path="/152/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 530.468006][ T5928] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 530.476631][ T5928] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 530.493550][ T5928] usb 3-1: config 8 has no interface number 0 [ 530.533120][ T5928] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 530.569556][T12871] SELinux: Context Ü is not valid (left unmapped). [ 530.577943][T12871] SELinux: Context  is not valid (left unmapped). [ 530.597439][ T5928] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 530.601061][ T30] audit: type=1400 audit(1757432141.376:1262): avc: denied { ioctl } for pid=12861 comm="syz.8.1633" path="/152/file0/file0" dev="fuse" ino=3 ioctlcmd=0x2272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 530.639333][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.649865][ T5928] usb 3-1: Product: syz [ 530.654182][ T5928] usb 3-1: Manufacturer: syz [ 530.694528][ T5928] usb 3-1: SerialNumber: syz [ 530.834441][ T30] audit: type=1400 audit(1757432141.506:1263): avc: denied { getopt } for pid=12870 comm="syz.3.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 531.350795][T12862] binder: 12853:12862 ioctl c0306201 200000000180 returned -14 [ 531.646077][T12888] 9pnet_fd: Insufficient options for proto=fd [ 532.369342][T12892] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1639'. [ 532.434818][T12896] vhci_hcd vhci_hcd.0: port 0 already used [ 532.848543][ T5928] usb 3-1: USB disconnect, device number 73 [ 532.875045][ T5975] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 532.928418][T12906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1643'. [ 532.945326][ T30] audit: type=1400 audit(1757432143.946:1264): avc: denied { write } for pid=12905 comm="syz.2.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 533.044556][ T5975] usb 1-1: Using ep0 maxpacket: 32 [ 533.068740][ T5975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.126847][ T5975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.152825][ T5975] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 533.173025][ T5975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.219746][ T5975] usb 1-1: config 0 descriptor?? [ 533.226883][T12917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=12917 comm=syz.3.1644 [ 533.821108][ T5975] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 533.840507][ T5975] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 534.020169][ T5975] ft260 0003:0403:6030.0012: chip code: 6424 8183 [ 534.442165][ T5975] usb 1-1: USB disconnect, device number 57 [ 535.084070][T12971] delete_channel: no stack [ 535.126743][ T30] audit: type=1400 audit(1757432146.096:1265): avc: denied { setopt } for pid=12970 comm="syz.3.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 535.256329][T12976] overlayfs: failed to clone upperpath [ 535.294661][ T5975] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 535.456976][ T5975] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 535.468440][ T5975] usb 1-1: config 0 has no interface number 0 [ 535.474625][ T5975] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 535.488011][ T5975] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 535.501672][ T5975] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 535.511056][ T5975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.523799][ T5975] usb 1-1: Product: syz [ 535.536342][ T5975] usb 1-1: Manufacturer: syz [ 535.541029][ T5975] usb 1-1: SerialNumber: syz [ 535.552130][ T5975] usb 1-1: config 0 descriptor?? [ 535.563356][T12969] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 535.587633][ T5975] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 535.599394][ T5975] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 535.625151][ T5928] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 535.882603][ T5928] usb 3-1: unable to get BOS descriptor or descriptor too short [ 536.687289][ T30] audit: type=1400 audit(1757432146.696:1266): avc: denied { write } for pid=12979 comm="syz.3.1653" name="file0" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 536.767604][ T5928] usb 3-1: config 9 has an invalid interface number: 198 but max is 0 [ 536.773413][ T30] audit: type=1400 audit(1757432146.696:1267): avc: denied { open } for pid=12979 comm="syz.3.1653" path="/11/file0" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 536.776783][ T5928] usb 3-1: config 9 has no interface number 0 [ 537.194999][ T5928] usb 3-1: config 9 interface 198 has no altsetting 0 [ 537.216523][ T5928] usb 3-1: string descriptor 0 read error: -22 [ 537.223280][ T5928] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 537.235392][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.257665][ T30] audit: type=1400 audit(1757432146.716:1268): avc: denied { ioctl } for pid=12979 comm="syz.3.1653" path="/11/file0" dev="tmpfs" ino=74 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 537.320709][ T5928] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 537.332587][ T5928] dvb-usb: bulk message failed: -22 (3/0) [ 537.375520][ T5928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 537.379906][ T30] audit: type=1400 audit(1757432147.886:1269): avc: denied { append } for pid=12968 comm="syz.0.1650" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 537.419052][ T5928] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 537.463388][ T5928] usb 3-1: media controller created [ 537.475351][T12994] netlink: 'syz.8.1656': attribute type 1 has an invalid length. [ 537.537145][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 537.616840][ T5975] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 537.692061][ T5928] DVB: Unable to find symbol mt352_attach() [ 537.712169][ T5928] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 537.732424][ T5928] dvb-usb: bulk message failed: -22 (3/0) [ 537.755722][ T5928] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 537.775190][ T5975] usb 4-1: Using ep0 maxpacket: 32 [ 537.792329][ T5975] usb 4-1: config 0 has an invalid interface number: 135 but max is 0 [ 537.812151][ T5975] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 537.848466][ T5975] usb 4-1: config 0 has no interface number 0 [ 537.870358][ T5975] usb 4-1: config 0 interface 135 altsetting 89 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 537.927713][ T5975] usb 4-1: config 0 interface 135 has no altsetting 0 [ 537.967843][ T5975] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 538.004329][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.023937][ T5975] usb 4-1: Product: syz [ 538.034651][ T5975] usb 4-1: Manufacturer: syz [ 538.044346][ T5975] usb 4-1: SerialNumber: syz [ 538.051855][ T5975] usb 4-1: config 0 descriptor?? [ 538.290361][ T5928] usb 1-1: USB disconnect, device number 58 [ 538.309182][ T5928] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 538.344366][ T5928] cyberjack 1-1:0.69: device disconnected [ 538.350808][T13006] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1655'. [ 538.361743][T13006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.462216][T13006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.497591][T12653] Bluetooth: hci7: Unknown advertising packet type: 0x1c [ 538.497651][T12653] Bluetooth: hci7: Malformed LE Event: 0x0d [ 538.523160][ T5975] em28xx 4-1:0.135: audio device (0ccd:10af): interface 135, class 1 [ 538.575143][ T5975] usb 4-1: USB disconnect, device number 22 [ 538.744672][ T5928] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 538.868034][T13011] mkiss: ax0: crc mode is auto. [ 539.058846][ T5928] usb 1-1: unable to get BOS descriptor or descriptor too short [ 539.078245][ T5928] usb 1-1: config 9 has an invalid interface number: 198 but max is 0 [ 539.102332][T13016] tipc: Started in network mode [ 539.120563][ T5928] usb 1-1: config 9 has no interface number 0 [ 539.136843][T13016] tipc: Node identity , cluster identity 4711 [ 539.149226][ T5928] usb 1-1: config 9 interface 198 has no altsetting 0 [ 539.162486][T13016] tipc: Failed to obtain node identity [ 539.187273][T13016] tipc: Enabling of bearer rejected, failed to enable media [ 539.206796][ T5928] usb 1-1: string descriptor 0 read error: -22 [ 539.213391][ T5928] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 539.224401][T13020] netlink: 'syz.3.1663': attribute type 4 has an invalid length. [ 539.229131][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.271797][ T5928] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 539.296485][T13020] netlink: 'syz.3.1663': attribute type 4 has an invalid length. [ 539.304688][ T5928] dvb-usb: bulk message failed: -22 (3/0) [ 539.333921][ T5928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 539.372104][ T5928] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 539.413356][ T5928] usb 1-1: media controller created [ 539.461922][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 539.472746][T13007] 9pnet_fd: Insufficient options for proto=fd [ 539.623839][T13029] kvm: pic: non byte read [ 539.675193][T13029] kvm: pic: non byte read [ 539.679611][T13029] kvm: pic: non byte read [ 540.147683][ T5974] usb 3-1: USB disconnect, device number 74 [ 540.168445][T13029] kvm: pic: non byte read [ 540.172857][T13029] kvm: pic: non byte read [ 540.189942][ T5974] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 540.194571][ T5928] DVB: Unable to find symbol mt352_attach() [ 540.205467][T13029] kvm: pic: non byte read [ 540.218525][T13029] kvm: pic: non byte read [ 540.230323][T13029] kvm: pic: non byte read [ 540.234979][T13029] kvm: pic: non byte read [ 540.239755][T13029] kvm: pic: non byte read [ 540.278412][ T5928] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 540.330273][ T5928] dvb-usb: bulk message failed: -22 (3/0) [ 540.364602][ T5928] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 541.374270][ T5928] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 541.374847][ T24] usb 1-1: USB disconnect, device number 59 [ 541.593163][T13059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 541.671845][ T5928] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 541.678001][ T30] audit: type=1400 audit(1757432152.586:1270): avc: denied { write } for pid=13057 comm="syz.2.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 541.777884][T13062] netlink: 'syz.8.1670': attribute type 2 has an invalid length. [ 541.787595][T13062] netlink: 119 bytes leftover after parsing attributes in process `syz.8.1670'. [ 541.887940][ T5928] usb 4-1: config 0 has no interface number 0 [ 541.905106][ T24] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 541.910866][ T5928] usb 4-1: config 0 interface 119 has no altsetting 0 [ 541.937621][ T5928] usb 4-1: New USB device found, idVendor=066b, idProduct=2202, bcdDevice=19.34 [ 542.061247][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.083941][ T5928] usb 4-1: Product: syz [ 542.088894][ T5928] usb 4-1: Manufacturer: syz [ 542.093782][ T5928] usb 4-1: SerialNumber: syz [ 542.109906][ T5928] usb 4-1: config 0 descriptor?? [ 542.333199][ T5928] kaweth 4-1:0.119: Firmware present in device. [ 542.340465][ T5928] kaweth 4-1:0.119: Error reading configuration (-71), no net device created [ 542.355113][ T5928] kaweth 4-1:0.119: probe with driver kaweth failed with error -5 [ 542.375398][ T5928] pegasus 4-1:0.119: probe with driver pegasus failed with error -71 [ 542.388411][ T5928] usb 4-1: USB disconnect, device number 23 [ 542.407313][ T30] audit: type=1326 audit(1757432153.396:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.2.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bb98ebe9 code=0x7fc00000 [ 542.718215][ T30] audit: type=1326 audit(1757432153.396:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.2.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bb98ebe9 code=0x7fc00000 [ 542.744134][ T30] audit: type=1326 audit(1757432153.406:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.2.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bb98ebe9 code=0x7fc00000 [ 542.785340][ T30] audit: type=1326 audit(1757432153.406:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.2.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bb98ebe9 code=0x7fc00000 [ 542.826815][T13073] tc_dump_action: action bad kind [ 542.828347][ T30] audit: type=1326 audit(1757432153.436:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.2.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bb98ebe9 code=0x7fc00000 [ 542.868392][ T30] audit: type=1326 audit(1757432153.436:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.2.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bb98ebe9 code=0x7fc00000 [ 542.927057][ T30] audit: type=1326 audit(1757432153.436:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.2.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bb98ebe9 code=0x7fc00000 [ 542.971003][ T30] audit: type=1326 audit(1757432153.626:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.2.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bb98ebe9 code=0x7fc00000 [ 543.269828][ T5928] usb 3-1: new low-speed USB device number 75 using dummy_hcd [ 543.324845][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 543.386766][T13073] lo speed is unknown, defaulting to 1000 [ 543.405866][T13073] lo speed is unknown, defaulting to 1000 [ 543.484572][ T5928] usb 3-1: device descriptor read/64, error -32 [ 543.504231][ T30] audit: type=1326 audit(1757432154.496:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13082 comm="syz.9.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a5f8ebe9 code=0x7ffc0000 [ 543.628625][ T30] audit: type=1326 audit(1757432154.496:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13082 comm="syz.9.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f95a5f8ebe9 code=0x7ffc0000 [ 543.629509][T13073] lo speed is unknown, defaulting to 1000 [ 543.684857][T13085] debugfs: '!' already exists in 'ieee80211' [ 543.824559][ T5928] usb 3-1: new low-speed USB device number 76 using dummy_hcd [ 543.999904][ T5928] usb 3-1: unable to get BOS descriptor or descriptor too short [ 544.008896][ T5928] usb 3-1: config 9 has an invalid interface number: 198 but max is 0 [ 544.018962][ T5928] usb 3-1: config 9 has no interface number 0 [ 544.026793][ T5928] usb 3-1: config 9 interface 198 has no altsetting 0 [ 544.046177][ T5928] usb 3-1: string descriptor 0 read error: -22 [ 544.053412][ T5928] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 544.069185][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.120409][ T5928] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 544.130486][ T5928] dvb-usb: bulk message failed: -22 (3/0) [ 544.159309][ T5928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 544.169113][ T5928] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 544.188207][ T5928] usb 3-1: media controller created [ 544.360377][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 544.517306][ T5928] DVB: Unable to find symbol mt352_attach() [ 544.557989][ T5928] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 544.569901][ T5928] dvb-usb: bulk message failed: -22 (3/0) [ 544.598681][ T5928] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 544.657948][T13096] netlink: 'syz.8.1680': attribute type 10 has an invalid length. [ 544.929084][T13096] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 544.939480][T13096] netlink: 'syz.8.1680': attribute type 10 has an invalid length. [ 545.128539][T13096] netlink: 'syz.8.1680': attribute type 10 has an invalid length. [ 545.136698][T13096] netlink: 'syz.8.1680': attribute type 10 has an invalid length. [ 545.153324][T13096] netlink: 'syz.8.1680': attribute type 10 has an invalid length. [ 545.190387][T13096] netlink: 'syz.8.1680': attribute type 10 has an invalid length. [ 545.220485][T13096] netlink: 'syz.8.1680': attribute type 10 has an invalid length. [ 545.479116][T13096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.501114][T13094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.892516][T13118] /dev/nullb0: Can't lookup blockdev [ 545.954691][ T5974] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 546.094741][ T5974] usb 1-1: device descriptor read/64, error -71 [ 546.108488][T13129] lo speed is unknown, defaulting to 1000 [ 546.116173][T13129] lo speed is unknown, defaulting to 1000 [ 546.124627][T13129] lo speed is unknown, defaulting to 1000 [ 546.444684][ T5974] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 546.452400][ T24] usb 3-1: USB disconnect, device number 76 [ 546.980965][ T24] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 547.004925][ T5974] usb 1-1: device descriptor read/64, error -71 [ 547.145149][ T5974] usb usb1-port1: attempt power cycle [ 547.524559][ T5974] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 547.560433][T13153] option changes via remount are deprecated (pid=13147 comm=syz.2.1692) [ 547.577500][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 547.577519][ T30] audit: type=1400 audit(1757432158.545:1315): avc: denied { remount } for pid=13147 comm="syz.2.1692" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 547.645127][ T5974] usb 1-1: device descriptor read/8, error -71 [ 547.948613][ T5974] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 547.985002][ T5974] usb 1-1: device descriptor read/8, error -71 [ 548.058237][T13162] fuse: Invalid rootmode [ 548.522047][T13163] netlink: 'syz.9.1695': attribute type 1 has an invalid length. [ 548.603974][T13163] 8021q: adding VLAN 0 to HW filter on device bond2 [ 548.764330][ T5974] usb usb1-port1: unable to enumerate USB device [ 548.846824][ T30] audit: type=1400 audit(1757432159.845:1316): avc: denied { read } for pid=13175 comm="syz.3.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 549.243228][T13176] sp0: Synchronizing with TNC [ 549.342506][ T30] audit: type=1400 audit(1757432159.845:1317): avc: denied { map } for pid=13175 comm="syz.3.1696" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 549.368919][ T30] audit: type=1400 audit(1757432159.845:1318): avc: denied { execute } for pid=13175 comm="syz.3.1696" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 549.392290][ C0] vkms_vblank_simulate: vblank timer overrun [ 550.234105][ T30] audit: type=1400 audit(1757432161.215:1319): avc: denied { write } for pid=13187 comm="syz.0.1701" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 550.343895][T13190] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 552.236096][T13218] netlink: 'syz.8.1707': attribute type 2 has an invalid length. [ 553.134821][T13240] syzkaller1: entered promiscuous mode [ 553.140646][T13240] syzkaller1: entered allmulticast mode [ 554.157014][ T5928] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 554.327777][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 554.336591][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.358239][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.394604][ T30] audit: type=1400 audit(1757432165.386:1320): avc: denied { write } for pid=13250 comm="syz.0.1716" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 554.434735][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 554.491907][ T30] audit: type=1400 audit(1757432165.386:1321): avc: denied { ioctl } for pid=13250 comm="syz.0.1716" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 554.498748][ T5928] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 554.633530][T13266] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 554.717538][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.735517][ T5928] usb 3-1: config 0 descriptor?? [ 555.576434][T13243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.595920][T13243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.709431][ T5928] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 555.719786][ T5928] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 555.728739][ T5928] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 555.736223][ T5928] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 555.743441][ T5928] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 555.752496][ T5928] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 555.763902][ T5928] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 555.771229][ T5928] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 555.779485][ T5928] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 555.786986][ T5928] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 555.817820][ T5928] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0013/input/input32 [ 555.848954][ T5928] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 557.540211][ T9] usb 3-1: USB disconnect, device number 77 [ 557.547426][ T5975] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 557.684565][ T5915] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 557.714585][ T5975] usb 4-1: Using ep0 maxpacket: 32 [ 557.725789][ T5975] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 557.744787][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.769140][ T5975] usb 4-1: config 0 descriptor?? [ 557.784292][ T5975] gspca_main: sq930x-2.14.0 probing 041e:403c [ 557.838056][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 557.862687][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 557.883285][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 557.909917][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 557.943559][ T5915] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 557.953744][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.963293][ T5915] usb 1-1: Product: syz [ 557.969103][ T5915] usb 1-1: Manufacturer: syz [ 557.973735][ T5915] usb 1-1: SerialNumber: syz [ 557.986611][ T5915] usb 1-1: config 0 descriptor?? [ 559.062389][ T30] audit: type=1326 audit(1757432169.636:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13301 comm="syz.3.1728" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f394478ebe9 code=0x0 [ 559.146732][ T30] audit: type=1400 audit(1757432169.696:1323): avc: denied { connect } for pid=13301 comm="syz.3.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 559.159596][ T5975] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 559.523673][ T5975] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 559.709042][ T30] audit: type=1400 audit(1757432170.706:1324): avc: denied { create } for pid=13319 comm="syz.8.1731" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 559.849434][ T5915] adutux 1-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 559.915303][ T5915] usb 1-1: USB disconnect, device number 64 [ 559.983553][T13327] loop6: detected capacity change from 0 to 524287999 [ 560.938029][ T5928] usb 4-1: USB disconnect, device number 24 [ 561.114759][ T5915] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 561.115161][T13335] @: renamed from vlan0 (while UP) [ 561.138767][ T30] audit: type=1400 audit(1757432172.136:1325): avc: denied { validate_trans } for pid=13332 comm="syz.3.1734" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 561.163337][ T30] audit: type=1400 audit(1757432172.156:1326): avc: denied { mounton } for pid=13332 comm="syz.3.1734" path="/syzcgroup/net/syz3/cgroup.procs" dev="cgroup" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 561.304574][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 561.311147][T13337] ceph: No mds server is up or the cluster is laggy [ 561.317681][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 561.332819][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 561.393085][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 561.441905][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 561.453253][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 561.476590][ T5915] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 561.487172][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.501823][ T5915] usb 1-1: Product: syz [ 561.515057][ T5915] usb 1-1: Manufacturer: syz [ 561.524527][ T5915] usb 1-1: SerialNumber: syz [ 561.539629][ T5915] usb 1-1: config 0 descriptor?? [ 561.563121][ T5915] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input33 [ 561.664921][ T5975] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 561.768006][ T5901] usb 1-1: USB disconnect, device number 65 [ 561.846658][ T5975] usb 3-1: Using ep0 maxpacket: 32 [ 561.856896][ T5975] usb 3-1: config 211 has an invalid descriptor of length 0, skipping remainder of the config [ 561.914341][ T5975] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 561.962681][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.978220][ T5975] usb 3-1: Product: syz [ 561.982397][ T5975] usb 3-1: Manufacturer: syz [ 561.987065][ T5975] usb 3-1: SerialNumber: syz [ 561.997143][ T5975] mct_u232 3-1:211.0: MCT U232 converter detected [ 562.005380][ T5975] mct_u232 ttyUSB0: expected endpoint missing [ 562.173345][ T30] audit: type=1400 audit(1757432173.156:1327): avc: denied { read } for pid=13347 comm="syz.3.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 562.200462][ T5889] usb 3-1: USB disconnect, device number 78 [ 562.208812][ T5889] mct_u232 3-1:211.0: device disconnected [ 562.675089][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.681466][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.406066][ T30] audit: type=1400 audit(1757432174.396:1328): avc: denied { append } for pid=13369 comm="syz.8.1744" name="pfkey" dev="proc" ino=4026534311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 563.549770][ T5889] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 563.990221][T13382] team0: Port device team_slave_0 removed [ 564.026234][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 564.065572][ T5889] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 564.142212][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.162767][ T5889] usb 3-1: config 0 descriptor?? [ 564.179880][ T5889] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 564.686071][ T30] audit: type=1400 audit(1757432175.676:1329): avc: denied { getopt } for pid=13366 comm="syz.2.1743" lport=47677 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 564.882413][ T5889] gspca_nw80x: reg_r err -71 [ 564.974599][ T5889] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 565.029189][ T5889] usb 3-1: USB disconnect, device number 79 [ 565.910522][ T5975] IPVS: starting estimator thread 0... [ 566.016860][T13407] IPVS: using max 76 ests per chain, 182400 per kthread [ 566.274790][ T5975] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 566.617188][T13421] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1756'. [ 567.054690][ T5975] usb 4-1: Using ep0 maxpacket: 32 [ 567.070951][ T5975] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 567.080678][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.099673][ T5975] usb 4-1: config 0 descriptor?? [ 567.160761][T13423] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1759'. [ 567.841841][ T5889] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 567.925278][ T5975] cypress 0003:04B4:BCA1.0014: hidraw0: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.3-1/input0 [ 567.992750][ T30] audit: type=1400 audit(1757432178.946:1330): avc: denied { firmware_load } for pid=13429 comm="syz.0.1761" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 568.104560][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 568.111216][ T5889] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 568.133641][ T5889] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 55, changing to 9 [ 568.231813][T13435] syz.0.1761 (13435) used greatest stack depth: 19336 bytes left [ 568.249775][ T5889] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 8496, setting to 1024 [ 568.338781][ T5889] usb 3-1: config 0 interface 0 has no altsetting 0 [ 568.369498][ T5889] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 568.391029][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.444683][ T5889] usb 3-1: Product: syz [ 568.462777][ T5889] usb 3-1: Manufacturer: syz [ 568.477889][ T5889] usb 3-1: SerialNumber: syz [ 568.592192][ T5889] usb 3-1: config 0 descriptor?? [ 568.809316][ T5889] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input34 [ 569.013919][ T5889] usb 3-1: USB disconnect, device number 80 [ 569.086498][ T5915] usb 4-1: USB disconnect, device number 25 [ 569.526779][ T30] audit: type=1400 audit(1757432180.486:1331): avc: denied { ioctl } for pid=13455 comm="syz.0.1765" path="socket:[49607]" dev="sockfs" ino=49607 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 569.980783][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'. [ 570.024319][T13461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1766'. [ 570.120080][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'. [ 570.129242][ T4779] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.139174][ T4779] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.184614][T13461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1766'. [ 570.270791][ T4779] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.318082][ T4779] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.410970][T13471] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1769'. [ 570.434119][T13471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1769'. [ 570.492503][T13471] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1769'. [ 570.512308][T13471] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1769'. [ 570.520931][T13464] lo speed is unknown, defaulting to 1000 [ 570.638477][T13464] lo speed is unknown, defaulting to 1000 [ 570.651757][T13464] lo speed is unknown, defaulting to 1000 [ 571.569946][ T30] audit: type=1400 audit(1757432182.566:1332): avc: denied { ioctl } for pid=13487 comm="syz.0.1775" path="socket:[49765]" dev="sockfs" ino=49765 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 573.363663][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'. [ 574.437917][T13536] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1784'. [ 574.823276][T13546] debugfs: '!' already exists in 'ieee80211' [ 574.877628][ T30] audit: type=1326 audit(1757432185.816:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13540 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bb98ebe9 code=0x7ffc0000 [ 575.037415][ T30] audit: type=1326 audit(1757432185.816:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13540 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f46bb98ebe9 code=0x7ffc0000 [ 575.069052][ T30] audit: type=1326 audit(1757432185.816:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13540 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bb98ebe9 code=0x7ffc0000 [ 575.199050][ T30] audit: type=1326 audit(1757432185.816:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13540 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f46bb98ebe9 code=0x7ffc0000 [ 575.254514][ T24] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 575.348557][ T30] audit: type=1326 audit(1757432185.816:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13540 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bb98ebe9 code=0x7ffc0000 [ 575.443682][ T30] audit: type=1326 audit(1757432185.816:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13540 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f46bb98ebe9 code=0x7ffc0000 [ 575.479067][ T30] audit: type=1326 audit(1757432185.816:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13540 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bb98ebe9 code=0x7ffc0000 [ 575.516200][T13557] input: syz1 as /devices/virtual/input/input35 [ 575.562127][ T30] audit: type=1326 audit(1757432185.816:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13540 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f46bb98ebe9 code=0x7ffc0000 [ 575.660664][ T30] audit: type=1326 audit(1757432185.836:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13540 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46bb98ebe9 code=0x7ffc0000 [ 575.687637][ T30] audit: type=1326 audit(1757432185.846:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13540 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f46bb98ebe9 code=0x7ffc0000 [ 575.720250][T13556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1789'. [ 575.904635][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 576.099935][ T24] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 576.140711][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.149322][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.175058][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.215135][ T24] usb 3-1: Product: syz [ 576.221772][ T24] usb 3-1: Manufacturer: syz [ 576.231903][ T24] usb 3-1: SerialNumber: syz [ 576.287522][ T24] usb 3-1: config 0 descriptor?? [ 576.329864][ T24] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 576.341735][ T24] usb 3-1: Detected FT232H [ 576.540291][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 576.753037][ T24] ftdi_sio 3-1:0.0: GPIO initialisation failed: -5 [ 576.772567][ T24] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 577.231690][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.284550][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 577.375544][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.384102][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.595812][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 577.626701][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 577.641631][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.682285][ T24] usb 4-1: Product: syz [ 577.700072][ T24] usb 4-1: Manufacturer: syz [ 577.708440][ T24] usb 4-1: SerialNumber: syz [ 577.739311][ T24] usb 4-1: config 0 descriptor?? [ 577.841829][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 578.259285][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.650091][ T5915] usb 3-1: USB disconnect, device number 81 [ 578.688801][ T5915] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 578.727975][ T5915] ftdi_sio 3-1:0.0: device disconnected [ 579.115033][ T24] gspca_sonixj: reg_w1 err -71 [ 579.123191][ T5889] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 579.232290][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.265038][ T24] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 579.384561][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 579.409489][ T5889] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 579.419235][ T5889] usb 1-1: config 0 has no interface number 0 [ 579.675098][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.685618][ T24] usb 4-1: USB disconnect, device number 26 [ 579.745937][ T5889] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.777345][ T5889] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.798446][ T5889] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 579.832414][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.854600][ T5889] usb 1-1: config 0 descriptor?? [ 579.935014][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.230233][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 580.230251][ T30] audit: type=1400 audit(1757432191.216:1399): avc: denied { read } for pid=13602 comm="syz.3.1803" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 580.300991][ T30] audit: type=1400 audit(1757432191.216:1400): avc: denied { open } for pid=13602 comm="syz.3.1803" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 580.345345][T13614] netlink: 'syz.9.1805': attribute type 10 has an invalid length. [ 580.355546][T13614] team0: Device hsr_slave_0 failed to register rx_handler [ 580.422954][T13615] IPv6: NLM_F_CREATE should be specified when creating new route [ 580.475948][ T5889] input: HID 28bd:0094 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0094.0015/input/input36 [ 580.524638][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 580.640633][ T5889] uclogic 0003:28BD:0094.0015: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.0-1/input1 [ 580.684513][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 580.698902][ T24] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 580.728263][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.744202][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.759408][ T5889] usb 1-1: USB disconnect, device number 66 [ 580.873783][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 580.889542][T13617] fido_id[13617]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 580.904693][ T24] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 580.921485][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.981832][ T24] usb 4-1: config 0 descriptor?? [ 581.028548][ T24] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input37 [ 581.136964][T13626] netlink: 88 bytes leftover after parsing attributes in process `syz.8.1807'. [ 581.261970][T13626] netlink: 'syz.8.1807': attribute type 21 has an invalid length. [ 581.269874][T13626] netlink: 128 bytes leftover after parsing attributes in process `syz.8.1807'. [ 581.319919][ T30] audit: type=1326 audit(1757432192.306:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13611 comm="syz.9.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a5f8ebe9 code=0x7fc00000 [ 581.531424][T13627] batadv1: entered promiscuous mode [ 581.540027][T13627] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 581.555127][T13626] netlink: 'syz.8.1807': attribute type 4 has an invalid length. [ 581.962396][T13626] netlink: 3 bytes leftover after parsing attributes in process `syz.8.1807'. [ 581.976597][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.013150][ T5915] usb 4-1: USB disconnect, device number 27 [ 582.254733][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.058859][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.064702][ T5915] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 584.097176][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.180505][ T30] audit: type=1400 audit(1757432195.176:1402): avc: denied { getopt } for pid=13661 comm="syz.9.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 584.266461][ T5915] usb 1-1: config 54 has an invalid interface number: 154 but max is 0 [ 584.284809][ T5915] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 584.382378][ T5915] usb 1-1: config 54 has no interface number 0 [ 584.415005][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.449933][ T5915] usb 1-1: too many endpoints for config 54 interface 154 altsetting 0: 146, using maximum allowed: 30 [ 584.465605][ T5915] usb 1-1: config 54 interface 154 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 146 [ 584.537816][ T5915] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 584.547017][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.558793][ T5915] usb 1-1: Product: syz [ 584.558802][ T30] audit: type=1400 audit(1757432195.536:1403): avc: denied { write } for pid=13668 comm="syz.8.1818" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 584.562993][ T5915] usb 1-1: Manufacturer: syz [ 584.621665][ T5915] usb 1-1: SerialNumber: syz [ 584.641402][ T30] audit: type=1400 audit(1757432195.536:1404): avc: denied { open } for pid=13668 comm="syz.8.1818" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 584.669952][ T5915] hub 1-1:54.154: bad descriptor, ignoring hub [ 584.702423][T13675] netlink: 4244 bytes leftover after parsing attributes in process `syz.9.1819'. [ 584.711741][T13674] netlink: 4244 bytes leftover after parsing attributes in process `syz.9.1819'. [ 584.738982][ T5915] hub 1-1:54.154: probe with driver hub failed with error -5 [ 584.766134][ T30] audit: type=1400 audit(1757432195.536:1405): avc: denied { ioctl } for pid=13668 comm="syz.8.1818" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 584.813377][ T5915] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 584.848875][ T59] usb 1-1: Failed to submit usb control message: -71 [ 584.856104][ T59] usb 1-1: unable to send the bmi data to the device: -71 [ 584.896090][ T59] usb 1-1: unable to get target info from device [ 584.926231][ T59] usb 1-1: could not get target info (-71) [ 584.932072][ T59] usb 1-1: could not probe fw (-71) [ 585.070359][ T30] audit: type=1400 audit(1757432196.066:1406): avc: denied { create } for pid=13687 comm="syz.8.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 585.130221][ T30] audit: type=1400 audit(1757432196.086:1407): avc: denied { sys_admin } for pid=13687 comm="syz.8.1821" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 585.156847][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.295270][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.554337][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.753682][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.281430][ T30] audit: type=1400 audit(1757432198.276:1408): avc: denied { ioctl } for pid=13713 comm="syz.3.1826" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 587.320264][T13719] netlink: 'syz.9.1828': attribute type 4 has an invalid length. [ 587.332250][T13718] netlink: 'syz.9.1828': attribute type 4 has an invalid length. [ 587.404186][T13712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 587.533899][T13721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.619079][ T24] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 587.703243][ T1208] usb 1-1: USB disconnect, device number 67 [ 587.878449][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.948244][ T24] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 587.958402][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.013612][ T24] usb 3-1: Product: syz [ 588.158491][ T24] usb 3-1: Manufacturer: syz [ 588.195156][ T24] usb 3-1: SerialNumber: syz [ 588.243289][ T24] usb 3-1: config 0 descriptor?? [ 588.664542][ T1208] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 588.685781][T13744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1827'. [ 588.736755][T13744] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1827'. [ 588.765628][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.768414][ T30] audit: type=1400 audit(1757432199.756:1409): avc: denied { write } for pid=13714 comm="syz.2.1827" name="mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 588.773743][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.837459][ T1208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 588.898736][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.946955][ T30] audit: type=1400 audit(1757432199.846:1410): avc: denied { write } for pid=13738 comm="syz.3.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 589.130815][ T1208] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 589.148132][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.379464][ T1208] usb 1-1: Product: syz [ 589.390262][ T1208] usb 1-1: Manufacturer: syz [ 589.410586][ T1208] usb 1-1: SerialNumber: syz [ 589.469627][ T1208] usb 1-1: config 0 descriptor?? [ 589.535243][ T31] INFO: task syz.7.1277:11351 blocked for more than 143 seconds. [ 589.547646][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.564702][ T31] Not tainted syzkaller #0 [ 589.569686][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 589.615258][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.664573][ T31] task:syz.7.1277 state:D stack:26312 pid:11351 tgid:11350 ppid:8966 task_flags:0x400140 flags:0x00004004 [ 589.766949][ T31] Call Trace: [ 589.770330][ T31] [ 589.785556][ T31] __schedule+0x1190/0x5de0 [ 589.809910][ T31] ? check_path.constprop.0+0x24/0x50 [ 589.864986][ T31] ? __pfx___schedule+0x10/0x10 [ 589.888488][ T31] ? find_held_lock+0x2b/0x80 [ 589.930411][ T31] ? schedule+0x2d7/0x3a0 [ 589.938701][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.948702][ T31] schedule+0xe7/0x3a0 [ 589.952874][ T31] schedule_preempt_disabled+0x13/0x30 [ 589.959346][ T31] rwsem_down_read_slowpath+0x64e/0xbf0 [ 589.965399][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 589.975567][ T1208] usb 1-1: USB disconnect, device number 68 [ 590.008811][ T31] ? __pfx___might_resched+0x10/0x10 [ 590.036098][ T31] down_read+0xef/0x480 [ 590.045634][ T31] ? __pfx_down_read+0x10/0x10 [ 590.049522][ T6848] udevd[6848]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 590.073564][ T31] ? __pfx___might_resched+0x10/0x10 [ 590.079622][ T31] super_lock+0x31c/0x3f0 [ 590.092578][ T31] ? __pfx_super_lock+0x10/0x10 [ 590.108871][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 590.122197][ T31] ? find_held_lock+0x2b/0x80 [ 590.137696][ T31] ? __iterate_supers+0x1b6/0x360 [ 590.142855][ T31] __iterate_supers+0x1e0/0x360 [ 590.150917][ T31] ? __pfx_quota_sync_one+0x10/0x10 [ 590.156829][ T31] __x64_sys_quotactl+0x2b3/0x440 [ 590.162054][ T31] ? __pfx___x64_sys_quotactl+0x10/0x10 [ 590.169932][ T31] ? syscall_user_dispatch+0x78/0x140 [ 590.178108][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.190342][ T31] do_syscall_64+0xcd/0x4c0 [ 590.208281][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.219881][ T31] RIP: 0033:0x7f446378ebe9 [ 590.226851][ T31] RSP: 002b:00007f44645c5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 590.237071][ T31] RAX: ffffffffffffffda RBX: 00007f44639c5fa0 RCX: 00007f446378ebe9 [ 590.247256][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000101 [ 590.256024][ T31] RBP: 00007f4463811e19 R08: 0000000000000000 R09: 0000000000000000 [ 590.265373][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.273819][ T31] R13: 00007f44639c6038 R14: 00007f44639c5fa0 R15: 00007ffd847e9b48 [ 590.283322][ T31] [ 590.290322][ T31] [ 590.290322][ T31] Showing all locks held in the system: [ 590.302772][ T31] 4 locks held by kworker/1:0/24: [ 590.322423][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 590.337009][ T31] #1: ffff8880b8524088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 590.346740][ T31] #2: ffffffff8e4ae838 (&group->avgs_lock){+.+.}-{4:4}, at: psi_avgs_work+0x84/0x200 [ 590.362567][ T31] #3: ffff8880b8525b18 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x127/0x1d0 [ 590.373064][ T31] 1 lock held by khungtaskd/31: [ 590.378449][ T31] #0: ffffffff8e5c1260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 590.388758][ T31] 4 locks held by kworker/u8:6/1153: [ 590.394027][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 590.405667][ T31] #1: ffffc90003d9fd10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 590.416879][ T31] #2: ffffffff90384ac8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 590.426361][ T31] #3: ffffffff8e5cc7f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 590.437520][ T31] 3 locks held by kworker/u8:7/4779: [ 590.442805][ T31] #0: ffff8881452a4948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 590.453872][ T31] #1: ffffc9000efb7d10 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 590.467979][ T31] #2: ffffffff90384ac8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xcf/0x640 [ 590.479286][ T31] 1 lock held by klogd/5208: [ 590.483865][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 590.494390][ T31] 2 locks held by getty/5607: [ 590.499446][ T31] #0: ffff88814d69a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 590.509207][ T31] #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 590.519483][ T31] 1 lock held by syz-executor/5842: [ 590.525444][ T31] #0: ffff88804e31c0e0 (&type->s_umount_key#67){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 590.536173][ T31] 5 locks held by kworker/1:4/5973: [ 590.542189][ T31] #0: ffff888143ece948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 590.553512][ T31] #1: ffffc90004fafd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 590.565115][ T31] #2: ffff888146701198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 590.573967][ T31] #3: ffff8881463df518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0 [ 590.585035][ T31] #4: ffff888145f87e68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0 [ 590.595128][ T31] 1 lock held by syz.7.1277/11351: [ 590.600212][ T31] #0: ffff88804e31c0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x31c/0x3f0 [ 590.610462][ T31] 1 lock held by syz.4.1533/12432: [ 590.616343][ T31] #0: ffff88804e31c0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x31c/0x3f0 [ 590.626972][ T31] 1 lock held by syz.4.1533/12434: [ 590.632089][ T31] #0: ffff88804e31c0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x31c/0x3f0 [ 590.643111][ T31] 2 locks held by kworker/u8:10/12938: [ 590.648861][ T31] #0: ffff88801dfa7148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 590.659686][ T31] #1: ffffc90013827d10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 590.671266][ T31] 2 locks held by syz.0.1829/13722: [ 590.676515][ T31] #0: ffff88804c4d0e08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 590.687081][ T31] #1: ffffffff8e5cc7f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 590.697499][ T31] [ 590.699822][ T31] ============================================= [ 590.699822][ T31] [ 590.711038][ T31] NMI backtrace for cpu 1 [ 590.711052][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 590.711072][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 590.711081][ T31] Call Trace: [ 590.711087][ T31] [ 590.711093][ T31] dump_stack_lvl+0x116/0x1f0 [ 590.711121][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 590.711136][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 590.711157][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 590.711185][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 590.711204][ T31] watchdog+0xf0e/0x1260 [ 590.711228][ T31] ? __pfx_watchdog+0x10/0x10 [ 590.711245][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 590.711267][ T31] ? __kthread_parkme+0x19e/0x250 [ 590.711300][ T31] ? __pfx_watchdog+0x10/0x10 [ 590.711318][ T31] kthread+0x3c2/0x780 [ 590.711337][ T31] ? __pfx_kthread+0x10/0x10 [ 590.711355][ T31] ? rcu_is_watching+0x12/0xc0 [ 590.711376][ T31] ? __pfx_kthread+0x10/0x10 [ 590.711394][ T31] ret_from_fork+0x5d4/0x6f0 [ 590.711410][ T31] ? __pfx_kthread+0x10/0x10 [ 590.711427][ T31] ret_from_fork_asm+0x1a/0x30 [ 590.711460][ T31] [ 590.711466][ T31] Sending NMI from CPU 1 to CPUs 0: [ 590.835026][ C0] NMI backtrace for cpu 0 [ 590.835041][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 590.835058][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 590.835066][ C0] RIP: 0010:lock_release+0x13/0x2f0 [ 590.835091][ C0] Code: 44 8b 5c 24 0c eb 8c 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 49 89 f4 53 48 89 fb <48> 83 ec 18 65 48 8b 05 79 ed 3e 12 48 89 44 24 10 31 c0 0f 1f 44 [ 590.835104][ C0] RSP: 0018:ffffc900000077a0 EFLAGS: 00000002 [ 590.835116][ C0] RAX: 0000000000000001 RBX: ffffffff8e5c1260 RCX: ffffffff9141f001 [ 590.835125][ C0] RDX: 0000000000000000 RSI: ffffffff816ae8a4 RDI: ffffffff8e5c1260 [ 590.835134][ C0] RBP: 0000000000000001 R08: ffffffff9141f05a R09: 0000000000000000 [ 590.835142][ C0] R10: 0000000000000003 R11: 0000000000007c39 R12: ffffffff816ae8a4 [ 590.835151][ C0] R13: ffffc90000007840 R14: ffffc90000007ff0 R15: ffffc90000007874 [ 590.835160][ C0] FS: 0000000000000000(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000 [ 590.835174][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 590.835183][ C0] CR2: 000020000035f030 CR3: 0000000079fcc000 CR4: 00000000003526f0 [ 590.835192][ C0] Call Trace: [ 590.835196][ C0] [ 590.835203][ C0] unwind_next_frame+0x3f9/0x20a0 [ 590.835218][ C0] ? __irq_exit_rcu+0x109/0x170 [ 590.835235][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 590.835254][ C0] arch_stack_walk+0x94/0x100 [ 590.835270][ C0] ? irq_exit_rcu+0x9/0x30 [ 590.835287][ C0] stack_trace_save+0x8e/0xc0 [ 590.835304][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 590.835323][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 590.835342][ C0] kasan_save_stack+0x33/0x60 [ 590.835355][ C0] ? kasan_save_stack+0x33/0x60 [ 590.835367][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 590.835383][ C0] ? insert_work+0x36/0x230 [ 590.835397][ C0] ? __queue_work+0x3f8/0x1160 [ 590.835410][ C0] ? call_timer_fn+0x197/0x620 [ 590.835428][ C0] ? __run_timers+0x569/0x960 [ 590.835446][ C0] ? run_timer_base+0x114/0x190 [ 590.835464][ C0] ? run_timer_softirq+0x1a/0x40 [ 590.835475][ C0] ? handle_softirqs+0x219/0x8e0 [ 590.835489][ C0] ? __irq_exit_rcu+0x109/0x170 [ 590.835517][ C0] kasan_record_aux_stack+0xa7/0xc0 [ 590.835534][ C0] insert_work+0x36/0x230 [ 590.835548][ C0] __queue_work+0x3f8/0x1160 [ 590.835564][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 590.835585][ C0] call_timer_fn+0x197/0x620 [ 590.835603][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 590.835624][ C0] ? __run_timers+0x559/0x960 [ 590.835643][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 590.835659][ C0] __run_timers+0x569/0x960 [ 590.835679][ C0] ? __pfx___run_timers+0x10/0x10 [ 590.835705][ C0] run_timer_base+0x114/0x190 [ 590.835723][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 590.835742][ C0] ? rcu_is_watching+0x12/0xc0 [ 590.835759][ C0] run_timer_softirq+0x1a/0x40 [ 590.835770][ C0] handle_softirqs+0x219/0x8e0 [ 590.835787][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 590.835805][ C0] __irq_exit_rcu+0x109/0x170 [ 590.835820][ C0] irq_exit_rcu+0x9/0x30 [ 590.835834][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 590.835850][ C0] [ 590.835855][ C0] [ 590.835860][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 590.835874][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 590.835890][ C0] Code: cc 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 b3 15 00 fb f4 8c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 590.835902][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 590.835912][ C0] RAX: 0000000001de6af5 RBX: 0000000000000000 RCX: ffffffff8b945c29 [ 590.835921][ C0] RDX: 0000000000000000 RSI: ffffffff8de522e8 RDI: ffffffff8c162d80 [ 590.835930][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655 [ 590.835939][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 590.835948][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab6b90 R15: 0000000000000000 [ 590.835959][ C0] ? ct_kernel_exit+0x139/0x190 [ 590.835978][ C0] default_idle+0x13/0x20 [ 590.835994][ C0] default_idle_call+0x6d/0xb0 [ 590.836011][ C0] do_idle+0x391/0x510 [ 590.836027][ C0] ? __pfx_do_idle+0x10/0x10 [ 590.836043][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 590.836059][ C0] cpu_startup_entry+0x4f/0x60 [ 590.836074][ C0] rest_init+0x16b/0x2b0 [ 590.836092][ C0] ? acpi_subsystem_init+0x133/0x180 [ 590.836108][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 590.836126][ C0] start_kernel+0x3ee/0x4d0 [ 590.836142][ C0] x86_64_start_reservations+0x18/0x30 [ 590.836157][ C0] x86_64_start_kernel+0x130/0x190 [ 590.836172][ C0] common_startup_64+0x13e/0x148 [ 590.836192][ C0] [ 590.837235][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 591.305491][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 591.314583][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 591.324627][ T31] Call Trace: [ 591.327891][ T31] [ 591.330803][ T31] dump_stack_lvl+0x3d/0x1f0 [ 591.335382][ T31] vpanic+0x6e8/0x7a0 [ 591.339350][ T31] ? __pfx_vpanic+0x10/0x10 [ 591.343837][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 591.349808][ T31] panic+0xca/0xd0 [ 591.353515][ T31] ? __pfx_panic+0x10/0x10 [ 591.357916][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 591.363273][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 591.369406][ T31] ? watchdog+0xd78/0x1260 [ 591.373803][ T31] ? watchdog+0xd6b/0x1260 [ 591.378228][ T31] watchdog+0xd89/0x1260 [ 591.382455][ T31] ? __pfx_watchdog+0x10/0x10 [ 591.387109][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 591.392293][ T31] ? __kthread_parkme+0x19e/0x250 [ 591.397304][ T31] ? __pfx_watchdog+0x10/0x10 [ 591.401960][ T31] kthread+0x3c2/0x780 [ 591.406008][ T31] ? __pfx_kthread+0x10/0x10 [ 591.410577][ T31] ? rcu_is_watching+0x12/0xc0 [ 591.415323][ T31] ? __pfx_kthread+0x10/0x10 [ 591.419902][ T31] ret_from_fork+0x5d4/0x6f0 [ 591.424476][ T31] ? __pfx_kthread+0x10/0x10 [ 591.429050][ T31] ret_from_fork_asm+0x1a/0x30 [ 591.433803][ T31] [ 591.437002][ T31] Kernel Offset: disabled [ 591.441308][ T31] Rebooting in 86400 seconds..